Read the Privacy Notice.
Last updated: October 6, 2023.
We, at GRUPASSO S.A. (“Grupasso” or “Organization”), the holding company that controls SUCORRICO CITRUS INDUSTRIAL E AGRÍCOLA LTDA. (“Sucorrico”) and LATICÍNIOS XANDÔ LTDA (“Xandô”), have a long-standing commitment to quality, sustainability, and innovation in our products. To achieve this, we cultivate trust and transparency in our relationship with our customers, consumers, suppliers, and everyone who interacts with us (“You”).
With this purpose, we have prepared this Privacy Notice (“Notice”) to help you understand how we process your Personal Data within our Organization (and in our subsidiary and affiliated companies), and also to inform you about your rights related to this information.
For us, protecting the privacy and security of your Personal Data is a priority. Therefore, any information you provide to us will be processed in accordance with the limits established herein and in compliance with applicable laws.
If you have any questions regarding the protection of your Personal Data and/or this Privacy Notice, we provide an appropriate contact channel for clarification at: privacidade@grupasso.com.br
. Please do not hesitate to contact us.
Data Protection Officer (DPO): Opice Blum, Bruno Advogados Associados
Legal Representative: Henrique Fabretti Moraes
1. What do you need to know before reading this Notice?↴
To help you fully understand this Notice, we provide below some important terms and concepts:
- Personal Data: Any information related to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, electronic identifiers, or one or more elements specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
- Sensitive Personal Data: Any personal data that concerns racial or ethnic origin, religious belief, political opinion, union membership or membership in religious, philosophical, or political organizations, as well as data related to health or sexual life, genetic data, or biometric data.
- Data Protection Officer (DPO): The person appointed by the Organization to act as the communication channel between you and the National Data Protection Authority (ANPD).
- Third Parties: Refers to, but is not limited to, any natural or legal person with whom the Organization interacts or may interact, including service providers, suppliers, consultants, partners, contractors, or subcontractors.
- Data Subject: The natural person to whom the personal data refers.
- Processing: Any operation carried out with personal data, such as collection, receipt, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, elimination, evaluation or control of information, modification, updating, communication, transfer, sharing, and extraction.
2. How about a summary of the most relevant information? ↴
To make this Notice easier to understand, we have prepared a summary table of the key information that will be presented to you in this document:
WHO WILL PROCESS YOUR PERSONAL DATA? GET TO KNOW GRUPASSO! ↴
Our Organization, composed of the holding company Grupasso and the companies Sucorrico, Plastirrico and Xandô, is dedicated to the production and distribution of products, guided by honesty, trust, and respect, and committed to interacting with everyone in a transparent manner.
You can learn more about us by visiting our websites: www.sucorrico.com, www.plastirrico.com.br, and www.xando.com.br.
The Organization is the entity responsible for processing your Personal Data, and it is also the party that determines the specific purposes and defines the means for processing this information.
You can learn more about Xandô by visiting the following website: www.xando.com.br
HOW DO WE COLLECT YOUR PERSONAL DATA? ↴
The information we process about you may have been provided directly by You to the Organization, by Third Parties, or even collected automatically through our Platform and other channels.
WHICH PERSONAL DATA MAY BE PROCESSED? ↴
Personal Data: Full name, Age, CPF, RG, Driver’s License (CNH), Date of birth, Marital status, Signature, Full residential address and ZIP code, Landline phone number, Mobile phone number, Email, Bank branch, Account number, Bank, Income Statement (IRPF), Credit history, Credit score, Profession, Workplace, Salary expectations, Education and Training history, Professional background, Qualifications and Certifications, Languages, other information eventually provided in your résumé, Browsing characteristics, Browsing history, Time spent browsing, Social media history, Photograph, Username, Social media profile.
