B2 Mídia Digital LTDADate: 21/07/2023Version: 1.0
Purpose
- LGPD Compliance: All parties involved in the partnership commit to fully complying with the provisions of the General Data Protection Law (LGPD) and any other applicable laws or regulations related to the protection of personal data.
- Purposes of Processing: The parties agree to use the personal data collected only for the legitimate and specific purposes previously established and communicated to the data subject.
- Consent and Information: Whenever necessary, the parties will seek to obtain the express consent of data subjects for the processing of their personal information. They will also ensure adequate transparency by providing clear and concise information about data processing practices to data subjects.
- Data Minimization and Limitation: The parties commit to collecting only the personal data strictly necessary to fulfill the agreed purposes. They will not use such information for other purposes without obtaining additional consent from data subjects.
- Data Security: Implementation of appropriate technical and organizational measures to ensure the security of shared personal data, preventing unauthorized access, loss, disclosure, or accidental or unlawful destruction.
- Data Subject Rights: The parties recognize and respect the rights of data subjects, as established by the LGPD, including the right of access, rectification, deletion, and data portability, where applicable.
Data Protection Officer (DPO)
- DPO Appointment: Each party will appoint a Data Protection Officer (DPO) responsible for overseeing LGPD compliance within their organization.
- Communication Between DPOs: The parties' DPOs must establish effective communication to address issues related to personal data protection within the context of this partnership.
Training and Awareness
- Employee Awareness: The parties commit to providing regular training and capacity-building to their employees, in order to raise awareness of the importance of the LGPD and best data protection practices.
Assessment and Review
- Compliance Review: The parties agree to conduct periodic reviews of personal data processing practices, in order to ensure ongoing compliance with the LGPD and promote improvements when necessary.