POLICIES

Privacy Policy
and Personal Data Protection

Objectives of this External Policy on Personal Data Protection

The OM Group is formed by the combined efforts of the companies OpusMúltipla Comunicação Integrada SA, Brainbox Design Estratégico SA, SensoEstratégia Multicanais SA, Tailor Media Branded Content SA, Housecricket Inteligência Digital SA and D'OM Soluções Improváveis ​​SA (“We”), specialists in marketing, communication and sales, operating in various areas such as advertising, promotion, design, direct marketing, branded content, retail and digital marketing. 

We are committed to the transparency of our activities and to the protection of the personal data of our clients, business partners, suppliers, and those interested in our products and/or services (“You”). To this end, we comply with the legislation applicable to our sector of activity, such as the Brazilian Civil Rights Framework for the Internet (Law No. 12.965/2014), the General Data Protection Law – LGPD (Law No. 13.709/2018), and the Consumer Protection Code (Law No. 8.078/1990).

This External Personal Data Protection Policy (“Policy”) therefore aims to express this commitment, clarifying how we may process your personal data, that is, in short, how we will collect, use, share, store and delete it.

By using our products and/or services, accessing or interacting with our websites, media or social networks, or, when requested, affirmatively agreeing to the use of your personal data for each of the purposes described herein, you acknowledge that your information will be processed in accordance with this Policy. 

If you have any questions or concerns about this Policy, you can contact us at the following email address: privacy@grupoom.com.br 

Key Concepts and Definitions

  • Consent: A free, informed, and unequivocal expression of consent by which the data subject agrees to the processing of their personal data for a specific purpose.
  • Controller: natural or legal person, governed by public or private law, who is responsible for decisions regarding the processing of personal data;
  • Personal Data: information relating to an identified or identifiable natural person;
  • Sensitive Personal Data: personal data on racial or ethnic origin, religious conviction, political opinion, membership of a trade union or organization of a religious, philosophical or political nature, data relating to health or sexual life, genetic or biometric data, when linked to a natural person;
  • In charge: A person designated by the Controller and Processor to act as a communication channel between the Controller, the Data Subjects, and the National Data Protection Authority (ANPD);
  • Operator: natural or legal person, governed by public or private law, who is responsible for decisions regarding the processing of personal data;
  • Account Holder or “You”: natural person to whom the personal data being processed refers;
  • Personal Data Processing: any operation performed with personal data, such as those relating to collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation or control of information, modification, communication, transfer, dissemination or extraction.

What Personal Data is Processed?

In order to offer our products, services, and/or solutions, we need to process some information about you. This personal data may be obtained directly or indirectly from the Data Subject or from public sources. The following personal data may be processed, depending mainly on the need and purpose in the specific case: 

ClassSpecies
Identification of the data subject, their qualifications and contact information (client, employee, visitor to our headquarters or reader of our newsletters, attorney, partner, shareholder, legal representative, director, consultant, etc.)Full name, phone number, email, address, profession, identification document details (ID card, CPF, RNE, driver's license, OAB, CTPS, etc.), position held in the organization, date of birth, marital status, profession, age, IP addresses, browsing patterns, etc.
Economic and financial informationIncome statements, remuneration, credits, corporate acts, etc.
Family informationMarital status, family structure, relationships, prenuptial agreements, marriage certificates, civil union certificates, etc.
Contractual informationPersonal data mentioned above, and also: voter registration number, military registration, education level, professional registration, CTPS (Brazilian Work and Social Security Card) numbers, CEI (Employee Identification Number), NIS (Social Security Number), NIT (National Identification Number), and PIS/PASEP (Social Integration Program/Public Servant Savings Program) numbers, union registrations, payroll records and social security data, certificates from Commercial Registries, medical certificates and other health information, etc.
Professional and academic informationCompany where you work and your position, professional and academic history, level of education, languages, CVs, work records, etc.
Health dataMedical request forms, medical records, prescriptions, copies of exams, certificates, vaccines, etc.
Biometric dataDigital images from security cameras.
Navigation dataCookies, IP address, date and time of website access, browser, and operating system.

What are the purposes of the treatment?

Personal data may be necessary in various circumstances and for a variety of purposes, but always with a specific, legitimate purpose and in accordance with current legislation. In the examples below, note that not all uses will be relevant to all individuals and may only apply to specific situations.

  • To purchase our services;
  • To improve your experience with us;
  • Keep your registration information up to date;
  • To carry out promotions, publicize our events and other marketing activities;
  • To fulfill your requests;
  • To fulfill contractual and/or legal obligations; 
  • Recruiting and selecting employees;
  • Register suppliers, enter into contracts, and issue invoices;
  • Regular exercise of rights;
  • Protection, security and defense of our interests; 
  • To fulfill various requests submitted to us;
  • Identify visitors; 

Please note that we may process personal data for purposes other than those stated, but only in accordance with the LGPD (Brazilian General Data Protection Law) and fulfilling the conditions established therein. 

When consent is the legal basis chosen to justify the processing and there is a change in the stated purpose, form and duration of the processing, or if there is a change in the personal data sharing policy, you will be informed and may revoke it if you do not agree.

