Privacy Policy and User Data Processing (LGPD)

Privacy policy and user data processing in compliance with LGPD (Brazil's General Data Protection Law)

Legal Notices and Cookies

By accessing our website, the user agrees to comply with these terms of service and all applicable laws and regulations, and agrees to be responsible for compliance with all applicable local laws. If you do not agree with any of these terms, we recommend that you do not access this website. The materials on this website are protected by applicable copyright and trademark laws.

While you use our website, we collect information that you voluntarily provide to us. In addition, during your visit to our website, we automatically collect certain information about your use of our website.

Under Law No. 13,709/2018, the General Personal Data Protection Law (LGPD, Brazil's data protection law), an IP address is also considered personal data. The Internet service provider assigns an IP address to each device connected to the Internet so that it can send and receive data, thus ensuring safe browsing for the user.

On our website, we use cookie technology. Cookies are small text files stored by your browser when you visit a website. They make it possible to identify the browser used, so that it can be recognized by the web server. You have full control over the use of cookies through your browser. You can delete cookies at any time in your browser's security settings, and you can also object to the use of cookies, in whole or in part, through your browser settings.

Legal Disclaimers

Biopdi makes no warranties, express or implied, and hereby disclaims and negates all other warranties, including, without limitation, implied warranties or conditions of merchantability, fitness for a particular purpose, or non-infringement of intellectual property or any other violation of rights under Brazilian law.

Furthermore, Biopdi does not warrant or make any representation concerning the accuracy, likely results or reliability of the use of the materials published on its website, or otherwise relating to such materials or to any websites linked to this website.

Advertising and Browsing Traffic

Through tools such as Google Ads and/or similar tools, we may place relevant ads for the user on the Google advertising network, for example in search results or on other websites, in order to improve campaign performance results and to avoid a user seeing the same ad more than once.

A cookie ID records which ads are shown in which browser, so that the same campaign is not shown several times. In addition, cookie IDs make it possible to record so-called conversions, that is, whether a user sees an ad, later visits the advertiser's website and purchases something there.

Through these traffic tools, we can reach users who have already interacted with our website. Our ads are shown when this target group visits a Google website or a website in the Google advertising network.

For this purpose, when you access our website through Google, a code is generated and so-called remarketing tags are integrated into the website. With their help, an individual cookie is stored on the user's device. Cookies can be set across several domains.

This file records which websites users visited, which content they were interested in and which offers they used. Technical information about the browser and operating system, referring websites, the time of the visit and information about the use of the online offer is also stored. All user data is processed only as pseudonymous data and contains no information that allows the user to be personally identified. Therefore, the ads shown are not targeted at a person, but at the holder of the cookie.

We also use the Meta Pixel and the Meta Conversions API, from Meta, the company behind Facebook and Instagram. These tools record the pages visited and the contacts initiated on the website (form, WhatsApp and phone), together with technical browser information, the IP address and Meta cookies, to measure the results of our ads on Facebook and Instagram and to show ads to people who have already visited the website. We do not send Meta the name, e-mail, phone number or message entered in the forms.

You can opt out of the use of this information for personalized ads: in the ad preferences of your Meta account, in the opt-out tools of the Digital Advertising Alliance and of Your Online Choices, or by blocking cookies in your browser settings.

Newsletter

On our website, we offer users the option to subscribe to our newsletter. After you sign up, we will regularly send you news about our equipment and services. A valid e-mail address is required to sign up and receive our newsletter. When you subscribe to our website's newsletter, we will process your personal data on the basis of Law No. 13,709/2018, the General Personal Data Protection Law (LGPD, Brazil's data protection law).

You can withdraw your consent at any time through the “Unsubscribe” link or by contacting us through the channels available on our website. Withdrawal does not affect the lawfulness of data processing operations that have already taken place.

Consent Form for the Processing of Personal Data

The purpose of this document is to record the free, informed and unambiguous expression by which the Data Subject agrees to the processing of their personal data for a specific purpose, in compliance with Law No. 13,709/2018, the General Personal Data Protection Law (LGPD, Brazil's data protection law).

By expressing acceptance of this form, the Data Subject consents and agrees that BIOPDI INDÚSTRIA COMÉRCIO IMPORTAÇÃO E EXPORTAÇÃO DE EQUIPAMENTOS LTDA EPP, headquartered at Rua Francisco Maricondi, nº 338, Vila Marina, São Carlos/SP, Brazil, CEP (postal code): 13.566-400, registered under CNPJ (Brazilian company registration number) 13.027.001/0001-71, e-mail: [email protected], hereinafter referred to as the CONTROLLER, may make decisions regarding the processing of their personal data required for the purpose of offering services and products, involving operations such as the collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination or extraction.

Personal Data of the Data Subject / User

The CONTROLLER is authorized to decide on the processing of the following personal data voluntarily provided by the Data Subject:

  • Full name;
  • Social name (chosen name);
  • Company name;
  • Photograph (when applicable);
  • Marital status;
  • Date of birth;
  • Identity card number (RG, Brazilian ID card);
  • Individual taxpayer number (CPF, Brazilian individual taxpayer registry);
  • Phone numbers, instant messaging app (WhatsApp) numbers and e-mail addresses;
  • Company registration number (CNPJ, Brazilian National Registry of Legal Entities);
  • Full address.

