PRIVACY NOTICE
Updated on February 03, 2025.
- Privacy Statement
VALGROUP understands how important it is for you to know and feel secure about the use of the personal data in our possession. That is why we are committed to clarifying and explaining our Privacy Notice, which applies to all the operating units of our Company.
We recognize the need to protect and properly manage personal information collected on our website, as well as information shared by our clients. This Privacy Notice will help you understand the types of information we may collect, how that information may be used, with whom it may be shared, and the rights of data subjects regarding the protection of their personal data.
- What Personal Information Do We Collect?
The personal information we obtain may be collected in the following ways:
- Customer Service Channels:
Personal information is collected when a user interacts with our website via the Contact Form. This information includes the user’s name, email address, and phone number. The data is collected to identify the user and to fulfill their request. In addition to these, we collect any personal data that the user voluntarily provides.
Personal information is collected when a client accesses our website to use the client portal through each client’s unique login and password, which have been previously registered and accepted under the VALGROUP website’s General Terms and Conditions of Use (available at https://portalcliente.valgroupco.com/). This portal is used to consult information, issue reports, and invoices related to the contract or commercial relationship between VALGROUP and the client.
The data collected includes the user’s name, email address, and phone number. Access to this personal information is restricted to those who need to know it for the relevant activities, in accordance with the purpose for which it was provided.
Personal data may be collected through cookies. For more information, please refer to VALGROUP’s Cookies Policy available at the Cookies Policy link on valgroupco.com.
The collection of personal data by VALGROUP is intended for the formalization and execution of contracts, delivery of purchased products, and issuance of Electronic Invoices. This data includes, among others, Name/Corporate Name, CPF/CNPJ, Full Name of the Responsible Party, Phone, Complete Address with ZIP Code, Neighborhood, City, and State, and State Registration when applicable, as well as the contact email and potential electronic invoice delivery.
Personal data of children and youth may be collected due to VALGROUP’s participation in social projects. The data collected includes names and photographs.
- Access to Physical Premises:
We collect personal data from anyone who accesses the premises of VALGROUP companies by registering their full name, photograph, CPF, and company. If access to our premises is made via a cargo vehicle, the vehicle’s license plate is also collected.
- Internal Surveillance with Security Cameras:
On our physical premises, images and recordings of third parties, employees, clients, and visitors are collected for monitoring activities and ensuring internal security.
Personal information from job applicants is collected through a form available on the website of the company contracted to support our recruitment and selection processes (a link is provided on our “Careers” page), as well as through a form provided by our Recruitment and Selection team during the hiring process. For further information, the Terms of Use and the Platform’s Privacy/Notice Policy may be consulted. The personal data collected includes, among others, the applicant’s name, email, date of birth, CPF, address, phone number, and any other professional information provided or mentioned in documents submitted by the candidate.
The personal data collected from our employees is necessary for their registration in compliance with labor legislation and for the execution of the employment contract. VALGROUP further informs that, if necessary, an employee’s personal data may be shared with other data processing agents, in accordance with the principles and guarantees established by the LGPD (Brazilian General Data Protection Law). This sharing covers data requested by third parties to enable the provision of services by VALGROUP employees on company premises. Additionally, VALGROUP may share employee data in situations involving benefits, such as health insurance, medical plans, meal vouchers, food vouchers, contracted companies, and the transmission of information related to tax, social security, and labor obligations.
- Social Media
VALGROUP also uses social media to communicate and interact with its clients and consumers through third-party websites such as LinkedIn, Instagram, and YouTube. These third-party websites are Internet-based technologies that are not operated or controlled by VALGROUP.
By interacting with, sharing, or “liking” VALGROUP’s page on LinkedIn, Instagram, YouTube, or any other social media platform, you may disclose certain personal information to VALGROUP or third parties.
We use “social buttons” to allow our users to share or tag web pages. These are buttons provided by third-party social media sites, which may record information about your online activities, including on this website. Please review the respective terms of use and privacy policies of these platforms to understand exactly how they use your information and how to opt out or delete such information.
The amount of personal information visible will depend on your own privacy settings on LinkedIn, Instagram, YouTube, and other social media platforms.
- Purposes and Legal Bases
Below are the purposes and legal bases for the processing of data by VALGROUP:
| Purpose |
Legal Basis |
| Fulfilling the terms and conditions established in the contract. |
Justified based on our legitimate interests to comply with and ensure the terms established with our clients. |
| Fulfilling the terms and conditions established in the contract. |
Necessary for the execution of a contract to which the data subject is a party. |
| Recruitment and evaluation for job suitability. |
Justified based on our legitimate interests to ensure that we recruit suitable employees. |
| Facilitating communication with you (including in emergencies and to provide requested information). |
Justified based on our legitimate interests in ensuring proper communication and effective emergency management within the organization. |
| Complying with legal requirements. |
Necessary to comply with a legal obligation to which we are subject. |
| Monitoring your use of our systems (including monitoring the use of our website and any applications or tools you use). |
Justified based on our legitimate interests to prevent non-compliance and protect our reputation. |
| Social listening (identifying and analyzing what is being said about VALGROUP on social media [only publicly accessible content] in order to understand sentiment, intent, disposition, and market trends, as well as the needs of our stakeholders to improve our services). |
Justified based on our legitimate interests in protecting our assets and brand on social media. |
| Improving the security and functionality of our website, application, networks, and information. |
Justified based on our legitimate interests in ensuring that you have an excellent user experience and that our networks and information are secure. |
| Identification and authentication for access to the premises of VALGROUP units through images and recordings of third parties, employees, and visitors. |
Justified by the need to protect the life or physical integrity of data subjects or third parties. |
| Internal monitoring through security cameras. |
Justified by the legitimate interest of the data controller or a third party. |
| Offering our products and services to you (unless you have objected to such processing). |
Justified based on our legitimate interests. |
| Administering employee benefits. |
Justified based on the employee’s consent, if they are interested in receiving a particular benefit. |
| Providing necessary information to government agencies. |
Necessary for compliance with a legal obligation. |
We rely on our legitimate interest only for specific purposes. These data processing activities in no way override the interests, rights, and freedoms of the data subjects.
