Data Protection and Transparency
Privacy Policy
We respect your privacy and protect your data. In this section, you will find clear information about how we collect, use, and care for your information.
1. Objectives of this External Personal Data Protection Policy
The Wildlife Research and Environmental Education Institute (âSPVSâ or âWeâ) is a third-sector, non-profit institution, qualified as a Civil Society Organization of Public Interest (OSCIP), aimed at conserving natural heritage through the protection of native areas and biodiversity, free environmental education actions, and the development of models for the rational use of natural resources, through innovative initiatives capable of generating large-scale impacts.
SPVS plays a leadership role in the environmental scene, being recognized as one of the most active Brazilian non-governmental conservation organizations. Our commitment is to develop actions in different biomes, with a primary focus on the Atlantic Forest.
Our projects are characterized by the expansion and replicability of actions aimed at maintaining natural heritage and biodiversity, considering the concept of Nature Production, which views natural areas as drivers for establishing a new development model through a restorative economy. These efforts depend on partnerships with companies, public institutions, and the third sector, aiming to influence public policies.
We are committed to the transparency of our activities and the protection of personal data of our donors, the target audience of our projects, institutional partners, and all those affected by our activities (âYouâ). To this end, we comply with the applicable legislation in our sector, as well as the Internet Civil Framework (Law No. 12,965/2014) and the General Personal Data Protection Law â LGPD (Law No. 13,709/2018).
This External Personal Data Protection Policy (âPolicyâ) aims to express this commitment, clarifying how we may process your personal data, that is, in summary, how we will collect, use, share, store, and delete it.
By participating in our projects, registering for our events, contributing to us, accessing or interacting on our website, media, or social networks, or, when requested, agreeing affirmatively to the use of your personal data for each of the purposes described here, You acknowledge that your information will be processed in accordance with this Policy.
If you have any questions or concerns about this Policy, you can contact us at the following email: privacidade@spvs.org.br.
2. Key Concepts and Definitions
Consent: free, informed, and unequivocal expression by which the data subject agrees to the processing of their personal data for a specific purpose;
Controller: natural or legal person, public or private, responsible for decisions regarding the processing of personal data;
Personal Data: information related to an identified or identifiable natural person;
Sensitive Personal Data: personal data about racial or ethnic origin, religious belief, political opinion, membership in a union or organization of a religious, philosophical, or political nature, data concerning health or sexual life, genetic or biometric data, when linked to a natural person;
Data Protection Officer: person appointed by the Controller and Operator to act as a communication channel between the Controller, Data Subjects, and the National Data Protection Authority (ANPD);
Operator: natural or legal person, public or private, responsible for decisions regarding the processing of personal data;
Data Subject or âYouâ: natural person to whom the personal data being processed refers;
Personal Data Processing: any operation performed with personal data, such as collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation or control of information, modification, communication, transfer, dissemination, or extraction.
3. What Personal Data is Processed?
To enable you to participate in our projects, initiatives, services, and/or contribute to achieving our objectives, we need to process some information, and personal data may be obtained directly or indirectly from the Data Subject, depending mainly on the need and purpose in the specific case.
The table below lists the personal data processed by SPVS:
| Class | Type of Personal Data |
|---|---|
| Identification of the data subject (volunteer donors, collaborators, associates, members of the SPVS directive structure, service providers, people impacted by our projects, visitors to the reserves, etc.) | Full name, phone number, email, address, profession, company, institution or professional affiliation, identification document data (RG, CPF, RNE, CNH, etc.), age, marital status |
| Economic-financial information | Income statements, remuneration, credits, property titles and possessions, debt certificates, bank data, financing, vehicle plates, corporate acts, etc. |
| Family information | Marital status, marriage date, marriage property regime, family structure, relationships, prenuptial agreements, marriage certificates, stable union certificates, etc. |
| Contractual information | Personal data mentioned above and also: voter registration number, military enlistment, education, professional registration, CTPS, CEI, NIS, NIT, and PIS/PASEP numbers, union records, CNPJ number and banking information, payroll and social security data, Commercial Board certificates, medical certificates, and other health information, etc. |
| Professional and academic information | Company you work for and position held in the organization, professional and academic history, education level, languages, CVs, work records, etc. |
| Health data | Certificates, vaccination cards, etc. |
| Browsing data | Cookies; IP, date and time of website access; browser and operating system |
4. What are the Purposes of Processing?
Personal data may be necessary in various circumstances and for different purposes, but always with a specific, legitimate purpose and in accordance with current legislation. In the examples below, note that not all uses will be relevant to all individuals and may apply only to specific situations.
– To access our website and register/participate in events organized by SPVS;
– To make donations or any other contributions, monetary or not, either through the website or other means;
– To participate in Programs conducted by SPVS, listed on the website as âprojectsâ and/or to access budgets and/or proposals for activities listed under âservicesâ;
– To schedule your visit to the Guaricica Natural Reserve;
– To improve your experience with us;<
– To keep your registration updated and identify you when you contact us or download our e-books;
– To participate in our marketing actions;<
– To fulfill your requests;
– To comply with contractual and/or legal obligations;
– To recruit and select volunteers and collaborators;
– To register suppliers, enter into contracts, and issue invoices;
– Regular exercise of rights;
– Protection, security, and defense of Our interests;
– To fulfill various demands submitted to Us;
– Storage and disposal of physical documentation;
– Identification of the Data Subject;
– For the assignment of rights in case of participation in communication actions and/or products;
– Communications with the Data Subject, manage contracts, and provide support to our clients;
– Manage events, make calls, and send prospecting emails;
– Send invoices and products;
– Participate in opinion and/or institutional perception surveys, provide testimonials about the visit to Guaricica and other projects.
