Last update: April 2021.
EMICOL's Privacy Policy was created to demonstrate our commitment to treating personal data with security, privacy and transparency.
This Policy describes our guidelines for collecting, processing, storing and protecting personal information in the treatment of personal data as the Controller, when decisions regarding the processing of personal data will be up to EMICOL.
Therefore, this Policy is to show you our data collection activities both online and offline, covering the personal data that EMICOL collects through our various channels, including but not limited to websites, applications, networks third-party social media, customer service, surveys and events. Please note that EMICOL may aggregate combined personal data from different sources (eg our website and offline events) or EMICOL partners. It also tells you how you can access and update your Personal Data, and exercise your rights relating to it in the section “Your rights relating to personal data” for more information on how to object to this.
In some specific cases, if you decide not to provide us with your personal data indicated as necessary (EMICOL will indicate when this is the case by explicitly placing this information in our forms), we may not be able to provide you with our products and/or services .
- Terms and Definitions
- Where do we collect your personal data?
- What personal data do we collect and how do we use it?
- Sharing Personal Data to Third Parties
- Storage of your personal data
- How long will we keep your Personal data?
- When will your Personal data be discarded?
- Your Rights Concerning Personal Data
- What are your choices about how we use and disclose your personal data
- Personal data of children and adolescents
- Cookies
- Publication of Privacy Policy
- Changes to Privacy Policy
- How to get in touch
- Personal Data - is any data related to the identified or identifiable natural person, such as: name, RG, CPF, address, telephone, bank account, vehicle data, among others that identifies him.
- Sensitive Personal Data – are personal data that presents racial or ethnic origin, religious conviction, political opinion, union membership, data relating to health or sex life, genetic or biometric data when linked to you.
- General Law on Data Protection (LGPD) - Law for the protection of personal and sensitive data, which provides for the processing of personal data, including in digital media, by a natural person or by a legal entity governed by public or private law, in order to protect the fundamental rights of freedom and privacy and the free development of personality.
- Sensitive Personal Data – Natural person to whom the Personal Data that are the object of processing refer.
- Controller – Natural or legal person, under public or private law, who are responsible for decisions regarding the processing of personal data.
- Operator – a natural or legal person, under public or private law, who processes personal data on behalf of the Controller;
- Personal Data Processing - is every operation performed with Personal Data, such as: collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation, information control, communication, transfer, dissemination or extraction.
- Goal – processing for legitimate, specific, explicit and informed purposes to the HOLDER, without the possibility of further processing in a manner incompatible with these purposes.
- National Data Protection Authority (ANPD) - It is the body that will supervise and guide the application of the LGPD, as well as being responsible for the application of administrative sanctions in case of violation of the law.
- Privacy Committee - Means the EMICOL people committee composed of representatives of the Board, Board, Legal Department, IT, HR and SGQ, responsible for representing EMICOL before the holders and the ANPD, as well as being responsible for the general guidance regarding the processing of Data Personnel at EMICOL.
- Responsible for the Processing of Personal Data – Person appointed by EMICOL to be responsible for ensuring compliance with their rights and for clarifying doubts about the Treatment of their Personal Data.
- Free access – Right of the Holder to have access to all information regarding the processing of his Personal Data.
- Opposition – It is the Right of the Holder not to want his data to be processed. This right can be exercised in certain specific situations.
- Security – Means the use of technical and administrative measures capable of protecting Personal Data from unauthorized access and from accidental or illegal situations of destruction, loss, alteration, communication or dissemination.
- Transparency – It is the guarantee, to the Holders, of clear, accurate and easily accessible information about the performance of the treatment and the respective treatment agents, observing commercial and industrial secrets.
- Cookies – Also called connection trackers, they are small files that we transfer to your browser or device (such as cell phone or tablet) that allow us to recognize you, know how and when our website is visited, as well as how many people access it. They are helpful for us to better understand your preferences and provide you with more efficient products, deals and experiences.
- legitimate interest – when we conclude that there is a significant interest in the treatment of your personal data for the development of our activities, provided that this treatment generates some kind of benefit for you or if you have already interacted with us at another time;
- Consent – when you expressly authorize, freely and spontaneously, that your data be processed for a specific and clearly informed purpose at the time of obtaining consent. Remember that you can revoke consent whenever you want;
- Compliance with legal obligation – when we process your data because the law requires us to do so;
Contract execution – when we enter into a negotiation, sale or maintain some type of contract with you.