- Regarding the Sharing and Transfer of Information
VALGROUP does not practice the disclosure of information that may identify the user and never shares, sells, or rents such personal data to third parties. This data is used exclusively internally to achieve the purposes outlined above.
Data may be shared with third parties only under the following conditions:
- In accordance with a judicial decision or a request by governmental regulatory authorities;
- Data transferred to public agencies to comply with current legislation, for example, personal data that appears on electronic invoices and their corresponding XML files, or data of our employees necessary for the payment of INSS or FGTS;
- Data transferred to accounting or human resources service providers for compliance with tax and labor obligations;
- Data transferred to financial institutions to enable payment options for our clients, or for the payment of salaries to our employees and providers;
- Data shared with partners, operators, and service providers who participate, directly or indirectly, in the commercial activities of VALGROUP, such as logistics and transportation of products, monitoring, securitization, storage and processing of data, recruitment and selection of employees, verification of registration information, billing and credit allocation, processing and fulfillment of orders and transactions, customer service, email communications, satisfaction surveys, advertising and marketing, security and performance monitoring, research, data storage, and auditing;
- Data transferred for the execution of a contract, as well as for the protection of VALGROUP’s interests in any type of conflict, including legal actions;
- In the case of corporate transactions such as mergers, acquisitions, transformations, spin-offs, or a partial or total sale of assets, we may share, disclose, or transfer all data of the data subjects to the successor organization.
Some of the service providers mentioned above may be located abroad; in such cases, VALGROUP adopts additional safeguards to ensure an adequate level of protection for personal data, in accordance with the applicable Brazilian legislation.
Additionally, the personal data collected may be shared among VALGROUP units, including those based in the United States, Spain, Mexico, Uruguay, Italy, and Colombia, reinforcing our commitment to use the information for the same purposes and with the same guarantees indicated in this Notice.
- Information Security
To ensure that your personal information is secure, we communicate our privacy and security guidelines to VALGROUP employees and business partners and strictly adhere to precautionary measures regarding privacy within the company.
We are committed to protecting your personal information, as well as that entrusted to us by our clients, through physical, technical, and organizational measures aimed at reducing the risks of loss, misuse, unauthorized access, disclosure, or improper alteration of this data.
- Rights of the Data Subjects
Data subjects have certain rights regarding their personal data and can exercise them by clicking here to access the Data Subject Access Request Form (DSAR) or by emailing: [email protected].
The rights of the data subjects include:
- Confirmation of the existence of personal data processing;
- Access to personal data in accordance with applicable law;
- Correction of incomplete, inaccurate, or outdated personal data;
- Data portability;
- Deletion of personal data when such data is processed based on the data subject’s consent or when the data is unnecessary, excessive, or processed in non-compliance with applicable law;
- Request for information regarding the sharing of personal data;
- Revocation of consent, when applicable.
VALGROUP will always evaluate the best way to address any request to exercise your rights. However, we may choose not to fully or partially comply with your request in specific situations safeguarded by law, such as to comply with a legal obligation or due to the contractual relationship.
We emphasize the importance of keeping your personal data accurate and up to date. Please ensure that VALGROUP is informed if your personal data changes or is incorrect.
For security reasons, requests sent via [email protected] will only be processed once we have verified the identity of the requester. Consequently, we may request additional data or information to confirm the identity and authenticity of the data subject. This data and information will be protected during the storage period and deleted as soon as the purpose of identity confirmation is fulfilled.
- Termination of Data Processing
This Privacy Notice applies to the aforementioned circumstances for the entire period that VALGROUP stores personal data. We store and maintain your information: (a) for the time required by law; (b) until the termination of personal data processing, as outlined below; or (c) for as long as necessary to safeguard VALGROUP’s rights. Thus, we will process your data, for example, during applicable statutory limitation periods or as long as necessary to comply with a legal or regulatory obligation.
The termination of personal data processing will occur in the following cases:
(a) when the purpose for which the personal data was collected has been achieved, and/or the personal data collected is no longer necessary or relevant for that purpose;
(b) when the data subject requests the deletion of their data; and
(c) when there is a legal requirement to do so.
In cases of termination of personal data processing, except where otherwise provided by applicable law or this Privacy Notice, personal data will be deleted.
- Data Protection Officer (DPO)
VALGROUP provides the following contact details for the Data Protection Officer (DPO), who is responsible for addressing any requests from data subjects or the National Authority regarding personal data:
DPO EXPERT® (www.dpoexpert.com.br)
Responsible: Rafael Susskind
Alternate Responsible: Renata Adeli Franhan Parizotto
Contact: [email protected]
If, despite our commitment and efforts to protect your data, you feel that your data protection rights have not been upheld, please contact our DPO. Additionally, you have the right at any time to file a complaint directly with the National Data Protection Authority if you believe that your personal data rights have been violated.
- Changes to the Privacy Notice
Although our Privacy Notice has been presented in a clear, concise, and objective manner, do not hesitate to consult VALGROUP’s DPO if you have any questions about this important document or about our personal data processing activities.
VALGROUP reserves the right to update or modify this Notice at any time without prior notice. However, we will always publish the revised version on our website. Should there be any changes in the way we process personal data, you will be informed so that you can decide whether to continue purchasing our products or using our services.
