Privacy Policy

Vulcabras S.A. is one of the largest footwear companies in Brazil, owning leading brands and some of the most remembered by consumers. For decades, the Company has helped shape not only the history of these brands, but also the tradition of the industry itself. When people talk about Brazil’s footwear industry, they talk about Vulcabras.

Vulcabras appreciates your interest in our products and services and your visit to this website. Your privacy is of great importance and that is why our aim is to ensure that you feel comfortable not only during your visit to our website but also when using any of the tools we make available to you.

Thus, this Privacy Policy is intended to regulate access to the content of the website http://www.vulcabras.com/, through digital service, developed and offered by Vulcabras, and was prepared to reaffirm our commitment to privacy and security related to interactive services and information collected and stored in accordance with the provisions set out in the Brazilian General Data Protection Law (LGPD).

Published in August 2018, the Brazilian General Data Protection Law (LGPD) was created to guarantee the personal data protection to the citizens of Brazil and its application is to protect the data that companies have on individuals like you (data subject). In general, the law is related to the collection, classification, use, access, sharing, storage, elimination, and other forms of processing personal data from individuals.

1. DEFINITIONS:

Data processing: any operation performed with personal data, such as those relating to the collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation or control of the information, change, communication, transfer, broadcast or extraction;

Registration: the way in which the User provides their data to enable access to the services offered by Vulcabras.

Personal data: any information related to an identified or identifiable individual. Identity Card (RG), Individual Taxpayers’ Registry (CPF), address, date of birth are some examples of personal data, but information such as consumption habits, geographic location, behavioral profile, preferences, purchase histories and other similar information, when related to an identified or identifiable individual, are considered “personal data”. Likewise, information about Internet browsing, such as IP address and cookies, among others, are generally considered personal data whenever it is possible to identify the person related to these identifiers;

Sensitive personal data: personal data that have a potential for harm, exposure and discrimination against the person to whom it refers, being specifically protected by the data protection law;

Anonymized data: data related to the data subject who cannot be identified, considering the use of reasonable technical means available at the time of processing;

Legal basis: legal basis that makes the processing of personal data legitimate for a given purpose;

Consent: unequivocal authorization given by the data subject for us to process their personal data for a previously described purpose, in which the legal basis necessary for the act requires the express authorization of the data subject. For the case of processing sensitive data, the consent must also be specific and informed;

Data controller: the person who performs steps in the data processing process, who has the power to decide on the personal information they are in possession of;

Data processor: the one who executes the orders of the data controller;

Data subject: the person to whom personal data refers, identifying it or making it identifiable.

DATA PROTECTION OFFICER – Under the LGPD, a “person designated by the controller and the processor to act as a communication channel between the controller, the data subjects, and the Brazilian Data Protection Authority (ANPD)”.

Data Protection Officer (DPO):

Name: Seusdados Consultoria em Gestão de Dados LTDA.

CNPJ: 33.899.116/0001-63

Telephone: +55 11 4040-5552

Email: dpo@seusdados.com

Natural person in charge: Marcelo Augusto Fattori

Now that you are familiar with some technical terms, let’s pursue the objective of this text, recording that we are enthusiastic about transparency in dealing with users of our website and therefore, in addition to giving effect to our legal obligation, we started to record here how we deal with the privacy and protection of personal data of any citizen, as well as the rules for using the website http://www.vulcabras.com.

1. PRIVACY POLICY’S SCOPE OF APPLICATION:

This Privacy Policy applies to all users of the website http://www.vulcabras.com and is available for reading at any time on the website’s electronic platform. You must carefully and completely read the contents of this Policy and, if you agree with the provisions, must express your free, full, informed and unambiguous consent with respect to its contents. This acceptance will be done by clicking on the button “I have read and accept the Privacy Policy”, on the User’s first access to the website http://www.vulcabras.com.

If you not agree with this Privacy Policy, please do not continue using the website http://www.vulcabras.com, and please get in touch with us explaining the reason for the disagreement so that we can improve our processes and offer you an optimized experience in the future. Write to us via email: privacidade@vulcabras.com

The consent may be revoked at any time, upon request to Vulcabras, opportunity in which case your data and information collected will be deleted, except if its storage must be done to comply with a legal obligation.

If necessary, you can request the revision and correction of your data free of charge and at any time. To do this, just get in touch via email privacidade@vulcabras.com.

It is important to note that this Privacy Notice for the use of this website will not apply to your activities on third-party websites, social networks and/or other providers that you may access or be redirected from by accessing links on our website. In order to ensure your security, we recommend that you check the data protection regulations and guidelines of the respective providers/websites accessed.

2. DATA COLLECTION:

2.1 Data will be collected under the following scenarios:

(i) when submitted by the user at the time of registration, browsing, interaction, acquisition and use of the website http://www.vulcabras.com;
(ii) automated through cookies and similar technologies.

2.2 Data collected may include, but is not limited to:

(i)  Name;
(ii)  CPF;
(iii)  Home and/or business address;
(iv)Identity Card;
(v)  Telephone number;
(vi)  Email;
(vii)  Date of birth;
(viii)  IP address;
(ix)  Payment information;
(x) Gender;

2.3 The user is solely responsible for the veracity and updating of the data provided, and Vulcabras is not responsible for the veracity of the data provided, as well as for any damages resulting from the inaccuracy and/or outdated information.

