PRIVACY POLICY

SERRA e COMPANY’S PRIVACY POLICY

Serra e Company cares about your data, being committed to our corporate values, developed this privacy policy based on the LGPD (General Data Protection Law). This privacy policy aims to inform transparently to our customers, employees, partners and third parties (named from now on as user), what information we collect, what are the reasons, if we share and with whom, how we store and protect users' personal data, as well as their rights and how to exercise them.

This privacy policy applies to the website and application of Serra and Company.

If you do not agree with the terms of the current policy, you must not use the website and application of our company.

1. What you need to know about the LGPD (General Data Protection Act)

The LGPD is a law that aims to protect the data of individuals and guarantees the rights of data subjects, establishing rules for data collection, data storage, data deletion, data processing and sharing.

2. What data Serra and Company collects

Most of the services provided by Serra and Company are B2B (company to company), so we do not process personal data of customers, however we are data operators of the customers of the insurers with whom we relate commercially, reason why we collect on behalf of the corresponding insurer the data of those involved in the cargo transport claims of all modes.

The data collected in the accident are as follows:

Driver identification data: name, surname, CPF, RG, date of birth, nationality, marital status, profession, sex, CNH number.

Data of the vehicle;

Details of the insurer’s client.

 3. Users

The users of the Serra e Company system (including the APP), upon receiving access, acknowledge the term of acceptance of the privacy policy, and reiterate that the data collected has their consent and will be used for the specific purpose of the services provided to our customers.

4. Use of the data

Serra e Company uses the data collected to make the insurance regulation, that is, to generate information for the insurance companies about the claim.

5. Information storage and exclusion

The data storage is done for the shortest time possible and necessary, according to the contractual clauses with our clients and respecting the current legislation according to each case.The exclusion of the data will be done definitively in the term stipulated by the insurance companies, always observing the legal and regulatory requirements. Physical files will be deleted by incineration and digital files will be deleted definitively from all media (hd and cloud).

6. Treatment and Transfer of Information

The use of the data will be pertinent to the claim and the information and its use will be restricted to Serra e Company, the Insurance Company that controls the data, the Insurance Broker hired by the Insured and the Insured.The information collected and transcribed in the claim notice, in our preliminary claim form and in the folow up are forwarded according to the SLA (service level agreement) of each insurance company and can be shared with the following parties: Insurance Company, Insurance Broker hired by the Insured and the Insured.

7. User's Rights and Duties

When authorized by the applicable laws, the User may, through the official communication channels of Serra e Company, request- The verification of his/her personal data;- The revocation/restriction of a previous consent at any time, if any;- The copy of his/her personal data;- The correction of personal data that present any inaccuracy;- The deletion of your personal data.It is the sole responsibility of the User:- Entering only true information on the sites and/or applications of Serra e Company- To keep your logins and passwords secret whenever you access the Internet and before third parties;- Comply with the provisions contained in this Policy.

8. Legislation and competent jurisdiction

This Policy shall be governed, interpreted and executed in accordance with the Brazilian laws, regardless of conflicts of these laws with laws of other states or countries, being competent the Forum of the User?s place of residence in Brazil, to solve any doubt arising from this instrument. The User expressly consents to the jurisdiction of this court, and hereby waives the jurisdiction of any other forum, however privileged it may be or may come to be.

 9. Data protection and privacy

Serra e Company's Privacy Standard is constituted according to the corporate norms of this institution, respecting the legislation in force in Brazil.All clarifications and use of users' rights can be obtained with our

DPO (Data Protection Officer), Mr. Luiz Carlos Gonzaga França.

10. Person responsible for the treatment of information

For questions, eventual requests regarding LGPD (General Law of Data Protection) and to learn more about our privacy policy, please contact our DPO (Data Protection Officer), from Monday to Thursday from 8:00 am to 6:00 pm, and Friday from 8:00 am to 5:00 pm.

Mr. França

E-mail: franca@serraecompany.com.br

Phone number: (11) 20956400