This privacy policy demonstrates the commitment
of Coretrans to the protection and treatment of personal data, within the scope of the LGPD (Brazilian Federal Law 13.709 / 2018).

1. Data Treatment

• Coretrans may collect personal data directly from the owner or through third parties who have a relationship with the owner.
• Personal data can be obtained in person or by phone, email, message, or published by the owner himself on websites or social networks, always respecting his privacy.
• Only essential personal data will be collected to serve the purposes of relationship with the owner.
• Coretrans, according to the relationship with the owner, is limited to processing your personal data in order to comply with legal or regulatory obligations, for business activities and for the exercise of the right in legal and administrative processes.

2. Sharing

• Coretrans will eventually need to share the owner’s personal data with employees, service providers, banks and government agencies, while respecting the purpose for processing the data.
• These entities, whenever possible, will be subject to specific contractual clauses regarding the treatment of personal data.

3. Safety

• The personal data treated at Coretrans are stored according to market security standards, aiming to guarantee protection against improper access.
• Coretrans, through its information security policy, also establishes guidelines aiming at collective awareness regarding privacy and data protection.
• Note, however, that there are no fully secure systems. Therefore, Coretrans is not responsible for any damage caused by the conduct of third parties, as well as in cases of force majeure beyond its control.

4. Retention

• Personal data, processed by Coretrans, will be deleted when they are no longer needed for the purposes for which they were collected, or when requested by the owner, except in the event of the need to comply with a legal obligation or exclusive use of the company, to exercise their rights in judicial or administrative processes.

5. Owner Rights

• The rights of the owner of personal data, according to Chapter III of the LGPD, in relation to his personal data processed by Coretrans, can be exercised at any time and upon request.
• This request must be made by the owner of personal data through Coretrans contact channels, for further evaluation and necessary measures.

6. Data Protection Officer

• Robson Ricardo Klöppel – dpo@coretrans.com.br

7. Modification to this policy

• Coretrans reserves the right, in its sole discretion, to add, modify or remove portions of this policy at any time.

CORETRANS COMERCIAL LTDA

January / 2021