Privacy Statement

Updated on July 27, 2024.

1. Privacy Statement

COSTDRIVERS® is a product of the company DATAMARK LTDA., which provides users with a data strategy platform (COSTDRIVERS® platform). We know how important it is to know and be sure about the use of the personal data you have in your possession. Therefore, we are concerned with clarifying and explaining our Privacy Notice.

We recognize the need to protect and properly manage the personal information collected on our website, as well as that shared with us by our customers. This Privacy Notice will help you understand what types of information we may collect, how this information may be used, with whom the information may be shared, and the rights the data subjects have with regard to the protection of their personal data.

2. What personal information we collect

The personal information we obtain may be collected as follows:

• Website: Personal information is collected when the user interacts on our website through the contact form. This personal information includes: First name, last name, email, phone number, and company name. It is only necessary to collect basic data when the user wants a response to their inquiry. All personal information is collected in a fair and non-intrusive manner with your voluntary consent. Personal information is not accessible to anyone outside of the specific function for which it was collected.
• Newsletter: The user may choose to receive our newsletter, containing news, articles, and promotions, by filling out the email field in the appropriate form on our website and by marking the acceptance for it. You may, at any time, stop receiving communications from us by clicking on the unsubscribe link contained in the footer of the emails we send.
• Support Channels: The user can contact us in person, by telephone, or by email. Personal data is collected to identify the user, as well as to fulfill their request. This may include, among others, first name, last name, email, and phone number. In addition, we collect any personal data that is spontaneously provided by the user.
• Cookies: Personal data may be collected through cookies. For more information, please see our Cookie Policy.
• Registration: We collect the personal data necessary to register on our website, identify the user, and allow them to use our services through our platform (“GEP COSTDRIVERS platform®”). Users who only intend to visit the COSTDRIVERS® platform will have immediate access to the free circulation areas on the website without the need to register. Users who wish to access the features and reserved areas must fill out the Registration Form. The data collected for registration are name, corporate email, cell phone, and private password. The general conditions of use of the COSTDRIVERS® platform are available for consultation here.
• Geolocation: Geolocation data may be collected if the user authorizes the collection from their device.

3. Social Media

GEP COSTDRIVERS® also uses social media to communicate and interact with its customers and consumers through third-party websites such as Facebook, Twitter, LinkedIn, or YouTube. These third-party websites are Internet-based technologies that are not operated or controlled by GEP COSTDRIVERS®. By interacting with, sharing, or “Liking” the GEP COSTDRIVERS® page on Facebook, Twitter, LinkedIn, YouTube, or other social media, you may disclose certain personal information to GEP COSTDRIVERS® or to third parties.

We use “social buttons” to allow our users to share or bookmark web pages. These are buttons on third-party social media websites that may record information about your activities on the Internet, including this website. Please review the respective terms of use and privacy policies of these platforms to understand exactly how they use your information and to choose not to receive or delete such information. The amount of personal information visible will depend on your own privacy settings on Facebook, Instagram, LinkedIn, YouTube, and other social media.

4. Purposes and Legal Bases

We list below the purposes and legal bases of data processing by GEP COSTDRIVERS®:

We only rely on our legitimate interest for specific purposes. This processing of personal data does not in any way override the interests, rights, and freedoms of the data subjects.

5. Sharing of Personal Information

We do not have a practice of disclosing information that may identify the user and never share information or sell or rent this personal data to third parties. This data is for the exclusive internal use of the company to achieve the purposes expressed in the previous item.

Data may be shared with third parties only under the following conditions:

• Upon court decision or request by government inspection agencies;
• Data transferred to public agencies to comply with the laws in force;
• Data shared with partners, operators, and service providers who participate, directly or indirectly, in the development of business activities, such as: customer service collections, market intelligence services, payment processes, email sending, advertising and marketing, security and performance monitoring, processing and fulfillment of orders and transactions, verification of registration information, research, data storage and processing, and internal and external auditing;
• Data transferred for the purpose of performing the contract as well as for the protection of interests in any type of conflict, including lawsuits;
• In the event of corporate transactions such as a merger, acquisition, transformation, spin-off, or a partial or total sale of assets, we may share, disclose, or transfer all data of the data subjects to the successor organization.