By accessing our website and registering your data, you provide us, and we collect, some personal data relating to you. In addition, we also receive some personal data sent by partners we hire for specific purposes, so that we can comply with legal obligations or applicable regulations and others that will be detailed further below.
EMICOL may collect your personal data through the following sources:
- EMICOL's electronic address (website): our electronic address (website) may be used to collect personal data. This includes both the electronic address (website) that we operate directly through our domains and IP addresses, as well as websites or pages that EMICOL establishes in third-party services, such as Facebook, LinkedIn, and others that offer this type of service.
- Electronic mail and instant messaging systems: services used to maintain electronic communications between you and EMICOL, including those provided directly by EMICOL, or third-party services such as WhatsApp, WeChat, Telegram, SMS (short message service) and the like.
- SAC: Communications with our Customer Service Center.
- Ads, advertisements and online forms: interactions with any type of EMICOL advertisements, advertisements and online forms.
- Off-network (offline) records: records filled out off-line, distributed during events, fairs and other interactions with EMICOL.
- Data received from third parties: including, but not limited to, social media and third-party sites such as Facebook, Instagram, LinkedIn, Google Analytics and the like, data aggregator services, EMICOL partners, public sources and data received during acquisitions from other companies.
EMICOL uses your personal data to provide competitive and innovative technological solutions in electro-mechanical and electronic components in order to provide you with a better shopping experience for our products and services offered.
The following items describe the aforementioned collection sources (online, offline, telephone, etc.), where we may collect various types of personal data about you, and also the purposes for which EMICOL collects your personal data, and the different types of personal data it collects for each purpose. Please note that not all uses below will be relevant to all individuals and may only apply to specific situations.
| COLLECTED DATA | GOAL |
|
Employee Information: such as name, surname, date of birth, place of birth, marital status, photo, RG, CPF, work card, ASO, address, dependents, spouse, parents' data, telephone number, email address (email address ), salary, position, Health and dental plan information.
We collect scanned copies of documents (original documents do not remain in our possession). |
We use this information for the execution of contracts, we only share it in the administrative systems available to fulfill our contractual, legal, tax and labor obligations. Some of this information is shared with the Government, shared with Health Plans, dental, Life Insurance companies, always to comply with the law and provide benefits for our employees. |
| Work with us (candidate information): such as Full Name, Address, Zip Code, Telephones, City, Date of Birth, Place of Birth, Full name of parents, spouse and children, nationality, Education, Marital status and e-mail. |
Used for job seekers, obtaining the candidate's data to place in a database of resumes, which can be used when there is an opportunity and perform a work contract. When you enter your data to register your resume or contact, by clicking the send button, this will be your consent form for the treatment of that data and as the HOLDER you will be confirming the veracity of the data informed at the time of registration, under penalty of civil liability and criminal. |
| Trading partner contact information: such as name, surname, CNPJ, CPF, address, telephone numbers, e-mail address (email). | Capture of registration data for issuing invoices, commercial activities, technical support and BackOffice. |
| Contact information for customer collaborators: such as first name, last name, address, telephone numbers, e-mail address (email). | Capture of registration data for sending samples, issuing invoices, commercial, marketing, SAC. |
| Contact information for service providers: such as name, surname, CNPJ, CPF, RG, ASO, address, telephone numbers, e-mail address (e-mail). | Support service provision contract. |
| Supplier Contact Information: such as Company name, trade name, CNPJ, address, telephone number, cell phone number, e-mail address (email). | Captures data to be sent to the supplier registration and payment area with the financial area. |
| Bank details: such as full name, issuing bank, branch, account and digit. | For payment of receivables with the financial area. |
| Calls to the Customer Service Channel: Communications with our Customer Service Center may be recorded or listened to, in accordance with applicable laws, for local operational needs (eg for quality reasons or training). Payment card details are not recorded. When required by law, you will be informed of such recording at the beginning of your call. | Commercial, Marketing, SAC. |
| Contact information: includes any type of information that may facilitate our contact with you, including your physical mailing address, telephone numbers, e-mail (e-mail) addresses, websites and social media profiles. | |
| Login information: any information to identify and authenticate yourself to services provided by EMICOL, including your username (login), password in irretrievable format (encrypted) and/or security questions and answers. | Operating systems to perform activities. |
