Benevento Schuch Advocacia, a privately held company with CNPJ number 46.663.067/0001-07, located at Rua Domingos de Morais, 2187, Torre Paris, Suite 407, Vila Mariana, São Paulo/SP, values transparency in its relationships with clients and treats the handling of personal data with utmost seriousness and respect.
This Privacy Policy provides information about our practices regarding personal data processing, including what data is collected, for what purpose it is used, data sharing, our security and protection measures, and how you can exercise your rights as a data subject.
If you wish to exercise your data subject rights, please send an email to [email protected].
You may also contact our Data Protection Officer, as per the guidance provided at the end of this Policy.
- Personal Data Collection
- Purposes of Use
- Principles for Personal Data Processing
- Legal Bases for Personal Data Processing
- Sharing Personal Data with Third Parties
- International Transfer of Personal Data
- Exercise of Rights by Data Subjects
- Security of Your Personal Data
- Retention and Deletion of Personal Data
- Data of Minors
- Data Protection Officer
- Updates to Privacy Policy
1. Personal Data Collection
For the purposes of this Privacy Policy, “personal data” refers to any information that can directly or indirectly identify a natural person.
When you consult or acquire our services, register, or use our applications, you provide uswith personal data such as your name, address, email, phone number, identification document details, and other information.
We may obtain different types of personal data depending on your relationship with us.
Personal data we may collect:
• Full name;
• RG, CPF, RNE, or other identification documents, and their issue dates;
• Nationality and place of birth;
• Marital status, and details of spouse or domestic partner;
• Children or dependentes;
• Email address;
• Residential address;
• Phone numbers;
• Recordings of calls made to our service channels, emails, and messages exchanged wjth the data subject;
• Date of birth;
• Parents;
• Education;
• Gender;
• Profession and Employer;
• Income tax return or income proof;
• Information about the browser and operating system of the device used to access our platforms;
• IP address, date, and time of connection to our platforms; and
• Other personal data necessary for the adoption of extrajudicial or judicial measures required by the office.
You can access a personalized report of your personal data, as well as the description of the purposes for which this data is processed, and commercial partners with whom your data may be shared by contacting the Data Protection Officer via the contact information provided at the end of the Privacy Policy.
2. Purposes of Use
Benevento Schuch Advocacia processes personal data for legitimate and specific purposes, informing the data subject about these purposes in a clear, objective, and transparent manner.
Purposes of use of personal data:
• Contracting, operationalization, and provision of services.
• Identity validation to prevent fraud, ensure the integrity and security of our transactions, and access to Benevento Schuch Advocacia premises.
• Evaluation, maintenance, and improvement of the security of our website, especially to prevent potential information security threats.
• Conducting risk control and mitigation processes, accounting audits, billing, negotiation and collection, receiving and investigating complaints.
• Compliance with regulatory requirements or legal obligations, for defense in llegal proceedings, or by judicial or administrative authority decision.
• Carrying out and managing registration processes.
• Customer, supplier, and service provider support and service provision.
Sending informative legal content via email.
• Applying for professional opportunities at Benevento Schuch Advocacia.
Conducting satisfaction surveys regarding our services, including legal rankings, to evaluate and improve our service, particularly for customer retention;
3. Principles for Personal Data Processing
Benevento Schuch Advocacia bases its personal data processing practices on the principles established in the General Data Protection Law (Law No. 13,709/2018):
Purpose: We only use personal data for authorized or legally required purposes, specific, and duly informed to the data subject through our privacy notices, privacy policies, contracts, and other documents we use to formalize our relationship.
Adequacy: The personal data used in each of our activities is only that which is adequate to the purpose of our service provision, that is, personal data that contributes to achieving the intended result in the business process, in accordance with the data subject’s expectations.
Necessity: The scope of personal data used in our activities is limited to what is necessary to achieve the purpose of service provision. We periodically evaluate whether the scope of data processed is adequate and necessary, applying data scope review processes to our business processes.
Free Access: We guarantee to data subjects who interact with us easy and free access to their processed personal data, as well as information about our personal data protection practices.
Data Quality: We value the accuracy of the personal data we use, periodically reviewing our internal processes and providing data subjects with the opportunity to correct, update, or supplement their personal data.
Transparency: We inform through our privacy policies, privacy notices, contracts, terms, and other documents that formalize our relationship, the practices of collecting, using, and discarding personal data.
Security: We adopt information security standards for the protection of personal data, managing data access and monitoring activities performed against them, always seeking to ensure the integrity, availability, and confidentiality of this information.
Prevention: We periodically analyze our activities to improve our personal data processing practices and identify any potential risks and needs, addressing our business processes in a preventive and mitigating manner.
Non-discrimination: We do not process personal data in a way that discriminates against data subjects or engages in activities that may be seen as abusive or intrusive to their privacy.
Accountability and Reporting: We maintain governance processes related to privacy and personal data protection, with the aim of ensuring compliance with laws and reporting promptly to data subjects and authorities, if necessary.
