AEVO Innovate’s

Privacy Policy

Privacy Policy for the domain aevoinnovate.com

Privacy Policy

Data Owner and Controller

Who are we?

AEVO TECNOLOGIA DA INFORMAÇÃO S/A
CNPJ: 08.606.340/0001-72

AEVO Innovate B.V.
KVK: 93231388

AEVO is the owner and responsible for all websites with the domains aevo.com.br; aevoinnovate.com; and aevo.me and acts as the controller when processing your personal data.

When accessing our websites, requesting contact with us, downloading materials and content available on the website, taking one of our courses, and/or registering for events held by AEVO, you will be asked to accept this Privacy Policy, which indicates that you are aware of and agree to the collection and processing of your data by AEVO for such purposes.

Who is the Data Protection Officer (DPO)?

Name: Marcelo Côgo
Email: [email protected]

Types of Data Collected

Among the types of Personal Data collected by this domain, either directly or through third parties, are: trackers; usage data; email; name; profession; company name; number of users; session statistics; device information.

Complete details about each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific explanatory texts displayed before data collection.

Personal Data may be freely provided by the user or, in the case of Usage Data, collected automatically when using the websites linked to this domain.

Unless specified otherwise, all data requested by this domain is mandatory, and failure to provide this data may prevent the provision of its Services. In cases where this domain explicitly states that some data is not mandatory, users are free not to communicate this data without any consequences for the availability or functioning of the service.

Users who have questions about which Personal Data is mandatory are invited to contact the owner.

Any use of cookies – or other tracking tools – by this domain or by third-party service owners will be for the purpose of providing the Services requested by the User, in addition to the other purposes described in this document and the Cookie Policy.

Users are responsible for any third-party Personal Data obtained, published, or shared.

Method and Place of Data Processing

Processing Method

The owner will take appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction of data.

Data processing is carried out using computers and/or IT-enabled tools, following organizational procedures and means strictly related to the indicated purposes. In addition to the owner, in some cases, the data may be accessed by certain types of persons in charge, involved in the operation of this Service (administration, sales, marketing, legal system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) appointed, when necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.

Place

Data is processed at the Owner’s operating offices and in any other places where the parties involved in the processing are located.

Depending on the user’s location, data transfers may involve transferring the User’s Data to a country other than their own. To learn more about the place of processing of such transferred Data, users may check the section containing details about the processing of Personal Data.

Retention Period

Unless specified otherwise in this document, Personal Data will be processed and stored for as long as required for the purpose for which it was collected and may be retained for longer due to applicable legal obligations or based on user consent.

Purposes of Processing

User Data is collected to enable the Owner to provide its Service, comply with legal obligations, respond to enforcement requests, protect its rights and interests (or those of its users or third parties), detect any malicious or fraudulent activity, as well as: traffic optimization and distribution, statistics, tag management, user database management, and advertising.

For specific information about the Personal Data used for each purpose, the User may refer to the section “Detailed Information on the Processing of Personal Data.”

Detailed Information on the Processing of Personal Data
Personal Data is collected for the following purposes and using the following services:

Statistics

The services contained in this section enable the Owner to monitor and analyze web traffic and may be used to track user behavior.

Google Analytics 4 (Google LLC)

Google Analytics 4 is a web analysis service provided by Google LLC (“Google”). Google uses the collected data to track and examine the use of this service (this domain) to prepare reports on activities and share them with other Google services.

Google may use the collected data to contextualize and personalize ads in its own advertising network.

In Google Analytics 4, IP addresses are used at the time of collection and discarded before the Data is recorded in any data center or server. Users can learn more in Google’s official documentation. Personal Data processed: usage data; session statistics; number of users; trackers.

Place of processing: USA – Privacy Policy – Opt Out.

Tag Management

This type of service helps the Owner manage the tags or scripts needed by this domain in a centralized manner. Consequently, user data flows through these services, and there is a possibility of retaining this data.

Google Tag Manager (Google LLC)

Google Tag Manager is a tag management service provided by Google LLC. Personal Data processed: usage data; trackers.

Place of processing: USA – Privacy Policy.

Advertising

This type of service allows User Data to be used for advertising communication purposes. These communications are displayed in the form of banners and other ads on this service (this domain), possibly based on user interests.

This does not mean that all Personal Data will be used for this purpose. Information and conditions of use are described below.

Some of the services listed below may use trackers to identify users, perform behavioral targeting, i.e., display personalized ads based on user interests and behavior, or measure ad performance. For more information, please check the privacy policies of the relevant services.

Services of this kind generally offer the possibility to opt out of tracking. Users can learn how to opt out of interest-based advertising more generally by accessing the respective opt-out section in this document.

Meta Ads Conversion Tracking (Meta Pixel) (Meta Platforms, Inc.)

Meta Ads Conversion Tracking (Meta Pixel) is an analytics service provided by Meta Platforms, Inc., that connects data from the Meta advertising network with actions performed on this service (this domain). The Meta Pixel tracks conversions related to ads on Facebook, Instagram, and the Audience Network.

Personal Data processed: usage data; trackers.
Place of processing: USA – Privacy Policy – Opt out.

LinkedIn Conversion Tracking (LinkedIn Insight Tag) (LinkedIn Corporation)

LinkedIn Conversion Tracking (LinkedIn Insight Tag) is an analytics and behavioral targeting service provided by LinkedIn Corporation, that connects data from the LinkedIn advertising network with actions performed on this service (this domain). The LinkedIn Insight Tag tracks conversions that can be attributed to LinkedIn ads and enables targeting of user groups based on their prior use of this service (this Application).