| Technical information about your computer equipment or mobile devices: details about your computer or other portable device that was used to access one of our websites, services or applications, including the record of the IP address used to connect your computer or device to the internet, its geographic location, the type and version of operating system and web browser type and version. If you access an EMICOL website or app using a mobile device, such as a smart phone or tablet, the information collected will also include, where permitted, your phone's unique device ID, geographic location and other similar mobile device data . | Understand which of our products and services may interest you and provide information about them and define consumers for new products or services. |
| Information about how you use our websites and services: during your interaction with our websites and services, EMICOL will use automatic data collection technologies to capture information about the actions you have taken. This may include details such as which links you click, which pages or content you view and for how long, and other similar information and statistics about your interactions such as content response times, download errors and duration of visits to certain pages. This information is captured through automated technologies such as Cookies (Browser Cookies, Flash Cookies and the like) and web beacons, as well as via third-party tracking. You are completely free to object to the use of such technologies. For this, see the details in Section “Your Rights Regarding Personal Data”. | Understand which of our products and services may interest you and provide information about them and define consumers for new products or services. |
| Market research and consumer feedback: information you voluntarily share with EMICOL about your experience using our products and services, such as complaints and satisfaction surveys. | Commercial, Marketing and Customer Service. |
| Content generated by personal data holders: we understand any information generated by you, including any content you create and share with EMICOL on third-party social networks or by uploading to one of our websites, applications and other online and offline services (offline), including the use of third-party social networking apps such as Facebook, Instagram, Linkedin and the like. This data includes text, comments, articles, photos, videos, personal stories or other similar content and media. Where permitted, EMICOL collects and publishes content generated by holders in connection with a variety of activities, including dissemination of EMICOL's products and services, contests, awards and other promotions, website community resources, holder engagement and social networks of the XNUMXrd. To find out more about how your information from a third-party social network is obtained by EMICOL, or to choose not to share this social network information, please visit the specific third-party social network website. | Understand which of our products and services may interest you and provide information about them and define consumers for new products or services. |
| Newsletter: With your consent (when necessary in accordance with current legislation), EMICOL will use your personal data to provide information about products or services, such as marketing communications, advertising campaigns or promotions. This can be done through various means of communication, including email, advertisements, SMS messages and phone calls (as permitted by applicable law), in addition to our own websites, social networks and third-party applications. In this situation, the use of your personal data is completely voluntary, which means that you can object or even withdraw your consent to the processing of your personal data for these purposes at any time. To change your marketing communications preferences, see the “Your Rights Regarding Personal Data” section in this policy. | Understanding which of our products and services may interest you and providing information about them, to deliver targeted advertising and content, and to set consumers for new products or services. |
| Sensitive Personal Data: EMICOL does not process personal data considered sensitive in accordance with current legislation, except in situations provided for in current legislation. As such, we do not intend to collect or process sensitive personal data in the normal course of your interactions with our products, services, websites, applications, etc. If we process your sensitive personal data, EMICOL will be supported by the following legal bases: detection and prevention of crime, compliance with applicable law and consent of the holder. | Only for recruiting new employees and complying with labor legislation. |
| Legal or merger/acquisition reasons: If EMICOL or its assets are acquired by, or merged with, another company, including by reason of bankruptcy, we will share your personal data with our legal successors, respecting the requirements of current legislation. We will also disclose your personal data to third parties when required by applicable law; in response to legal proceedings; in response to a request from the competent legal authority; to protect our rights, privacy, safety or property; or to enforce the terms of any agreement or the terms of our website, products and services, in accordance with current legislation. | In accordance with current legislation, EMICOL will use your personal data to fully comply with legal obligations and protect our systems, assets and employees. |
In addition to our platforms that are part of EMICOL, we may share your personal data with the following types of third party organizations:
- Members of our group: we may disclose your personal data to any member of our companies (this means our subsidiaries, our controllers and all of their subsidiaries), to the extent necessary for the purposes stated and in accordance with applicable law, as well as observing the stated legal bases of treatment in that policy.