Purpose of the Processing of Personal Data

The processing of the personal data listed here, provided voluntarily by the Data Subject, has the following purposes:

To enable the CONTROLLER to use such data to send quotes and communications, issue invoices (Notas Fiscais) and related financial documents, and send advertising for equipment and services, whether or not tailored to the Data Subject's profile, subject to express consent; to contact the Data Subject about matters related to the business relationship and to announce news; to draw up commercial contracts and issue charges to the Data Subject; and to use such data to facilitate the provision of services other than those originally contracted, provided that the customer also shows interest in contracting or purchasing new products and/or services.

Data sharing

The CONTROLLER is authorized to share the Data Subject's personal data with other data processing agents, if necessary for the purposes listed in this policy, in compliance with the principles and guarantees established by Law No. 13.709/2018 – LGPD (Brazil's General Data Protection Law).

Data security

The CONTROLLER is responsible for maintaining technical and administrative security measures capable of protecting personal data from unauthorized access and from accidental or unlawful destruction, loss, alteration, disclosure or any form of improper or unlawful processing.

The CONTROLLER may use third parties to process the Data Subject's data. The data processing tasks performed by these third parties include, for example, hosting, maintenance and support of IT systems, customer management and tasks in CRM's or ERP's, order processing, accounting and billing, activities related to marketing, destruction of documents and data media.

For all purposes, a “third party” is an individual or legal entity, public authority, private company, agency or any other organization that processes personal data on behalf of the party responsible for data processing. Third parties do not use the data for their own purposes; they process the data exclusively on behalf of those responsible and are contractually bound to guarantee appropriate technical and organizational measures to protect the data. In addition, the CONTROLLER may occasionally transmit your personal data to other organizations, such as postal and delivery services, banks, accountants/auditors or the tax authorities.

Pursuant to Law No. 13.709/2018, the CONTROLLER will not transmit your personal data to third parties unless the Data Subject has consented to the data transfer or the CONTROLLER is required to transfer the data due to legal provisions or when required by governmental or judicial authorities.

In accordance with Article 48 of Law No. 13.709/2018, the CONTROLLER will notify the Data Subject and the National Data Protection Authority (ANPD, Brazil's data protection authority) of any security incident that may result in relevant risk or harm to the Data Subject.

End of data processing

The Controller may retain and process the Data Subject's personal data for as long as such data remain relevant to achieving the purposes listed in this policy. Anonymous personal data, which cannot be associated with the individual, may be retained indefinitely as a safeguard for the CONTROLLER, as well as for the Data Subject.

The Data Subject may request, by e-mail or extrajudicial notice, that the CONTROLLER, at any time, delete the Data Subject's non-anonymized personal data, being aware that it may eventually become unfeasible for the CONTROLLER to continue supplying products or services to the Data Subject once the personal data have been deleted.

Rights and duties of the Data Subject

The Data Subject has the right to obtain from the CONTROLLER, regarding the data it processes, at any time and upon request:

  • Confirmation that data processing exists;
  • Access to the data;
  • Correction of incomplete, inaccurate or outdated data;
  • Anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of Law No. 13.709/2018;
  • Portability of the data to another service or product provider, upon express request and subject to commercial and industrial secrecy, in accordance with the regulations of the supervisory body;
  • Portability of the data to another service or product provider, upon express request, in accordance with the regulations of the national authority, subject to commercial and industrial secrecy;
  • Deletion of personal data processed with the data subject's consent, except in the cases provided for in Article 16 of Law No. 13.709/2018;
  • Information about the public and private entities with which the controller has shared data;
  • Information about the possibility of not giving consent and the consequences of refusing;
  • Withdrawal of consent, under § 5 of Article 8 of Law No. 13.709/2018.

The Data Subject undertakes to make proper use of the content and information published on the platform of the CONTROLLER, and also to:

  • Not engage in activities that are illegal or contrary to good faith and public order;
  • Not disseminate advertising or content of a racist or xenophobic nature, betting or gambling, any type of pornography, or content advocating terrorism or against human rights;
  • Not copy images or audio and video content without express authorization;
  • Not send e-mail communications containing offensive language;
  • Not make accusations or threats over the internet, post obscene gestures in communities, send files containing viruses, among others.

Right of withdrawal and consent

This consent may be revoked by the Data Subject at any time, by request via e-mail or by Extrajudicial Notice addressed to the CONTROLLER.

Changes to the Privacy Policy

The CONTROLLER reserves the right to modify this Privacy Policy at any time, so the Data Subject and visitors are advised to review it frequently.

Changes and clarifications take effect immediately upon publication on the platform. When changes are made, users will be notified at their registered e-mail address. By using the service or providing personal information after any modification, the user and Data Subject expressly agrees to the new rules in force.

In the event of a merger or sale of the electronic platform to another company, users' data may be transferred to the new owners so that the services offered can continue.

Governing law and jurisdiction

The Privacy Policy of BIOPDI INDÚSTRIA COMÉRCIO IMPORTAÇÃO E EXPORTAÇÃO DE EQUIPAMENTOS LTDA EPP, headquartered at Rua Francisco Maricondi, nº 338, Vila Marina, São Carlos/SP, Brazil, CEP (postal code): 13.566-400, registered under CNPJ (Brazilian company tax ID) 13.027.001/0001-71, e-mail: [email protected], was developed in accordance with Law No. 13,709/2018, the LGPD (Brazil's General Data Protection Law).

Any disputes arising from this Instrument shall be governed entirely by Brazilian law, including its statutes, case law and legal doctrine, and the courts of the Judicial District of São Carlos/SP, Brazil (headquarters of the CONTROLLER) are chosen as the exclusive venue, waiving any other, however privileged it may be or become.

This policy takes effect as of April 2025.