This website is maintained and operated by Colisa Paper Products.

We collect and use certain personal data belonging to users of our website. In doing so, we act as the controller of this data and are subject to the provisions of Federal Law No. 13.709/2018 (Brazilian General Data Protection Law – LGPD).

We care about the protection of your personal data and, therefore, we provide this Privacy Policy, which contains important information about:

• Who should use our website;
• What data we collect and what we do with it;
• Your rights regarding your personal data; and
• How to contact us.

1. Data We Collect and Reasons for Collection

Our website collects and uses certain personal data from our users, as described in this section.

2. Personal Data Expressly Provided by the User

We collect the following personal data that our users expressly provide when using our website:

• Full name;
• E-mail address;
• Phone/WhatsApp number;
• Contact message.

This data is collected in the following situations:

• When the user uses the contact form;
• When the user registers on the website;
• When the user subscribes to the newsletter.

The data provided by our users is collected for the following purposes:

• To allow users to purchase our products;
• To allow users to request quotations;
• To allow users to contact our team;
• To send product offers;
• To send commercial and informational newsletters.

3. Personal Data Obtained Through Other Means

We collect the following personal data from our users:

• IP address;
• Geolocation data.

This data is collected in the following situations:

• When the user browses our website;
• When the user fills out forms on our website.

Both Meta (formerly Facebook), Google Analytics, and Google Ads collect IP addresses and geolocation data from users browsing websites that use their services. This collection is part of the tracking and analysis process used to provide insights regarding audience behavior, advertising performance, and improvements in UX (User Experience).

However, it is important to note that these companies maintain privacy policies and comply with regulations such as GDPR in Europe, which impose restrictions on how personal data, including IP addresses, may be collected, processed, and stored. In many cases, IP addresses are anonymized to protect user privacy.

This data is collected for the following purpose:

• To personalize the user experience.

4. Sensitive Data

We do not collect sensitive data from our users, as defined in Articles 11 and following of the Brazilian General Data Protection Law. Therefore, we do not collect data related to racial or ethnic origin, religious beliefs, political opinions, union membership, religious, philosophical or political affiliations, health or sexual life data, genetic or biometric data linked to a natural person.

5. Cookies

Cookies are small text files automatically downloaded to your device when you access and browse a website. They are mainly used to identify devices, activities, and user preferences.

Cookies do not allow any file or information to be extracted from the user’s hard drive, nor do they provide access to personal information that was not voluntarily provided by the user or generated through their interaction with the website.

5.1 Website Cookies

Website cookies are those sent exclusively by the website to the user’s device.

The information collected through these cookies is used to improve and personalize the user experience. Some cookies may be used to remember preferences and choices, as well as to offer personalized content.

5.2 Third-Party Cookies

Some of our partners may place cookies on devices used to access our website.

These cookies generally allow partners to provide personalized content and services to users by collecting browsing data based on interactions with the website.

Users can obtain more information regarding third-party cookies and how the data is processed through the following links:

• Internet Explorer
• Safari
• Google Chrome
• Mozilla Firefox
• Opera
• Google Analytics
• Google Ads
• Meta (Facebook)

The entities responsible for collecting cookies may share the information obtained with third parties.

5.3 Cookie Management

Users may object to the use of cookies by disabling them in their browser settings.

Disabling cookies, however, may affect the availability and proper functioning of some website features and tools, as well as remove saved user preferences, impacting the browsing experience.

6. Collection of Data Not Expressly Provided

Occasionally, other types of data not expressly provided in this Privacy Policy may be collected, provided that such collection is authorized by user consent or another legal basis established by law.

In any case, the collection of such data and related processing activities will be properly informed to users.

7. Sharing Personal Data with Third Parties

We do not share your personal data with third parties. However, we may do so when required to comply with legal or regulatory obligations or orders issued by public authorities.

8. Data Retention Period

The personal data collected by the website is stored and used for as long as necessary to fulfill the purposes described in this document, considering the rights of data subjects, the rights of the website controller, and applicable legal or regulatory obligations.

Once the retention period expires, personal data is deleted or anonymized, except where legal or regulatory obligations require continued storage.

9. Legal Basis for Processing Personal Data

Every personal data processing activity must have a legal basis, as required by the LGPD.

All of our personal data processing activities are supported by legal bases permitted by law. Additional information about the legal bases we use may be obtained through our contact channels listed at the end of this Policy.

10. User Rights

Users have the following rights under the Brazilian General Data Protection Law:

• Confirmation of data processing;
• Access to personal data;
• Correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion of unnecessary or unlawfully processed data;
• Data portability;
• Deletion of data processed with consent, except when otherwise permitted by law;
• Information regarding entities with whom data has been shared;
• Information about the possibility of refusing consent and its consequences;
• Revocation of consent.

Under the LGPD, there is no general right to delete personal data processed under legal bases other than consent, unless the data is unnecessary, excessive, or unlawfully processed.

11. How Users Can Exercise Their Rights

To ensure that the person requesting the exercise of rights is indeed the data subject, we may request documents or additional information for proper identification.

This will only occur when absolutely necessary, and the requester will be fully informed about the process.

12. Security Measures for Personal Data Processing

We adopt technical and organizational measures capable of protecting personal data from unauthorized access, destruction, loss, alteration, or disclosure.

Our security measures consider the nature of the data, the context and purpose of processing, the risks involved, and market standards adopted by similar companies.

Among the security measures adopted, we highlight:

• User data is stored in secure environments;
• Access to user data is restricted to authorized persons only;
• SSL (Secure Socket Layer) certificates are used to encrypt data transmission;
• We maintain records of everyone who has access to our data.

Although we adopt all available measures to avoid security incidents, situations beyond our control may occur, such as hacker attacks or incidents caused exclusively by user actions.

In the event of any security incident that may generate relevant risk or damage, we will notify affected users and the Brazilian National Data Protection Authority in accordance with the LGPD.

13. Complaints to a Supervisory Authority

Without prejudice to any other administrative or judicial remedies, users who believe their rights have been violated may file a complaint with the Brazilian National Data Protection Authority.

14. Changes to This Policy

This version of the Privacy Policy was last updated on: 11/16/2023.

We reserve the right to modify this Privacy Policy at any time, especially to adapt it to changes made to our website, including the addition, removal, or modification of functionalities.

Whenever changes occur, users will be notified accordingly.

15. How to Contact Us

To clarify any questions regarding this Privacy Policy or the personal data we process, please contact our Data Protection Officer through one of the following channels:

E-mail: contato@sandybrown-falcon-402673.hostingersite.com
Postal Address: BR 277 North | Km 118 No. 118 C Jardim Social | Campo Largo