ECORODOVIAS – PRIVACY NOTICE TO USERS
This Privacy Notice applies to users (“You” or “User”) of the products or services offered by Ecorodovias Infraestrutura E Logística S.A. and its affiliated companies (“EcoRodovias” or “We”) in Brazil.
The purpose of this Privacy Notice is to inform You about how EcoRodovias handles your personal data in connection with your products and services. This includes general information about what kind of personal data is collected and used, for what purposes, for how long it is used, with whom it can be shared and what rights You have with respect to your personal data.
You may receive additional information about the use of your personal data depending on the product, service or company affiliated with EcoRodovias that is offering such product or service. Unless otherwise communicated to You, EcoRodovias is responsible for the processing of personal data referred to in this Privacy Notice.
Collection and use of your personal data
Depending on which products or services You use and how You interact with EcoRodovias, We may collect and use your personal data. The following categories of personal data can be processed:
Registration and identification data: name, email address, telephone number, number and/or copy of identification documents, gender, marital status, date of birth, full address;
Financial data: bank account and branch, among others;
Technical data: information about your device, electronic identifiers, cookies, your physical location (based on your IP address) and other similar technical information;
Data related to your use of EcoRodovias products or services: data on traffic tickets, history of your requests and complaints, data about your vehicle, unique identifying numbers in connection with the use of the service, your image;
Sensitive Personal Data: health-related data, biometric data, among others.
Personal data collected may be obtained directly by EcoRodovias from You, provided or shared by third parties, or through publicly available databases. EcoRodovias will endeavor to ensure that any collection of personal data is carried out in accordance with the law and as strictly necessary to fulfill the purposes stated in this Privacy Notice.
Purposes of processing your personal data
EcoRodovias processes your personal data for the following purposes:
- Supply of products or provision of services to the User, including on highways and ports;
- Attendance to requests made by Users;
- For the receipt and collection of amounts, collection, taxes, tolls, including through automatic payment devices;
- To make refunds to Users, when applicable;
- Security management of services administered by EcoRodovias, including video and image monitoring;
- For the provision, maintenance and monitoring of the EcoRodovias website, applications and other digital platforms;
- To communicate with You, including sending information requested by the User and/or sending promotional messages;
- For the management of the User relationship, including advertising and marketing actions;
- Management of messages in the “Contact Us” section of the EcoRodovias website;
- Survey on the level of User satisfaction in relation to the products and services offered by EcoRodovias, through different channels;
- Processes related to the social and environmental impact of EcoRodovias activities, including compliance with legal or contractual obligations of EcoRodovias;
- Social projects carried out by EcoRodovias in conjunction with communities or other partner organizations;
- Provision of information requested by regulatory and police authorities about occurrences in the services managed by EcoRodovias, in strict compliance with EcoRodovias legal or regulatory obligation;
- In cases where Users visit one of EcoRodovias units in person;
- To prevent and combat fraud of any kind, including evasion of collections of any nature;
- For the registration of toll-free vehicles, upon request by the Users who are qualified to do so;
- Service and removal of vehicles;
- Provision of a mechanical rescue service, replacement of tires and compliance with EcoRodovias contingency plan, in an operational emergency situation;
- Emergency assistance of any nature, to protect the life and physical safety of Users;
- Traffic monitoring of vehicles in general, especially heavy vehicles;
- For the protection of public property, third parties and for the regular exercise of EcoRodovias rights, including in the administrative, judicial or arbitration scope;
- To carry out audits in relation to EcoRodovias products and services, in connection with legal obligations, including in the context of concession, permission or authorization contracts;
- Responses to authorities in the context of legal or administrative proceedings, in compliance with legal, regulatory or any other duties legally required of EcoRodovias.