Users may opt out of behavioral targeting features through their device settings, their LinkedIn account settings, or by visiting the AdChoices opt-out page.

Personal Data processed: usage data; device information; trackers.
Place of processing: USA – Privacy Policy.

User Database Management

These types of services allow the Owner to build user profiles from an email address, a personal name, or other information provided by the User to this domain, as well as track user activities through analytics features. This Personal Data may also be combined with publicly available information about the User (such as social media profiles) and used to build private profiles that the Owner may display and use to improve the service.

Some of these services may also enable sending scheduled messages to the User, such as emails based on actions performed on this domain.

HubSpot CRM (HubSpot, Inc.)

HubSpot CRM is a user database management service provided by HubSpot, Inc.

Personal Data processed: usage data; email; name; company name; profession; trackers.
Place of processing: USA – Privacy Policy.

Traffic Optimization and Distribution

These types of services allow this domain to distribute their content using servers located in different countries and to optimize their performance.
Which Personal Data is processed depends on the characteristics and implementation of these services. Their function is to filter communications between this domain and the user’s browser.

Given the widespread nature of this system, it is difficult to determine the locations to which content that may contain the user’s personal information is transferred.

Cloudflare (Cloudflare Inc.)

Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.

The way Cloudflare is integrated means that it filters all traffic through this service, i.e., communication between this domain and the user’s browser, while also allowing analytical data to be collected. Personal Data processed: various types of data as specified in the service’s privacy policy.

Place of processing: USA – Privacy Policy.

Information on Opting Out of Interest-Based Advertising
In addition to the opt-out feature provided by the services listed in this document, Users may learn more about how to generally opt out of interest-based advertising within the specific section of the Cookie Policy.

Cookie Policy

This Application uses Trackers. To learn more, Users may consult the Cookie Policy.

Additional Information for Users
Legal Basis for Processing

The Owner may process Personal Data related to the User if one of the following applies:

  • Users have given their consent for one or more specific purposes.
  • Providing the data is necessary for the performance of a contract with the user and/or any pre-contractual obligations thereof;
  • Processing is necessary for compliance with a legal obligation to which the Owner is subject;
  • Processing is related to a task carried out in the public interest or in the exercise of official authority vested in the Owner;
  • Processing is necessary for the purposes of the legitimate interests pursued by the Owner or a third party;

In any case, the Owner will gladly help clarify the legal basis that applies to the processing, especially whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

More Information on Retention Time

Unless specified otherwise in this document, Personal Data will be processed and stored for as long as required for the purpose for which it was collected and may be retained for longer due to applicable legal obligations or based on user consent.

Therefore:

  • Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until such contract has been fully performed;
  • Personal Data collected for purposes related to the legitimate interests of the Owner will be retained for as long as needed to fulfill those purposes. Users may obtain specific information about the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner;
  • The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.

Once the retention period expires, Personal Data will be deleted. Therefore, the right to access, the right to erasure, the right to rectification, and the right to data portability cannot be enforced after the retention period expires.

User Rights Based on the General Data Protection Regulation (GDPR)

Users may exercise certain rights regarding their Data processed by the Owner.

In particular, Users have the right to do the following, to the extent permitted by law:
Withdraw their consent at any time: Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
Object to processing of their Data: Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent.
Access their Data: Users have the right to learn if their Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing, and obtain a copy of the Data undergoing processing.
Verify and seek rectification: Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
Restrict the processing of their Data: Users have the right to restrict the processing of their Data for purposes other than storage.
Have their Personal Data deleted or otherwise removed: Users have the right to obtain the erasure of their Data from the Owner.
Receive their Data and have it transferred to another controller: Users have the right to receive their Data in a structured, commonly used, and machine-readable format and, if technically feasible, to have it transmitted to another controller without any hindrance.
Lodge a complaint: Users have the right to bring a claim before their competent data protection authority.

Users also have the right to be informed about the legal basis for Data transfers abroad, including to any international organizations governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to safeguard their Data.

Details About the Right to Object to Processing

Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection.

Users must know, however, that should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification. When the User objects to processing for direct marketing purposes, the Personal Data will no longer be processed for such purposes. To learn whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to Exercise These Rights

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. Such requests are free of charge and will be answered by the Owner as early as possible and always within one month, providing Users with the information required by law.

Any rectification or erasure of Personal Data or restriction of processing will be communicated by the Owner to each recipient, if any, to whom the Personal Data has been disclosed, unless this proves impossible or involves disproportionate effort. At the Users’ request, the Owner will inform them about those recipients.

Additional Information About Data Collection and Processing

Legal Action

The User’s Personal Data may be used for legal purposes by the Owner in court or in the stages leading to possible legal action arising from improper use of this Service or related Services.

The User declares to be aware that the Owner may be required to reveal Personal Data upon request of public authorities.

Additional Information About User’s Personal Data

In addition to the information contained in this privacy policy, this domain may provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data upon request.

System Logs and Maintenance

For operation and maintenance purposes, this domain and any third-party services may collect files that record interaction (system logs) or use other Personal Data (such as the IP address) for this purpose.

Information Not Contained in This Policy

More details concerning the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.

Changes to This Privacy Policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this domain. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

Should the changes affect processing activities performed based on the User’s consent, the Owner will collect new consent from the User, where required.

Definitions and Legal References

Personal Data (or Data)

Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.