4. Legal Bases for Personal Data Processing
Benevento Schuch Advocacia only processes personal data in accordance with the hypotheses provided for in Brazilian legislation. Depending on the activity performed, the office processes personal data according to the following hypotheses:
• When necessary for the negotiation or execution of a contract established between the data subjects and Benevento Schuch Advocacia;
• To comply with legal or regulatory obligations that require the processing of personal data;
• For the regular exercise of rights, including in judicial, administrative, or arbitration proceedings;
• For fraud prevention and data subject security;
• To meet a legitimate interest when disclosing our services to the public, sharing informative content, or for client loyalty and retention, always with due transparency and respecting the rights and expectations of the data subject.
Depending on the relationship the data subject has with Benevento Schuch Advocacia, their personal data may be used based on legitimate interest for:
• Quality review processes and satisfaction surveys, indicator formation, and service improvement;
• Processes for interaction and relationship development, including via social media and consumer complaint portals, aiming to acquire, retain, or recover clients;
• Management of security cameras and access control to the office premises;
• Use of cookies, when strictly necessary for the functioning of our applications;
Furthermore, if you give us your consent, we may use non-essential cookies, whether analytical, functional, or advertising, to improve your experience on our applications, understand your browsing preferences, measure the performance of pages or services, and display advertisements or other content.
5. Sharing Personal Data with Third Parties
When necessary for the provision of our services, we may share personal data with commercial partners, but we will always do so with due transparency and in line with the expectations of the data subjects who interact with us.
We may share your personal data with partner companies to develop campaigns and commercial actions, update contacts, offer services, disclose our own or commercial partner events, and for the delivery of documents related to judicial or extrajudicial claims.
We may share your personal data with commercial partners to (i) validate your identity, prevent fraud, and ensure the security of our transactions; (ii) issue statements and payment slips or invoices; (iii) prospect clients and share informative legal content; (iv) provide quality services and manage our applications, such as websites and apps; (v) respond to investigations, legal actions, or arbitration; (vi) data storage in the cloud; or (vii) when the data subject authorizes disclosure.
6. International Transfer of Personal Data
In accordance with the provisions of national legislation, the international transfer of personal data may occur to commercial partners or international organizations headquartered in countries that provide a level of personal data protection adequate to that provided for in the Law, or that contractually ensure the same level of protection.
Benevento Schuch Advocacia transfers personal data to foreign companies, which perform data storage and hosting at the request and under the supervision of the office, with the specific objective of fulfilling contractual execution or performing preliminary procedures related to the contract, of which the data subject is a party.
7. Exercise of Rights by Data Subjects
Benevento Schuch Advocacia guarantees data subjects the exercise of their rights through contact with our Data Protection Officer, via the contact information provided at the end of this Privacy Policy.
Data subjects may exercise the following rights free of charge:
Confirmation of processing of your personal data: Data subjects may request confirmation as to the processing of their personal data by the office.
Access to personal data: Data subjects may request access to the scope of personal data processed by the office, as well as information about the processing and sharing of personal data with commercial partners.
Portability of personal data: Data subjects may request a report of processed personal data for sharing with other companies.
Correction, updating, or supplementation of personal data: Data subjects may request correction, updating, or supplementation of their personal data.
Opposition to the processing of personal data: Data subjects may request clarification and/or oppose the processing of their personal data when they believe that such processing is being done irregularly.
Blocking of personal data processing: Data subjects may request temporary blocking of the processing of their data while correction or opposition requests are processed.
Deletion or Anonymization of personal data: Data subjects may request the deletion of their personal data and/or its anonymization when they believe that this data is not necessary for the maintenance of the relationship they have with the office.
Benevento Schuch Advocacia does not process personal data automatically.
The office also processes requests on behalf of third parties, enabling the exercise of rights by legal representatives, guardians, curators, and other legal representatives. In these cases, we require the presentation of documents proving the legal authorization for this specific purpose, which must be provided through contact with the Data Protection Officer.
8. Security of Your Personal Data
We apply appropriate information security measures to protect your personal data. For Benevento Schuch Advocacia, the security of your data is a priority, and we always strive to improve our policies, processes, and information security controls.
The office has information security processes, policies, and controls designed and implemented to ensure the confidentiality, integrity, and availability of personal data. Access to personal data is limited and controlled according to the needs of each activity performed, aiming to protect personal data from unauthorized access or disclosure. Measures are implemented to track and record access to personal data, aiming to monitor interactions, prevent, detect, and quickly remediate any inappropriate situations.
9. Retention and Deletion of Personal Data
The retention period of your personal data with us corresponds to what is necessary to fulfill the purpose for which we committed to you, as described in our privacy policies, contracts, and other documents that formalize our relationship.
Furthermore, we may retain your stored personal data for the period necessary to comply with legal or regulatory obligations, according to the nature of the contract concluded or interactions made with the data subjects.
10. Data of Minors
The services offered by Benevento Schuch Advocacia are not directed at minors. Occasionally, minor data may be processed as dependents of our clients when providing legal services, for the execution of the contract signed, or the execution of preliminary activities related to the contract.
11. Data Protection Officer
Benevento Schuch Advocacia has a designated Data Protection Officer responsible for guiding the conduct of our activities in accordance with legislation, as well as for receiving complaints and communications from data subjects and Authorities and providing them with clarifications.
You can contact the Data Protection Officer via the email address [email protected].
12. Updates to Privacy Policy
This Privacy Policy may be updated in accordance with changes to our personal data processing activities. Whenever there is an update, we will publish a prominent notice on our website, so that you are aware of the update date and the main changes before they become effective.
