Contact us

Governance

Privacy and Data Protection Policy

Privacy, transparency and security are part of how DVGenesis works.

Guidelines for ethical, secure and transparent processing of personal and business data.
01

Commitment

Introduction

DVGenesis values and protects the privacy and security of personal and business data processed in all our operations. This Privacy Policy establishes clear guidelines for collecting, using, sharing and protecting this data, aligned with industry best practices and the requirements of Brazil's General Data Protection Law (LGPD) and other applicable regulations. We are committed to ensuring that all data is processed ethically, securely and transparently.

02

Purpose

Objective

Establish clear principles and procedures for responsible processing of personal and business data, ensuring compliance with current legislation and safeguarding the integrity, confidentiality and availability of information throughout its lifecycle.

03

Application

Scope

This policy applies to all employees, partners, suppliers and third parties who directly or indirectly access personal and business data associated with DVGenesis's operations, ensuring the protection and appropriate use of information.

04

Key concepts

Definitions

Personal data

Information that identifies or can identify an individual, such as a name, Brazilian taxpayer number (CPF), address and related data. This also includes sensitive data, such as health information, racial or ethnic origin, political opinions, religious or philosophical beliefs and sexual orientation, which require additional care during processing to ensure the data subject's privacy and protection.

Business data

DVGenesis's confidential and proprietary information, including but not limited to financial data, business strategies, trade secrets, marketing plans and client data. This data is essential to the company's operations and is strictly protected to ensure business continuity and safeguard the interests of the company, its clients and partners.

Data subject

The individual or company to whom the data relates, which may be a client, employee or partner.

05

Responsible processing

Data processing principles

DVGenesis will process data in accordance with the following principles:

Purpose limitation

Data will be collected and used for specific, explicit and legitimate purposes.

Necessity

We will limit processing to the minimum necessary to achieve those purposes.

Transparency

We will inform data subjects about how their data is processed, while respecting business confidentiality.

Security

We will adopt technical and organizational measures to protect data against unauthorized access, loss or improper alteration.

06

Information lifecycle

Data collection and use

01

Data collection

Personal and business data is collected according to the company's operational needs, including service delivery, contract management, recruitment processes and performance analysis.

02

Data use

Collected data will be used exclusively for the specified purposes, respecting legal limits and applicable legal bases, such as contract performance, compliance with legal obligations or the data subject's consent.

07

Lifecycle

Data storage and retention

01

Retention period

We will store data for the period needed to fulfill the purposes for which it was collected, in accordance with legal and regulatory requirements.

02

Deletion and anonymization

When data is no longer needed, it will be deleted or anonymized, except where the law requires its retention.

08

Third parties

Sharing data with third parties

01

Partners and suppliers

Data sharing is restricted to partners and suppliers who strictly meet our privacy and security requirements. All contracts with these third parties include specific data protection clauses, ensuring they adopt the same confidentiality and security standards as DVGenesis. We regularly monitor and review these agreements to ensure compliance with Brazil's General Data Protection Law (LGPD) and protect data subjects' rights.

02

International data transfers

If data needs to be transferred abroad, we will adopt appropriate safeguards and inform the data subjects.

09

Data subjects' rights

Your rights

Personal data subjects have the following rights under the LGPD:

Access

View the personal data held by the company.

Rectification

Request updates or corrections to inaccurate data.

Anonymization, blocking or deletion

Request deletion of data where possible.

Withdrawal of consent

Withdraw consent at any time without affecting the lawfulness of prior processing.

10

Ongoing protection

Information security

DVGenesis adopts security controls to protect both personal and business data, including:

Encryption

Sensitive data is encrypted to ensure integrity and confidentiality.

Access control

Data access is restricted to authorized employees based on the principle of least privilege.

Monitoring and auditing

We monitor data use and carry out regular audits to identify and mitigate security risks.

Training and awareness

We regularly train all employees in security and data protection practices, promoting responsible use and processing of information.

11

Prevention and response

Incident management and data breach response

01

Incident notification

In the event of a data security incident, we will notify Brazil's National Data Protection Authority (ANPD) and affected data subjects, as applicable.

02

Response plan

We maintain an incident response plan to rapidly identify, assess and mitigate data breaches.

12

Governance and oversight

Responsibilities and compliance

Compliance and Legal

The Compliance and Legal teams oversee data protection practices and their alignment with legal requirements, reviewing this policy regularly.

Information security

The Information Security team implements and maintains technical controls to protect data against threats.

Data Protection Officer — DPO

The DPO is available to answer data privacy questions, manage data subject requests and maintain communication with the ANPD.

13

Policy evolution

Policy review and updates

This policy will be reviewed regularly to ensure compliance with applicable laws and adapt to changes in DVGenesis's operations. We will communicate any updates to employees and partners.

14

Visitor controls

Cookies and similar technologies

The DVGenesis website may use cookies and similar technologies to operate, maintain security, analyze performance and, when authorized, provide additional functionality. Non-essential cookies that require consent will only be used after the visitor makes a choice.

In the current configuration, no analytics, non-essential functionality, behavioral advertising or marketing services were found to be loaded by the website. The preference recorded in the cookie panel is stored locally in the browser so that the choice is respected across pages; it contains no browsing history.

01

Necessary technology

The local storage entry dvgenesis_cookie_consent retains only the policy version, the date of the choice and the authorized categories. This preference is needed to avoid showing the notice again without reason and to respect any withdrawal of consent.

See the Cookie Policy to understand how the panel works and how to change or withdraw your choice.

15 — Contact

Contact us about your data

To exercise your rights or ask questions about this policy, contact the Data Protection Officer (DPO).

Understanding and adherence

All DVGenesis employees, partners and suppliers who process personal and business data associated with our operations and services commit to respecting this policy and safeguarding the security and confidentiality of information.