Privacy Policy

 1. General information

This Privacy Policy contains information about how we process, in whole or in part, automated or not, the personal data of users who access our application. Its objective is to clarify the interested parties about the types of data that are collected, the reasons for the collection and the way in which the user can update, manage or delete this information.

This Privacy Policy has been prepared in accordance with Federal Law no. 12,965 of April 23, 2014 (Marco Civil da Internet), with Federal Law no. 13,709, of August 14, 2018 (Personal Data Protection Law) and with EU Regulation n. 2016/679 of April 27, 2016 (European General Personal Data Protection Regulation - RGDP).

This Privacy Policy may be updated as a result of any regulatory update, which is why the user is invited to periodically consult this section.

2. User right

The application undertakes to comply with the rules provided for in the RGPD, in respect of the following principles:

- The user's personal data will be processed in a lawful, fair and transparent manner (lawfulness, loyalty and transparency);

- The user's personal data will only be collected for specific, explicit and legitimate purposes, and cannot be further processed in a way that is incompatible with these purposes (limitation of purposes);

- The user's personal data will be collected in an appropriate, relevant and limited way to the needs of the purpose for which they are processed (data minimization);

- The user's personal data will be kept in a way that allows the identification of the data subjects only for the period necessary for the purposes for which they are processed (limitation of conservation);

- The user's personal data will be treated securely, protected from unauthorized or unlawful treatment and against accidental loss, destruction or damage, adopting appropriate technical or organizational measures (integrity and confidentiality).

The user of the application has the following rights, granted by the Personal Data Protection Law and the GDPR:

- Right of confirmation and access: it is the user's right to obtain confirmation from the application that the personal data concerning him or her are being processed or not and, if that is the case, the right to access their personal data;

- Right of rectification: it is the right of the user to obtain from the application, without undue delay, the rectification of inaccurate personal data concerning him;

- Right to data erasure (right to be forgotten): it is the user's right to have their data erased from the application;

- Right to limit the processing of data: it is the user's right to limit the processing of their personal data, being able to obtain it when they contest the accuracy of the data, when the treatment is unlawful, when the application no longer needs the data for the proposed purposes and when you have objected to the processing of data and in case of processing of unnecessary data;

- Right of opposition: it is the user's right to, at any time, oppose, for reasons related to his/her particular situation, the processing of personal data concerning him/her, and may also oppose the use of his/her personal data for the definition of marketing profile (profiling);

- Right to data portability: it is the user's right to receive the personal data concerning him and which he has provided to the application, in a structured, commonly used and machine-readable format, and the right to transmit this data to another application;

- Right not to be subjected to automated decisions: it is the user's right not to be subject to any decision made exclusively on the basis of automated processing, including profiling, that produces effects in their legal sphere or that affects them. significantly in a similar way.

The user may exercise their rights by means of a written communication sent to the application with the subject “RGPD”, specifying:

- Full name or corporate name, CPF (Individual Taxpayer Registry, from the Federal Revenue Service of Brazil) or CNPJ (National Legal Entity Registry, from the Federal Revenue Service of Brazil) number and e-mail address of the user and, if it is the case, its representative;

- Right you want to exercise with the application;

- Order date and user signature;

- Any document that can demonstrate or justify the exercise of your right.

The request must be sent to the e-mail xkopo.mobile@gmail.com, or by mail to the following address: Rua Alvorada, 118 - Jardim Santo Eduardo, Embu das Artes - SP, 06823-010 - Brazil.

3. Duty not to provide third-party data

During the use of the application, in order to protect and protect the rights of third parties, the user of the application must only provide their personal data and not those of third parties.

4. Data capture

4.1. Types of data collected

4.1.1. User identification data for registration

The use, by the user, of certain features of the application will depend on registration, and, in these cases, the following user data will be collected and stored:

- Image

- Name

- email address

- Postal code

4.1.2. Data provided in the contact form

The data eventually informed by the user who uses the contact form available in the application, including the content of the message sent, will be collected and stored.

4.1.3. Data related to the execution of contracts signed with the user

For the execution of the purchase and sale contract for the provision of services eventually signed between the application and the user, other data related to or necessary for its execution, including the content of any communications with the user, may be collected and stored.

4.1.4. Access log

In compliance with the provisions of art. 15, caput and paragraphs, of Federal Law no. 12,965 of April 23, 2014 (Marco Civil da Internet), user access records will be collected and stored for at least six months.

4.1.5. Sensitive data

The application may collect biometric data to uniquely identify a person.

4.2. Legal basis for the processing of personal data

By using the services of the application, the user is consenting to this Privacy Policy.

The user has the right to withdraw his consent at any time, not compromising the lawfulness of the processing of his personal data before the withdrawal. Withdrawal of consent can be done by email xkopo.mobile@gmail.com, or by mail sent to the following address:

Rua Alvorada, 118 - Jardim Santo Eduardo, Embu das Artes - SP, 06823-010 - Brazil.

The consent of the relatively or absolutely incapable, especially children under 16 (sixteen) years of age, can only be made, respectively, if duly assisted or represented.

Personal data necessary for the execution and fulfillment of the services contracted by the user in the application may also be collected.

