Privacy Notice Privacy Notice
Updated on October 8, 2026
1. Privacy Statement
APTA knows how important it is to understand and feel secure about how the personal data in its possession is used. That is why we take care to clarify and explain our Privacy Notice.
We recognize the need to protect and properly manage the personal information collected on our website, as well as the information shared with us by our customers. This Privacy Notice will help you understand what types of information we may collect, how this information may be used, with whom it may be shared, and what rights data subjects have regarding the protection of their personal data.
2. What personal information we collect
The personal information we obtain may be collected in the following ways:
Website: Personal information is collected when users interact with our website through the contact form. This personal information includes name, CNPJ (Brazilian company tax ID), e-mail, phone number, state and city. Only basic data is required when users wish to be contacted back. All personal information is collected in a fair and non-invasive manner, with your voluntary consent. The personal information collected is accessible only to those who need to know it to carry out the relevant activities, in accordance with the purpose for which it was provided.
Newsletter: Users may choose to receive our newsletter, containing news, articles and promotions, by filling in their e-mail in the specific form on our website. Users may, at any time, stop receiving our communications by clicking the unsubscribe link at the bottom of the e-mails sent.
Customer service channels: Users may contact us through the contact form, e-mail and messaging applications. Personal data is collected in order to identify the user and to handle their request. It may include, among others, name, e-mail, phone number, state and city. In addition, we collect any personal data spontaneously provided by the user.
Cookies: Personal data may be collected through cookies. For more information, see our Cookies Policy.
Contract: When customers purchase a product through our website or contact us through one of the channels provided, we collect the data needed to draw up the contract and/or issue an invoice. This data includes, among others, the e-mail for contact and for sending the Electronic Invoice, name, CPF, CNPJ, Company Name, Full Name of the Person in Charge, Phone Number, full Business Address with ZIP Code, District, City and State, and the State Registration, when applicable.
Credit analysis: To assess your financial capacity to honor the commitments made with us regarding our products and services, we process certain personal data, such as full name and any personal data contained in accounting, financial and commercial documents, such as contact details and signature, provided for credit analysis purposes.
Sharing: We may have access to personal data shared by our business partners. This data is needed to draw up contracts and/or issue invoices. It includes, among others, the e-mail for contact and for sending the Electronic Invoice, name, CPF, CNPJ, Company Name, Full Name of the Person in Charge, Phone Number, full Business Address with ZIP Code, District, City and State, and the State Registration, when applicable.
Events: Personal information, such as name, phone number and contact e-mail, may also be collected physically or digitally by our employees at trade shows, exhibitions and events promoted by APTA.
Geolocation: Geolocation data may be collected if the User authorizes its collection from their device. When using our platform, we may collect information about your location, which helps us improve our logistics planning and strategic actions. Your location is subject to the settings on your device and may be determined by GPS, IP address, your device's sensor data or information transmitted by items near the device, such as Wi-Fi access points, bluetooth-enabled devices and cell towers.
Job applicants: We may have access to personal information of job applicants, such as full name, phone number, e-mail, field of study, city of interest, desired position and any other information voluntarily provided by the applicant.
Applicants' personal information is collected through a third-party recruitment and selection platform, accessible from our website. Through this platform, data such as name, e-mail, phone number, city, education, professional experience, desired position, résumé and other information voluntarily provided by the applicant during the selection process may be processed. The processing of this information may also be subject to the terms of use and privacy notice of the platform used.
Employees: The personal data collected from our employees is necessary to register the employee, in compliance with labor legislation and for the performance of the employment contract.
Security camera monitoring: We collect images of data subjects moving through the company's premises by means of security cameras installed at strategic points.
Monitoring of networks provided by APTA: We collect personal data from all users of the wired and Wi-Fi networks provided by APTA based on our legitimate interests, for the purpose of internal and/or external monitoring of the environment we provide.
Exceptionally, APTA will process sensitive personal data, in which case the provisions of the LGPD will be duly observed.
3. Social Media
APTA also uses Social Media to communicate and interact with its customers and consumers, through third-party websites such as Facebook, Instagram, YouTube and LinkedIn. These third-party websites are Internet-based technologies that are not operated or controlled by APTA. When you interact with, share or “Like” APTA's page on Facebook, Instagram, YouTube, LinkedIn or other social media, you may disclose certain personal information to APTA or to third parties.