2.3.1 If Vulcabras decides to check the veracity of the recorded registration data, and finds the existence of incorrect, untrue and/or outdated data, or even if you do not provide or refuse to inform the required data, Vulcabras may temporarily or permanently suspend, at its discretion, access to the website http://www.vulcabras.com, without prejudice to other measures deemed necessary and opportune.

2.4 The User must keep their login and password secure. In case of suspicion of access data theft, the user must notify Vulcabras in addition to immediately changing the password for accessing the website.

3. DATA USE:

3.1 The purpose of data processing consists of, but is not limited to:

(i) Provision of services;
(ii) Identification and authentication of access;
(iii) Sending news and updates;
(iv) Service and experience improvements;
(v) Fraud prevention;
(vi) Investigation by competent authorities;
(vii) Fulfillment of the obligation to provide data by court order or competent authority;
(viii) Data mapping and reporting for market research purposes;
(ix) Sending e-mails related to the use of the website, as well as the availability of new services;
(x) Submitted evaluations and responses;
(xi) For sharing with other Vulcabras affiliated or associated companies;
(xii) Manage, provide services, credit points, grant discounts, bonuses and other advantages of any relationship programs.

4. DATA SHARING:

4.1 You expressly authorize Vulcabras to share some of your information with partner companies and/or companies from the same economic group in order to continue enjoying the best services and experience.

4.1.1 We may share data with third parties in order to be able to provide the contracted services, such as Identification and access authentication; feasibility of offers and services or companies from the same economic group; Data mapping and reporting for market research purposes; among others. Certain information may also be shared for the purpose of complying with legal obligations.

4.2 You agree that we may use your data including personal data for internal operations, such as managing your account, customer service, communication between us and the user, understanding users’ needs, improving the content and services of the website, identifying possible fraud and taking steps to enforce our Privacy Policy.

4.3 Vulcabras will require that partner companies and/or service providers observe the same standards of privacy and information security followed by it.

4.4 Data sharing may eventually be done with entities located outside Brazil.

4.5 Access to the information collected hereunder may only be accessed by professionals duly authorized by Vulcabras, respecting the principles established by law, with a guarantee of confidentiality and preservation of privacy, and exclusively for the performance of their functions.

5. DATA STORAGE:

5.1 All data provided or collected are considered confidential, requiring this company to adopt all technical and administrative measures capable of protecting personal data, also aiming to preserve the security of its systems in the custody of such data, including compliance with the security standards guidelines set out in data protection rules and guidelines. However, Vulcabras is not responsible for possible damages caused by external events such as failures, viruses and invasions of the database, applications and services provided, except in cases of willful misconduct or fault.

5.2 The collected data may be stored on its own server or on a third party. These can be allocated in Brazil or abroad, including by cloud computing technology. Vulcabras will ensure that third parties that store the collected data have security and control standards in accordance with applicable legislation.

6. DATA ACCESS AND DELETION:

6.1 The user may request, through the available service channels and email privacidade@vulcabras.com:

(i) access to data;
(ii) display and rectification of incorrect, inaccurate or outdated data;
(iii) deletion/exclusion of your Personal Data;
(iv) revoke consent to data processing;
(v) request data portability;
(vi) anonymization, blocking or deletion of unnecessary, excessive data or data processed in violation of the provisions of the LGPD;

6.2 Revocation of consent will not affect the processing of Personal Data carried out before the revocation. Revocation may prevent Users from fully accessing the services provided by Vulcabras.

6.3 Vulcabras may store the user’s data record history for auditing and rights preservation purposes.

6.4 Vulcabras may keep anonymized data for statistical and study purposes even after the user’s request for exclusion and the legal term of custody has expired.

7. DATA RETENTION:

7.1 Personal data will only be stored for as long as is reasonably necessary to fulfill the purposes for which they were collected, including to meet any legal, regulatory, tax and accounting requirements, among others.

7.2 We may retain personal data for a longer period in the event of a claim or if we reasonably believe that there is a prospect of litigation or the need to support evidence for possible criminal investigations, administrative and judicial proceedings.

7.3 To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of damage from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether you can achieve these goals by other means. We also take advantage of the statute of limitations established in the various civil and criminal laws and regulatory rules of government authorities, as an element to be considered for possible retention.

7.4 We guarantee that all data retained and stored after the end of the processing for the stated purpose will not be used for other purposes, with the minimum necessary and expected security of the information being guaranteed, as well as guaranteeing your right to access the information, in the form dealt with in the personal data protection legislation.

8. CHANGES TO THIS PRIVACY POLICY:

8.1 By clicking on the “I have read and accepted” button, the user is demonstrating free, full and informed consent to the provisions of this privacy policy.

8.2 If any provision of this Privacy Policy is found to be illegal, void or unenforceable for any reason, the remaining provisions will not be affected, remaining valid and enforceable to the maximum extent possible.

8.3 This Privacy Policy constitutes the entire agreement on the conditions of use of the website http://www.vulcabras.com. The User declares to be aware of the rights and obligations arising from this Privacy Policy, having read, understood and accepted all terms and conditions contained therein.

8.4 Quality and excellence of our services is a permanent objective of Vulcabras. Based on this, the content of this Privacy Policy may be updated and modified at any time for adequacy and compliance with the law. If substantial and material changes that require your consent are needed, we will post this update and contact you.