The processing of personal data without the user's consent will only be carried out due to legitimate interest or for the cases provided for by law, that is, among others, the following:

- for compliance with a legal or regulatory obligation by the controller;

- to carry out studies by a research body, guaranteeing, whenever possible, the anonymization of personal data;

- when necessary for the execution of a contract or preliminary procedures related to a contract to which the user is a party, at the request of the data subject;

- for the regular exercise of rights in judicial, administrative or arbitration proceedings, the latter pursuant to Law No. 9,307, of September 23, 1996 (Arbitration Law);

- for the protection of the life or physical safety of the data subject or a third party;

- when necessary to meet the legitimate interests of the controller or of a third party, except in the case of fundamental rights and freedoms of the data subject that require the protection of personal data prevail;

- for credit protection, including the provisions of the relevant legislation.

4.3. Purposes of processing personal data

The user's personal data collected by the application is intended to facilitate, expedite and fulfill the commitments established with the user and to enforce requests made by filling out forms.

Personal data may also be used for commercial purposes, to personalize the content offered to the user, as well as to support the application to improve the quality of its services.

The application collects user data for profiling, that is, automated processing of personal data that consists of using this data to evaluate certain personal aspects of the user, mainly to analyze or predict characteristics related to their behavior, location or displacement.

The registration data will be used to allow the user access to certain contents of the application, exclusive to registered users.

The collection of data related to or necessary for the execution of a purchase and sale or service agreement eventually signed with the user will have the purpose of giving the parties legal certainty, in addition to facilitating and enabling the conclusion of the business.

The processing of personal data for purposes not provided for in this Privacy Policy will only occur upon prior communication to the user, and, in any case, the rights and obligations set forth herein will remain applicable.

4.4. Period of retention of personal data

The user's personal data being kept for a maximum period of 1 year, excellent if the user requests its deletion before the end of this period.

The personal data of users can only be kept after the end of their treatment in the following cases:

- for compliance with a legal or regulatory obligation by the controller,

- for study by a research body, guaranteeing, whenever possible, the anonymization of personal data;

- for the transfer to a third party, provided that the data processing requirements set out in the legislation are complied with;

- for the exclusive use of the controller, its access by a third party is prohibited, and provided that the data is anonymized.

4.5. Recipients and transfer of personal data

User personal data may be shared with the following people or companies:

Google

Delivery Company Chosen by the User within the Application

The transfer can only be made to another country if the country or territory in question or the international organization in question ensures an adequate level of protection of the user's data.

If there is no adequate level of protection, the application undertakes to guarantee the protection of your data in accordance with the strictest rules, through specific contractual clauses for a given transfer, standard contractual clauses, global corporate norms or seals, certificates and regularly issued codes of conduct.

5. Processing of personal data

5.1. The person responsible for processing the data (data controller)

The controller, responsible for the processing of the user's personal data, is the natural or legal person, public authority, agency or other body that, individually or jointly with others, determines the purposes and means of processing personal data.

In this application, the person responsible for processing the personal data collected is xKopo Mobile & System, who can be contacted by email: xkopo.mobile@gmail.com or in person at the address:

Rua Alvorada, 118 - Jardim Santo Eduardo, Embu das Artes - SP, 06823-010 - Brasil.

The person responsible for processing the data will be directly responsible for the processing of the user's personal data.

5.2. Data protection officer

The data protection officer is the professional in charge of informing, advising and controlling the person responsible for processing the data, as well as the workers who process the data, regarding the application's obligations under the RGDP, Lel of Personal Data Protection and other data protection provisions present in national and international legislation, in cooperation with the competent control authority.

In this application, the data protection officer is xKopo Mobile & System, who can be contacted by email: xkopo.mobile@gmail.com.

6. Security in the treatment of the user's personal data

The application undertakes to apply the technical and organizational measures capable of protecting personal data from unauthorized access and from situations of destruction, loss, alteration, communication or dissemination of such data.

To guarantee safety, solutions will be adopted that take into account: adequate techniques; application costs; the nature, scope, context and purposes of the processing; and risks to user rights and freedoms.

The application uses an SSL (Secure Socket Loyer) certificate that guarantees that personal data is transmitted in a secure and confidential way, so that the transmission of data between the server and the user, and in feedback, occurs in a fully encrypted or encrypted way.

However, the application disclaims liability for the sole fault of a third party, such as in the case of an attack by hackers or crackers, or the sole fault of the user, as in the case where he himself transfers his data to a third party. The application also undertakes to notify the user within an adequate period of time in the event of any breach of the security of their personal data that may pose a high risk to their personal rights and freedoms.

Breach of personal data is a breach of security that accidentally or unlawfully causes the destruction, loss, alteration, disclosure or unauthorized access to personal data transmitted, stored or subjected to any other type of processing.

Finally, the application undertakes to treat the user's personal data confidentially, within legal limits.

8. Changes

This version of this Privacy Policy was last updated on: 03/03/2022.

The editor reserves the right to modify the application to these rules at any time, especially to adapt them to the evolution of the MegaCromo application, either by making new functionalities available, or by deleting or modifying existing ones.

The user will be explicitly notified in case of change of this policy.

By using the service after any modifications, the user demonstrates his agreement with the new rules. If you disagree with any of the changes, you must immediately request the cancellation of your account and submit your reservation to the customer service, if you wish.

9. Consequences of misuse of the application

The application is intended solely and exclusively for the management and exchange of stickers, it is not authorized for any other purpose.

Therefore, the administrator, at any time and without prior notice, can ban collectors who are denounced or even audited in a timely manner, making misuse of it.

Examples of app misuse (not restricted to the following list):

· Use of inappropriate and rude language;

· Harassment of any kind;

· Discrimination of any kind;

· Any other crimes provided for in current law.

10. Applicable law and jurisdiction

For the settlement of disputes arising from this instrument, Brazilian law will be fully applied. Any disputes must be filed in the court of the district where the application editor's headquarters are located.