TERMS & CONDITIONS

Use of Registration Data and Privacy Policy of the ARAPYAÚ INSTITUTE WEBSITE

This document was written to help you understand (1) what information is collected from visitors to our website or on our digital communication channels; (2) how the Arapyaú Institute for Education and Sustainable Development uses this information and (3) what alternatives you have related to your information.

On the institutional website of Instituto Arapyaú [https://arapyau.org.br/], we provide a form for the registration of data from our visitors, interested in receiving news from our entity. We emphasize that all data filled voluntarily are protected by key encryption.

This instrument aims to provide information to you about how the Instituto Arapyaú handles your personal data, provided through this website and covers the website of the Instituto Arapyaú, with the primary objective of providing a transparent view of the practices related to the processing of personal data.

1. Who we are;
2. Information collected or received;
3. Third party links;
4. Use of Information;
5. Sharing of information;
6. The General Law of Data Protection – LGPD;
7. Storage of personal data;
8. Use of cookies;
9. Communication;
10. Data location and retention;
11. Your rights and choices;
12. Security;
13. Children’s Privacy;
14. Changes to this document and contact details.

This version was updated on 08/27/2021 and any changes will be notified to you in advance. However, it is important that the personal data we hold about you is accurate and always up to date, keeping us informed of any changes during your relationship with us.

This Term has been prepared in compliance with the General Data Protection Law and the Marco Civil da Internet.

1. Who We Are

The Arapyaú Institute is a non-profit entity committed to promoting sustainable development. We act on two priority fronts: Climate Change and Territorial Development of southern Bahia. Our work aims to favor the collective construction of solutions and strengthen the capacity for action and innovation of groups and organizations seeking to promote sustainability in all its dimensions – environmental, economic and social.

2. Information collected or received

The Instituto Arapyaú may collect and process information that you send to us by email, through the contact form on our website or through other existing forms of communication. We may keep a record of any exchanges of correspondence with us. In addition, we collect details of your visits to our site and the resources you access.

We may also collect, use and share Aggregated Data, such as statistical or demographic data. Aggregated Data may be derived from your personal data, but is not considered personal data in law because it does not reveal your identity directly or indirectly. For example, we may aggregate your Usage Data to calculate the percentage of users who access a specific feature of the site.

Donation Information: data required for the registration and processing of donations which includes name, CPF, email, phone number and data required for the payment method chosen by the donor.

When the chosen payment method is card the card number, validity and CVV (security/verification code) are collected. This data is collected and sent for transaction processing. Only the first 6 and last 4 digits are stored so that your transaction can be identified.

When the payment method chosen is account debit the donor’s bank, branch and account number are collected.

When the payment method is boleto bancário address data is collected. The Instituto Arapyaú does not have access to your bank or bank account, but if you have signed up for your bank’s DDA, the boleto may be on your list of payments to be made on your bank’s digital platform. In any case, the donation slip has no implication for the person who does not make the payment.

3. Third Party Links

This site may include links to third-party websites, plug-ins, and applications. Clicking on these links or activating these links may allow third parties to collect or share data about you. We do not control these third-party sites and are not responsible for their privacy policies. When you leave our site, we recommend that you carefully read the privacy policies of the sites you visit.

4. Using the Information

The Arapyaú Institute may access and use the information it collects when necessary: (a) to process a donation with the banking system, (b) to conduct a campaign to prospect new supporters, (c) for digital marketing related to the dissemination of the cause or other fundraising campaigns, (d) to improve the services offered, (e) to detect, prevent, or address situations related to fraud, misuse, information security, or technical issues, (f) to conduct registration and establish a relationship of interest to you.

Some examples: register your intention to donate; send the data for the bank to issue a slip, send a confirmation of your donation; send information about other ways to donate, including by mail; conduct research and analysis.

The Arapyaú Institutealso collects and stores information necessary for compliance with tax and legal obligations.

If you no longer wish to receive advertisements from Arapyaú Institute, you can “opt-out”, i.e., opt out of our databases of information related to sending this type of marketing.

5. Information sharing

Your privacy is very important to us! That is why we do not share your information except to the people named in this term: (a) third party service providers and employees; (b) business partners; (c) bodies provided for by law. Third party service providers and employees have access only to the information necessary to carry out the purposes stated herein. These transfers are under the protection of appropriate contracts and within the requirements of the legislation in force.

Examples of how we may share information with service providers: donation processing; fraud prevention service providers; and cloud computing infrastructure.

& Sharing information for legal reasons includes notifications from courts or agencies that request it and that in good faith the Arapyaú Institute believes is necessary to protect its rights, its security, to investigate fraud or to respond to a government administrative request.

