POLICIES
The OM Group is formed by the combined efforts of the companies OpusMúltipla Comunicação Integrada SA, Brainbox Design Estratégico SA, SensoEstratégia Multicanais SA, Tailor Media Branded Content SA, Housecricket Inteligência Digital SA and D'OM Soluções Improváveis SA (“We”), specialists in marketing, communication and sales, operating in various areas such as advertising, promotion, design, direct marketing, branded content, retail and digital marketing.
We are committed to the transparency of our activities and to the protection of the personal data of our clients, business partners, suppliers, and those interested in our products and/or services (“You”). To this end, we comply with the legislation applicable to our sector of activity, such as the Brazilian Civil Rights Framework for the Internet (Law No. 12.965/2014), the General Data Protection Law – LGPD (Law No. 13.709/2018), and the Consumer Protection Code (Law No. 8.078/1990).
This External Personal Data Protection Policy (“Policy”) therefore aims to express this commitment, clarifying how we may process your personal data, that is, in short, how we will collect, use, share, store and delete it.
By using our products and/or services, accessing or interacting with our websites, media or social networks, or, when requested, affirmatively agreeing to the use of your personal data for each of the purposes described herein, you acknowledge that your information will be processed in accordance with this Policy.
If you have any questions or concerns about this Policy, you can contact us at the following email address: privacy@grupoom.com.br
In order to offer our products, services, and/or solutions, we need to process some information about you. This personal data may be obtained directly or indirectly from the Data Subject or from public sources. The following personal data may be processed, depending mainly on the need and purpose in the specific case:
| Class | Species |
|---|---|
| Identification of the data subject, their qualifications and contact information (client, employee, visitor to our headquarters or reader of our newsletters, attorney, partner, shareholder, legal representative, director, consultant, etc.) | Full name, phone number, email, address, profession, identification document details (ID card, CPF, RNE, driver's license, OAB, CTPS, etc.), position held in the organization, date of birth, marital status, profession, age, IP addresses, browsing patterns, etc. |
| Economic and financial information | Income statements, remuneration, credits, corporate acts, etc. |
| Family information | Marital status, family structure, relationships, prenuptial agreements, marriage certificates, civil union certificates, etc. |
| Contractual information | Personal data mentioned above, and also: voter registration number, military registration, education level, professional registration, CTPS (Brazilian Work and Social Security Card) numbers, CEI (Employee Identification Number), NIS (Social Security Number), NIT (National Identification Number), and PIS/PASEP (Social Integration Program/Public Servant Savings Program) numbers, union registrations, payroll records and social security data, certificates from Commercial Registries, medical certificates and other health information, etc. |
| Professional and academic information | Company where you work and your position, professional and academic history, level of education, languages, CVs, work records, etc. |
| Health data | Medical request forms, medical records, prescriptions, copies of exams, certificates, vaccines, etc. |
| Biometric data | Digital images from security cameras. |
| Navigation data | Cookies, IP address, date and time of website access, browser, and operating system. |
Personal data may be necessary in various circumstances and for a variety of purposes, but always with a specific, legitimate purpose and in accordance with current legislation. In the examples below, note that not all uses will be relevant to all individuals and may only apply to specific situations.
Please note that we may process personal data for purposes other than those stated, but only in accordance with the LGPD (Brazilian General Data Protection Law) and fulfilling the conditions established therein.
When consent is the legal basis chosen to justify the processing and there is a change in the stated purpose, form and duration of the processing, or if there is a change in the personal data sharing policy, you will be informed and may revoke it if you do not agree.
We may collect your personal data directly from information you provide, as it is necessary for formalizing and executing a contract, accessing our premises, browsing our website, or when you contact us by email, through the form available on our website, or through platforms managed by us, such as the one that allows participation in our selection processes and online registration of resumes.
We collect images through closed-circuit cameras installed in the common areas of our headquarters, which are necessary to ensure the safety of everyone who circulates there.
We may also, on occasion, receive personal data in the capacity of Data Processors, in which case the collection, choice of legal basis, and purpose of the processing must comply with the guidelines of the Data Controller, the person responsible for decisions regarding the processing, whose policies should be consulted.
Although our headquarters and server are located in Brazil, there may be international transfers of personal data to national or foreign service providers in order to fulfill our activities in your best interest, such as contract management, digital signatures, and newsletter distribution, whose servers are located in the United States of America. In these circumstances, we seek to hire professionals with high levels of respect for privacy and information security, and we adopt measures to ensure the protection of personal data during the transfer.
Your personal data may be shared, as needed and for the appropriate purpose, in Brazil or abroad, as the case may be, with:
We do not sell personal data by any means, nor do we carry out automated processing of personal data.
The sharing of personal data is carried out in accordance with the LGPD (Brazilian General Data Protection Law), and we seek to evaluate our partners, suppliers, and service providers to ensure they maintain the same level of security and compliance in the handling of your personal data.
We may also, as appropriate, share your personal data with public authorities to comply with legal or regulatory obligations, or to comply with court orders or administrative decisions.
We guarantee you the right to exercise the rights provided for in the LGPD (Brazilian General Data Protection Law), as described below, at any time and upon request (see Item 12 below):
Your request will be reviewed before being processed, and we may request additional information to confirm your identity. There are circumstances in which the exercise of the above rights is restricted, such as when we must retain your personal data for a justified reason, such as to allow the continuity of service provision, compliance with legislation, or the defense of the OM Group in legal proceedings and/or processes, for example.
To protect the personal data we process, we use technical and administrative measures, in accordance with market standards, aimed at preventing and remedying unauthorized access and accidental or unlawful situations of destruction, loss, alteration, improper communication or dissemination.
We strive to guide our employees on the importance of adopting best practices to ensure the security of information stored on our servers and systems, implementing internal measures to control access to personal data.
However, we emphasize that no server or system is completely immune to the possibility of malicious intrusions, viruses, or any other form of attack perpetrated by criminals. In the event of a breach of information security, we will notify you and the ANPD (Brazilian National Data Protection Authority) if there is a risk of significant damage.
We may suggest redirect links to third-party websites, either to expand on the information provided or within the scope of providing our services. This Policy does not apply, therefore, to third-party websites, whose specific personal data protection policies should be consulted directly, as a best practice. We are not responsible for the actions, content, or policies of third parties.
Personal data will be retained by us for as long as the purpose that authorized its collection and storage persists, or according to the applicable legal deadlines, except in cases where there remains a legitimate interest in its maintenance and/or the possibility of exercising rights through judicial, administrative or arbitration proceedings.
You can contact us to exercise any of your rights as a personal data subject, as well as to clarify any doubts regarding the processing we carry out, through the following communication channels:
Responsible: Rafael Granha
Email: privacy@grupoom.com.br
Phone: (41) 3112-1919
Address: Jaguariaiva Street, No. 596 – Pinhais – PR – Postal Code 83327-076
As we are always looking to improve our services, this Policy may be updated at any time. Therefore, we suggest that you periodically visit our page, or whenever you have questions. https://privacidade.grupoom.com.br to check for any updates or changes.
Last update date: 04/02/2025