Collection of Children’s and Adolescents’ Data
Although not a focus of VACCINAR, if data from children is collected, it will be done only with specific consent from parents or guardians. Such information will be used exclusively to promote the child’s best interest and retained only for as long as necessary.
Children’s and adolescents’ data will be collected only upon the specific consent of at least one parent or guardian. The processing of such data will always seek to protect and benefit the child.
Information about data collection will be presented in an especially clear and accessible manner, ensuring that children can understand what is happening. VACCINAR does not allow the registration of children and adolescents and does not target them in its campaigns.
Sharing of Personal Data
VACCINAR may share your personal data in certain situations, always respecting the principles of necessity and purpose, and adopting measures to ensure security and accountability in data processing.
Only our partners and service providers who genuinely need access to your personal data will receive it, so that we can operate effectively in line with our instructions.
Your data may be shared in the following circumstances:
-
Judicial, administrative, or governmental authorities, to comply with legal, regulatory, or court requirements;
-
Partner company specializing in whistleblowing management, ensuring a secure reporting channel;
-
Partner company supporting our recruitment and selection process;
-
Sales teams, to provide personalized and efficient service;
-
External law firms, for legal support and rights protection;
-
Business partners collaborating on client campaigns and initiatives;
-
Service providers, suppliers, and partners for execution of contracted services;
-
Platform providers to enhance website and digital service functionalities;
-
Internal departments responsible for analysis and handling of inquiries, suggestions, and complaints;
-
Freight carriers, to ensure the delivery of purchased products.
All sharing occurs under formal agreements that define the duties and responsibilities of each party, ensuring compliance with data protection legislation.
Security in Data Processing
VACCINAR adopts strict technical, administrative, and organizational measures to ensure the protection of personal data, preventing unauthorized access, loss, alteration, or any improper processing.
Among the implemented measures:
- Best practices in governance, ensuring compliance and transparency;
- Restricted access control, both physical and digital;
- Robust information security systems to prevent unauthorized access;
- Regular data backups ensuring information integrity;
- Surveillance systems with cameras for physical security, retaining footage for up to 30 days.
Our commitment is to safeguard your privacy and data security, acting diligently and responsibly. However, no system is entirely impenetrable, and third-party attacks, such as hacking, may occur.
Data Retention Period
Data provided to VACCINAR will be retained only for the time necessary to fulfill the purpose for which it was collected.
Personal data will be kept only as long as necessary according to the purposes outlined above and applicable laws and regulations. We use your personal data solely for the duration required to achieve the specific purpose for which it was collected.
The storage of data in our systems is directly linked to its purpose. For instance, data related to a temporary campaign will be retained only for the campaign’s duration.
Conversely, registration data of employees, partners, and interns will be retained and updated while the person remains associated with VACCINAR, unless required for regulatory compliance or legitimate use in legal proceedings.
Data on children collected with legal guardian consent will be deleted immediately after use, as provided by the LGPD.
We emphasize that personal data will be kept while our relationship lasts to ensure contractual and regulatory compliance.
After termination, data may be retained for additional periods, if necessary, for:
- Compliance with legal obligations and statutory retention periods;
- Exercise of legal rights, including defense in judicial or administrative proceedings.
When no longer necessary, data will be securely deleted.
Data collected for recruitment processes may be retained for up to 36 months, according to our internal policy.
International Data Transfers
VACCINAR may, in certain situations, store personal data on servers located outside Brazil, such as in cloud environments.
When international data transfers occur, we ensure that our partners:
- Adopt security controls compatible with the destination country’s requirements;
- Comply with Brazilian data protection laws, including LGPD provisions;
- Enter into formal agreements ensuring accountability in data processing.
This reinforces our commitment to protection, security, and legal compliance in handling your personal data under the highest privacy standards.
Rights of Data Subjects
VACCINAR is committed to responding promptly and respecting your right to exercise the guarantees provided by the LGPD and the Brazilian Internet Civil Framework.
As a data subject, you have the right to exercise, at any time, the following rights guaranteed under the LGPD:
-
Access to your personal data, allowing you to view stored information;
-
Blocking or deletion of excessive or unlawfully processed data;
-
Confirmation of whether we process your personal data;
-
Correction of incomplete, inaccurate, or outdated data;
-
Objection to processing when it violates the law.
-
Deletion of data processed based on consent, when applicable;
-
Information on data sharing with public or private entities;
-
Withdrawal of consent, when processing is based on it;
-
Review of automated decisions, ensuring transparency in automated processes.
VACCINAR is committed to responding promptly and respecting your right to exercise the guarantees provided by the LGPD and the Brazilian Internet Civil Framework.
If you wish to exercise any of these rights, you may do so through our Data Subject Portal or by contacting our DPO at
[email protected].
Your request will be reviewed and answered within 15 calendar days, as established by the LGPD. If additional time is needed, we will inform you of the reason.
To ensure your identity and prevent fraud, we may request additional documents or information. If, for any reason, we are unable to fully meet your request, we will provide a clear and transparent explanation.
Finally, we note that your data may also be collected and processed in a way that does not personally identify you.
Whenever possible, we also process data in anonymized form, meaning you cannot be personally identified. According to the LGPD, anonymized data does not fall within the scope of the law since it cannot identify the data subject.
Questions and Updates to This Privacy Notice
Questions About This Notice
If you have any questions or need further clarification about our Privacy Notice, please contact our team at
[email protected].
We are available to answer your questions clearly and transparently.
Updates to This Notice
This Privacy Notice may be updated by VACCINAR whenever necessary. When updates occur, we will communicate them clearly and transparently to keep you informed of any changes. We recommend that users review this document periodically to stay up to date on how we protect personal data.