1. INTRODUCTION
ArcelorMittal Brazil adopts Data Protection procedures aligned with the standard applied by the ArcelorMittal Group worldwide, which are also in compliance with the General Personal Data Protection Law (Law No. 13.709/2018, known as LGPD). Our Privacy Policy aims to demonstrate, with clarity and transparency, how ArcelorMittal Brazil collects and uses personal data of the different communities that use our websites and applications. Our digital platforms or applications also have specific Terms of Use for the processing of personal data, which are complementary to this Policy and are also in line with our global standards and the LGPD.
2. ABOUT THE DATA WE COLLECT
2.1. How and why do we collect Data?
Data, including Personal Data, may be collected when you submit it when you register for a service or when you interact with our environments and services.
In general, you are not required to disclose your personal data as a condition of using our website or application.
However, in your interactions, ArcelorMittal Brazil will ask you to provide some of your personal data, such as name, email, telephone and address. This will be done when this data is deemed necessary for that type of interaction. If you choose not to provide some of this data, we may be unable to provide all or part of our services to you.
2.2. Who updates or confirms the veracity of the data?
You are responsible for providing your personal data in full and truthful manner. In order for ArcelorMittal Brazil to maintain the veracity and accuracy of its data, we provide the Contact Us Service Channel at: https://brasil.arcelormittal.com/fale-conosco/contato#direitos-titulares. Through it, you can request the correction and updating of your data that is incomplete, inaccurate or out of date.
It is important to note that we are not obliged to process or handle any of your data if there is reason to believe that such processing or handling may impute any violation of any applicable law to us, or if you are using our environments for any purposes that are illegal, unlawful or contrary to our Integrity Culture.
2.3. Who is responsible for the data collected?
The database created through data collection is owned by us and is under our responsibility, and its use, access and sharing, when necessary, will be done within the limits and purposes of the business described in this Policy.
2.4. Does ArcelorMittal Brazil use cookies and similar technologies?
Yes. Cookies are small text files that are placed on your computer by the websites you visit. They are widely used to make websites work more efficiently. In addition to providing your information to ArcelorMittal Brazil, cookies allow us to store your preferences and thus give you a personalized and more agile service. You may control the data collected by cookies through your internet browser or through other options available in our Cookie Policies.
2.4.1. What other tracking mechanisms does ArcelorMittal Brazil use?
In addition to cookies, for session-based identification and tracking on ArcelorMittal Brazil's websites, we use other cache-based tracking mechanisms, which help make page loading faster, based on the history of pages you have previously visited. In addition, a 'Unique Identifier' can be used to monitor your activity, giving you greater security in access. The unique identifier can be your location or the network you're connected to, the device you're using, the operating system, or the version of your browser.
2.4.2. Can you prevent the use of these mechanisms to collect your data? Yes, you can block the collection of data from these tracking mechanisms directly in your web browser, using the "Private or Anonymous Browsing" feature.
IMPORTANT: If you use "Private or Anonymous Browsing", ArcelorMittal Brazil cannot guarantee the correct functioning of your navigation on our websites. We also cannot guarantee that your browser will block all tracking mechanisms. Thus, ArcelorMittal Brazil is not responsible for any damages caused to the Data Subject by the incorrect operation of the "Private or Anonymous Browsing" function.
2.4.3. Is the use of these technologies provided for by law? Yes. All technologies we use are in accordance with current legislation and the terms of our Privacy Policy.
3. WHO DO WE SHARE DATA AND INFORMATION WITH?
Data collected and activities recorded may be shared:
(i) Among the subsidiaries of ArcelorMittal worldwide;
(ii) With competent judicial, administrative or governmental authorities, whenever there is a legal determination, request, requisition or court order;
(iii) Automatically, in case of corporate transactions such as merger, acquisition and incorporation;
(iv) With third parties, as detailed in the Terms of Use of our websites and applications.
4. HOW DO WE PROTECT YOUR DATA AND HOW CAN YOU ALSO PROTECT IT?
4.1. Who has access to the Personal Data collected by ArcelorMittal Brazil?
Regarding the sharing of passwords, you are also responsible for the confidentiality of your Personal Data and should always be aware that the sharing of passwords and access data violates our Privacy Policy and may compromise the security of your data and our environments. So make sure you never share the access account and password you use to interact on our websites and applications.
For ArcelorMittal Brazil, the security of the personal data processed is extremely important. Therefore, we adopt all possible technical and administrative measures to ensure the security of information on our websites and applications, through protocols, controls, policies, procedures and guidelines to maintain such measures.
Internally, the Personal Data collected is accessed only by duly authorized professionals, respecting the principles of proportionality, necessity and relevance to the objectives of our business. All such professionals are aware of their responsibilities to maintain our commitment to confidentiality and preservation of your privacy under this Policy.
4.2. How does this Policy work when you access an external link through our websites and applications?
If, during your navigation in our digital environments, you are led via link to other portals or platforms, you should be aware that these external environments may collect your information and, in general, will have their own data processing policies.
Therefore, we emphasize that, whenever this occurs, you should read the Privacy and Data Processing Policies of such portals or platforms, and it is your responsibility to accept or reject them. We are not responsible for the privacy and data processing policies of third parties, nor for the content of these external digital environments.
4.3. Can there be data processing by third parties under our guideline?
Yes. We may hire third-party companies to process, on our behalf, the personal data we collect. When this occurs, these companies will respect, by contractual obligation, the conditions stipulated herein and our information security standards.