WHY DO WE NEED YOUR PERSONAL DATA? ↴
We use your Personal Data to fulfill a specific purpose:
- Enable a service/product requested by You
- Comply with our legal or regulatory obligations
- Allow the regular exercise of our rights
- Enable activities necessary for our Organization
- Execute a contract you have entered into with us or carry out pre-contractual procedures
- Recruitment and selection
- Prevent fraud and ensure your security
- Communication
- Credit analysis and protection
HOW LONG WILL YOUR DATA BE RETAINED? ↴
We store your Personal Data for the time necessary to fulfill the purposes for which it was collected. Whenever possible, we will keep Personal Data in an anonymized form, ensuring the highest level of market-standard care and security.
WHEN MAY YOUR PERSONAL DATA BE SHARED? ↴
We may share your Personal Data with Third Parties so that it is possible to achieve the purposes for which the data was collected.
Data may also be shared when necessary to comply with requests from judicial authorities or to fulfill legal or regulatory obligations.
HOW TO EXERCISE YOUR RIGHTS AS A PERSONAL DATA SUBJECT? ↴
We are committed to complying with all your rights as a Data Subject. For this reason, we provide a communication channel to address any questions, suggestions, or requests related to the Processing of the Personal Data collected.
You may contact our Data Protection Officer (DPO) via the email: privacidade@grupasso.com.br.
3. HOW DO WE COLLECT YOUR PERSONAL DATA? ↴
The information we process about you may have been provided directly by you to the Organization, by third parties, or even collected automatically through our Platforms and other channels.
- a) Fornecidas Diretamente por Você
A depender da sua interação conosco, Você nos poderá nos disponibilizar os seus Dados Pessoais para alguma finalidade específica. Como, por exemplo, ao entrar em contato por meio de nossas redes sociais ou canais de atendimento, ao se cadastrar para participar de nossas promoções, ao acessar e conhecer os produtos oferecidos pela Organização, ao se inscrever em nossos processos seletivos, dentre outras finalidades. - a) Provided Directly by You
Depending on your interaction with us, you may provide your Personal Data for a specific purpose. For example, when contacting us through our social media or service channels, registering to participate in promotions, accessing and learning about the products offered by the Organization, applying for our recruitment processes, among other purposes. - b) Obtained from Third Parties
In specific cases, we may receive some of your Personal Data from Third Parties. This information may be provided by contractors of the Organization, such as Consultants, Service Providers, Suppliers, and Media Outlets, who help us deliver increasingly better products and services to you. We may also receive information from credit services, such as SPC and Serasa Experian, for example. - c) Automatically
In certain situations, we may also automatically collect Personal Data from the devices you use to access our websites. This information helps us generate access statistics and better understand our audience, which is essential to continuously improving our platforms and making them accessible to as many users as possible. Some of this data may be collected through cookies or similar technologies. - d) Publicly Available
Depending on our type of interaction, we may obtain publicly available information about you, including—but not limited to—social media such as Instagram, Facebook, Google, LinkedIn, among others, as well as public databases from government agencies, such as the Federal Revenue Service, for example.
4. WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU? ↴
To respect your privacy, we understand that any processing of personal data must be limited to what is strictly necessary, relevant, and proportional to achieve the intended purpose. Therefore, the personal data we collect about you will vary depending on the type of relationship you choose to establish with us—whether as a client, consumer, supplier, service provider, visitor, partner, among others.
Below, grouped by categories, we present the main personal data of yours that we process:
- 1) Registration data
Full name, Age, CPF, RG, Driver’s License (CNH), Date of birth, Marital status, Signature. - 2) Contact data
Full residential address and ZIP code, Landline phone number, Mobile phone number, Email. - 3) Financial data
Bank branch, Account number, Bank, Income Report (IRPF), Credit History, Credit Score. - 4) Professional data
Profession, Workplace, Salary Expectation, Education and Training History, Professional Background, Qualifications and Certifications, Languages, among other data eventually provided in your professional résumé. - 5) Attributes associated with your electronic devices
Browsing Characteristics, Browsing History, Time Spent Browsing, Social Media History. - 6) Public data
Photograph, Username, Social Media Profile.