Usage Data

Information collected automatically through this domain (or third-party services employed in this Service), which may include: the IP addresses or domain names of the computers utilized by the Users who use this domain, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Application) and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User’s IT environment.

User

The individual using this domain who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Subprocessor)

The natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the Controller, as described in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this domain. The Data Controller, unless otherwise specified, is the Owner of this Service (this Application).

This Domain

The means by which the User’s Personal Data is collected and processed.

Service

The service provided by this domain as described in the relative terms (if available).

European Union (or EU)

Unless otherwise specified, all references made within this document to the European Union include all current member states to the European Union and the European Economic Area.

Cookie

Cookies are Trackers consisting of small sets of data stored in the User’s browser.

Tracker

The term Tracker indicates any technology — e.g., Cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting — that enables the tracking of Users, for example by accessing or storing information on the User’s device.

Legal Information

This privacy policy relates to this domain and other linked subdomains.


Last updated on the Privacy Policy: 04/29/2024.

Cookie Policy for aevoinnovate.com/

This document informs Users about the technologies that help this domain achieve the purposes described below. Such technologies allow the Owner to access and store information (for example, by using a Cookie) or use resources (for example, by running a script) on a user’s device as they interact with the services.

For simplicity, all these technologies are referred to as “Trackers” in this document – unless there is a reason to differentiate them.

For example, while Cookies can be used in web browsers and mobile devices, it would be incorrect to talk about Cookies in the context of mobile apps, as they are a browser-based tracker. For this reason, in this document, the term Cookies is only used where it specifically refers to that particular type of Tracker.

Some of the purposes for which Trackers are used may also require user permission. Whenever permission is given, it can be freely withdrawn at any time by following the instructions provided in this document.

This domain uses Trackers managed directly by the Owner (known as “first-party” Trackers) and Trackers that enable services provided by third parties (known as “third-party” Trackers). Unless otherwise specified in this document, third-party providers may access the Trackers they manage. The validity and expiration periods of Cookies and other similar Trackers may vary, depending on the duration set by the Owner or the respective provider. Some of them expire at the end of the User’s browsing session. In addition to what is specified in the descriptions within each category below, Users may find more precise and updated information regarding duration, as well as any other relevant information – such as the presence of Trackers – in the linked privacy policies of the respective third-party providers or by contacting the Owner.

Activities strictly necessary for operating this Application and providing the Service

This Application uses so-called “technical” Cookies and other similar Trackers to perform activities that are strictly necessary for operating or providing the Service.

Third-party Trackers

Tag management

This type of service helps the Owner manage the tags or scripts required by this domain in a centralized manner. As a result, user data flows through these services, and there is a possibility of retaining this Data.

Google Tag Manager (Google LLC)

Google Tag Manager is a tag management service provided by Google LLC.

Personal Data processed: Usage Data and Trackers.

Place of processing: USA – Privacy Policy.

Other activities involving the use of Trackers

Functionality

This domain uses Trackers to enable basic interactions and functionalities, allowing Users to access selected features of the service and facilitating communication between the User and the Owner.

User database management

These types of services allow the Owner to build user profiles from an email address, a personal name, or other information provided by the User to this domain, as well as tracking user activities through analytics features. This personal data may also be combined with publicly available information about the user (such as social media profiles) and used to build private profiles that the Owner can display and use to improve the service (this Application).

Some of these services may also be enabled to send scheduled messages to the User, such as emails based on actions performed on this domain.

HubSpot CRM (HubSpot, Inc.)

HubSpot CRM is a user database management service provided by HubSpot, Inc.

Personal Data processed: Usage Data, email, name, company name, profession, and Trackers.

Place of processing: USA – Privacy Policy.

Measurement

This Application uses Trackers to measure traffic and analyze User behavior to improve the Service.

Statistics

The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to track User behavior.

Google Analytics 4 (Google LLC)

Google Analytics 4 is a web analytics service provided by Google LLC (“Google”). Google uses the collected data to track and examine the use of this service, prepare reports on activities, and share them with other Google services.

Google may use the collected data to contextualize and personalize ads in its own advertising network.

In Google Analytics 4, IP addresses are used at the time of collection and are discarded before the Data is logged in any data center or server. Users can find more information in the official Google documentation.

Personal Data processed: Usage Data, session statistics, number of Users, and Trackers.

Place of processing: USA – Privacy PolicyOpt Out.

Marketing

This Application uses Trackers to deliver personalized marketing content based on User behavior and to operate, deliver, and track advertisements.

Advertising

This type of service allows User Data to be used for advertising communication purposes. These communications are displayed in the form of banners and other advertisements, possibly based on User interests.

This does not mean that all Personal Data will be used for this purpose. Information and conditions of use are described below.

Some of the services listed below may use Trackers to identify users, enable behavioral retargeting, i.e., display personalized ads based on User interests and behavior, or to measure ad performance. For more information, please check the privacy policies of the relevant services.

Services of this type generally offer the option to opt out of tracking. Users can learn how to disable interest-based advertising more broadly by accessing the respective opt-out section in this document.

Meta ads conversion tracking (Meta pixel) (Meta Platforms, Inc.)

Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms, Inc. that connects data from the Meta advertising network with actions performed on this domain. The Meta pixel tracks conversions related to ads on Facebook, Instagram, and the Audience Network.

Personal Data processed: Usage Data and Trackers.

Place of processing: USA – Privacy Policy – Opt out.

