This document was written to help you understand (1) what information is collected from visitors to our website or on our digital communication channels; (2) how Instituto Arapyaú de Educação e Desenvolvimento Sustentável uses this information and (3) what alternatives you have regarding your information.
On the institutional website of Instituto Arapyaú, we provide a form for registering the data of our visitors, interested in receiving news from our entity. We emphasize that all data filled out voluntarily is protected by key encryption.
This instrument aims to provide you with information on how Instituto Arapyaú processes your personal data, provided through this website and includes the website of Instituto Arapyaú, with the primary objective of providing a transparent view of the practices related to the processing of personal data.
This version was updated on 08/27/2021 and any changes will be previously notified. However, it is important that the personal data we have about you is accurate and always up to date, keeping us informed of any changes during your relationship with us.
This Term was prepared in accordance with the General Data Protection Law and the Internet Civil Rights Framework.
Instituto Arapyaú is a non-profit organization committed to promoting sustainable development. We operate on two priority fronts: Climate Change and Territorial Development in the south of Bahia. Our work aims to favor the collective construction of solutions and strengthen the capacity for action and innovation of groups and organizations that seek to promote sustainability in all its dimensions – environmental, economic and social.
Instituto Arapyaú may collect and process information that you send to us by email, through the contact form on our website or through other existing forms of communication. We may keep a record of any correspondence you exchange with us. In addition, we collect details of your visits to our website and the resources you access.
We may also collect, use and share Aggregated Data, such as statistical or demographic data. Aggregated Data may be derived from your personal data, but is not considered personal data in law, as it does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users who access a specific feature of the website.
Information for donations: data necessary for the registration and processing of donations, including name, CPF, email, telephone and data necessary for the payment method chosen by the donor.
When the chosen payment method is a card, the card number, expiration date and CVV (security/verification code) are collected. This data is collected and sent to process the transaction. Only the first 6 and last 4 digits are stored so that your transaction can be identified.
When the chosen payment method is a direct debit, the donor’s bank, branch and account number are collected.
When the payment method is a bank slip, address data is collected. Instituto Arapyaú does not have access to your bank or bank account, but if you have joined your bank’s DDA, the slip may appear on your list of payments to be made on your bank’s digital platform. In any case, the donation slip has no implications for the person who does not make the payment.
This website may include links to third-party websites, plug-ins, and applications. Clicking on these links or activating these connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy policies. When you leave our website, we recommend that you carefully read the privacy policies of the websites you visit.
Instituto Arapyaú may access and use the information it collects when necessary: (a) to process a donation with the banking system, (b) to conduct a campaign to prospect new supporters, (c) for digital marketing related to the promotion of the cause or other fundraising campaigns, (d) to improve the services offered, (e) to detect, prevent, or address situations related to fraud, misuse, information security or technical issues, (f) to carry out registrations and establish a relationship of interest to you.
Some examples: registering your intention to donate; sending the data to the bank to issue a payment slip, sending a confirmation of your donation; sending information about other ways to donate, including by mail; conducting research and analyses.
Instituto Arapyaú also collects and stores information necessary to comply with tax and legal obligations.
If you no longer wish to receive advertisements from Instituto Arapyaú, you can opt out of our databases related to sending this type of marketing.
Your privacy is very important to us! That is why we do not share your information, except with the people mentioned in this term: (a) third-party service providers and employees; (b) business partners; (c) agencies provided for by law. Service providers and employees only have access to the information necessary to carry out the purposes set out herein. These transfers are protected by appropriate contracts and within the requirements of the legislation in force.
Examples of how we may share information with service providers: donation processing; fraud prevention service providers; and cloud computing infrastructure.
Sharing information for legal reasons includes notifications from courts or agencies that request it and that in good faith Instituto Arapyaú believes are necessary to protect your rights, your safety, to investigate fraud or to respond to an administrative request from the Government.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and we only allow them to process your personal data for specific purposes and in accordance with our instructions.
Instituto Arapyaú will have access to your personal data and may store, use or share it. This data includes your personal information obtained through the completion of the registration form. Instituto Arapyaú will comply with the rules of the LGPD, in particular that, by means of this acceptance, your consent to provide data was made freely, informed and unequivocally. In addition, the actions developed by Instituto Arapyaú will be carried out in compliance with the principles of purpose, adequacy, transparency, free access, security, prevention and non-discrimination in the processing and storage of the data collected.
Instituto Arapyaú undertakes to protect the data provided, in accordance with the Law, using them only for the organization’s objectives, including mobilization and fundraising purposes, and may send mailings, invitations to events, and publicize campaigns and projects, and undertakes not to disclose or sell them, under any circumstances, to third parties.
Instituto Arapyaú defends and supports the policy of good practices on the internet, safeguarding the privacy and confidentiality of users.
By using this website and completing the registration form of Instituto Arapyaú, you declare that you agree and consent to the terms described herein.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data and the purposes for which we process your personal data, and we may achieve these purposes through other means and applicable legal requirements.
In some circumstances, you may ask us to delete your data.
We use cookies (text files that are stored locally on your computer) to help analyze how people use our website. The usage data collected is anonymized and stored on a server in the USA. The Arapyaú Institute will use this information to make reports on the use of the website for internal use. This information will only be shared with third parties when legally required. The data collected will not be cross-referenced with data from other websites or sources to which our Institute has access.
The Arapyaú Institute may need to contact you for several reasons, including:
We retain a limited amount of personal data, necessary to fulfill the purposes for which they are intended, comply with legal or contractual obligations, resolve doubts and conflicts, and they may be anonymized at the request of the holder.
After the necessary period, the data is deleted or anonymized, in accordance with the Information Security procedures of Instituto Arapyaú and contractual standards.
Our donors, patients, volunteers, suppliers and other collaborators can (and should) always update their personal information, contacting us through the channels made available by the institution.
When requested by you, Instituto Arapyaú will inform you which of your information is processed, or is stored internally or has been shared with third parties.
You can also ask:
As the holder of personal data, you have a number of rights, including:
Instituto Arapyaú follows generally accepted standards to protect the personal information submitted to us, both during transmission and once it is received. However, no security measures are perfect. We recommend that you use security measures appropriate to the type of device you are using and when using your email and other digital tools.
With this in mind, we seek to establish appropriate security measures to prevent your personal data from being accidentally accessed, used, shared or lost.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are required by law to do so.
Instituto Arapyaú ‘s pages are intended for a general audience – we do not seek to collect personal data from or about anyone sixteen (16) years of age or under on this website. If you inform us, or we otherwise become aware that we have accidentally received personal information from an individual under sixteen (16), we will delete that information from our records unless expressly authorized by the legal representative, or by an equivalent instrument.
We may update this policy whenever necessary, in accordance with new laws and changes to our donations policy.
We encourage you to consult this document whenever you have questions regarding our privacy practices.
In case of any doubt or any requests to exercise your legal rights, please contact:
Full name of the legal entity: Instituto Arapyaú
Name of the person in charge: Sabrina Fernandes
Email address: comunicacao@arapyau.org.br
Postal address: Av. Nove de Julho, 5617, 3rd floor São Paulo – Brazil – 01407-200
Phone: +55 11 3074.1144
