Skip to main content
Privacy Policy

Aracelis Indústria e Comércio de Máquinas e Equipamentos Ltda is committed to complying with the laws that protect the privacy of customer and general public data. This page is designed to provide information about how we comply with data protection regulations, what information we collect while you browse our communication channels, and how such information is collected, used, and protected by us, in accordance with Law No. 13.709/2018 (General Data Protection Law – “LGPD”). The use of our products and services, as well as our platforms and other available means of interaction, is conditioned upon acceptance of this Privacy Policy, including with respect to our collaborators.

1. Source of Personal Data

Aracelis will have access to personal data in the following situations:

Through interaction with a client: When the Client provides and enters personal data necessary for the provision of services and the use of products supplied by Aracelis.

Interaction with its collaborators: When its employees and collaborators of any nature use its systems and platforms to fulfill duties and obligations arising from the contractual relationship they maintain.

2. Types of Personal Data and Sensitive Personal Data Collected

Without prejudice to the data commonly collected and processed from its collaborators for the purposes of their legal relationship, Aracelis may also collect the following personal data:

  • Names and contact details, such as first and last name, email address, postal address, telephone number, and other similar contact data, as well as banking details;

  • Device information, such as IP address, location, or service provider;

  • Usage and browsing history information, such as how the User navigates within our services, their browsing history, and which elements of Aracelis’ services are most used;

Sensitive personal data that may eventually be collected by Aracelis will have its specific purpose separately informed to the User, who must provide consent for Aracelis to use it for that specific purpose. In case of disagreement, such data will be automatically deleted from Aracelis’ databases.

Aracelis does not collect data from minors unless authorized by parents or legal guardians. If such data is collected without authorization, Aracelis will immediately delete the collected data upon becoming aware of it, in accordance with the Terms of Use and this Privacy Policy.

3. Use of Collected Personal Data

When collected, Aracelis will use personal data to:

  • Provide and improve contracted services;

  • Comply with legal or regulatory obligations;

  • Manage relationships with Users;

  • Set up and manage User accounts;

  • Provide technical assistance, support, and training to Users;

  • Contact Users;

  • Conduct internal research and development, and improve, test, and enhance the features and functions of Aracelis’ services;

  • Provide Users with marketing, advertising, and promotional materials, including from Aracelis’ Partner companies, as permitted by law;

  • Meet internal and external audit requirements, including information security obligations;

  • Send email messages to:
    a) confirm or cancel requests made through the platform;
    b) communicate future changes to this policy; and
    c) disclose updates, changes, inclusion of new data sources, and platform improvements;

  • Exercise Aracelis’ rights, including but not limited to protecting its privacy, security, networks, systems, and property, and/or those of third parties;

  • Comply with requests from courts, law enforcement authorities, regulatory agencies, and other public institutions and governmental authorities, including applicable rules outside the User’s country of residence;

  • Exercise Aracelis’ rights and defend against potential legal claims, as well as comply with applicable laws or regulations and ensure proper performance of contracts entered into between Aracelis and its Users.

4. Sharing of Personal Data with Third Parties

The User accepts and agrees that Aracelis may share their personal data with the following categories of recipients:

  • Companies that provide access to or are responsible for the registration upon which the User depends;

  • Partner companies, such as outsourced service providers and other companies that assist in providing our services or act on our behalf to protect our rights, users, systems, and services;

  • Third parties to whom Aracelis is legally required or authorized to disclose information (e.g., government agencies, regulatory authorities, courts, and other public authorities);

  • Third parties involved in the sale, merger, acquisition, restructuring, joint venture, assignment, or transfer of part or all of Aracelis’ business, in which case User data may be considered an asset and transferred as part of such transaction;

  • Third parties who require the data to protect Aracelis’ rights;

  • Any natural or legal person to whom the User requests data portability.

5. International Transfer of Personal Data

Aracelis does not intend to transfer Users’ personal data outside Brazil. If any situation not covered herein arises, Users will be previously informed by email and may accept or refuse the transfer. In case of refusal, access to Aracelis’ services may be restricted.

International data transfers described under the LGPD depend on guidelines to be established by the National Data Protection Authority (ANPD). Once defined, Aracelis commits to fully complying with them.

