Privacy Policy

 

This Privacy Policy expresses Daemon’s commitment to the protection of its customers’ personal data. In it, we present the guidelines and procedures observed by the company so that the processing of this data is carried out in full compliance with Law 13.709/18, the General Law for the Protection of Personal Data, or LGPD.

The technical terms used in this document, such as personal data, treatment, holder, controller, and several others are defined in art. 5 of the LGPD, which can be consulted here.

 

 

Daemon collects and uses the following types of personal data:

1. Personal data voluntarily provided by their holders to Daemon, its partners and/or agents when registering on the company’s website, collection by independent agents, or other communication channels.

Examples of this data are:

The. Identification and contact information: first and last name, document numbers such as CPF and RG, physical address, electronic and e-mail addresses, and others, provided when registering the holder at Daemon;

B. Access credentials to services provided in a virtual environment by Daemon, including username (login), password in unrecoverable format (encrypted), and answers to security questions.

 

2. Personal data automatically collected on your websites, apps or services, which includes:

The. Information relating to electronic devices, such as cell phones, tablets and computers, used to access said websites, applications and services, such as unique identifiers, IP addresses, geographic location, and others;

B. Navigation information, obtained by cookies and other storage technologies present on Daemon’s website and which guarantee the proper functioning of the services available online and provide a personalized experience to its users.

ç. Information relating to the ways in which users interact with its services, applications and websites, such as, for example, links used, pages or content accessed, duration of access, response times to content, downloads made and other data.

 

3. Personal data provided by third parties, such as partner companies, public agents and others – including in public sources, on the internet, social media, media in general, public bodies, regulators, and public records.

 

Daemon uses the collected data to:

1. provide high quality services, offering them efficiently and, whenever possible, in a personalized manner; develop products that meet the interests of its customers; improve its working methods, services and products; and to disclose them to its customers and potential interested parties;

2. comply with legal and regulatory requirements, as well as to respond to any requests from public authorities;

3. communicate with holders of personal data, informing them about its products and services, and to respond to requests and answer questions that they may send;

 

 

Legal bases of treatment

Daemon only collects, stores or uses personal data if it obtains the prior, express and unequivocal consent of its owner (or person in charge), or verifies the occurrence of one of the hypotheses of waiver of consent provided for in Art. 7 of the LGPD, which includes:

 

1. compliance with a legal or regulatory obligation;

2. execution of a contract or preliminary procedures related to a contract to which the holder is a party;

3. regular exercise of rights in judicial, administrative or arbitration proceedings;

4. protection of the life or physical safety of the holder or a third party;

5. guardianship of health, exclusively, in procedures carried out by health professionals, health services or health authorities;

6. meeting the legitimate interest of the controller or a third party; and

7. credit protection

Data security

Daemon adopts administrative, technical and technological measures that aim to significantly reduce the risks of damage and loss, as well as unauthorized access and use of the personal data in its possession.

In accordance with the principles of the LGPD and with good information security and personal data protection practices, Daemon guarantees that personal data is treated in a complete and secure manner, in accordance with standards of information security, confidentiality and integrity for as long as necessary to accomplish the purposes for which it was collected or comply with applicable legal requirements.

As mentioned in the following item, the holder of personal data may request the deletion of this data before the end of this period. However, for legal reasons, by court order or for auditing and security purposes, such data may be kept for a longer period, after which they will be deleted using secure disposal methods.

In the event of a security incident involving personal data, the occurrence will be communicated to the ANPD and the holder when it involves risk or relevant damage.

 

Holders’ rights and how to exercise them

Holders of personal data have the right to obtain, in relation to their own data, and under the terms and conditions specified by law, the information and measures listed in art. 18 of the General Law for the Protection of Personal Data – LGPD, namely:

1. confirmation of the processing of your personal data, and access to information regarding the treatments carried out with said data;
2. access to personal data held by Daemon;
3. correction of data stored by Daemon;
4. anonymization, blocking or deletion of data that is unnecessary, excessive or treated in violation of the provisions of the General Law for the Protection of Personal Data;
5. portability of personal data to another provider of services and products;
6. deletion of personal data processed based on the consent of the holder
7. information about the public and private entities with which the controller carried out shared use of data;
8. information on the possibility of not providing consent to the processing of your data and on the consequences of the refusal; and
9. revocation of consent, pursuant to § 5 of art. 8 of the General Law for the Protection of Personal Data.

 

The above information and measures may be obtained at any time upon express request by the holder or his legal representative to Daemon’s Data Protection Officer, through the email address dpo@daemoninvestimentos.com.br.

 

Cookies policy

When accessing Daemon’s website, a visitor’s or user’s browser may collect cookies. Cookies are small text files that store data about the user or visitor to a given website. They are used to ensure the proper functioning of websites and online services, as well as to provide information about the IP address, browser type, operating system, pages visited, length of visit, among others.

Daemon uses cookies to improve the use and functionality of its website.

These cookies can be of three types:

1. Session cookies: are deleted when the user closes their browser.
2. Persistent cookies: remain in the browser until manually deleted or until the end of a period established by the cookie itself.
3. Necessary cookies: are those that are indispensable for the operation of a website or internet service. They allow the user to browse the site and use all the resources necessary to carry out the operation.

Most browsers can be configured to warn the user before accepting cookies or to simply refuse them. If the use of cookies is disabled, however, the resources available on the portal may no longer be accessible.

 

Changes to the Privacy Policy

This Privacy Policy may be changed at any time by Daemon. An updated version will, however, always be available on the company’s website (https://daemoninvestments.com).

 

Contact Us

If you have any questions about this Privacy Policy, please contact our Data Protection Officer at dpo@daemoninvestimentos.com.br .