- International Transfer of Personal Data: on account of our international subsidiary, we may have to transfer your Personal Data within the EMICOL Group and to third parties, for the purposes established in this Privacy Policy. For this reason, we may transfer your Personal Data to other countries, which may have different data protection laws and requirements than those that apply in Brazil. In such cases, we will take all measures to protect your personal data, such as the adoption of contractual clauses that impose on third parties with whom we share your Personal Data the same protection measures adopted by EMICOL.
- Service providers: include outside companies that are used by EMICOL to help operate our business. Service providers and their selected employees are only authorized to access your personal data on behalf of EMICOL for the specific tasks that are required of them based on our direct instructions. Our service providers are contractually obliged to keep your personal data confidential and secure, and in cases of breach they are jointly and severally liable in accordance with current legislation.
- Credit analysis, debt collection and financial services agencies: as permitted by applicable law, credit analysis and/or debt collection agencies are outside companies that EMICOL may use to help us verify your credit status or to collect overdue payments.
- Insurers and/or consultants: we may disclose your personal data to our insurance companies and/or professional advisers, to the extent necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice or entering, exercising or defending administrative, arbitration and/or legal actions.
- Third-party companies that use personal data for their own marketing purposes: Except for situations where you have given your specific consent, EMICOL does not license or sell your personal data to third parties for their own marketing purposes. In cases where this type of sharing occurs, the identity of these third-party companies will be revealed prior to obtaining your consent.
- Third parties who use your personal data for legal reasons or due to merger/acquisition: we will disclose your personal data to third parties for legal reasons or due to a merger or acquisition at EMICOL
Our Platforms may have links (links) to other websites that have their own privacy and confidentiality policies. If you visit other websites, we recommend that you carefully read the privacy practices and policies contained therein, as this Privacy Policy does not cover the practices and policies of third parties, including those who may reveal and/or share information with EMICOL (as per example, the résumé submission platforms).
EMICOL takes adequate measures to ensure that your personal data is kept confidential and secure. However, these protections do not apply to information you have chosen to share in public areas, such as third-party social networks.
- People who can access your Personal Data: your personal data will be processed by our employees or authorized agents, as long as they need to have access to such information, depending on the specific purposes for which your personal data has been collected.
- Measures taken in operating environments: we will store your personal data in operational environments that use security measures, both technical and administrative, capable of preventing any type of unauthorized access.
- Measures that EMICOL expects you to take: It is important that you also play a role in keeping your personal data safe. When creating an account online, please be sure to choose a password that is strong to prevent unauthorized parties from guessing it. We recommend that you never reveal or share your password with others. You are solely responsible for keeping this password confidential and for any action taken through your account on EMICOL's compatible websites and services.
If you use a shared or public computer, never choose the option to remember your login name, email address or password, and make sure that you are logged out of your account (logged out) whenever you leave the computer. You must also use any privacy settings or controls that EMICOL provides on our website or services, including those considered optional.
In accordance with current legislation, EMICOL will use your personal data for as long as necessary to satisfy the purposes for which your personal data were collected, as described in this policy, or to comply with applicable legal requirements.
Personal data used to provide a personalized experience to you will be kept exclusively for the time allowed, in accordance with current legislation.
When it is no longer necessary to use your personal data collected, EMICOL will promote the disposal in accordance with the applicable legislation, regardless of prior notification to the HOLDER, terminating the data processing at this time.
You can obtain details about the retention of your personal data through the communication channels detailed in this policy.
When it is no longer necessary to use your personal data collected, EMICOL will promote the disposal in accordance with the applicable legislation, regardless of prior notification to the HOLDER, terminating the data processing at this time.
You can obtain details about the retention of your personal data through the communication channels detailed in this policy.
You have the right to confirm whether or not we process your personal data and where we do it, as well as verifying its existence, accessing, revising, modifying and/or requesting an electronic copy of your personal data information that is processed by EMICOL.
You are also entitled to request details about the origin/source of obtaining your personal data or sharing this data with third parties.
At any time, you may also limit the use and disclosure or revoke your consent to any of our activities for the processing of your personal data, except in situations provided for in current legislation.
These rights can be exercised through the communication channels detailed in this policy, and your identity must be validated by providing a copy of your identity document with a photo, in accordance with current legislation.
Whenever a request is submitted without providing the necessary evidence to prove the legitimacy of the data subject, the request will be automatically rejected. We emphasize that any identifying information provided to EMICOL will only be processed in accordance with and to the extent permitted by applicable laws.