LinkedIn conversion tracking (LinkedIn Insight Tag) (LinkedIn Corporation)

LinkedIn conversion tracking (LinkedIn Insight Tag) is an analytics and behavioral targeting service provided by LinkedIn Corporation that connects data from the LinkedIn advertising network with actions performed on this domain. The LinkedIn Insight Tag tracks conversions that can be attributed to LinkedIn ads and enables targeting of groups of Users based on their past use.

Users may opt out of behavioral targeting features through their device settings, their LinkedIn account settings, or by visiting the AdChoices opt-out page.

Personal Data processed: Usage Data, device information, and Trackers.

Place of processing: USA – Privacy Policy.

How to manage preferences and provide or withdraw consent

There are several ways to manage Tracker preferences and to provide or withdraw consent, where relevant:

Users can manage Tracker preferences directly through their device settings, for example, by preventing the use or storage of Trackers.

Moreover, whenever the use of Trackers is based on consent, Users can provide or withdraw such consent by setting their preferences in the cookie notice or by updating these preferences via the respective consent preference widget, if available.

It is also possible to delete previously stored Trackers, including those used to remember the User’s initial consent preferences, through specific browser or device features.

Other Trackers in the browser’s local memory can be removed by deleting the browsing history.

With regard to third-party Trackers, Users can manage their preferences and withdraw their consent by using the respective opt-out link (if provided), the means indicated in the third party’s privacy policy, or by contacting the third party.

Locating Tracker settings

Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:

Google Chrome

Mozilla Firefox

Apple Safari

Microsoft Internet Explorer

Microsoft Edge

Brave

Opera

Users may also manage certain categories of Trackers used in mobile apps by opting out through the relevant device settings, such as mobile advertising settings or general tracking settings (Users may open the device settings and look for the relevant settings).

How to opt out of interest-based advertising

Notwithstanding the above, Users are informed that they may follow the instructions provided by the YourOnlineChoices initiatives (EU and UK), the Network Advertising Initiative (USA), the Digital Advertising Alliance (USA), DAAC (Canada), DDAI (Japan), or other similar services. Such initiatives allow Users to select their tracking preferences for most advertising tools. The Owner recommends that Users make use of these resources in addition to the information provided in this document.

The Digital Advertising Alliance offers an application called AppChoices that helps Users control interest-based advertising in mobile apps.

Consequences of denying the use of Trackers

Users are free to decide whether to allow the use of Trackers. However, it is important to note that Trackers help this Application provide a better experience and advanced functionalities to Users (in line with the purposes outlined in this document). Therefore, if the User chooses to block the use of Trackers, the Owner may not be able to provide the related features.

Owner and Data Controller

Since the use of third-party Trackers through this domain cannot be fully controlled by the Owner, any specific references to third-party Trackers should be considered indicative. For complete information, Users are kindly requested to consult the privacy policies of the respective third-party services listed in this document.

Given the objective complexity of tracking technologies, Users are encouraged to contact the Owner if they wish to receive further information about the use of such technologies by this Application.


Last updated: April 29, 2024.

Privacy Policy for AEVO Innovate

We, at Aevo Tecnologia da Informação S/A; or AEVO Innovate BV; (“AEVO”; or “AEVO Innovate”; or “we”), are committed to protecting your privacy. The purpose of this document is to clarify what information is collected from users of our platform ( https://aevoinnovate.net ) and how this data is handled and used.

AEVO recognizes that your privacy is very important, so we take every possible measure to protect it. Therefore, this Privacy Policy (“Policy”) aims to inform you how your information and data will be collected, used, shared, and stored through our services.

This document has been written in a simple and accessible way, precisely so that you can read and understand how we use your data to offer you a safe and comfortable experience when sharing your data.

This Policy is divided as follows to facilitate its understanding:

  1. About data collection
  2. About the use of your personal data
  3. About access to your personal data
  4. With whom will AEVO share your personal data?
  5. Changes to the Privacy Policy
  6. Applicable Law

Any questions regarding our privacy policy can be clarified by contacting us.

Send an email to [email protected] .

We are located at Rua Manoel Feu Subtil, 60, Enseada do Suá, Room 302, Vitória – ES. Postal Code: 29050-400.

1. About data collection

Data generated when using our services – If you use any of our services, we will collect information from users you register, including your company’s employees and/or third parties, on our platforms. In this case, we will collect contact information such as your name, email address, and department. If agreed upon between AEVO and the company, other data may be collected on the platform for a specific purpose.

Personal data is collected in the following scenarios:

  • Sharing, resulting in reading data from an Identity Provider where the data of employees who will receive access to the AEVO system is stored.
  • Completion and Importation of Electronic Spreadsheet with access data to be imported into the AEVO platform.
  • User registration using the AEVO API in JSON format.
  • Completing an electronic form on the AEVO platform portal (user registration and editing).

2. About the use of your personal data

All data we collect is used to provide our services, and it’s worth remembering that we value your privacy very much.

Therefore, all data and information about you is treated as confidential, and we will only use it for the purposes described herein and authorized by you, primarily so that you can fully utilize our services, always aiming to improve your user experience. This way, we can customize the service to increasingly suit your tastes and interests.

To provide our services, we will use the data of users registered on the platform to:

  • Define access permission to software features;
  • Filter the target audience that will have access to each campaign registered on the platform;
  • Associate users with system entities such as: ideas, tasks, projects and portfolio;
  • Personalize the service to better suit your tastes and interests;
  • Sending notifications through the system;
  • Comply with legal obligations.

