What is the General Personal Data Protection Act (LGPD)?

Law 13.709/18 - General Law for the Protection of Personal Data provides for the processing of personal data, including in digital media, by an individual or a legal entity governed by public or private law, with the aim of protect the fundamental rights of freedom and privacy and the free development of the personality of the natural person.

What are my rights?

CBM TRADING provides access to users' personal data in order to provide their holders with safe and reputable access, ensuring that they are obtained (commercial and industrial secrets observed, based on information security and protection of data), in a timely manner and upon request to:

• (i) confirm the existence of treatment;
• (ii) access the data;
• (iii) correct the data (incomplete, inaccurate or out of date);
• (iv) anonymize, block or eliminate unnecessary, excessive or non-conforming data;
• (v) perform data portability to another service or product provider, when possible;
• (vi) inform about the possibility of not providing consent and about the consequences of denial;
• (vii) delete the personal data processed with your consent, unless there is another legal basis for carrying out the treatment;
• (viii) revoke consent, ratified the treatments carried out under the protection of the consent previously expressed;
• (ix) inform the public and private entities with which CBM TRADING has shared data use.

How can I exercise my rights?

Subject to commercial and industrial secrets, the holder of personal data or his legal representative may request them at any time, based on the General Law for the Protection of Personal Data. In addition, CBM TRADING provides access to the holders' personal data in full, making its updating available, when applicable, upon proof. Updating personal data is the responsibility of the holder or his legal representative. CBM TRADING reserves the right to deny requests that

• (I) do not adequately fill in the form fields;
• (II) do not reasonably enable, at their discretion, to confirm the identity of the claimant;
• (III) generic;
• (IV) similar or duplicate request within 30 consecutive days. If CBM TRADING understands that the request of the holder of Personal Data can be more adequately answered by another company in the CBM TRADING System, he will be instructed to look for the relevant company.

Your request will generate a protocol, which can be followed on the portal and whenever there is an update in your demand, you will receive an alert by email. The estimated response time is 15 (fifteen) consecutive days. Exceptionally, if there is a need for a longer period, you will also be informed.

To exercise your rights based on the LGPD, choose the type of audience you want below, as the request will be analyzed based on this information. For each type of audience below, in the topic “Communication Channel” there is a link to the request form based on the LGPD. It is possible to fill in more than one form, generating more than one request.

Customer, Supplier, Reseller, Consumer

Personal data of holders who purchased goods or services from CBM TRADING, for their own use or distribution; representing former and current suppliers or resellers of CBM TRADING goods or services.

Communities, Scientific and Academic Community, People Society Organizations

Personal data of holders who have visited CBM TRADING's facilities, booths, sponsored events or website, including for research or causes relevant to CBM TRADING or its stakeholders.

Press, Investor, Partner

Personal data of holders who form, or have formed formal relations of cooperation or investments in business projects/programs; who have or have held CBM TRADING securities; members of media outlets who have already contacted CBM TRADING.

Current Employee, Current service provider employee, Retired and others

Personal data of holders who are or were employees, retirees, their families and pensioners, counselors, apprentices, interns, employees of service providers working in the facilities