In some circumstances, you have the right to delete your personal data without undue delay. These circumstances include: personal data is no longer necessary in relation to the purposes for which it was collected or processed; you withdraw consent for consent-based treatment; you are opposed to treatment; processing is for marketing purposes; and personal data were processed illegally. However, there are exclusions to your right to object to the treatment, such as when it is necessary to exercise the right to freedom of expression and information, to comply with legal and/or regulatory obligations, to exercise rights in proceedings, or even for the legitimate interest of EMICOL.
You may exercise any of your rights in relation to your personal data, including the right to review and edit your personal data, upon request to our Privacy Committee described in the “Privacy Channel” section.
EMICOL does its utmost to handle your personal data responsibly and securely and comply with relevant legislation. However, if you believe that the processing of your personal information violates data protection legislation, you have unresolved concerns, you have the right to complain to the competent data protection authorities and request that EMICOL immediately stop the processing in question.
EMICOL will do its utmost to give you freedom of choice regarding the personal data you provide us. The following mechanisms give you control over the processing of your personal data:
- Cookies/Similar Technologies: you can manage your consent using:
- Our consent management solutions;
- Your browser settings to refuse some or all Cookies and similar technologies, or to alert you when they are being used. - Advertising, marketing and promotions: you can consent to your personal data being used by EMICOL to promote our products or services through checkboxes located on registration forms or by answering questions submitted by our representatives and social networks.
If you decide that you no longer wish to receive such communications, you may unsubscribe from receiving marketing-related communications at any time by following the instructions provided in such communications.
- Targeted advertising: EMICOL may partner with ad networks and other service or advertisement providers, which display advertisements and other advertisements on our behalf or on behalf of other companies not affiliated with EMICOL. Some of these advertisements may be tailored to your interests, based on information collected on EMICOL's websites and other compatible services or on the websites of organizations not affiliated with EMICOL.
You may contact us using the communication channels detailed in this policy for more information on how to manage or opt-out of your participation in targeted advertising.
EMICOL does not knowingly request, collect, process, store or share personal data of underage children and adolescents, except in cases where there is a legal provision, or explicit consent of their parents or legal guardians, in accordance with current legislation. If we discover that any type of processing of this type of personal data has taken place, unintentionally, we will remove that child or adolescent's personal data from our records quickly.
Cookies are small text files that can be placed on your computer or handheld device by websites or web services that you use. They are used to ensure the proper functioning of websites and other online services, as well as to provide information to the owners of the website or online service.
Cookies facilitate the process of adapting EMICOL's websites to your personal needs, facilitating their use whenever possible and receiving feedback on the satisfaction of visitors.
EMICOL uses the following types of cookies on its compatible websites and services:
- Session cookies: are temporary use cookies, which are deleted the moment you close your browser. When you restart your browser and return to the website that created the cookie, that website treats you as a new visitor.
- Persistent cookies: are those cookies that remain on your browser until you manually delete them or until your browser deletes them according to the duration period established by the cookie. These cookies will recognize your return as a visitor to an EMICOL website or service.
- Required cookies: are cookies strictly necessary for the operation of an EMICOL compatible website or service. They allow you to browse the site and use our features.
- Cookies that send us information about you: at EMICOL we place this type of cookie on a compatible EMICOL website or service and this type of cookie can only be read by our compatible websites and services.
- Cookies in EMICOL advertisements: we place cookies on advertisements and advertisements that are displayed on compatible third-party websites and services. We obtain information through these cookies when you click on or interact with the advertisement or advertisement. In this case, EMICOL is placing a “third party” cookie. We may use this data obtained by third-party cookies to send you other advertisements that we believe are relevant or of interest to you based on your past behavior.
- Cookies that share your information to third parties: are cookies placed on an EMICOL website by our partner companies, such as online advertising services. They may use the data collected by these cookies to anonymously send you targeted advertisements from other websites based on your visit to EMICOL's compatible websites or services.
EMICOL's websites and services may also use other tracking technologies similar to cookies, which are capable of collecting information such as IP addresses, log files and web beacons, among others. This data is also used to help us adapt EMICOL's websites and other compatible services to your personal needs.
