Privacy Policy

1. Who is responsible for the processing of personal data

For the operations described in this Policy, the party responsible for decisions regarding the processing of personal data is:

Depending on the interaction, Agrodan may act as the controller of personal data and engage partner companies to act as processors, handling information in accordance with the instructions, contracts and security measures established by Agrodan.

2. What personal data we may collect

The data processed varies according to how the data subject interacts with the website and with Agrodan's channels.

3. Purposes for which we use the data

Agrodan will limit the processing of personal data to the purposes stated, observing the principles of necessity, adequacy, transparency, security, prevention, non-discrimination and accountability.

4. Personal data processed in recruitment and selection

When submitting an application through the “Work With Us” page, the applicant may provide their full name, email address, telephone or WhatsApp number, the vacancy they are interested in, their CV and an optional message.

This information may be used to:

• analyse how well the applicant's profile matches the selected vacancy;
• get in touch about interviews and other selection stages;
• verify qualifications and professional experience;
• carry out the preliminary procedures for any potential hiring;
• consider the applicant for other opportunities, where authorisation or an applicable legal basis exists;
• keep the records necessary for the defence of rights and for compliance with legal obligations.

Submitting a CV does not guarantee participation in a selection process, an invitation to interview or employment.

Should Agrodan wish to keep a CV in its talent pool after the selection process has ended, it may request specific authorisation from the applicant or rely on another legal basis permitted by law.

5. Cookies and browsing technologies

Cookies are small files stored in the user's browser or device. They may be used to enable the website to function, retain preferences, strengthen security and understand how pages are used.

How to manage cookies

Users may manage cookies through the banner or preferences panel provided by the website, where applicable, and through their browser settings.

Blocking necessary cookies may affect the operation of forms, security features or other essential functions.

6. Who the data may be shared with

Agrodan does not sell personal data. Data will only be shared when necessary for the purposes described in this Policy or to comply with a legal obligation.

Data may be shared with:

• hosting, storage, security, backup and technology infrastructure companies;
• providers of email, form, communication and information management systems;
• website development, maintenance, technical support and security providers;
• consultancies, law firms, auditors, accountants and other professionals bound by duties of confidentiality;
• companies involved in recruitment processes and in occupational health and safety, where applicable;
• administrative, regulatory, police or judicial authorities, where required by a legal obligation, a valid order or the need to defend rights;
• companies involved in corporate restructuring, mergers, acquisitions, absorptions or transfers of assets, subject to legal requirements.

Wherever possible, Agrodan will require its suppliers to make contractual commitments regarding confidentiality, security, data protection and purpose limitation.

7. International data transfers

Some technology, storage or communication providers may use servers or teams located outside Brazil. In such cases, personal data may be subject to international transfer.

Agrodan will seek to adopt measures consistent with the LGPD and with the regulations of the National Data Protection Authority (ANPD), including, as appropriate:

• appropriate contractual clauses;
• assessment of suppliers' security practices;
• limitation of access and of processing purposes;
• use of the legal international transfer mechanisms applicable to the case.

8. How we protect personal data

Agrodan adopts technical, administrative and organisational measures appropriate to the nature of the data processed and the risks involved.

These measures may include:

No system is completely immune to risk. Should an incident occur that could result in significant risk or harm to data subjects, Agrodan will take the necessary steps and make the notifications required by law.

9. How long data is stored

Personal data will be kept for as long as necessary to fulfil the purposes for which it was collected.

The storage period may be determined by taking into account:

• the duration of the relationship with the data subject;
• the progress of a request or negotiation;
• the duration of the recruitment process;
• the applicable legal and regulatory time limits;
• the limitation periods for the defence of rights;
• legitimate security, audit and prevention needs;
• consent to remain in a talent pool.

Once the purpose has been fulfilled and there is no legal obligation or justification for retaining it, the data may be deleted, anonymised or blocked.

Anonymised information, which does not reasonably allow the data subject to be identified, may be kept for statistical, historical, security and process improvement purposes.

10. Data subjects' rights

The data subject may request, within the limits and conditions set out in the LGPD:

• confirmation of the existence of processing;
• access to their personal data;
• correction of incomplete, inaccurate or out-of-date data;
• anonymisation, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
• data portability, in accordance with applicable regulations and subject to commercial and industrial secrecy;
• deletion of data processed on the basis of consent, except where retention is permitted by law;
• information about the public and private entities with which the data has been shared;
• information about the possibility of withholding consent and the consequences of doing so;
• withdrawal of consent;
• objection to processing carried out in breach of the LGPD;
• review of decisions made solely on the basis of automated processing, where applicable;
• filing of a petition with the National Data Protection Authority (ANPD) or consumer protection bodies.

Identity verification

To protect the data subject and prevent unauthorised access, Agrodan may request additional information to confirm the identity of the requester or the legitimacy of their representative.

Requests that are manifestly unfounded, excessive, incompatible with legal obligations or that may infringe the rights of third parties may be restricted or refused, with a justification provided.

11. Children's and adolescents' data

Agrodan's corporate website is not intended for collecting personal data from children.

Should it be necessary to process data of children or adolescents in a specific initiative, Agrodan will adopt the measures required by law, taking into account the best interests of the minor and, where applicable, the involvement of their parents or legal guardians.

Parents or guardians who find that a minor's data has been submitted improperly may request its review and deletion through the privacy channel indicated in this Policy.

12. Links, maps, social media and external content

The website may provide links to maps, social media, third-party platforms, documents, videos or other external content.

When accessing these environments, users will be subject to the practices and privacy policies of the respective third parties. Agrodan does not have full control over the processing carried out by external websites or platforms.

We recommend that users read the privacy policies of these services before providing any personal information.

13. Corporate and commercial communications

Agrodan may use contact details to respond to requests, provide information relating to the existing relationship and send communications consistent with the data subject's interaction.

Where a promotional communication relies on consent, the data subject may opt out of receiving it at any time, using the option provided in the message or by submitting a request through the privacy channel.

Even after consent to promotional communications has been withdrawn, Agrodan may send messages needed to perform contracts, meet legal obligations, handle ongoing requests or provide security information.

14. Changes to this Policy

This Policy may be updated to reflect legal, regulatory, technological or operational changes, or changes relating to Agrodan's services and digital channels.

The current version will always be available on this page, together with the date it was last updated.

Where a change significantly alters the purposes or conditions of processing, Agrodan may take additional steps to inform data subjects.

15. Applicable law

This Policy is interpreted in accordance with Brazilian law, in particular the Brazilian General Data Protection Law (LGPD), the Internet Civil Rights Framework (Marco Civil da Internet) and the regulations issued by the National Data Protection Authority (ANPD).

Any disputes will be resolved through the legally competent channels, without prejudice to the rights guaranteed to consumers and data subjects.