Privacy and Data Protection Policy
1. About this policy
TREEID respects privacy and is committed to protecting the personal data processed during access to and use of its website.
This Privacy Notice explains which personal data may be collected, how it is obtained, for which purposes it is used, in which situations it may be shared and how the user can exercise their rights. It applies to people who browse the website, complete forms, contact TREEID or interact with features made available on its digital channels.
For the purposes of this Notice, personal data is any information relating to an identified natural person or one who can be identified.
2. Which personal data we may collect
TREEID may collect data provided directly by the user when completing a form, requesting contact, submitting a résumé, requesting information, requesting a proposal, registering for an event, expressing interest in products or services or communicating with the company.
In these situations, data such as name, email address, telephone number, the company the user works for, role or position, country or location, message content and any other information the user chooses to provide may be processed. If documents are attached, the information they contain may also be processed in order to handle the corresponding request.
During browsing, certain technical information may be collected automatically, such as IP address, date and time of access, browser type, operating system, device characteristics, pages visited, time spent, source of access and records related to the security and operation of the website.
The website may also use cookies and similar technologies. Information about cookie categories, their purposes and how to manage preferences is available in TREEID’s Cookie Policy.
TREEID seeks to limit collection to data that is necessary and proportionate to the purposes stated. Data protection authorities advise organizations to collect only information that is adequate, relevant and necessary for the intended purpose.
3. How data is collected
Data may be obtained directly from the user, through the forms and channels made available on the website, or automatically during browsing, through technical records, cookies and similar technologies.
We may also receive information from partners, technology suppliers, communication platforms, professional networks or legitimate and publicly accessible sources, where this is necessary to handle a request, maintain a commercial relationship or protect the security of our operations.
Where TREEID receives personal data through a client, partner or third party, processing will be carried out in accordance with the corresponding legitimate purpose, the instructions received and the applicable legal and contractual obligations.
4. What we use personal data for
Data provided by the user may be used to answer questions and requests, send information about products and services, prepare commercial proposals, schedule meetings or demonstrations, receive applications for professional opportunities and maintain the relationship initiated by the user.
Browsing information may be used to enable the operation of the website, preserve its security, prevent fraud and unauthorized access, identify technical faults, understand how pages are used and improve content, features and the browsing experience.
Where permitted by applicable law, TREEID may also use contact data to send institutional, commercial or informational communications relating to its activities. The user may request at any time that these communications be stopped, through the means indicated in the message itself or through the company’s privacy channel.
Data may also be processed to comply with legal or regulatory obligations, exercise rights in administrative, judicial or arbitration proceedings, prevent unlawful acts, respond to competent authorities and protect the rights, security and legitimate interests of TREEID, its users, clients and partners.
The purposes and the legal bases used for processing must be communicated in an understandable way to the data subject before or at the time the data is used.
5. Legal bases for processing
TREEID will process personal data on the basis of applicable law and in accordance with the nature of each operation. Depending on the case, processing may be necessary to handle a user request, carry out procedures related to a contractual relationship, comply with a legal or regulatory obligation, protect rights, prevent fraud and security incidents or serve the legitimate interests of the company and of third parties.
Where consent is required, TREEID will provide adequate information so that the user can express their choice. Consent may be withdrawn later, without affecting the lawfulness of processing carried out before the withdrawal.
6. Who data may be shared with
TREEID does not sell personal data.
Data may be shared with suppliers that support the operation of the website and the provision of the company’s services, such as hosting and cloud infrastructure providers, communication tools, service platforms, browsing analytics services, information security, technical support, storage and relationship management.
These suppliers should only have access to the information necessary to carry out their activities and will be subject to confidentiality, security and data protection obligations compatible with the services provided.
Sharing may also occur with consultants, auditors, lawyers and other professional advisers, where necessary to protect rights, comply with obligations or support business activities. Personal data may be provided to public authorities, regulators or competent entities where there is a legal obligation, a valid order or a need to cooperate in a legitimate investigation.
In the event of a corporate reorganization, merger, acquisition, sale of assets or similar transaction, certain information may be shared with the parties involved, subject to confidentiality duties and applicable safeguards.
Identifying who receives the data, or at least the categories of recipients, is relevant information in a privacy notice addressed to the public.