We use “social buttons” to allow our users to share or bookmark web pages. These are buttons from third-party social media sites that may record information about your activities on the internet, including on this website. Please review the terms of use and privacy notices of these platforms to understand exactly how they use your information, as well as how to opt out of receiving or delete such information.
The amount of personal information visible will depend on your own privacy settings on Facebook, Instagram, YouTube, LinkedIn and other social media.
4. Purposes and legal bases
Below are the purposes and legal bases for APTA's data processing:
| Purpose | Legal basis |
|---|---|
| Compliance with the terms and conditions established in a contract. | Necessary for the performance of a contract to which the data subject is a party. |
| Fulfilling the contract established with our customers. | Determined by our customer, as controller of the personal data. |
| Recruitment and assessment of fit for the job position. | Justified on the basis of preliminary procedures related to the performance of a contract, to ensure we recruit suitable employees. |
| Administration of employee benefits. | Justified on the basis of the employee's consent, in the case of benefits granted at the company's discretion and whose enrollment is optional, or on compliance with a legal or regulatory obligation, when the benefit derives from an applicable Collective Bargaining Agreement. |
| Communicating with you in cases not specified in this table (including emergencies and to provide you with requested information). | Justified on the basis of our legitimate interests in ensuring proper communication and emergency management in the organization. |
| Compliance with legal requirements. | Necessary to comply with a legal obligation to which we are subject. |
| Monitoring your use of our systems (including monitoring the use of our website and any applications and tools you use). | Justified on the basis of our legitimate interests in preventing non-compliance and protecting our reputation. |
| Improving the security and operation of our website, application, networks and information. | Justified on the basis of our legitimate interests in ensuring you have an excellent user experience and that our networks and information are secure. |
| Offering our products to you (unless you have objected to such processing). | Justified on the basis of our legitimate interests in promoting our business. |
| Credit analysis | Justified on the legitimate interest of the controller or of third parties. |
| Identification and authentication for access to APTA's premises through images and recordings of third parties, employees and visitors. | Justified by the protection of the life or physical safety of the data subjects or of third parties. |
| Internal monitoring by security cameras | Justified on the legitimate interest of the controller or of third parties. |
| Providing required information to government agencies. | To comply with a legal obligation. |
We only rely on our legitimate interest for specific purposes. This processing of personal data in no way overrides the interests, rights and freedoms of data subjects.
5. Sharing and transfer of information
APTA does not disclose information that can identify data subjects. This data is used exclusively within the organization to achieve the purposes stated in the previous section.
Data may be shared with third parties only under the following conditions:
- By court order or at the request of government enforcement agencies;
- Data transferred to public agencies to comply with current legislation, for example personal data contained in electronic invoices and their XML files, or employee data required for INSS or FGTS (Brazilian social security and severance fund) payments;
- Data transferred to accounting or human resources service providers to meet tax and labor obligations;
- Data transferred to financial institutions to enable payment options for our customers, or to pay our employees and service providers;
- Data shared with partners, processors and service providers that participate, directly or indirectly, in APTA's business activities, such as billing, payment processing, customer service, e-mail delivery, advertising and marketing, security and performance monitoring, repair and maintenance services, order and transaction processing and fulfillment, verification of customer registration information, research, data storage and processing, and specialized consulting and auditing;
- Data transferred for the performance of a contract, as well as to protect APTA's interests in any type of dispute, including lawsuits;
- In the event of corporate transactions such as a merger, acquisition, transformation, spin-off, or a partial or total sale of assets, we may share, disclose or transfer all data subjects' data to the successor organization.
Some of the service providers mentioned above may be located abroad and, in that case, APTA adopts additional safeguards to ensure an adequate level of personal data protection, in accordance with the relevant Brazilian legislation.
When sharing your personal data with data Processors, we will require that it be processed in accordance with our instructions, as the Controller of this information, including before other processing agents involved in the data processing chain, including Sub-processors.
6. International Transfers
APTA will carry out international transfers of personal data only for legitimate, specific and explicit purposes, previously informed to data subjects, in accordance with the legal bases for processing. These transfers will be carried out using valid mechanisms that ensure adequate data protection, as provided for in the applicable Privacy Legislation.
