Conte Conosco App Privacy Policy

The Conte Conosco app is maintained and operated by TRIBUNAL REGIONAL DO TRABALHO DA 18 REGIÃO.

We collect and use some personal data that belongs to those who use our app. In doing so, we act as controller of this data and are subject to the provisions of Federal Law n. 13.709/2018 (General Law on Personal Data Protection – LGPD).

We take care of the protection of your personal data and, therefore, we provide this privacy policy, which contains important information about:

• Who should use our app
• What data do we collect and what do we do with it;
• Your rights in relation to your personal data; and
• How to contact us.

1. Who should use our app

Our app should only be used by persons over the age of eighteen who are or have been court employees. Therefore, children and teenagers should not use it.

2. Data we collect and reasons for collection

Our application collects and uses some personal data of our users, in accordance with this section.

2.1. Personal data expressly provided by the user

We collect the following personal data that our users expressly provide us when using our app:

• Information about your health

The collection of these data takes place at the following times:

• When the user answers the application’s health questionnaires

The data provided by our users is collected for the following purposes:

• Provide the user with periodic monitoring of their health and quality of life

2.2. Personal data obtained in other ways

We collect the following personal data from our users:

• Name, age, corporate email, registration number

The collection of these data takes place at the following times:

• When the user logs into the app

These data are collected for the following purposes:

• Identify the user and save your answers

2.3. Sensitive data

The app may collect the following sensitive data from users:

• Data relating to the user’s physical and mental health

The collection of sensitive data takes place at the following times:

• Health data is collected through the responses to the questionnaires, but the user has the option to share or not this information with the Court’s Health Management.

These data are collected for the following purposes:

• Provide information to the Health Management to monitor the quality of life of magistrates and civil servants.

The collection and use of sensitive personal data will only be done with the specific and highlighted consent of its holders, except, if applicable, in cases where the General Data Protection Law allows the processing of this type of data based on legal bases other than consent .

In any case, the processing of sensitive personal data will only take place to meet specific purposes expressed in this policy or duly informed to the user by other means.

2.4. Data collection not expressly provided

Occasionally, other types of data not expressly provided for in this Privacy Policy may be collected, provided they are provided with the user’s consent, or even if the collection is permitted based on another legal basis provided for by law.

In any case, the data collection and the processing activities arising from it will be informed to the users of the application.

3. Sharing personal data with third parties

We do not share your personal data with third parties. Despite this, it is possible that we do so to comply with a legal or regulatory determination, or even to comply with an order issued by a public authority.

4. How long will your personal data be stored

The personal data collected by the application is stored and used for a period of time that corresponds to what is necessary to achieve the purposes listed in this document and that takes into account the rights of its holders, the rights of the controller of the application and the applicable legal or regulatory provisions.

Once the storage periods for personal data have expired, they are removed from our databases or anonymized, except in cases where there is a possibility or need for storage due to legal or regulatory provision.

5. Legal basis for the processing of personal data

Each operation for processing personal data must have a legal basis, that is, a legal basis, which is nothing more than the justification that authorizes it, provided for in the General Law for the Protection of Personal Data.

All of our personal data processing activities have a legal basis on which they are based, among those permitted by law. More information about the legal bases that we use for operations for the processing of specific personal data can be obtained from our contact channels, informed at the end of this Policy.

6. Security measures in the processing of personal data

We employ technical and organizational measures capable of protecting personal data from unauthorized access and from situations of destruction, loss, misplacement or alteration of this data.

The measures we use to take into account the nature of the data, the context and purpose of the processing, the risks that a possible violation would generate for the user’s rights and freedoms, and the standards currently used in the market by companies similar to ours.

Among the security measures adopted by us, we highlight the following:

• Our users’ data is stored in a secure environment;
• We limit access to our users’ data so that unauthorized third parties cannot access it;
• We use SSL (Secure Socket Layer) certificate, so that data transmission between users’ devices and our servers happens in an encrypted form;
• We keep records of all those who have, in any way, contact with our data.

Even if you adopt everything in your power to avoid security incidents, it is possible that there may be a problem exclusively by a third party – such as in the case of hacker or cracker attacks or even in the case of the user’s sole fault, which it occurs, for example, when he himself transfers his data to a third party. Thus, although we are in general, responsible for the personal data we process, we disclaim responsibility in the event of an exceptional situation such as these, over which we have no control.

In any case, in the event of any type of security incident that could generate relevant risk or damage to any of our users, we will communicate those affected and the National Data Protection Authority about what happened, in accordance with the provisions of the General Protection Law of Data.

7. Changes to this policy

The present version of this Privacy Policy was last updated on: 08/19/2021.

We reserve the right to modify these rules at any time, especially to adapt them to any changes made to our application, whether by making new features available, or by suppressing or modifying existing ones.

Whenever there is a change, our users will be notified of the change.

8. How to contact us

To clarify any doubts about this Privacy Policy or about the personal data we handle, contact our Personal Data Protection Officer, through one of the channels mentioned below:

E-mail: tecnologia.sistemas@trt18.jus.br