We also use tools that help us better understand the user experience on the platform—how much time users spend, which links they click, what they do, what they don’t do, etc. This allows us to build and maintain our services through customer feedback. These tools use cookies and other technologies that collect data about usage habits and devices, screen size, type, browser information, geographic location, and more. Additionally, we may occasionally conduct qualitative research on our platform to better understand the user experience and their needs, and we may request some personal data. This data may be used to contact the user for further research.

We may occasionally use your data for purposes not covered by this privacy policy, but these will be within your legitimate expectations. Any use of your data for purposes outside this prerogative will be done with your prior authorization.

3. About access to your personal data

AEVO, as Data Processor, undertakes to apply strong encryption processes to all collected data. All Personal Data will be stored in AEVO databases maintained in the cloud by AEVO’s contracted service providers, which are duly compliant with applicable data legislation.

AEVO and its suppliers use various security procedures to protect the confidentiality, security and integrity of your Personal Data, preventing the occurrence of possible damages due to the processing of such data.

Although AEVO uses security measures and monitors its system for vulnerabilities and attacks to protect your Personal Data against unauthorized disclosure, misuse, or alteration, you understand and agree that there is no guarantee that your information may not be accessed, disclosed, altered, or destroyed by breach of any physical, technical, or administrative safeguards. AEVO has a well-established incident response plan with defined processes for potential security-related incidents. Details can be found in the attached Incident Response Policy (IRP) .

Data deletion, modification, and export operations may be requested at any time by the user through a mechanism available on the platform itself, which will be forwarded for approval by the Controller’s data controller. This type of request may also be made by the Controller through Zendesk ( https://aevo.zendesk.com ) or by contacting [email protected]. All data and information collected will be stored only for as long as necessary for the purposes described in this Policy, according to periods predetermined by law, agreed between the parties, or for as long as necessary to maintain AEVO’s legitimate interests. In the event of termination of the user agreement, with the Controller’s approval, AEVO, as Data Processor, undertakes to maintain the anonymized data, using practices defined by the National Data Protection Authority (ANPD), until the data is definitively deleted within 15 business days.

Only AEVO employees, and among these, only those with appropriate authorization, will be able to view your personal information. If your information is entered into actions created through partnerships, the explicitly identified partners will also have access to the information. No personal data may be disclosed publicly.

AEVO maintains a PERSONAL DATA PROTECTION IMPACT REPORT, which describes personal data processing processes that may pose risks to civil liberties and fundamental rights, as well as measures, safeguards, and risk mitigation mechanisms. Details can be found in the RIPD AEVO – Data Protection Impact Report file .

4. With whom will AEVO share your personal data?

To operate its services, AEVO partners with several companies located in Brazil. Therefore, AEVO may share your personal information in the following circumstances:

A. With partner companies and suppliers in the development and provision of services aimed at you;

B. With authorities, government entities or other institutional third parties, to protect AEVO’s interests in any type of conflict, including legal actions and administrative proceedings;

C. In the case of transactions and corporate changes involving AEVO, in which the transfer of information will be necessary for the continuity of services;

D. By court order or at the request of administrative authorities that have legal authority to request it.

Additionally, all services provided by AEVO are located in Brazil, and do not carry out international data transfers.

5. Changes to the Privacy Policy

This Privacy Policy may be updated. Therefore, we recommend visiting this page periodically to stay informed of any changes. If any material changes are made that require new authorizations from you, we will publish a new privacy policy.

Before using information for purposes other than those defined in this Privacy Policy, we will ask for your authorization.

At AEVO, we respect your ability to know, access, correct, transfer, restrict the processing of, and erase your personal data. We provide these rights to our customer base, and if you choose to exercise these privacy rights, you have the right not to be treated discriminatorily or to receive a lesser level of service from AEVO. When consent is requested for AEVO to process your personal data, you have the right to revoke your consent at any time. Please note that we collect your personal data under the LGPD legal basis “For Contract Performance,” to perform a service contract between AEVO and your employer, which will have your consent to share your personal data.

6. Applicable Law

This document is governed by and shall be construed in accordance with the laws of the Federative Republic of Brazil. The Court of the District of Vitória, Espírito Santo, is hereby elected as the competent court to resolve any disputes arising from this document, with express waiver of any other court, however privileged it may be.

Concept of Terms Covered in the Policy

  1. Privacy: Fundamental right that guarantees control over how personal information is collected, stored, processed and shared, preserving the privacy, honor and image of individuals.
  2. Personal Data (or Data): Any information that directly, indirectly or in connection with other information – including a personal identification number – allows the identification or identifiability of a natural person.
  3. Sensitive Data: Special category of personal data that requires differentiated treatment due to the potential impact on the rights of the data subject, such as racial origin, religious beliefs, health or biometric data.
  4. Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures relating to the operation and use of this domain. The Data Controller, unless otherwise specified, is the Owner of this Service (this Application).
  5. Operator: Natural or legal person who processes personal data on behalf of the controller.
  6. Data Processing: Any operation performed with personal data, such as collection, storage, use, sharing, deletion or anonymization.
  7. Anonymization: Process by which personal data is transformed in such a way as to prevent association, directly or indirectly, with an individual.
  8. Cookies: Files stored in the user’s browser that allow the identification of behavior patterns and preferences, aiming to improve the customer experience.
  9. Cryptography: Security technique that encodes information to protect it from unauthorized access.
  10. Incident Response Plan (IRP): Document that defines guidelines and actions to identify, manage and mitigate the effects of information security incidents.
  11. Data Protection Impact Report (DPIR): Document that describes the data processing processes that may generate risks, indicating measures for their mitigation, as required by law.

