Demanderweb App privacy policy

Declaration of Privacy Policy and Data Protection App DemanderWeb

​ 1. Introduction

1.1.DEMANDER GESTÃO COMERCIAL, legal entity governed by private law, registered with the CNPJ under nº 37.868.347/0001-60, headquartered at Rua Bento Rosa 4000, Prédio 20 Sala 401, Bairro Carneiros, in Lajeado/RS, CEP 95914-014, aiming to protect users of the Demander Sales Force Solution (“Demander”), digitally signs this instrument under the following terms. ​ 1.2. Through this Privacy Policy and Personal Data Protection Statement (“Privacy Policy” or “Policy”), DEMANDER undertakes to respect privacy and protect the information entrusted to it in the context of its relationships, under the terms of this Privacy Policy, Demander’s Privacy and Data Protection Policy and, naturally, Law No. 13,709 (“General Personal Data Protection Law” or “LGPD”) and other applicable regulations.

2. Scope of this Policy

​ 2.1. This Policy applies solely and exclusively to the processing of personal data carried out by DEMANDER within the scope of the Demander Sales Force Solution. ​ 2.2. The terms of this Policy also apply to Demander Web and the Demander Android and Demander iOS apps, available at: ​ Android Demander

https://play.google.com/store/apps/details?id=br.com.demander.demanderweb ​ Demander iOS

https://apps.apple.com/bz/app/demander-web/id1595911853

2.3. This Policy does not apply, however, to the legal relationship maintained between Customers of the Demander Sales Force Solution and their respective customers and employees, that is, end consumers and users of the platform, whose personal data may be entered, uploaded and processed, or stored and hosted on Demander, and the processing of this personal data will be regulated by the respective rules and Privacy Policies of the Customers. ​ 2.4. DEMANDER, therefore, is not responsible for the legitimacy of the processing of third-party personal data inserted into its Sales Force Solution, and DEMANDER’s Customers assume the status of Controllers before their respective customers, while DEMANDER, in this relationship, appears only as a Data Operator, with limited liability, in accordance with the LGPD.

3. Processing of Personal Data

3.1. During your experience using our application, we may collect different types of personal data, automatically for the purpose of checking, monitoring and control, or provided directly by you, for example to complete your registration. See below what personal data we may collect and in each situation:

3.2 During access to the demo version: Full name, Email address, Telephone number and Company name are collected.

3.3 When using the application: Data is collected from the application screens you navigate through and all the information you fill in on the application screens.

3.4 When an error occurs in the application: In this situation we may collect the following information: Brand, model and operating system version of your device, battery level, memory: total and free, storage: total and free, battery temperature, operating system language, screen resolution.

3.5. To register with Demander, personal data is collected from the representatives and/or administrators of its Customers, from whom the following data will be required: 1) name; 2) email; 3) telephone; 4) Address; 5) CPF and 6) Signature. ​ 3.6. Customers who hire Demander will be able to register Users in the Solution, and they may be required to provide the same personal data described in the item above, in addition to additional data, such as: 1) position in the company. ​ 3.7. When completing the Registration or first accessing the System, the User must register a login and a password to use the Platform, both of which are personal, exclusive and non-transferable, with the User being responsible for their confidentiality and security. ​3.8. As set out in items 2.2 and 2.3 of this Policy, DEMANDER is not responsible for the processing of data carried out by its customers and hosted on Demander or another Solution, even if DEMANDER has access to these to carry out service provision activities or the respective contract involves the storage of this data.

4. Purposes of Data Processing

4.1. We use personal data to ensure quality service and a better experience. We list below the purposes for which we may use your personal data:

4.2. Registration data: To correctly identify the User. To contact you when necessary. This contact may cover various topics, such as support, answers to questions, responses to complaints and requests. To assist in diagnosing and solving technical problems. To develop new features and improvements, improving your experience with our available services. To ensure compliance with legal or regulatory obligations or guarantee the regular exercise of the rights of the company Demander Gestão Comercial. In these cases, we may even use and present the information in judicial and administrative proceedings, if necessary. To collaborate with compliance with a court order, competent authority or supervisory body.

4.3. Location: The Demander app collects location data to activate the proximity customer functionality (Check-in), geolocation of the moment the order is issued or visit without sales, as well as recording the route you took to reach the customer. To this end, location collection is carried out even when the app is closed or not in use.

4.4. Camera: For capturing photos of products and reading barcodes.

4.5. Usage data and application error data: To assist in diagnosing and solving technical problems. To develop new features and improvements, improving your experience with our available services.

4.6. The purposes for which DEMANDER will use the personal information collected are restricted to the following: I) Complete qualification of the parties for the purposes of concluding the contract; II) User Identification; III)Execution of contracts and provision of services offered; IV) Improvement of solutions, systems, software, services and content offered; V) Communication with customers and partners in relation to contractual objects and announcements of events, promotions, campaigns, products and the like, sending offers, advertising, marketing materials, including personalized advertising; VI) Compliance and execution of contracts with suppliers; VII) Execution of contractual obligations, including provision of customer service, support, report generation, data hosting, authentication and others; VIII)Detection and prevention of fraud and abuse to ensure the safety and protection of all customers and others, in addition to identifying and authenticating access to servers and systems; IX) Exercise and defense of rights and assets, including measures for those who abuse or threaten to commit abuse; and X) Comply with the law and legal obligations, including responding to a request or order from a court, regulatory body or authority, as well as fulfilling contractual obligations with customers and third parties.