7. International transfers
Some suppliers, systems or technological infrastructure used by TREEID may be located in countries other than the one in which the user is located. For this reason, personal data may be stored, accessed or processed internationally.
Where an international transfer occurs, TREEID will adopt contractual, technical and organizational measures compatible with applicable law and with the risks of the processing, seeking to ensure an adequate level of protection, confidentiality and security.
8. How long we keep data
Personal data will be retained for the period necessary to fulfill the purposes described in this Notice, comply with legal or contractual obligations, respond to requests, maintain legitimate business records, prevent fraud and exercise or defend rights.
The period may vary according to the category of data and the context in which it was collected. Information sent in commercial requests may be kept for the period necessary for the relationship with the interested party. Technical and security records may be retained for the period necessary to protect the website and investigate events. Documents relating to contracts, legal obligations or the defense of rights may remain stored for the applicable periods.
Once the purpose has ended and there is no legitimate basis for retention, data will be deleted, anonymized or kept in blocked form, as applicable. Privacy notices should state the retention period or, where a fixed period cannot be established, the criteria used to determine it.
9. How we protect personal data
TREEID adopts technical, administrative and organizational measures intended to protect personal data against loss, unauthorized access, alteration, improper disclosure, inappropriate use or destruction.
These measures may include access controls, authentication, monitoring, event logging, infrastructure protection, vulnerability management, backups, encryption where applicable, internal procedures and guidance for the people who have access to the information.
Although measures proportionate to the risks are adopted, no technological environment is completely immune to incidents. If a relevant event involving personal data is identified, TREEID will take the containment, investigation, correction and notification steps required by applicable law.
10. User rights
Depending on applicable law and the circumstances of the processing, the user may request confirmation that their data is being used, access to the information held by TREEID, correction of incomplete or outdated data, deletion, anonymization, blocking, restriction of processing, objection to certain uses and portability, where applicable.
The user may also request information about sharing, withdraw consent previously given and raise questions about decisions taken solely by automated means, where this occurs.
A deletion request does not necessarily imply the immediate erasure of all records. Some data may be retained where there is a legal obligation, a need to protect rights, fraud prevention, performance of a contract or another legitimate basis for its retention.
To protect the data subject and prevent fraud, TREEID may request additional information to confirm the identity of the requester. This verification will be carried out proportionately and limited to what is necessary.
Public notices should state the rights available, the possibility of withdrawing consent where it is used and how the data subject can submit a complaint or query.
11. How to request access, correction or deletion
The user may exercise their rights or request information about the processing of their personal data through the following channel:
Email: legal@treeid.com.br
Suggested subject: Request regarding personal data
The request should contain enough information for TREEID to identify it and locate the related data. After receiving it, the company may make contact to confirm the identity of the requester or clarify the scope of the request.
TREEID will respond within the period established by applicable law and will inform the user if it is not possible to fully meet the request, stating the reason where applicable.
12. Marketing communications
TREEID may send communications about products, services, events, content and news where there is a legitimate basis for doing so or where the user has expressed interest.
Receipt of these messages may be stopped at any time through the unsubscribe link provided in the communication or by a request sent to the contact channel indicated in this Notice. Unsubscribing from commercial communications does not prevent the sending of messages necessary to perform contracts, handle requests or comply with legal obligations.
13. Third-party websites, platforms and services
The website may contain links, embedded content or integrations with third-party websites and platforms. These environments have their own privacy and security practices, for which TREEID is not responsible.
Users are advised to review the privacy notices of external services before providing data or using their features.
14. Data of children and adolescents
TREEID’s website and services are not intentionally directed at children. If the company identifies that a child’s data has been collected inappropriately, it will take reasonable measures to delete it or regularize the processing, in accordance with applicable law.
Parents, guardians or legal representatives may get in touch through the privacy channel if they identify processing of this nature.
15. Updates to this Notice
This Notice may be updated to reflect changes to the website, the services offered, the technologies used, processing practices or legal and regulatory requirements.
The current version will remain available on this page, together with the date of the last update. Material changes may be highlighted on the website itself or communicated by other appropriate means.
16. Consequences of non-compliance
Questions, requests or complaints relating to this Notice or to the processing of personal data by TREEID may be sent to:
TREEID
Privacy email: legal@treeid.com.br
The user may also submit a complaint to the competent data protection authority in their jurisdiction, where they consider that their rights have not been adequately addressed.