Privacy Policy last updated: 03/10/2025.

The AEVO website is the responsibility of AEVO Tecnologia da Informação S.A, CNPJ: 08.606.340/0001-72, located at Rua Manoel Feu Subtil, 60 Sala 302, ENSEADA DO SUA, VITORIA – ES, 29050-400, contact [email protected]. The Privacy Policy is described below:

1. GENERAL INFORMATION AND DEFINITIONS

AAEVO values ​​the privacy of its users and created this Privacy Policy to demonstrate its commitment to protecting your privacy and personal data, in accordance with the General Data Protection Law and other laws on the subject, as well as to describe how your privacy is protected by AEVO when collecting, processing and storing your personal information.

1.1 Definitions

User: all individuals who will use or visit the Website(s) and/or Application(s), over 18 (eighteen) years of age or emancipated and fully capable of performing acts of civil life or those who are absolutely or relatively incapable and duly represented or assisted.

Personal Data: means any information provided and/or collected by AEVO and/or its affiliates, by any means, even if public, that: (I) identifies, or that, when used in combination with other information processed by AEVO, identifies an individual; or (II) through which the identification or contact information of an individual can be derived. Personal Data may be in any media or format, including electronic or computerized records, as well as in paper-based files. Personal Data, however, does not include a business telephone, business cell phone number, business address, or business email.

Purpose: the objective, the purpose that AEVO wishes to achieve through each act of processing personal data.

Necessity: justification for which it is strictly necessary to collect personal data, in order to achieve the purpose, avoiding excessive collection.

Legal basis: legal basis that makes the processing of personal data legitimate for a specific purpose by AEVO.

Consent: express and unequivocal authorization given by the User who holds the personal data for AEVO to process their personal data for a previously described purpose, in which the legal basis necessary for the act requires the express authorization of the holder.

This policy applies, in general, to all Users and potential Users of the services offered by AEVO, including Users of the websites or other means operated by AEVO, and summarizes how AEVO may collect, produce, receive, classify, use, access, reproduce, transmit, distribute, process, archive, store, eliminate, evaluate or control the information, modify, communicate, transfer, disseminate or extract the data collected, including personally identifiable information, in accordance with the applicable legal bases and all privacy and data protection laws in force.

By accessing and/or using the AEVO website, or other websites related to services provided by the same, the User declares to be at least 18 (eighteen) years old and to have full and express capacity to accept the terms and conditions of this Privacy Policy and the Consent Form for all legal purposes.

If the User does not fit the description above and/or does not agree, even in part, with the terms and conditions contained in this Privacy Policy, he/she should not access and/or use the services offered by AEVO, as well as the websites and services operated by it.

2. COLLECTION AND USE OF PERSONAL INFORMATION

The User is aware that he/she provides information consciously and voluntarily through [FORM/ETC], or through the websites operated by AEVO.

When the User registers and/or fills out forms offered by AEVO, including on the websites operated by it, certain Personal Data requested will be kept confidential and will be used only for the purpose that motivated the registration, as per the Purposes Table.

2.1. Purposes

CATEGORY OF PERSONAL DATA

Name, E-mail, Telephone, Position.

PURPOSE

Identify a startup on our platform so that it can participate in challenges proposed to it by our clients through AEVO platforms. Allow communication of platform events with the data controller as the startup advances in the challenges. Allow identification of the registrant’s responsibility in relation to the startup as a way of ensuring greater transparency during the challenge evaluation process, such as the individual’s responsibility in relation to the startup.

LEGAL BASIS

Consent.

LEGAL BASIS

I agree to provide my Name, Email, which Company I work for and my Position to participate in challenges proposed by AEVO clients and to receive appropriate communication regarding the process. I am aware that my data provided will be used internally exclusively for the provision of services provided by AEVO and I agree to receive emails from AEVO.

3. SHARING AND PROCESSING OF PERSONAL INFORMATION

AAEVO may disclose the Personal Data collected to third parties, in the following situations and within the limits required and authorized by Law:

With its customers and partners when necessary and/or appropriate for the provision of related services;

With companies and individuals contracted to perform certain activities and services on behalf of AEVO;

With group companies;

With suppliers and partners for the performance of services contracted with AEVO (such as information technology, accounting, among others);

For administrative purposes such as: research, planning, service development, security and risk management.

When necessary due to a legal obligation, determination of a competent authority, or court decision.

In the event of sharing Personal Data with third parties, all subjects mentioned in items I to VI must use the shared Personal Data consistently and in accordance with the purposes for which they were collected (or to which the User previously consented) and in accordance with what was determined by this Privacy Policy, other website or country privacy statements, and all applicable privacy and data protection laws.

4. LEGAL REASONS FOR DISCLOSING YOUR DATA

In certain circumstances, AEVO may disclose Personal Data, to the extent necessary or appropriate, to government agencies, consultants and other third parties in order to comply with applicable legislation or with a court order or subpoena, or if AEVO believes in good faith that such action is necessary to:

Comply with legislation that requires such disclosure;

Investigate, prevent, or take action regarding suspected or actual illegal activities or to cooperate with government agencies or to protect national security;

Execution of its contracts;

Investigate and defend against any claims or allegations from third parties;

Protect the security or integrity of the services (for example, sharing with companies that are experiencing similar threats);

Exercise or protect the rights, property, and security of AEVO and its affiliated companies;

Protect the rights and personal safety of its employees, users, or the public;

In the event of sale, purchase, merger, reorganization, liquidation, or dissolution of AEVO.

