GDPR Privacy Policy

Our website collects and uses some of your data to enable the provision of services and improve the user experience.

holder Data and Purpose

Data and Purpose

In this sense, the collection of your data occurs as follows:

• By completing the form on the contact page of this website.
  

It is with your consent that we process your data. Consent is the free, informed, and unequivocal statement by which you authorize MHA to process your data.

Thus, per the General Data Protection Regulation, your data will only be collected, processed, and stored with prior and express consent.

Your consent will be obtained specifically for each purpose described above, evidencing MHA’s commitment to transparency and good faith towards its users/clients, following the relevant legislative regulations.

By using MHA services and providing your data, you are aware of and consent to the provisions of this Privacy Policy, in addition to knowing your rights and how to exercise them.

At any time and no cost, you may withdraw your consent.

It is important to highlight that the revocation of consent for data processing may imply the impossibility of the proper performance of some functionality of the website that depends on their operation. Such consequences will be informed in advance.

MHA assures its users/customers of their rights as provided for in Article 18 of the General Data Protection Regulation. This way, you can, free of charge and at any time:

⦁ Confirm the existence of data processing in a simplified form or clear and complete format.

⦁ Access your data, being able to request them in a readable copy in printed form or electronically, safe, and reputable.

⦁ Correct your data when requesting its edition, correction, or update.

⦁ Limit your data when unnecessary, excessive, or treated in violation of the legislation through anonymization, blocking, or deletion.

⦁ Request the portability of your data through a registration data report that the MHA treats about you.

⦁ Delete your processed data based on your consent, except in cases provided for by Law.

⦁ Revoke your consent, disallowing the processing of your data.

⦁ Inform yourself about the possibility of not giving your consent and the consequences of the refusal.

To exercise your holder rights, you must contact the MHA
through the following available means:

Telephone: +55 (11) 5549-7321

To guarantee your correct identification as the holder of the personal data object of the request, we may request documents or other evidence that can prove your identity. In this case, you will be informed in advance.

Your personal data collected by MHA will be used and stored for the time necessary to provide the service or to achieve the purposes

listed in this Privacy Policy, considering the rights of data holders and controllers.

Your data will generally be kept as long as the contractual relationship between you and MHA lasts. At the end of the period of storage of personal data, these will be deleted from our databases or anonymized, except for the hypotheses legally provided for in Article 16 of General Data Protection Requirement, namely:

I – Compliance with legal or regulatory obligations by the controller;

II – Study by research body, ensuring, whenever possible, the anonymization of personal data;

III – Transfer to a third party, provided that the data processing requirements outlined in this Law are respected; or

IV – Exclusive use by the controller access by a third party is prohibited, provided the data is anonymized.

That is, personal information about you that is essential for the fulfillment of legal, judicial, and administrative determinations and/or for exercising the right of defense in judicial and administrative proceedings will be maintained, despite excluding other data.

The storage of data collected by MHA reflects our commitment to the security and privacy of your data. We employ technical protection measures and solutions to guarantee your data’s confidentiality, integrity, and inviolability. In addition, we also have security measures appropriate to the risks and control access to stored information.

To keep your personal information safe, we use physical, electronic, and managerial tools to protect your privacy.

We apply these tools considering the nature of the personal data collected, the context and purpose of the treatment, and the risks that possible violations would generate for the rights and freedoms of the holder of the data collected and processed.

Among the measures we adopt, we highlight the following:

• Only authorized persons have access to your personal data;
  
  
• Access to your personal data is only done after the commitment to confidentiality;
  
  
• Your personal data is stored in a safe and suitable environment.

MHA is committed to adopting the best postures to avoid security incidents. However, it is necessary to point out that no virtual page is

entirely safe and risk-free. It is possible that, despite all our security protocols, problems that are solely the fault of third parties may occur, such as cyber-attacks by hackers or also as a result of negligence or imprudence by the user/customer.

In case of security incidents that could generate risks or relevant damages for you or any of our users/customers, we will inform those affected and the National Data Protection Authority about what happened, in line with the provisions of the General Data Protection Regulation.

MHA will not share your data with any unauthorized third party to preserve your privacy.

Your data may be shared with MHA.

This receives your data only to the extent necessary for the provision of hired services, and our contracts are guided by the data protection rules of the Brazilian legal system.

In addition, there are also other hypotheses in which your data may be shared, which are:

I – Legal determination, application, requisition, or court order, with competent judicial, administrative, or governmental authorities.

II – Case of corporate movements, such as merger, acquisition, and incorporation, automatically.

III – Protection of MHA’s rights in any type of conflict, including legal ones.

Some of the third parties with whom we share your data may be located or have facilities located in foreign countries. Under these conditions, in any case, your data will be subject to the General Data Protection Regulation and other Brazilian data protection legislation.

In this sense, the MHA is committed to continually adopting efficient cybersecurity and data protection standards in its best efforts to guarantee and comply with legislative requirements.

By agreeing to this Privacy Policy, you agree to this sharing, which will take place according to the purposes described in this instrument.

MHA uses Cookies, which are text files sent by the platform to your computer and stored there, containing information related to website navigation. In short, Cookies are used to improve the user experience.

By accessing our website and consenting to use Cookies, you acknowledge and accept using a navigation data collection system using Cookies on your device.

You can change permissions, block, or refuse Cookies at any time and no cost. However, revoking consent for certain Cookies may prevent the correct functioning of some platform features.

To manage your browser’s cookies, do it directly in the browser settings, in the Cookie management area.

We reserve the right to modify this Privacy Policy at any time, mainly in terms of adaptation to any changes made to our website or in the legislative field. We recommend that you review it frequently.

Any changes will come into effect as of their publication on our website, and we will always notify you of any changes that have occurred.

By using our services and providing your data after such changes, you consent to them.

MHA provides for the responsibility of agents who act in data processing processes following Articles 42 to 45 of the General Data Protection Regulation.

We are committed to keeping this Privacy Policy current, observing its provisions, and ensuring compliance.

In addition, we are also committed to seeking technical and organizational conditions that can safely protect the entire data processing process.

If the National Data Protection Authority requires adopting measures concerning the data processing carried out by MHA, we undertake to follow them.

As mentioned in Topic 6, although we adopt high-security standards to prevent incidents, no virtual page is entirely risk-free.
In this sense, MHA is not responsible for:

I –

Any consequences arising from users’ negligence, imprudence, or malpractice concerning their data. We guarantee and are only responsible

for the security of the data processing processes and for fulfilling the purposes described in this instrument.

We emphasize that the user is responsible for the confidentiality of access data.

II –

Malicious actions by third parties, such as hacker attacks, unless proven culpable or deliberate conduct by the MHA.

We emphasize that in case of security incidents that may generate risk or relevant damage for you or any of our users/customers, we will inform those affected and the National Data Protection Authority about what happened. We will comply with the necessary measures.

III – Inaccuracy of the information entered by the user/customer in the records necessary for the use of MHA services; any consequences arising from false information or information entered in bad faith are entirely the responsibility of the user/client.

MHA provides the following means for you to contact us to exercise your holder rights: +55 (11) 5549-7321.

If you have questions about this Privacy Policy or the personal data we process, you can contact: +55 (11) 5549-7321.