Privacy Policy

1. OBJECTIVE. This privacy policy aims to clearly and transparently inform the public (both internal and external) how the information obtained by Rochesa is used.
2. Privacy Policy. This Privacy Policy (together with our Terms of Use and any other related documents) forms the basis on which any data we collect from you, or that you provide to us, will be processed. Please read the following text carefully to understand our views and practices regarding your personal data and how we will treat it. By using our website, you allow us to collect and use your information as described in this Policy. Rochesa controls the processing of all personal data collected through the website.
3. Acceptance of the Terms and Conditions of Use. Anyone wishing to access the products through the website www.rochesa.com.br must first be informed of the rules contained in this document, which will be available for easy and wide consultation via a direct link on the site. By using the website www.rochesa.com.br, the user fully accepts these rules and agrees to abide by them, under penalty of applicable sanctions. Before navigating the website, the user must be aware of any modifications or updates to this document. The user may also be informed via email or directly on the website about changes to these rules. If the user does not agree with any of the provisions herein, they should immediately refrain from using the service. If interested, they may also contact customer service to express their concerns.
4. Website Navigation. The website editor of www.rochesa.com.br undertakes to use all available technical solutions to ensure access to the service 24 hours a day, 7 days a week. However, access may be interrupted, limited, or suspended at any time in order to perform updates, content modifications, or other actions deemed necessary for proper functioning. These general terms and conditions of use also apply to all extensions of www.rochesa.com.br on social networks or communities, whether existing or to be implemented.
5. Website Management. For proper management, the website editor of www.rochesa.com.br may, at any time:
   a) suspend, interrupt, or limit access to all or part of the website to a specific category of users;
   b) remove any information that may disrupt the operation of the website or conflict with Brazilian or international law;
   c) suspend the site to carry out updates and modifications.
6. Responsibilities. Rochesa is responsible for defects or faults in the services provided on the website (www.rochesa.com.br). Technical or operational faults caused by the user’s system are not the responsibility of Rochesa. Rochesa is only responsible for the information it directly publishes. Any information included by users, such as in personal profile comments, is the sole responsibility of those users. The user is also responsible for:
   a) proper use of the site and its services, maintaining civility, respect, and courtesy when interacting with others;
   b) complying with the rules outlined in this document, as well as national and international law.
7. External Links. The website www.rochesa.com.br may contain external links redirecting users to other websites over which Rochesa has no control. Despite prior and regular checks, Rochesa disclaims any responsibility for content found on these external sites. Inclusion of links to websites containing unlawful, violent, controversial, pornographic, xenophobic, or offensive content is not permitted.
8. General Information (Privacy Policy). This section contains information regarding the processing of users’ personal data, whether fully or partially automated, performed by the website and which may or may not be stored. The purpose is to provide guidelines on the data collected, reasons for collection, and how users can update, manage, export, or delete this data. The website’s Privacy Policy complies with Brazilian Federal Law No. 12.965 of April 23, 2014 (Marco Civil da Internet), Federal Law No. 13.709 of August 2018 (General Data Protection Law), and EU Regulation No. 2016/679 of April 2016 (General Data Protection Regulation – GDPR). This policy may be updated due to regulatory changes, so users are encouraged to periodically review this section.
9. User Rights.
   

   The website is committed to complying with the provisions of the General Data Protection Regulation (GDPR), based on the following principles:

   • Your personal data will be processed lawfully, fairly, and transparently;

   • Your personal data will be collected for specific, explicit, and legitimate purposes and will not be further processed in a manner incompatible with those purposes;

   • Your personal data will be collected in an adequate, relevant, and limited manner to what is necessary in relation to the purposes for which they are processed;

   • Your personal data will be accurate and kept up to date, with measures taken to erase or rectify inaccurate data where necessary;

   • Your personal data will be kept in a form that permits identification of data subjects for no longer than necessary for the purposes for which the data is processed;

   • Your personal data will be processed in a way that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

Under Brazilian Federal Law No. 13.709 of August 14, 2018, users have the following rights:

• Right to confirmation and access: the right to know whether your data is being processed and to access that data;

• Right to rectification: the right to correct inaccurate or incomplete personal data;

• Right to data deletion (right to be forgotten): the right to request deletion of your data;

• Right to restrict processing: the right to restrict processing in certain situations, such as inaccuracies, unlawful processing, or lack of necessity;

• Right to object: the right to object to data processing based on personal situations or for marketing profiling purposes;

• Right to data portability: the right to receive your personal data in a structured, commonly used, machine-readable format, and transmit it to another controller;

• Right not to be subject to automated decisions: the right not to be subjected to a decision based solely on automated processing, including profiling, which significantly affects you.

Users may exercise their rights through the following channels: via email or in writing, providing full name, address, phone number, date of request, user’s signature, and any documents justifying the request.

Requests should be sent to: suporte@rochesa.com.br.
Users will be informed in the case of rectification or deletion of their data.