AEVO will notify its Users of any legal demands that result in the disclosure of personal information, as set forth in item 4, unless such notification is prohibited by law or prohibited by court order, or if the request is urgent. AEVO may challenge these demands if it deems that the requests are excessive, vague or made by incompetent authorities.

5. SECURITY OF PERSONAL INFORMATION

All Personal Data will be stored in AEVO databases maintained “in the cloud” by service providers contracted by AEVO, which are duly in accordance with current data legislation.

AEVO and its suppliers use several security procedures to protect the confidentiality, security and integrity of your Personal Data, preventing the occurrence of possible damages due to the processing of such data.

Although AEVO uses security measures and monitors its system to check for vulnerabilities and attacks to protect your Personal Data against unauthorized disclosure, misuse or alteration, the User understands and agrees that there are no guarantees that the information may not be accessed, disclosed, altered or destroyed by violation of any of the physical, technical or administrative protections.

6. DATA RETENTION

AAEVO retains all data provided, including Personal Data, while the User’s registration is active and as necessary to provide its services.

AAEVO will retain your Personal Data and keep your data stored until a possible deletion request, or in accordance with the periods described in the Purposes Table.

AAEVO may retain your Personal Data after receiving your deletion request or after the deadlines in the Purposes Table if necessary to comply with legal obligations, resolve disputes, maintain security, prevent fraud and abuse, and ensure compliance with contracts.

7. LEGAL BASIS FOR PROCESSING

AAEVO only processes Personal Data in situations where it is legally authorized to do so or with the express and unequivocal consent of the User.

As described in this Policy, AEVO has legal bases to collect, produce, receive, classify, use, access, reproduce, transcribe transmit, distribute, process, archive, store, delete, evaluate or control information, modify, communicate, transfer, disseminate or extract data about the User.

The legal bases include your consent (collected expressly and unequivocally in the Consent Form), contracts and preliminary contractual procedures (in which processing is necessary to enter into the contract with the User) and legitimate interests, provided that such processing does not violate your rights and freedoms, as can be seen in the Purposes Table.

Such interests include protecting the User and AEVO from threats, complying with applicable legislation, the regular exercise of rights in judicial, administrative or arbitration proceedings, enabling the execution or administration of business, including quality control, reports and services offered, managing business transactions, understanding and improving business and customer relationships and enabling users to find economic opportunities.

The User has the right to deny or withdraw the consent provided to AEVO, when this is the legal basis for processing personal data, and AEVO may terminate the provision of its services to this user in the event of such a request.

If you have any questions about the legal basis for collecting, processing and storing your personal data, please contact AEVO and its Data Protection Officer by email at [email protected].

8. RIGHT TO ACCESS AND CONTROL YOUR PERSONAL DATA

AAEVO offers the User several options on what to do with their Personal Data collected, processed and stored, including their deletion and/or correction. The User may:

Delete data: the User may request the total or partial deletion of their Personal Data (for example, if they are no longer necessary to provide the services).

Change or correct data: the User may edit or request the editing of some of their Personal Data. The User may also request updates, changes or corrections to their data in certain cases, in particular if they are incorrect.

Objecting to, limiting or restricting the use of data: The User may request that we stop using all or some of their Personal Data (for example, if we have no right to continue using them), or limiting our use of such data (for example, if their Personal Data is incorrect or stored unlawfully), noting that AEVO may process Personal Data in accordance with the legal bases listed in the Purposes Table.

The User has the right to access or remove their data: The User may request a copy of their Personal Data and the data that the User has provided in a readable format in printed form or by electronic means.

The User may make the requests listed above by contacting our Data Protection Officer by email at [email protected], and these requests will be considered in accordance with applicable laws.

9. POLICY REVISIONS

If AEVO modifies this Privacy Policy, such changes will be published in a visible manner on the AEVO website. This Policy is valid from 08/08/2019. If the User has any questions regarding the website’s privacy policies, please contact AEVO, through the addresses below/Data Protection Officer service channel.

10. CONTACT

AAEVO has appointed the Head of Technology, Marcelo Cogo, as Data Protection Officer (“DPO”). The User can contact the DPO at the following physical address or via email [email protected].

11. MEDIATION AND JURISDICTION

This policy is subject to the Law of the Federative Republic of Brazil and the Court of the District of São Paulo is competent to resolve any dispute regarding it.

What are cookies? 

As is common practice with almost all professional websites this site uses cookies, which are small files downloaded to your computer, to improve your experience. This page describes what information they gather, how we use it and why we sometimes need to store these cookies. We will also share how you can prevent these cookies from being stored however this may downgrade or ‘break’ certain elements of the sites functionality 

How do we use cookies? 

We use cookies for several reasons, detailed below. Unfortunately in most cases there are no industry standard options for disabling cookies without completely disabling the functionality and features they add to this site. It is recommended that you leave on all cookies if you are not sure whether you need them or not in case they are used to provide a service that you use. 

Disable cookies 

You can prevent the setting of cookies by adjusting the settings on your browser (see your browser Help for details). how to do this). Please be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of the this site. Therefore, it is recommended that you do not disable cookies. 

Cookies that we define 

Account-related cookies

If you create an account with us, we will use cookies for the management of the signup process and general administration. These cookies will usually be deleted when you log out however in some cases they may remain afterwards to remember your site preferences when logged out. 