Some of the service providers mentioned above may be located abroad and, in this case, additional safeguards are adopted to ensure an adequate level of protection of personal data, in accordance with the provisions of the relevant Brazilian legislation.

6. Information Security

To ensure that your personal information is secure, we communicate our privacy and security guidelines to employees and business partners and strictly follow precautionary measures with respect to privacy within the company. We strive to protect your personal information and that entrusted to us by our customers through physical, technical, and organizational measures aimed at reducing the risks of loss, misuse, unauthorized access, disclosure, and improper alteration of this data.

7. Data Subject Rights

Personal Data Subjects have certain rights with regard to their personal data and can exercise them by clicking here to access the Data Request Form (DSAR) or by email: dpo@costdrivers.com.

The rights of data subjects are:

• Confirmation of the existence of personal data processing;
• Access to personal data in accordance with the applicable law;
• Correction of incomplete, inaccurate, or outdated personal data;
• Portability of personal data;
• Deletion of personal data when it is processed based on the consent of the data subject or when the data is unnecessary, excessive, or processed in violation of the applicable legislation;
• Request for information about the shared use of personal data;
• Revocation of consent, where applicable.

We will always evaluate the best way to comply with the request to exercise any of your rights. However, we may fail to comply with your request, in whole or in part, in specific situations protected by law, such as, for example, compliance with a legal obligation or a contract we have with you.

We highlight how important it is to keep your personal data accurate and up-to-date. We do not modify or alter the personal information of your registered users, except when duly authorized by the users or for technical reasons of platform operation. For security reasons, for requests made through the email dpo@costdrivers.com, the request will be answered when we are sure of the user’s identity. Therefore, we may request additional data or information to confirm the identity and authenticity of the holder. This data and information will be protected during the storage period and deleted after the legal period for any regular exercise of rights has elapsed.

8. End of Processing of Personal Data

This Privacy Notice applies to the above-mentioned circumstances during the entire period in which the COSTDRIVERS® platform stores the personal data. We store and maintain your information: (a) for as long as required by law; (b) until the end of the personal data processing, as mentioned below; or (c) for as long as necessary to enforce COSTDRIVERS® rights. Therefore, we will process your data, for example, during the applicable statutes of limitations or as long as necessary to comply with a legal or regulatory obligation.

The termination of the personal data processing will occur in the following cases:

• (a) when the purpose for which the personal data was collected is achieved, and/or the personal data collected is no longer necessary or pertinent to the achievement of such purpose;
• (b) when the Data Subject requests the deletion of his/her data;
• (c) when there is a legal determination in this regard;
• (d) when the termination of the processing is determined by the Controller.

In the event of termination of the personal data processing, except in the cases provided for by the applicable law or by this Privacy Policy, the personal data will be deleted.

9. Data Protection Officer (DPO)

GEP COSTDRIVERS® provides below the contact details of the Personal Data Officer (DPO), who is responsible for attending to any and all requests from the data subjects or the National Authority, which are related to personal data.

For any questions, requests, or complaints regarding the processing of personal data, please contact our Personal Data Officer:

DPO EXPERT – www.dpoexpert.com.br
Responsible: Rafael Susskind
Contact: dpo@costdrivers.com

If, despite our commitment and efforts to protect your data, you feel that your data protection rights have not been met, we ask you to contact our DPO. In addition, you will be entitled, at any time, to file a complaint directly with the National Data Protection Authority if you believe that your rights over your personal data have been infringed.

10. Changes to the Privacy Notice

While our Privacy Notice has been presented in a clear, concise, and objective manner, do not hesitate to consult the DPO of GEP COSTDRIVERS® if you have any questions about this important document or even about the personal data processing activities we carry out.

GEP COSTDRIVERS® reserves the right to update or modify this Notice at any time and without prior notice. However, we will always post the new revised version on our website or app. If there are changes in the way we process personal data, we will inform you to check if you intend to continue using our services.