How do we collect your data?

We may collect your personal data directly from information you provide, as it is necessary for formalizing and executing a contract, accessing our premises, browsing our website, or when you contact us by email, through the form available on our website, or through platforms managed by us, such as the one that allows participation in our selection processes and online registration of resumes.

We collect images through closed-circuit cameras installed in the common areas of our headquarters, which are necessary to ensure the safety of everyone who circulates there. 

We may also, on occasion, receive personal data in the capacity of Data Processors, in which case the collection, choice of legal basis, and purpose of the processing must comply with the guidelines of the Data Controller, the person responsible for decisions regarding the processing, whose policies should be consulted. 

International data transfer

Although our headquarters and server are located in Brazil, there may be international transfers of personal data to national or foreign service providers in order to fulfill our activities in your best interest, such as contract management, digital signatures, and newsletter distribution, whose servers are located in the United States of America. In these circumstances, we seek to hire professionals with high levels of respect for privacy and information security, and we adopt measures to ensure the protection of personal data during the transfer.

Who we share your personal data with

Your personal data may be shared, as needed and for the appropriate purpose, in Brazil or abroad, as the case may be, with:

  • Company responsible for archiving physical documents, which may contain personal data;
  • Suppliers and service providers in general, such as those who send out the OM Group newsletter, manage electronic signature platforms, and handle the management of our contracts;
  • Credit analysis, debt collection, and financial services agencies;
  • Public administrative, regulatory, judicial or arbitration authorities;
  • Law firms and consultancies specializing in trademark registration.

We do not sell personal data by any means, nor do we carry out automated processing of personal data. 

The sharing of personal data is carried out in accordance with the LGPD (Brazilian General Data Protection Law), and we seek to evaluate our partners, suppliers, and service providers to ensure they maintain the same level of security and compliance in the handling of your personal data. 
We may also, as appropriate, share your personal data with public authorities to comply with legal or regulatory obligations, or to comply with court orders or administrative decisions. 

Holder's Rights

We guarantee you the right to exercise the rights provided for in the LGPD (Brazilian General Data Protection Law), as described below, at any time and upon request (see Item 12 below):

  • Confirmation and Access: You can verify whether or not we process your personal data, and if so, you will have access to it;
  • Correction: You can request the correction of your personal data if it is incomplete, inaccurate, or outdated. 
  • Anonymization, blocking, or deletion of unnecessary, excessive, or processed data in violation of the LGPD (Brazilian General Data Protection Law);
  • Data portability: You may request, by means of an express request, the portability of your data under the terms of the regulation to be issued by the ANPD (National Data Protection Authority), respecting our trade or industrial secrets;
  • Deletion of personal data: You have the right to request the revocation of the consent you have given, when this is the applicable legal basis;
  • Information regarding the sharing of personal data with public or private entities;
  • Information regarding the possibility of not providing consent and the consequences of refusal.

Your request will be reviewed before being processed, and we may request additional information to confirm your identity. There are circumstances in which the exercise of the above rights is restricted, such as when we must retain your personal data for a justified reason, such as to allow the continuity of service provision, compliance with legislation, or the defense of the OM Group in legal proceedings and/or processes, for example.

Storage and Security of Personal Data

To protect the personal data we process, we use technical and administrative measures, in accordance with market standards, aimed at preventing and remedying unauthorized access and accidental or unlawful situations of destruction, loss, alteration, improper communication or dissemination. 

We strive to guide our employees on the importance of adopting best practices to ensure the security of information stored on our servers and systems, implementing internal measures to control access to personal data. 

However, we emphasize that no server or system is completely immune to the possibility of malicious intrusions, viruses, or any other form of attack perpetrated by criminals. In the event of a breach of information security, we will notify you and the ANPD (Brazilian National Data Protection Authority) if there is a risk of significant damage. 

Third Party Links

We may suggest redirect links to third-party websites, either to expand on the information provided or within the scope of providing our services. This Policy does not apply, therefore, to third-party websites, whose specific personal data protection policies should be consulted directly, as a best practice. We are not responsible for the actions, content, or policies of third parties. 

Retention of Personal Data

Personal data will be retained by us for as long as the purpose that authorized its collection and storage persists, or according to the applicable legal deadlines, except in cases where there remains a legitimate interest in its maintenance and/or the possibility of exercising rights through judicial, administrative or arbitration proceedings.

Contact Person

You can contact us to exercise any of your rights as a personal data subject, as well as to clarify any doubts regarding the processing we carry out, through the following communication channels:

Responsible: Rafael Granha
Email: privacy@grupoom.com.br
Phone: (41) 3112-1919
Address: Jaguariaiva Street, No. 596 – Pinhais – PR – Postal Code 83327-076

Updates to this Policy

As we are always looking to improve our services, this Policy may be updated at any time. Therefore, we suggest that you periodically visit our page, or whenever you have questions. https://privacidade.grupoom.com.br to check for any updates or changes.

Last update date: 04/02/2025

Illustrative image of a transparent cookie with a green border.

Cookies here? Just to improve your experience. Is that okay?

Privacy Policy