6. Protection of Personal Data

Aracelis uses appropriate technologies and procedures to protect collected personal data (including administrative, technical, and physical safeguards) according to the level of risk and the service provided. It maintains a legally responsible team to ensure secure data management in accordance with legal provisions, regulatory requirements, technological changes, and other relevant factors.

Aracelis makes all reasonable market efforts to ensure the security of its systems and collected data, using highly qualified and reputable internet providers and database and storage servers, SSL security certificates, and protection software against unauthorized system access, as well as standard methods to encrypt and anonymize collected data.

This Policy represents Aracelis’ effort to safeguard User information. However, due to the nature of the Internet, it is not possible to guarantee that malicious third parties will not succeed in improperly accessing stored information. If this occurs, Aracelis will be liable within the limits provided by law.

Aracelis shall notify the ANPD and the affected User of any security incident that may pose a relevant risk or damage, within a reasonable timeframe defined by the ANPD, at least informing:

  • The nature of the affected personal data;

  • Information about the data subjects involved;

  • The technical and security measures used to protect the data, respecting commercial and industrial secrets;

  • The risks related to the incident;

  • The reasons for any delay in notification; and

  • The measures adopted or to be adopted to reverse or mitigate the damage.

7. Data Processing and Aracelis’ Responsibility

Aracelis’ responsibility for data processing will be as follows:

  • When processing personal data directly provided by its Clients, Aracelis will act as Processor, operating without interference in the processing method determined by the Controller, but in accordance with the LGPD;

  • Aracelis will act as Controller of its collaborators’ Personal Data, processing such data based on Contract Performance, Compliance with Legal or Regulatory Obligations, and, in specific and determined situations, Consent.

Aracelis may adopt different legal bases for different types of personal data processing.

8. Data Retention Period

Aracelis determines the retention period of personal data according to the following criteria:

  • The period necessary to fulfill the purpose of collection;

  • When the Client/User ceases to use Aracelis’ services;

  • When consent is revoked or deletion is requested by the Data Subject;

  • The time necessary to demonstrate compliance with Aracelis’ duties and obligations;

  • The period required by law, regulations, court decisions, etc.;

  • Determination by the National Data Protection Authority;

  • Compliance with legal or regulatory obligations by the Controller;

  • Proper performance of the contract;

  • Legal compliance needs and potential judicial disputes;

  • Transfer to a third party, provided legal data processing requirements are respected; or

  • Exclusive use by the Controller, with third-party access prohibited, provided the data is anonymized.

9. User Rights

Under the Brazilian General Data Protection Law, the User has the following rights:

  • Right of Confirmation

  • Right of Access

  • Right to Rectification

  • Right to Anonymization, Blocking, or Deletion

  • Right to Erasure

  • Right to Information

  • Right to Opt-Out of Marketing

  • Right to Data Portability

  • Right to Withdraw Consent

Requests may be made via: This email address is being protected from spambots. You need JavaScript enabled to view it.

Aracelis commits to responding within a maximum of 15 (fifteen) days, unless complexity requires a longer period, in which case the User will be informed.

10. Cookies

Aracelis uses Necessary and Performance Cookies, as well as other tracking technologies such as:

  • Web servers and platform logs

  • IP address and browser type

  • Device identifiers (UDID, MAC address, IFA)

  • Operating system data

  • Location data

  • Typed information

  • Clicked links and buttons

  • Social media login integrations

Users may disable cookies through browser settings.

11. Contact Information

Questions, comments, suggestions, complaints, or requests regarding personal data may be sent to:

This email address is being protected from spambots. You need JavaScript enabled to view it.

12. Changes

This Privacy Policy may be updated at any time to improve service and protection. In case of changes affecting purpose or duration of processing, Users will be notified 30 days in advance via registered email or platform notice.

13. Governing Law and Jurisdiction

This Policy shall be governed, interpreted, and enforced in accordance with the laws of the Federative Republic of Brazil. The Court of São Paulo, Brazil, shall have exclusive jurisdiction to resolve any disputes arising from this instrument, waiving any other jurisdiction, however privileged it may be.

All rights reserved.