Please note that We may process personal data for purposes other than those informed, but as long as it is in accordance with the LGPD and complying with the conditions established therein.
When consent is the chosen legal basis to justify processing and there is a change in the informed purpose, form, and duration of processing, or if there is a change in the personal data sharing policy, You will be informed and may revoke it if you disagree.
5. How Do We Collect your Data?
We may collect your personal data directly from the information provided by You, as they are necessary, for example, for the formalization of a partnership or volunteering, access to our premises, browsing our website, or when You contact us through the form available on our website, email, phone, digital campaigns, social networks, and messaging apps.
We may also, on some occasions, receive personal data as Data Operators, in which case the collection, choice of legal basis, and purpose of Processing must follow the guidelines of the personal data Controller, the person responsible for decisions regarding processing, whose policies should be consulted.
6. With whom Do We Share your Personal Data
We may collect your personal data directly from the information provided by You, as they are necessary, for example, for the formalization of a partnership or volunteering, access to our premises, browsing our website, or when You contact us through the form available on our website, email, phone, digital campaigns, social networks, and messaging apps.
We may also, on some occasions, receive personal data as Data Operators, in which case the collection, choice of legal basis, and purpose of Processing must follow the guidelines of the personal data Controller, the person responsible for decisions regarding processing, whose policies should be consulted.
7. How Do We Collect your Data?
Your personal data may be shared, according to the appropriate need and purpose, in Brazil or abroad, as the case may be, with:
– Accountants and lawyers;
– Health, dental plan, and company responsible for food benefits;
– Clinics responsible for conducting admission exams;
– Insurers;
– Electronic signature platform;
– Cloud file storage and sharing service;
– ERP management system;
– Suppliers and service providers in general;
– Public administrative, regulatory, judicial, or arbitral authorities.
– Partners and/or funders of actions and projects;
– Banking institutions;
– Information control, management, and dissemination platform;
– Digital platform operators.
– Press vehicles
We do not sell personal data by any means.
The sharing of personal data is carried out in accordance with the LGPD, and we seek to evaluate our partners, suppliers, and service providers to maintain the same level of security and compliance in processing your personal data.
We may also, as the case may be, share your personal data with public authorities to fulfill a legal or regulatory obligation, or to comply with court orders or administrative decisions.
8. Data Subject Rights
We guarantee You the exercise of the rights provided for in the LGPD, as described below, at any time and upon request (see Item 12 below):
Confirmation and Access: You can verify whether We process your personal data, and if so, you can access it;
Correction: You can request the correction of your personal data if it is incomplete, inaccurate, or outdated.
Anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data with the provisions of the LGPD;
Data portability: You may request, upon express request, the portability of your data under the regulation to be issued by the ANPD (National Data Protection Authority);
Deletion of personal data: You have the right to request the revocation of the consent given by You when this is the applicable legal basis;
Information about sharing personal data with public or private entities;
Information about the possibility of not providing consent and the consequences of refusal.
Your request will be analyzed before being fulfilled, so we may ask for additional data to confirm your identity. There are circumstances where the exercise of the above rights is restricted, when we must retain your personal data for a justified reason, such as allowing the continuity of service provision, compliance with legislation, or the defense of SPVS in judicial, administrative, or arbitration proceedings, for example.
9. Storage and Security of Personal Data
To protect the personal data we process, technical and administrative measures are used, within market standards, to prevent and remedy unauthorized access and accidental or unlawful situations of destruction, loss, alteration, communication, or improper dissemination.
We seek to guide our collaborators and third parties on the importance of adopting good practices to ensure the security of information stored on our servers and systems, adopting internal measures of access control to personal data.
We emphasize, however, that no server or system is completely immune to the possibility of malicious invasions, viruses, or any other form of attack promoted by criminals. If any information security incident is detected, we will notify You and the ANPD in case of significant risk of damage and will take appropriate measures as quickly as possible to resolve the problem and recover the information â maintaining our commitment to the security of the data provided.
10. Third-Party Links
We may suggest redirect links to third-party websites to expand the information provided. This Policy does not apply, therefore, to third-party websites, whose specific personal data protection policies should be consulted directly, as a good practice measure. We are not responsible for the actions of third parties, content, or their own policies.
For example, when making a donation through our website, You may use our partnership with PagSeguro, a partner tool that enables this type of financial transaction, whose privacy policy should be consulted on the company’s website.
We maintain active pages on major social networks and other content-sharing platforms, such as Facebook, Instagram, LinkedIn, and YouTube. As in the other cases mentioned, We have no control over the privacy rules or management of personal data collected on these sites, whose specific policies should be accessed by You.
11. Retention of Personal Data
The retention of personal data will be carried out by Us as long as, as a general rule, the purpose that authorized the collection and storage persists or according to the applicable legal deadlines, except in cases where there remains a legitimate interest in its maintenance and/or the possibility of exercising rights in judicial, administrative, or arbitration proceedings.
12. Contact of the Data Protection Officer
You can contact us to exercise any of your rights, as the data subject, as well as to clarify doubts regarding the processing we carry out through the following communication channels:
Email: privacidade@spvs.org.br
Phone: +55 41 30944600
Address: Rua do Verbo Divino, n° 14, Curitiba, State of Paranå, ZIP 80520-310.
13. Updates to this Policy
As we are always seeking to improve our services, this Policy may be updated at any time. Therefore, we suggest that You periodically visit, or whenever you have questions, our Privacy Policy page to check for any updates or changes.
Last updated on: 02/26/2024
Previous versions: 2nd version.