5. HOW DO WE STORE YOUR PERSONAL DATA AND THE ACTIVITY LOG?
The personal data collected and the activity records are stored in a safe and controlled environment, being kept only for the necessary period, with two basic premises:
(i) For the duration of the relationship between you and ArcelorMittal Brazil;
(ii) For the period necessary for us to comply with our global legal and contractual obligations.
Longer storage periods may occur, for example, for the purposes of audit, security, fraud control, credit protection and preservation of rights, according to hypotheses established by law or regulatory standard. The collected data may be stored on our servers located in Brazil, as well as in cloud computing environments or servers, which may require a transfer and/or processing of this data outside Brazil.
6. WHAT ARE YOUR RIGHTS AND HOW TO EXERCISE THEM?
As a holder of Personal Data you have the following rights, which can be requested from ArcelorMittal Brazil through Contact Us at: https://brasil.arcelormittal.com/fale-conosco/contato#direitos-titulares:
(i) Know what personal data ArcelorMittal Brazil has about you;
(ii) Correct your personal data;
(iii) Request the deletion of your personal data;
(iv) Dispute the processing carried out with your personal data;
(v) Review automated decisions involving your personal data;
(vi) Revoke your consent;
(vii) Request the portability of your personal data;
(viii) Request anonymization, blocking or deletion of your personal data;
(ix) Confirm that your personal data is being processed.
If you request the deletion of your Personal Data, it may occur that it is maintained for a period after to your request, in the cases provided for in Article 16 of the General Personal Data Protection Law, that is, to:
(i) Compliance with legal or regulatory obligation;
(ii) Study by research agency;
(iii) Transfer to a third party (in compliance with the data processing requirements set forth in the same Law);
(iv) Exclusive use of ArcelorMittal Brazil, which will guarantee the prohibition of access by third parties and anonymize the data.
Your personal data will be deleted using secure disposal methods or used anonymously for statistical purposes after the legal maintenance period.
Note:
If ArcelorMittal Brazil uses solely automated decisions, we will provide, upon request, clear information regarding the criteria and procedures used, taking into account commercial and industrial secrets.
6.1. Does ArcelorMittal Brazil have a person responsible for informing about the company's performance in relation to LGPD?
Yes. It is our Data Protection Officer (DPO) who can help you understand how ArcelorMittal Brazil is acting in relation to the General Data Protection Law. In addition, the DPO is responsible for receiving reports of security incidents involving personal data. You can contact our DPO via email: dpo@arcelormittal.com.br.
To contact the DPO of ArcelorMittal Pecém, simply send your message to the email: dpo-ampecem@arcelormittal.com.
7. MORE INFORMATION
7.1. Changes and updates.
By using our environments, you acknowledge our right to change the content of this Policy at any time, and without prior notice to you, depending on the purpose or need.
This may occur for the adequacy and legal compliance of a provision of law or standard that has equivalent legal force, and it is up to you to verify it whenever you access our environments or use our services. The date of the last updated version will always appear at the end of this Policy.
7.1.1. If there are updates to this document that require a new collection of consent, you will be notified through the data informed in your registration.
7.2. Inapplicability. If any point of this Policy is considered inapplicable by the Data or judicial Authority, the other conditions will remain in full force and effect.
7.3. Communication. By interacting in our digital environments, you acknowledge that all communication carried out by e-mail, SMS, instant communication applications or any other digital and virtual form, according to the data informed in your registration, are also valid, effective and sufficient for the disclosure of any subject that refers to the services we provide, your data, as well as the conditions of its provision or any other subject addressed therein, with the exception only what this Policy provides as such.
7.4. Service Channel. To clarify any doubts regarding the provisions of this Privacy Policy, you can contact us through Contact Us at: https://brasil.arcelormittal.com/fale-conosco/contato#direitos-titulares.
7.5. Governing law and venue. As ArcelorMittal Brazil offers services only in the national territory, even if you do not have a domicile in Brazil, you will also be subject to Brazilian law, therefore agreeing that, in the event of a dispute to be resolved, the action must be filed in the District Court of Belo Horizonte/MG.
8. GLOSSARY
For a better understanding of this Policy, the following definitions and descriptions of the terms below should be considered:
(i) Data: Data related to the identified or identifiable natural person.
(ii) Personal Data: Data related to an identified or identifiable natural person.
(iii) Anonymization: Use of reasonable and available technical means at the time of data processing, whereby a data loses the possibility of being associated, directly or indirectly, with an individual.
(iv) Cloud Computing: Is the service virtualization technology built from the interconnection of more than one server through a common information network (e.g. the Internet), with the objective of reducing costs and increasing the availability of the services offered.
(v) Our Environments: Digital platforms and applications owned by ArcelorMittal Brazil.
(vi) Access Account: Credential required to use or access the exclusive functionalities of Our Environments.
(vii) Cookies: Small files sent by Our Environments and saved on your devices, which store preferences and other information, in order to personalize your navigation according to your profile.
(viii) Uniquely automated decisions: These are decisions that have been programmed to work automatically, without the need for a human operation, based on automated processing of personal data.
(ix) Processing: Any operation involving personal data, such as those related to the collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, elimination, evaluation or control of information, change, communication, transfer, dissemination or extraction.
Updated on: January 28, 2022.