LGPD — Brazilian General Data Protection Law

What is the LGPD

The General Personal Data Protection Law (Lei nº 13.709/2018) is the Brazilian legislation that regulates the processing of personal data by individuals or legal entities, whether public or private, with the goal of protecting the fundamental rights of freedom, privacy, and the free development of the personality of natural persons.

Principles we follow

When processing personal data, ENDALL observes the principles set out in Article 6 of the LGPD:

• Purpose: processing for legitimate, specific, explicit, and disclosed purposes;
• Adequacy: compatibility of processing with the purposes disclosed to the data subject;
• Necessity: limiting processing to the minimum required to fulfill its purposes;
• Free access: guaranteed, easy, and free consultation about the form and duration of processing;
• Data quality: ensuring accuracy, clarity, and relevance of data;
• Transparency: clear, precise, and accessible information about processing and the agents involved;
• Security: technical and administrative measures to protect data;
• Prevention: measures to prevent damage;
• Non-discrimination: prohibition of processing for unlawful or abusive discriminatory purposes;
• Accountability: demonstration by ENDALL of the adoption of effective compliance measures.

Rights guaranteed to data subjects

In accordance with Article 18 of the LGPD, every data subject has the right to obtain from ENDALL, at any time and upon request:

• Confirmation that processing of their data is taking place;
• Access to the data;
• Correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion of unnecessary or unlawfully processed data;
• Portability of data to another service or product provider;
• Deletion of personal data processed with consent;
• Information about data sharing with third parties;
• Information about the possibility of not providing consent and its consequences;
• Withdrawal of consent.

Data subject support channel (Data Protection Officer)

ENDALL has designated a support channel to receive and respond to LGPD-related requests. Data subject requests can be sent to contato@endall.com.br, identifying the data subject and the right they wish to exercise. Requests are reviewed and answered in accordance with the timeframes established by applicable law.

Security measures adopted

To protect the personal data under our responsibility, we adopt technical and administrative measures such as:

• Access control to systems and information, with role-based permissions;
• Encryption of data in transit;
• Monitoring, regular backups, and continuity plans;
• Employee training on privacy and data protection;
• Periodic review of policies, processes, and supplier contracts.

Relationship with the Privacy Policy

This page complements our Privacy Policy, which details what data is collected through the website, for what purposes it is processed, and how it is stored. We recommend reading both documents together.

Updates to this page

This page may be updated to reflect changes in data protection legislation or in our internal processes. The most current version will always be available at this address, with the date of the last update indicated.