​ 5. Third party liability ​

5.1. It is the sole responsibility of the respective Data Holders: I) Read, understand and fully comply with the terms of the General Personal Data Protection Policy, as well as other applicable personal data protection rules and procedures; II) Forward any questions and/or requests for clarification about the General Personal Data Protection Policy, its rules and procedures to the Person in Charge of Personal Data Processing; III) Communicate to the Person Responsible for Processing Personal Data any event that violates this Policy or puts/may put personal data processed by DEMANDER at risk;IV) Demonstrate awareness and full acceptance of the provisions of the General Personal Data Protection Policy, as well as other security standards and procedures, assuming responsibility for their compliance; and V) Respond for non-compliance with the General Personal Data Protection Policy, rules and procedures related to the processing of personal data, as defined in the sanctions item and in the legislation applicable to the species.

5.2. DEMANDER is not responsible, under any circumstances, for the processing of data carried out by its customers, who contracted the aforementioned solution, in violation of the General Data Protection Law (Law nº 13,709/2018) and any form of inappropriate processing of personal data.

5.3. The DEMANDER Client, responsible for hiring the Demander, vis-à-vis the holders is considered a Data Controller, in accordance with article 42 et seq. of the LGPD, assuming the responsibility that such legislation attributes to him in this condition, including in the event of disrespecting the guidelines of the legislation applicable to the species or data holders.

5.4. DEMANDER, when providing the solution, acts as the Operator of the Data entered into Demander, acting in accordance with the instructions provided by its Client. ​ 5.5. In the case of violations that involve illegal activities, or that may pose risks to holders of personal data, or damage to DEMANDER, the offender will be held responsible for the losses, with the application of the relevant legal measures, without prejudice to the sanctions described in the item above. ​ 5.6. The use of Demander in non-compliance with the General Data Protection Law and other related legislation will result in the termination of the respective Service Provision Agreement, without any fine or penalty being imposed on DEMANDER, in addition to immediate blocking of access by the Customer and other users to the System.

5.7. With whom we may share personal data To carry out the activities listed above, whenever necessary, we may share your personal data with the company you represent, with service providers, partners or regulatory bodies. We never sell personal data. Below we present a summary of these possibilities:

5.8. Service providers: so that we can make our products available and provide our services with quality, we rely on the collaboration of several service providers, who process the personal data collected on our behalf and in accordance with our instructions.

5.9. Judicial, police or government authorities: we must provide personal data of Customers and/or Users, in compliance with a court order, requests from administrative authorities, legal or regulatory obligations, as well as to act collaboratively with government authorities, generally in investigations involving illicit acts.

6. Storage and security of personal data

We store your data securely in data centers located in Brazil and/or abroad. In this case of storage abroad, all applicable legal measures are adopted, in accordance with the General Data Protection Law and its future regulations, guaranteeing the protection and privacy of your personal data.

We adopt the best techniques to protect personal data collected from unauthorized access, destruction, loss, alteration, communication or any form of inappropriate or illicit treatment, including encryption mechanisms. We emphasize, however, that no platform is completely safe. If you have any concerns or suspect that your data is at risk, please contact us through our customer service channels and we will be happy to assist you promptly.Your personal data will be kept for as long as you are an active Demander customer. After this period, we may store your personal data for an additional period for audit purposes, to enable us to comply with legal or regulatory obligations. We will retain your data for the necessary period, respecting the deadlines established in applicable legislation.

6.1. International transfer of personal data Some of your personal data may be transferred to other countries, for example, when we use cloud computing services for data processing or storage, located outside Brazil. But don’t worry, Demander also observes in these situations all the requirements established in current legislation, and adopts the best market practices in order to guarantee the protection and privacy of your personal data.

7. Final Provisions

7.1. DEMANDER is always seeking to improve its processes, for this reason, this Privacy Policy may be updated at any time, without prior notice, so we recommend periodically visiting this page to check for any updates. ​ 7.2. Omitted cases that are not expressly provided for in this Policy will be evaluated by DEMANDER and resolved observing the principles of Privacy and Data Protection provided for in Brazilian legislation, preserving the commercial integrity and continuity of the solutions offered. ​ 7.3. For the purpose of establishing communication between DEMANDER, the holders and the National Data Protection Authority (ANPD), Fonseca Braz Sociedade de Advogados is appointed as data protection officer, available via email at dps@fonsecabraz.com.br. ​ 7.4. If you have any questions regarding this Policy or the exercise of the rights provided to data subjects, interested parties can contact us through our Data Officer, at the email indicated above.