We require all third parties to respect the security of your personal data and handle it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only allow them to process your personal data for specific purposes and in accordance with our instructions.

6. From the General Law of Data Protection – LGPD

The Arapyaú Institute will have access to your personal data and that it may come to store, use or share them. This data comprises your personal information obtained through the completion of your registration. The Instituto Arapyaú observe the rules of LGPD, in particular that, through this acceptance, your consent in the provision of data, was made freely, informed and unambiguous. In addition, the actions developed by the Arapyaú Institute will be made in compliance with the principles of purpose, adequacy, transparency, free access, security, prevention and non-discrimination in the treatment and storage of collected data.

The Arapyaú Institute undertakes to protect the data provided, in accordance with the Law, using them only for the purposes of the organization, including mobilization and fundraising purposes, and may send mailings, invitations to events, disclosure of campaigns and projects, pledging not to disclose or sell, under any circumstances, to third parties.

The Arapyaú Institute defends and upholds the policy of good practices on the internet, safeguarding users’ privacy and confidentiality.

By using this site and filling out the registration for the Arapyaú Institute, you declare to be in agreement and consent to the terms described herein.

7. Storage of Personal Data

In determining the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, and the purposes for which we process your personal data, and we may achieve these purposes through other means and by applicable legal requirements.

In some circumstances, you may ask us to delete your data. 

8. Use of Cookies

We use cookies (text files that are stored locally on your computer) to help analyze how people use our site. The usage data collected is anonymized and stored on a server in the USA. The Instituto Arapyaú will use this information to make reports about the use of the site for internal use. This information will only be shared with third parties when legally required. The data collected will not be cross-referenced with data from other sites or sources to which our Institute has access.

9. Communication

 The Instituto Arapyaú may need to contact you for various reasons, including:

• Respond to your requests or questions. If you contact us with a problem or question, we will use your information to be able to respond.
• Send you emails, SMSs, or other messages about services, donations, or other relationships you may have with the Arapyaú Institute. These communications are considered necessary for the provision of the services and so there is no option to stop receiving them (opt-out).
• Send you emails, SMSs, or other messages that we would like you to know about our activities, donation forms, and other institutional activities in which we have a legitimate interest. You have the right to stop receiving these messages by using the opt-out option.
• Conduct research, to improve our services and the experience of our donors or prospects.

10. Data location and retention

 We retain a limited number of personal data, necessary to fulfill the purposes for which they are intended, fulfill legal or contractual obligations, resolve queries and conflicts, and they may be anonymized at the request of the data subject.

11. Your rights and choices

 Our donors, patients, volunteers, suppliers and other collaborators can (and should) always update their personal information by contacting us through the channels made available by the institution.

When requested by you, the Instituto Arapyaú will inform you what information about you is processed, or is filed internally or has been shared with third parties.

You can also ask:

• What for and why we have your personal information;
• How the information was obtained;
• What was done with your personal information;
• With whom we share your information;
• What safeguards we have in place to protect your personal information;
• How long your personal information will be retained at the institution.

You, as the holder of personal data, have a number of rights, among which we highlight:

• Confirmation and information about the processing of your data;
• Easy access to the data that has been collected;
• The anonymization, blocking or deletion of your data;
• The revocation at any time of previously given consent
• The correction of incomplete, inaccurate or outdated data;
• The portability of personal data to another service or product provider.

12. Security

O Instituto Arapyaú follows generally accepted standards to protect personal information sent to us, during transmission and after it is received. However, no security measure is perfect. We recommend using the appropriate security measures for the type of device you are using and in the use of your email and other digital tools.

With this, we seek to establish appropriate security measures to prevent your personal data from being accidentally accessed, used, shared, or lost.

We have implemented procedures to handle any suspected personal data breach and will notify you and any applicable regulatory body of a breach when we are required by law to do so.

13. Privacy of children

 The pages of the Instituto Arapyaú are intended for the general public – we do not seek on this site to collect personal data from or about persons sixteen (16) years of age or younger. If you inform us or we otherwise become aware that we have accidentally received personal information from an individual under the age of sixteen (16), we will delete that information from our records unless it is expressly authorized by the legal representative, or equivalent instrument.

14. Changes to this document and contact details

We may update this term whenever necessary, according to new laws and changes in our donations policy.

We recommend that you refer to this document whenever you have questions regarding our privacy practices.

In case of questions or any requests to exercise your legal rights, please contact:

Full name of legal entity:  Instituto Arapyaú 
Incharge Name: Sabrina Fernandes
Email Address: comunicacao@arapyau.org.br
Postal Address: Av. Nove de Julho, 5617, 3º andar São Paulo – Brasil – 01407-200
Phone: +55 11 3074.1144