• en

    • Privacy Policy

    This Privacy Policy describes the practices regarding data collection through the website https://www.nutrifontingredients.com.br among other channels for which Lactalis do Brasil is the controller of the data collected.

    Introduction

    This Privacy Policy (“Policy”) aims to present the rules and principles governing the Processing of Personal Data carried out by the Lactalis Group, and to reinforce the company’s commitment to individuals’ privacy and the protection of information.

    The Policy applies to natural persons who interact with the Lactalis Group, whether as consumers, applicants, business partners, or contracted third parties.

    1. Glossary

    Anonymization: The use of reasonable and available technical means at the time of processing by which data loses the possibility of being directly or indirectly associated with an individual.

    National Data Protection Authority – ANPD: The Federal Government body responsible for overseeing and enforcing the General Personal Data Protection Law.

    Controller of Personal Data: The natural or legal person responsible for making decisions regarding the Processing of Personal Data. For the purposes of this Policy, the Lactalis Group is the Controller of Personal Data.

    Personal Data: Information related to a natural person that identifies or makes it possible to identify them. For example: name, RG/CPF, home address, phone number, email, photo, geolocation, IP address, etc.

    Device: Any devices used to access the internet, such as desktop computers, notebooks, tablets, smartphones, etc.

    Data Protection Officer: The person appointed by the Lactalis Group responsible for handling requests and communications from Data Subjects related to their privacy and for guiding Lactalis Group employees and contractors on Personal Data protection practices. Contact: privacidade@br.lactalis.com.

    IP Address: Short for “Internet Protocol.” The set of numbers and letters that identifies the Device used to access web pages.

    Lactalis Group: Means Lactalis and all its brands.

    Applicable legislation: The set of laws and regulations on privacy and personal data protection applicable to services provided by the Lactalis Group, especially Federal Law No. 13.709/18 (“General Personal Data Protection Law” or “LGPD”).

    Group Websites: The set of websites owned by the Lactalis Group, including www.lactalis.com.br, www.itambe.com.br, www.parmalat.com.br, www.queijospresident.com.br, www.nutrifontingredients.com, www.elege.com.br, www.dobon.com.br, www.boanata.com.br, www.batavo.com.br, www.balkis.com.br, www.pocosdecaldasoriginal.com.br, www.aiogurterianestle.com.br, www.chamyto.com.br, www.chambinho.com.br and www.galbani.com.br and their respective subdomains.

    Data Subject: The natural person to whom the Personal Data processed by the Lactalis Group refers.

    Processing: Any operation carried out with Personal Data, such as collection, classification, access, use, sharing, transmission, classification, processing, storage, deletion, evaluation, modification, etc.

    2. When and how the Lactalis Group collects Personal Data

    The Lactalis Group may collect Personal Data in several ways, both online and offline.

    Such data may be collected:

    • when the Data Subject accesses or interacts with the Lactalis Group’s Websites or social media profiles.

    • when the Data Subject completes a form, gets in touch, and/or sends messages or documents to the Lactalis Group.

    • when the Data Subject applies for a job opportunity at the Lactalis Group.

    • when the Data Subject is party to or signs a contract with the Lactalis Group.

    • when the Lactalis Group conducts audits of its partner producers.

    3. Personal Data Processed

    The Personal Data processed depends on the nature and purpose of the relationship the Data Subject has with the Lactalis Group and may include:

    Contact and registration data

    Name, CPF, address, email, phone number, date of birth, full address with ZIP code, information about purchased products, photos submitted, professional information, information about the farm and its production, etc.

    Digital identification data

    The Lactalis Group may automatically collect information that the Data Subject’s web browser sends to our Websites, such as IP address, basic information about the device used, and cookies.

    Does the Lactalis Group collect sensitive Personal Data?

    The Lactalis Group does not, by default, collect sensitive Personal Data (information on race, ethnicity, religion, health, political opinion, or biometric data) in the regular provision of its services, except in exceptional situations, upon informing the Data Subject about the Processing and only for the purposes communicated at the time of collection.

    Sensitive Personal Data may occasionally be collected via candidates’ résumés. In such cases, the Lactalis Group ensures that Personal Data will never be used for discriminatory purposes and will be used solely for the recruitment process.

    Does the Lactalis Group collect children’s personal data?

    The Lactalis Group does not knowingly collect children’s personal data (as defined in Article 2 of the Child and Adolescent Statute). If you suspect or identify improper processing of children’s personal data, please contact: privacidade@br.lactalis.com.

    4. Why the Lactalis Group processes Personal Data

    The Lactalis Group processes Personal Data only for lawful purposes as described in this Policy. Below, the Lactalis Group explains why it processes Personal Data:

    To contact the Data Subject

    Receive compliments, requests, and complaints and take appropriate measures; respond to messages and contact the Data Subject; provide support the Data Subject may need; send news from the Lactalis Group, etc.

    For formalizing and maintaining the business relationship

    Sign and manage the contract in which the Data Subject is a party; conduct audits and inspections of partner producers, etc.

    Job application process at the Lactalis Group

    Evaluate the applicant’s résumé; make contact; conduct interviews, etc.

    For marketing and advertising

    Send promotional content about the Lactalis Group’s products and services.