See details below:
- IP addresses: an IP address is a number used on the internet or on a network to identify your computer. Every time you connect to the internet, your computer receives an IP assigned by your internet service provider. We may register IP addresses for the following purposes:
- Handling of technical problems;
- Maintenance of the protection and security of our websites and other online services;
- Gain a better understanding of how our websites and other online services are used;
- Adapt our content to your needs depending on your geographic location. - Log Files: EMICOL or a third party working on our behalf may collect information in the form of log files that detail website activities and collect statistics about a user's browsing habits. Typically, these records are generated anonymously and help us understand details such as:
- The type of browser and the system used by users of our websites or online services;
- Details about the user's session, including the originating URL, the date, time and which pages the user visited on our compatible sites and services, and how long the user spent using them;
- Other navigation or click count details including website traffic reports, unique visitor counts and similar data. - Web beacons (web beacons): EMICOL may use web beacons (or transparent GIFs) on EMICOL's websites or electronic communications. Web beacons (also known as webbugs or web beacons) are small sequences of code that allow you to deliver a graphical image on a web page for the purpose of transferring data back to EMICOL. We use web beacon information for a variety of purposes, including:
- Understand how a user responds to email campaigns;
- Traffic reports from our compatible websites and services;
- Perform unique visitor counts, audit and reporting of advertising and email and personalization on our websites and other compatible services.
It is important to remember that it is up to you to ensure that the settings on your computer or portable device reflect whether you consent to the use of cookies or not.
Most browsers allow you to set rules to warn you before accepting cookies or simply rejecting them. You do not need to have cookies enabled to use or browse most of EMICOL's websites and online services, however, in this case, we cannot guarantee that you will be able to access all of its features. We recommend that you look at the “help” button on your browser how to perform this type of configuration. Remember that if you use different browsers, or even different computers and/or handheld devices in different locations, you will need to ensure that each device and browser is set to your personal cookie preferences.
As our web beacons can be part of a web page, it is not possible to opt-out of this type of feature, but you can make it completely non-functional by enabling the “opt out” feature. -out” for cookies placed by this flag.
Cookies facilitate the process of adapting EMICOL's websites to your personal needs, facilitating their use whenever possible and receiving feedback on the satisfaction of visitors.
This Privacy Policy will be posted on our website for consultation as well as may be requested through our Privacy Committee described in the “Privacy Channel” section
EMICOL may change this policy whenever it decides to change the way we treat your personal data, and such updates are posted on our website and can be checked at any time.
We reserve the right to make changes to our practices and this Policy at any time, as long as we maintain compliance with current legislation.
We recommend that you periodically visit our website to consult any changes to this Privacy Policy. By continuing to use our products and services after a change in the Privacy Policy, you are agreeing to the new conditions, but you can always express your disagreement through our communication channels, if applicable.
In the event of significant changes to this privacy policy, we may notify you via email of such changes or via specific messages on our website.
In cases where changes to this Privacy Policy result in changes in the personal data processing practices that depend on your consent, we will request your consent to the new terms of the Privacy Policy in relation to the processing of data and purposes indicated.
You can contact us to:
- Asking questions or comments about this policy and our privacy and personal data protection practices;
- Complain;
- Confirmation of the existence of processing of your personal data;
- Obtain information on how to access your personal data;
- Perform/Request the correction of incomplete, inaccurate or outdated personal data;
- Obtain information about the anonymization, blocking or deletion of unnecessary, excessive or processed data in violation of the provisions of current legislation;
- Obtain information about the portability of your personal data to another service or product provider, upon express request, in accordance with current legislation;
- Request the deletion of personal data processed with your consent, except in the cases provided for in current legislation;
- Request details of the public and private entities with which we share your personal data;
- Obtain information about the possibility of not providing consent and the consequences of this refusal;
- Carry out the withdrawal of consent for the processing of your personal data, except in the cases provided for in current legislation;
- Other rights of the holder of personal data, according to current legislation.
How to do this?
To make requests and speak with our Data Processing Officer, use the contacts below:
- Responsible for processing personal data: John Brosler
- Email: [email protected]
- Phone: 0800 364 2651 - Option 2
EMICOL will receive, investigate and respond, within a reasonable period of time, to any request or complaint about the way EMICOL handles your personal data, including complaints about breaches of your rights under applicable privacy and personal data protection laws.