APTA is committed to ensuring that all operations respect data protection principles, including transparency and accountability in the processing of personal information.
7. Information Security
To ensure that your personal information is secure, we communicate our privacy and security guidelines to APTA's employees and business partners, and we strictly follow privacy precautions within the organization.
We strive to protect your personal information, and the information entrusted to us by our customers, through physical, technical and organizational measures aimed at reducing the risks of loss, misuse, unauthorized access, disclosure and improper alteration of this data.
8. Data Subjects' Rights
Data subjects have certain rights regarding their personal data and may exercise them by clicking here to access the Data Subject Access Request (DSAR) form, or by e-mail: dpo@aptaresinas.com.br.
Data subjects have the right to:
- Confirmation that their personal data is being processed;
- Access to their personal data, under the applicable legislation;
- Correction of incomplete, inaccurate or outdated personal data;
- Portability of their personal data;
- Deletion of personal data, when processed based on the data subject's consent or when the data is unnecessary, excessive or processed in breach of the applicable legislation;
- Information about the shared use of personal data;
- Withdrawal of consent, when applicable.
APTA will always assess the best way to fulfill a request to exercise any of your rights. However, APTA may decline your request, in whole or in part, in specific situations protected by law, for example to comply with a legal obligation or a contract it has with you.
We stress the importance of keeping your personal data accurate and up to date. Please keep APTA informed if your personal data changes or is incorrect.
For security reasons, requests made by e-mail to dpo@aptaresinas.com.br will be fulfilled once we are certain of the user's identity. We may therefore request additional data or information to confirm the identity and authenticity of the data subject. This data and information will be protected during the storage period and deleted after the legal period for the regular exercise of rights has elapsed.
Where APTA is the Processor of personal data, requests will be forwarded to the Controller so that it can assess and decide on the measures to be taken.
9. End of Processing
This Privacy Notice applies to the circumstances mentioned above for as long as APTA stores the personal data. We store and keep your information: (a) for as long as required by law; (b) until the end of the processing of personal data, as mentioned below; or (c) for as long as necessary to protect APTA's rights. We will therefore process your data, for example, during the applicable statute of limitations periods or for as long as necessary to comply with a legal or regulatory obligation.
As Controller, the processing of personal data will end in the following cases: (a) when the purpose for which the personal data was collected has been achieved, and/or the personal data collected is no longer necessary or relevant to achieve that purpose; (b) when the Data Subject requests the deletion of their data; and (c) when there is a legal determination to that effect.
As Processor, the processing of personal data will end in the following cases: (a) when the purpose for which the personal data was collected has been achieved, and/or the personal data collected is no longer necessary or relevant to achieve that purpose; (b) when the Data Subject requests the deletion of their data; (c) when there is a legal determination to that effect; and (d) when the end of processing is determined by the Controller.
When the processing of personal data ends, except in the cases established by the applicable legislation or by this Privacy Notice, the personal data will be deleted.
10. Data Protection Officer (DPO)
APTA provides below the contact details of its Data Protection Officer (DPO), who is responsible for handling any and all requests from data subjects or from the National Authority relating to personal data.
For any questions, requests or complaints regarding the processing of personal data, please contact our Data Protection Officer:
DPO EXPERT® (www.dpoexpert.com.br)
Officer: Rafael Susskind
Deputy officer: Renata Adeli Franhan Parizotto
contact: dpo@aptaresinas.com.br
If, despite our commitment and efforts to protect your data, you believe your data protection rights have not been respected, please contact our DPO. You also have the right, at any time, to file a complaint directly with the Brazilian National Data Protection Authority (ANPD) if you believe the rights over your personal data have been infringed.
11. Changes to this Privacy Notice
Although our Privacy Notice has been presented in a clear, concise and objective manner, do not hesitate to contact APTA's DPO if you have any questions about this important document or about the personal data processing activities we carry out.
APTA reserves the right to update or modify this Notice at any time and without prior notice. However, we will always publish the revised version on our website. If there are changes in the way we process personal data, you will be informed so that you can decide whether you wish to continue purchasing our products.