In addition to the purposes listed above, we may process your sensitive personal data, in case of:
- Carrying out primary or pre-hospital medical care to Users;
- Access to electronic identification and authentication systems, in connection with EcoRodovias products and services; and
- For the regular exercise of EcoRodovias rights, including in the context of contracts and legal or administrative proceedings;
With whom we share your personal data
EcoRodovias will not share your personal data with third parties, except for the purposes listed above, in the following cases:
- With affiliated companies within the EcoRodovias group;
- With EcoRodovias service providers and business partners who process personal data on behalf of EcoRodovias, without an independent right to use such personal data;
- With EcoRodovias service providers and business partners, in the context of combating toll evasion and other illegal conduct with high risk of damage, in the interests of EcoRodovias and the protection of third parties.
- With the Public Administration, in compliance with legal and contractual obligations, including in the context of concession, permission or authorization contracts;
- With law enforcement authorities and other government authorities, as required by law or when reasonably necessary to protect the rights, property and/or safety of the User, third parties and/or EcoRodovias; and
- When we have obtained your consent to share your personal data
Where your personal data is handled
The personal data of Users may be processed both in the national territory and in other countries, such as the United States of America, always in compliance with contractual obligations related to confidentiality, integrity, information security and other applicable legal safeguards required by law.
Keep in mind that countries may have different legislation and data protection levels than Brazil. EcoRodovias will adopt the measures required by law for any international transfer of personal data, to protect the rights of the holders of personal data when these are transferred to other countries.
How we protect your personal data
EcoRodovias adopts and maintains a process of continuous improvement of technical and organizational measures for the security of personal data and the prevention of security incidents, leaks or improper use of personal data.
EcoRodovias applies physical security procedures for access to its offices and establishments. We also adopt information security measures, such as the implementation of security software, continuous monitoring of equipment, the network and servers of EcoRodovias, control and maintenance of access records to systems and applications used at EcoRodovias, among others.
EcoRodovias employees, service providers and business partners are bound by confidentiality obligations. Only employees and service providers who need to access personal data for the development of their activities have access to such personal data.
For how long is your personal data kept
EcoRodovias maintains your personal data for the period necessary to fulfill the purposes listed in this Privacy Notice, including for the fulfillment of legal and contractual obligations within the scope of concession, permission or authorization contracts. For specific information about data retention periods, You can contact EcoRodovias through our communication channel with the person in charge of protecting personal data by sending an email to: canaldeprivacidade@ecorodovias.com.br.
What are your rights and how to exercise them
Pursuant to Law 13.709/18 - General Law for the Protection of Personal Data, the User has the following rights, which may be exercised in certain contexts upon request, pursuant to article 18 of the aforementioned law:
- confirmation of the existence of processing of your personal data;
- access to your personal data;
- correction of incomplete, inaccurate or outdated personal data;
- anonymization, blocking or deletion of unnecessary, excessive or processed data in violation of the provisions of the LGPD;
- portability of personal data to another provider of a service or product, subject to national authority regulation;
- request for deletion or anonymization of personal data processed on the basis of your consent, except when the law authorizes the maintenance of such data for another reason;
- information about public and private entities with which EcoRodovias has shared your personal data;
- information about the possibility of not consenting to the processing of your personal data and the consequences of such action; and
- withdrawal of your consent.
EcoRodovias takes Users rights seriously and will facilitate, under the terms of the law, the fulfillment of requests for the exercise of rights. EcoRodovias may reasonably request personal data from Users to confirm their identification and authentication in the context of exercising their rights. This happens for the User’s own safety.
For the exercise of rights, the User must contact the person responsible for the protection of personal data at EcoRodovias through the following channel: canaldeprivacidade@ecorodovias.com.br.
Update of this Privacy Notice and Contact Information
This Privacy Notice may be updated from time to time. All changes will apply from the date of the update unless we communicate differently to You. We will endeavor to communicate updates to this Privacy Notice, especially through our website.
For comments, questions or requests for additional information about this Privacy Notice and/or other issues related to the protection of personal data by EcoRodovias, please contact our person in charge of personal data protection through the following channel: canaldeprivacidade@ecorodovias.com.br
Privacy Notice Revised on August/2020.