    Cybersecurity

    Identify the Data Subject; manage and implement appropriate security measures on the Group Websites, including to prevent instability; investigate and prevent fraudulent practices and unauthorized access on the Group Websites; and comply with the legal obligation to maintain access logs (Article 15 of the Brazilian Internet Civil Framework – Marco Civil da Internet).

    5. Sharing Personal Data

    Personal Data may be shared in the following circumstances, always through secure processes and with maximum respect for confidentiality and the Data Subject’s privacy:

    • With internal areas of the Lactalis Group.

    • With service providers or partner companies, to facilitate, provide, or perform activities related to the purposes indicated in this Policy.

    • With public authorities whenever there is a legal requirement, request, or judicial/administrative order.

    • With potential companies in the event of corporate restructuring, merger, acquisition, or sale of the Lactalis Group.

    6. Rights of the Personal Data Subject

    The General Personal Data Protection Law – LGPD guarantees the following rights to Data Subjects:

    Confirmation of Processing. The Data Subject has the right to confirm whether the Lactalis Group processes any of their Personal Data.Access. The Data Subject may request a copy of the Personal Data that the Lactalis Group holds about them.

    Correction. The Data Subject may correct their outdated, incomplete, or inaccurate Personal Data.

    Anonymization, deletion, or blocking. The right to request that unnecessary or excessive Personal Data, or Personal Data processed in noncompliance with applicable legislation, be anonymized, deleted from the database (subject to legal retention requirements), or blocked, temporarily suspending Processing.

    Information about sharing. The Data Subject has the right to know which public and private entities the Lactalis Group shares their Personal Data with.

    Withdrawal. The Data Subject has the right to refuse or withdraw consent and obtain information about the consequences of this choice.

    Objection. The Data Subject may object to Processing activities that do not depend on consent if they believe the Lactalis Group processes their Personal Data in noncompliance with applicable legislation. In such cases, it is possible to request that the Processing be stopped.

    The Data Subject may also submit requests or complaints about the Processing of their Personal Data directly to the National Data Protection Authority.

    If you have requests or questions about the above rights, please contact: privacidade@br.lactalis.com.

    7. How is personal data protected?

    The Lactalis Group adopts physical, electronic, and managerial measures to ensure the security and proper Processing of Personal Data, helping to prevent loss, disclosure, alteration, destruction, misuse, or unauthorized access.

    Internal awareness training, use of appropriate technologies, implementation of best practices and internal governance policies, and careful evaluation and selection of service providers are examples of measures adopted by the Lactalis Group.

    Important: Despite all measures applied, third parties beyond the control of the Lactalis Group may intercept or illegally access transmissions or Personal Data, given that no process is 100% secure. In all cases, the Lactalis Group strives to the greatest extent possible to ensure the confidentiality and security of information.

    8. Storage and international transfer of Personal Data

    To achieve some of the purposes described in this Policy, it is necessary for certain personal data to be sent abroad, since the company is part of a multinational group and some suppliers are located outside Brazil.

    These transfers involve only companies that demonstrate compliance with applicable legislation.

    The Lactalis Group stores Personal Data only for the period necessary to fulfill the stated purposes, to comply with legal or regulatory obligations, or to preserve rights. Once the storage period ends, Personal Data are deleted using a secure disposal method.

    In addition, the Data Subject may request the deletion of their Personal Data at any time.

    However, due to legal obligations, the Lactalis Group may not immediately delete Personal Data. In such cases, the Data Subject will be informed of this impossibility with proper justification, and their Personal Data will be deleted at the end of the legal period.

    9. Cookies

    The Group Websites use cookies and similar technologies during your browsing.

    Cookies enhance your experience, both in terms of performance and usability, as the content provided will be tailored to your needs and expectations.

    They may also be used to produce anonymous, aggregated statistics that help us understand how users interact with the Group Websites and to improve their structure and content. The use of cookies is very common on any digital platform today. Their use does not harm the Devices where they are stored.

    Types of Cookies used

    Strictly Necessary Cookies: Allow navigation and use of applications, as well as access to secure areas of the Group Websites. Without these cookies, the site does not function properly.

    Analytical Cookies: Collect anonymous statistical data to analyze the use and performance of the Group Websites.

    Functionality Cookies: Used to ensure the availability of additional features on the Group Websites or to save user preferences when browsing the internet, whenever the same device is used.

    Advertising Cookies: Tailor advertising based on your interests, helping measure the success of applications and the effectiveness of partners’ advertising.

    Managing or deleting cookiesMost internet browsers are set to automatically accept cookies, but you can change your settings to block their use. Browsers with private browsing allow only strictly necessary and functionality cookies.

    Please note that disabling cookies may impact your experience while browsing the Group Websites.

    For more information:

    10. General Information

    Changes and updates

    The Lactalis Group may change the content of this Policy at any time, as needed or for specific purposes. If relevant updates occur in this document, the Lactalis Group undertakes to provide notice on the Group Websites.If any provision of this Policy is deemed unenforceable by the ANPD or any judicial authority, the remaining provisions will remain in full force.

    This Policy will be interpreted under Brazilian law, in Portuguese, with the courts of the Judicial District of São Paulo, State of São Paulo, chosen to resolve any disputes involving this document, except where specific legal provisions dictate personal, territorial, or functional jurisdiction.

    Questions? Suggestions? Complaints?

    If you have any questions about this Policy, including exercising your rights, the Data Subject may contact our Data Protection Officer, Laura Mota, at privacidade@br.lactalis.com