Workers Informática and the LGPD (Brazilian General Data Protection Law)

Workers Informática is committed to respecting the privacy of its employees, partners, clients, suppliers, and users of this website, and to maintaining transparency regarding data processing.

Accordingly, we have established this policy to clarify how we process personal data, in compliance with legal provisions—including the General Data Protection Law (LGPD), Law No. 13.709/2018. This law governs the processing of personal data (including via digital means) by public or private legal entities, aiming to protect the fundamental rights of freedom and privacy, as well as the free development of the natural person's personality.

Through these guidelines, we commit to efforts ensuring the protection of personal data by disseminating—both internally and externally—appropriate practices for data collection, storage, processing, and disposal, as well as through:

​

• physical access control for employees who handle stored personal data;

• logical access control for the system;

• monitoring of system usage through the recording of access logs and operations performed;

• use of resources to ensure the authenticity of access records and operations performed;

• backup routines to preserve data and prevent loss or unauthorized destruction;

• adoption of technical standards established by the National Data Protection Authority (ANPD).​

IDENTIFICATION OF RESPONSIBLE PARTIES

Controller: the natural person or legal entity (public or private) responsible for decisions regarding personal data processing—this is Workers itself, represented by its managing partners;

Processor: the natural person or legal entity (public or private) that processes personal data on behalf of the controller—this includes everyone who processes personal data internally in any capacity. In the administrative area, this includes team supervisors (Management, HR, Sales, Finance, IT); in the Technical Area, it includes all Systems Analysts and Architects who handle personal data;

 

Data Protection Officer (DPO): “In compliance with the provisions of Article 41, Paragraph 3, the ANPD published Resolution CD/ANPD No. 2 of January 27, 2022. This resolution approves the Regulation on the Application of the LGPD for Small-Scale Processing Agents, which includes a provision waiving the requirement to appoint a Data Protection Officer.”

 

This matter is published on the ANPD (National Data Protection Authority) website:

https://www.gov.br/anpd/pt-br/assuntos/noticias/conselho-diretor-aprova-regulamento-de-aplicacao-da-lgpd-para-agentes-de-tratamento-de-pequeno-porte

 

Resolution (attached):

https://in.gov.br/web/dou/-/resolucao-cd/anpd-n-2-de-27-de-janeiro-de-2022-376562019

 

DATA COLLECTED AND PROCESSED

In the course of our business activities, we may collect and process personal and/or sensitive data—as defined by Law No. 13.709/2018—belonging to clients, employees, partners, and others who voluntarily or incidentally send us documents or other messages that may contain personal data.

Workers Informática may collect the aforementioned information in various ways: directly from the data subject or a related party, or through public sources. Regardless of the data source, processing will be governed by this Policy, and data subjects may contact us via email at info@workers.com.br.

 

CONSENT

Our contracts with clients and employees contain specific clauses seeking consent for data usage. These clauses clarify which data will be collected, how it will be used, any potential sharing, access criteria, and the method and timeframe for data disposal. Similarly, contracts established with partners and suppliers to meet demands requiring the provision of personal data mandate actual adherence to this data processing policy.

For those who submit data—whether voluntarily or incidentally—a Data Use Consent Form will be sent, clarifying how the data is used, access criteria, and the method and timeframe for its disposal.

 

PURPOSES and LIMITS OF PERSONAL DATA PROCESSING

Workers Informática processes personal data strictly within the scope of its corporate purposes and in accordance with the purposes and limits prescribed by law.

Customer data is stored only to the extent necessary for the provision of our services.

Similarly, employee data is collected and stored to support the established employment relationship and work arrangement.

Regarding partners and suppliers, any personal data is collected and stored only to the extent necessary to maintain the established business relationship.

With respect to third parties who voluntarily or incidentally submit personal data, we may process such data for contact purposes or to provide clarification regarding the submission of said data.