Privacy policy

Version 1.0 · effective as of October 2023.

Reference translation. The official version of this document is the one published in Portuguese; in case of any discrepancy, the Portuguese version prevails.

Your privacy matters to us. This Policy explains how Esmaltec (Terrar Indústria e Comércio Ltda., CNPJ 96.283.452/0003-69, Avenida C.A.F., 660, Distrito Industrial, CEP 13505-645, Rio Claro/SP, Brazil) processes the personal data of people who visit the website www.esmaltec.com and use its forms, in accordance with the Brazilian General Data Protection Law (Law 13.709/2018 – LGPD).

We ask for personal data only when we truly need it to handle your request, by fair and lawful means, and we tell you why we collect it and how it will be used.

1. Who is responsible for your data

The controller of your data is Terrar Indústria e Comércio Ltda. (Esmaltec). For any matter regarding your personal data, please contact our Data Protection Officer (DPO) at dpo@esmaltec.com or through the Data Subject Channel.

Esmaltec's Data Protection Officer is Diogo de Camargo. This disclosure complies with art. 41, § 1, of the LGPD and art. 9 of ANPD Resolution CD/ANPD No. 18/2024.

2. What data we collect, why and for how long

WhereDataPurposeRetention
Contact formName, email, phone (optional), recipient department, subject and message; IP address and date of submission.To answer your message and forward it to the department you chose. The IP address is used only to prevent automated bulk submissions.The record on the website is automatically anonymized 30 days after submission (90 days if the email cannot be delivered). The message received by the department follows Esmaltec's internal retention rules.
Job applications (Careers page)Name, email, phone, city and message (optional) and résumé in PDF.To take part in the selection process for the position and, if you authorize it, in our talent pool.The website does not store your résumé: it is sent by email to the Recruitment team. The website keeps only the record of your authorization (protocol number, date, position and version of the consent terms) for up to 5 years, as proof of consent. More details in the Privacy Notice for Applicants (in Portuguese).
Data Subject ChannelThe data provided in the request form.To handle requests to exercise the rights provided for in the LGPD.For as long as necessary to handle the request and evidence that it was handled.
Browsing the websiteIP address, date and time of access, page visited and browser type.Website security and compliance with the Brazilian Internet Civil Framework (Marco Civil da Internet).6 months, under art. 15 of Law 12.965/2014 (Marco Civil da Internet).

The Esmaltec website does not use audience analytics tools (such as Google Analytics), does not display advertising and does not build visitor profiles. We do not sell personal data.

3. Legal bases

  • Contact: procedures requested by you and legitimate interest in replying (art. 7, items V and IX, of the LGPD).
  • Job applications: consent and procedures preliminary to employment (art. 7, items I and V).
  • Data Subject Channel and access logs: compliance with a legal obligation (art. 7, item II).

4. Who we share data with

Personal data is not disclosed publicly. We share only what is necessary with:

  • Service providers acting on Esmaltec's behalf: website hosting, email service, AdOpt (cookie consent management) and beCompliance (Data Subject Channel form);
  • Google, only if you choose to load the map on the Contact page;
  • Public authorities, when required by law or court order.

Some of these services, such as Google's, may process data outside Brazil. In such cases, the transfer complies with the cases provided for in art. 33 of the LGPD.

5. Your rights

You may, at any time: confirm whether we process your data; access it; correct incomplete or outdated data; request the anonymization, blocking or deletion of unnecessary data; request portability; be informed of who we share your data with; withdraw your consent; and request the deletion of data processed on the basis of consent.

To exercise these rights, use the Data Subject Channel or write to dpo@esmaltec.com. You may also file a complaint with the Brazilian National Data Protection Authority (ANPD).

You are free not to provide personal data, with the understanding that, without it, we may not be able to answer your message or consider your application.

6. How we protect your data

We adopt technical and administrative measures to protect data against loss, theft and unauthorized access, disclosure, copying, use or modification, including: encrypted connection (HTTPS); restricted access to the administration panel, with password and two-step verification; an audit log of changes; automatic anonymization of contact messages; and not storing résumés on the website.

7. Links to other websites

The website may contain links to external websites that are not operated by Esmaltec. We have no control over the content and practices of those websites and are not responsible for their privacy policies.

8. Children and adolescents

The website is not directed at children. Applications from people under 18 (such as for the Young Apprentice program) follow the rules of the Privacy Notice for Applicants.

9. Cookies

The website uses only essential and preference cookies (browsing session and chosen language), in addition to the cookies of the cookie banner. We do not use advertising or audience analytics cookies. Details are in our Cookie Policy.

Changes to this Policy

This Policy may be updated to reflect changes to the website or to the law. The version number and the date it took effect appear at the top of the document. Whenever there is a material change, Esmaltec will announce it prominently on the website. Previous versions are archived and may be requested from the Data Protection Officer (DPO).

If you have any questions, please contact us through the Data Subject Channel or at dpo@esmaltec.com.