WEBSITE PRIVACY NOTICE

This Privacy Notice aims to inform you about how we are committed to protecting your personal data. In this document, we outline all relevant information regarding our data processing guidelines, provide the legal basis for our activities, and indicate your rights as a data subject.

The terms “Arend,” “we,” “us,” or “our” refer to our company, which acts as the controller of your personal data. Whenever you read “user,” “you,” “your,” or “yours,” we are referring to you as our client or a user of our platform.

This Notice is structured into the following sections:

• What personal data do we process?
• How and when do we collect and process your personal data?
• With whom do we share your personal data?
• How do we protect your personal data?
• How long do we store your personal data?
• What are our legal justifications for processing your personal data?
• What are your rights as a data subject?
• Final considerations

What personal data do we process?

By using certain features of our website, we may process your personal data. When you fill out our contact form, providing your name, email address, and phone number, or when you contact us via phone or email, we process your data to identify you and respond to your inquiry.

We may also process your personal data using cookies, as detailed in our Cookie Notice.

How and when do we collect and process your personal data?

The processing of your personal data is carried out for legitimate and specific purposes, in accordance with the objectives outlined in this Notice. We ensure that only the minimum necessary information is processed, while guaranteeing data subjects’ free access to their information and adopting measures to prevent harm and discrimination, in line with the General Data Protection Law (LGPD).

We collect personal data when you interact with us and voluntarily provide information for a specific purpose. All personal data we process, as mentioned in this Notice, is provided directly by you.

When you complete and submit our contact form, the data entered is automatically stored until we respond to your inquiry. After our response, your information is permanently deleted from our email inbox, unless there is a legal basis that allows us to retain your data, in accordance with applicable laws.

With whom do we share your personal data?

We may share your personal data with investigators, authorities, and law enforcement agencies when such information is necessary to comply with legal or regulatory obligations.

Additionally, we may share your personal data with service providers who require access to your information to perform contracted activities.

We do not share your personal data with companies or organisations in other countries. The processing of your data is conducted solely under the LGPD and other applicable Brazilian laws.

How do we protect your personal data?

The security of your personal data is of utmost importance to us. We employ appropriate technologies and methods to safeguard your information from loss, leakage, unauthorized access, and unlawful sharing, among other potential breaches.

In addition to technical measures to mitigate risks, we implement procedures that comply with ethical standards and legal requirements.

However, while we take all necessary precautions to protect the data we process, it is important to acknowledge that the internet is not an entirely secure environment. Therefore, we cannot guarantee absolute protection of your personal data. By using our services, you acknowledge and accept the inherent risks associated with internet usage, even when mitigated to the greatest extent possible.

In the event of a data breach, we will prioritize resolving the issue and notify both the affected users and the National Data Protection Authority (ANPD) regarding the incident and the remedial measures adopted.

How long do we store your personal data?

We store your personal data only for as long as necessary to fulfill the purposes for which it was collected. After this period, if there is no legal justification for retaining your data, we will securely delete it in accordance with applicable legal timeframes.

What are our legal justifications for processing your personal data?

The processing of your personal data is subject to the purposes established in this Notice and must comply with the legal bases defined by the General Data Protection Law (LGPD), as outlined below:

• Compliance with legal or regulatory obligations: We may process your personal data to assist with investigations and comply with orders from public authorities.
• Contract performance: Your personal data may be processed before or during the execution of a contract with Arend, facilitating and improving our service delivery.
• Exercise of legal rights: We may use your personal data in judicial, administrative, or arbitral proceedings, when necessary.
• Legitimate interest: We may also process personal data based on our legitimate interests, such as business development and internal operations, provided that our interests remain reasonable and proportional to your rights as a data subject.

What are your rights as a data subject?

Under certain circumstances, and subject to legal exceptions, you may exercise the following rights:

• Request access, updates, or corrections to your personal data.
• Request the deletion of your personal data when it is no longer necessary for processing purposes.
• Object to the processing of your personal data, requesting that it no longer be processed.
• Request processing restrictions, allowing your data to be used only in specific circumstances.
• Request data portability, enabling the transfer of your personal data to other service or product providers, when applicable.

Final considerations

This Privacy Notice may be updated due to new features, internal process improvements, or regulatory changes. Any modifications will be published on this page, and in the event of significant updates, a notice will be displayed on our homepage.

If you have any concerns, questions, or wish to exercise your data protection rights, please contact our Data Protection Officer at julia@arend.adv.br.

We recommend reviewing the most updated version of this Privacy Notice whenever you visit our website.

We are always available to assist you and keep you informed about how we handle your personal data.