Login-related cookies 

We use cookies when you are logged in so that we can remember this fact. This prevents you from having to log in every single time you visit a new page. These cookies are typically removed or cleared when you log out to ensure that you can only access restricted features and areas when logged in. 

Email newsletters related cookies 

This site offers newsletter or email subscription services and cookies may be used to remember if you are already registered and whether to show certain notifications which might only be valid to subscribed/unsubscribed users. 

Order processing related cookies 

This website offers e-commerce or payment facilities and some cookies are essential for us to use. ensure that your request is remembered between pages so that we can process it properly. 

Cookies related to surveys 

We periodically offer surveys and questionnaires to provide you with interesting insights, useful tools, or to better understand our user base. These surveys may use cookies to remember who has already taken part in a survey or to provide accurate results after you change pages. 

Cookies related to forms 

When you submit data through a form such as those found on contact pages or comment forms cookies may be set to remember your user details for future correspondence. 

Site Preferences Cookies 

In order to provide you with a great experience on this site we provide the functionality to set your preferences for how this site runs when you visit our website. uses it. In order to remember your preferences we need to set cookies so that this information can be called whenever you interact with a page is affected by your preferences. 

Activities strictly necessary for the operation of AEVO and provide the Service

AEVO uses Cookies known as “technical” Cookies and other similar Trackers to perform activities that are strictly necessary to operate or provide the Service.

Third-Party Cookies 

In some In special cases, we also use cookies provided by trusted third parties. The following section details which third party cookies you might encounter through this site.

Google Analytics 4 (Google LLC) 

Google Analytics 4 is a web analytics service provided by Google LLC (“Google”). Google uses the data collected to track and examine the use of this service to prepare reports on activities and share them with other Google services. 

Google may use the data collected to contextualize and personalize the ads of its own advertising networke. 

In Google Analytics 4, IP addresses are used at the time of collection and discarded before the Data is recorded in any data center or server. Users can obtain more information inGoogle’s official documentation. 

Data processed: usage data, number of users, session statistics, approximate geographic location, browser and device information. 

Place of processing: USA –Privacy PolicyOpt Out. 

Microsoft Clarity (Microsoft Corporation)

Microsoft Clarity is a web analytics tool developed by Microsoft to help website owners understand user behavior. It provides detailed insights through advanced tools including session recordings and heatmaps. 

Microsoft uses the data collected by Clarity to provide analytics about site usage and to identify areas for user experience improvement. This data may include information about user interactions such as clicking links, scrolling through pages, and time spent on specific pages. 

The data collected by Clarity is processed on Microsoft servers, and IP addresses are used at the time of data collection, following Microsoft’s data anonymization practices. 

Data processed: usage data, session statistics, number of users and trackers.  

Place of processing: USA – Microsoft Privacy Policy – ​​Opt Out  

Mixpanel (Mixpanel Inc.) 

Mixpanel is a user behavior analytics tool provided by Mixpanel Inc. Mixpanel collects data about user events and content performance to provide valuable insights. This data helps m the owner to improve the platform and offer a more personalized experience to users. 

The data collected by Mixpanel includes information about link clicks, specific events (such as form completion), and other relevant actions. This data is processed on Mixpanel’s servers, following strict anonymization practices to protect user privacy. 

Data processed: User event data, event properties, and user identifiers.  

Place of processing: USA – Mixpanel Privacy Policy – ​​Opt Out

Application Insights (Microsoft Corporation)

Application Insights is a web analytics tool provided by Microsoft Corporation. It allows website owners to understand user behavior and analyze the performance of their applications. 

The data collected by Application Insights may include information such as response times, page load times, errors, exceptions, and other metrics related to application performance and usage.  

Data processed: user event data, event properties, user identifiers. 

Place of processing: USA – Microsoft Privacy Policy – ​​Opt Out 

Hotjar (Hotjar Ltd.) 

Hotjar is a user behavior analysis tool provided by Hotjar Ltd. It allows the collection and analysis of data about users’ interaction with a website to provide valuable insights to platform owners.

Hotjar uses the collected data to understand how users navigate, interact and engage with the platform. This includes click events, mouse movements, page scrolls and other user interactions.  

Data privacy and security are a top priority for Hotjar. The personal data collected is processed with due care and protection, in compliance with applicable data privacy laws.

Data processed: user events, mouse movements, clicks, page scrolls and other user behavior. 

Place of processing: EU – Hotjar Privacy Policy 

Google Tag Manager (Google LLC) 

Google Tag Manager is a management service provided by Google LLC. 

Data processed: Usage data and Trackers. 

Place of processing: USA –Privacy Policy. 

User Commitment 

The user undertakes to make appropriate use of the contents and information that AEVO offers on the website and with an enunciative but not limiting character:

  • A) Do not engage in activities that are illegal or contrary to good faith or public order; 
  • B) Do not disseminate advertising or content from racist, xenophobic nature, or betting houses (e.g. Moosh), games of chance, any type of illegal pornography, in support of terrorism or against human rights; 
  • C) Not to cause damage to the physical (hardware) and logical (software) systems of AEVO, its suppliers or third parties, to introduce or disseminate computer viruses or any other hardware or software systems that are capable of causing the aforementioned damage. 

 

More information 

Hopefully that has clarified things for you and as was previously mentioned if there is something that you aren’t sure whether you need or not it’s usually safer to leave cookies enabled in case interact with one of the features you use on our site. 

This policy is effective as of May 2021.