​

Privacy Policy

General Data Protection Law (Law No. 13.709/18)

​

1. Introduction

1.1. WR - World Retail is strongly committed to protecting your Personal Data and complying with the requirements of the General Data Protection Act (Law No. 13,709/18). This privacy policy describes how and why we collect and use personal data and how data subjects exercise their rights. WR processes your Personal Data to fulfill business obligations and for different purposes. The means of collection, legal basis of processing, use, disclosure and retention for each purpose may be different. 

​

1.2. In this document, when we refer to “WR”, we are referring to World Retail.

1.3. When we use the expressions "you" or "your", we are referring to you, the holder of Personal Data: (i) potential customers and/or customers; (ii) visitors; (iii) third parties in general who contact the company through its service channels or in its physical offices. 

1.4. Personal Data is any information related to an identified or identifiable person and that requires protection under the General Data Protection Act.

2. Purpose

2.1. This policy describes why and how we collect and use your Personal Data and provides information about the rights of data subjects.

2.2. To learn more about our specific handling activities, please read this policy carefully.

3. Target audience

3.1. This privacy policy is intended for data subjects, whether our customers, the public and third parties in general.

4. Personal data collected

4.1. Below we set out the categories of Personal Data we use:

Category

personal data processed

Collection purposes

name and initials

First name

Middle name

Last name

• Provide consultancy, assistance, advisory, market and competition research services, among other services we provide to our clients, preparing various contracts, reports, analyzes and other documents related to our activities;

• Hiring third parties, service providers and suppliers;

• Defense in judicial or administrative proceedings;

• Compliance with legal obligations to which we are subject, due to the activities we perform. 

• Creating opportunities to present our solutions to our customers and potential customers;

• Strategic management in Retail for issuing invoices for services provided and monitoring payment;

• Sending invitations, publications and various communications;

​

5. How personal data is collected

5.1. Personal Data is mainly collected in the following ways:

5.1.1. Personal Data provided by the data subject – we collect Personal Data necessary to initiate and maintain a commercial and/or contractual relationship with the data subject via electronic channel, for inclusion in electronic systems maintained by WR or partners.

5.1.2. Personal Data provided by third parties – we also process Personal Data that is provided by third parties. For example, data received from public officials in bankruptcy proceedings or provided by our corporate clients in relation to their employees, third parties who provide services to them, etc.

5.2. The services offered by WR are intended for people over 18 years of age or emancipated minors. For Personal Data of children or adolescents, the collection is carried out to comply with legal or regulatory obligations and for the exercise of rights in administrative or judicial proceedings, respecting the legal requirements for the treatment of such Personal Data._cc781905-5cde-3194-bb3b- 136bad5cf58d_

6. Purpose of personal data

6.1. All Personal Data collected is used for the provision of services or their provision. The privacy of the data subject is respected. Therefore, all Personal Data and information are treated as confidential and used only for the purposes described herein.

6.3. Personal Data is processed on the following legal bases (the “Legal Basis”):

• Consent – we use consent to legitimize the processing of Personal Data in processes that the data subject can choose to carry out or not – for example, for photo collection in the control of visitors.

• Compliance with legal or regulatory obligation – we use this legal basis to comply with legal requirements, such as complying with certain procedures determined by law – for example, in cases of money laundering or anti-corruption measures.

• Regular exercise of rights – we use the regular exercise of rights in judicial, administrative or arbitration proceedings – for example, in judicial or administrative defenses in proceedings to which we are a party.

• Contract execution – we use the legal basis of contract execution for the processes related to the provision of services.

• Legitimate interest – we use legitimate interest to support services that are of interest to our customers, for example, forensic investigation services or related to information technology. We also use this legal basis to carry out WR promotion activities.

7. Personal data retention period

7.1. Personal Data will be kept for the duration of WR's contractual relationship with the data subject or with the customer. After the termination of this relationship, they will be kept for the time necessary to comply with legal obligations and exercise their rights, including for the purpose of auditing our activities.

​

88. Sharing of data with third parties in Brazil and abroad

8.1. We will only share your personal data with third parties when we are able to do so in accordance with the law or the contract we have entered into. When we share your data with third parties, we take contractually established security measures so that personal data protection mechanisms appropriate to the legislation and accepted by us are adopted.

9.4. If you have any questions about how we share data, please contact our data protection team at email wretailms@gmail.com or

by WhatsApp (67) 99245-6260 .

9. Cookie Policy

9.1. A cookie is a file that contains an identifier (a sequence of letters and numbers) that is stored by the browser. The identifier is sent back to the server each time the browser requests a page from the server. Cookies do not normally contain information that personally identifies a user, but the personal information we store about the user may be linked to information stored in and obtained from cookies.

9.2. We use cookies to collect data that allow better navigation on our website. For more information about the cookies we use, check out our  Cookies Policy .

10. Measures for the security of personal data

10.1. WR has a solid Information Security Policy updated in a manner consistent with the best information security practices.

10.2. Main measures adopted by WR to protect your Personal Data:

• Confidentiality: All WR employees are subject to complete confidentiality and any contracted third parties are required to sign a confidentiality agreement if it is not part of the main agreement entered into between the parties.

• Transparency. WR always keeps users informed about changes in the procedures for handling Personal Data that aim to protect data privacy and security, including the establishment of appropriate practices and policies. The data subject may, at any time, request information on where and how Personal Data is stored, protected and used. 

• Isolation. All access to Personal Data is blocked by default using a zero-privilege policy. Access to Personal Data is restricted to individually authorized personnel. The area responsible for the data issues authorizations and maintains a record of authorizations granted. Authorized personnel are given minimal access to the database, at the level strictly necessary to carry out their activities.

• Rights of the holder of Personal Data. WR enables the exercise of the data subject's rights in an accessible and easy-to-use channel.

• Security incident reporting. In the event of a security incident that may cause risk or relevant damage to the user's data, WR will notify the National Data Protection Authority (ANPD), once it is installed, and, as the case may be, notify the holder, in in both cases, within a reasonable period, with information on the description of the nature of the Personal Data affected, including an indication of technical and security measures used for data protection, related risks and measures that have been or will be adopted to reverse or mitigate the effects. of the damage.

10.3. For the purposes of the provisions of the item above, “security incident” means a breach of security that leads to unauthorized access, accidental or unlawful situations of destruction, loss, alteration, communication or any form of improper or unlawful treatment.

11. Rights of data subjects

11.1. The data subject may exercise their rights directly or through a legally constituted representative. 

11.2. Your rights consist of: 

1. request for confirmation of the existence of the processing of Personal Data;

2. data access;

3. correction of incomplete, inaccurate or outdated data;

4. anonymization;

5. blocking or elimination of unnecessary, excessive or treated data in violation of current legislation;

6. data portability to another service provider;

7. information about the public or private entities with whom we share your data. 

11.3. These requests must be made by email wretailms@gmail.com 

11.4. Inaccurate or outdated Personal Data will be corrected as soon as the data subject informs us of the inconsistencies. These corrections will be kept in our archive as historical confirmation of the change.

​

12. How to contact WR - RORLD RETAIL

12.1. If you have any questions regarding this Privacy Policy, or even to update, change, correct or delete any information, the data subject may contact WR as follows:

• Digital Service (e-mail):  wretailms@gmail.com 

​

13. Changes to this policy

13.1. This Policy may undergo updates. Therefore, we recommend that you periodically visit this page so that you are aware of the changes. If material changes are made that require new authorizations from you, we will post a new privacy policy.

13.2. It is essential that the user carefully reads any communication forwarded regarding changes to the Policy.