5. HOW DO WE USE YOUR INFORMATION? ↴
The Personal Data collected by the Organization about You is used for the following purposes:
| Data Categories | Purposes |
| Registration data / Contact data / Financial data | Enable a service/product requested by You We process your Personal Data to enable the purpose for which the data was collected. For example, when you purchase our products, contact us through our service channels, participate in our promotions, or use our home delivery programs. |
| Registration data / Contact data / Financial data | Comply with our legal or regulatory obligations Your personal data may be used to comply with obligations established by law and/or regulations of government bodies, as well as orders or requests from tax authorities, the Judiciary, and/or other competent authorities. For example, we may process personal data to issue Invoices. |
| Registration data / Contact data / Financial data | Allow the regular exercise of our rights Even after your relationship with us ends, we may process some of your personal data to exercise our rights guaranteed by law, including as evidence in judicial, administrative, or arbitration proceedings. |
| Registration data / Contact data / Financial data / Device attributes / Public data | Enable activities necessary for our Organization Based on our legitimate interest, we may also process your personal data for activities such as marketing, improving our products and services, managing relationships with customers and partners, company performance analysis and reporting, and internal assessments. In such activities, we will always respect your expectations, and the processing will never occur to the detriment of your interests, rights, or fundamental freedoms. |
| Registration data / Contact data / Financial data | Execute a contract you have entered into with us or carry out pre-contractual procedures If you are a party to a contract with the Organization, or represent a company in a contractual relationship, we process your data for executing the contract, such as ensuring the completion of the work and corresponding payment. We may also process data to maintain our commercial relationships with customers, partners, suppliers, and others. |
| Registration data / Contact data / Professional data | Recruitment and selection We publish job openings on specialized platforms, receive résumés through our website, employee referrals, or physical submissions at our facilities. In these cases, we process your personal data to analyze your résumé, verify your skills and qualifications, assess whether you meet the specific requirements of the position, and proceed with the selection process when applicable, including phone or email contact and interview scheduling. |
| Registration data / Contact data | Prevent fraud and ensure your security We may process your personal data to protect your security (and that of third parties) and to prevent identity fraud, especially when you access our institutional website, internal systems, or visit our facilities. |
| Registration data / Contact data | Communication We may process your data for communication purposes. This communication may occur through our Customer Service (SAC) channels to provide support and assistance, as well as for campaigns and promotions, allowing us to inform you about relevant offers and updates. We ensure that your data is processed in accordance with data protection standards and that your privacy and security are safeguarded. |
| Registration data / Financial data | Credit analysis and protection For purposes of credit analysis and credit protection, we may process the personal data you provide. This data will be used to assess your creditworthiness and manage risks related to our Organization’s activities. |
6. WHAT ARE COOKIES AND HOW DO WE USE THEM? ↴
Cookies are text files that may be stored on your electronic devices when you visit our websites. The Organization uses this tool for different purposes, such as generating access statistics, improving your experience on our interfaces/domains, among others.
For more details, please access our specific Cookie Notices here:
www.sucorrico.com.br
7. WITH WHOM DO WE SHARE YOUR PERSONAL DATA? ↴
It is possible that the Organization may share your Personal Data, and such sharing will be limited to what is adequate and necessary to fulfill one of the specific purposes previously informed to you in this Notice.
Thus, we may share your data with Third Parties in the following situations:
- when it involves a company that is part of the same group as the Organization and affiliated companies, in order to enable the achievement of research results and the subsequent disclosure of these indicators;
- business partners and service providers, to enable the operation of communication and marketing channels, as well as to provide the necessary structure to support our services;
- in the context of a corporate transaction, such as mergers, acquisitions, spin-offs, or incorporations;
- with administrative and judicial authorities when necessary to comply with legal obligations or assist in the investigation of suspicious or illegal activities; and
- with law firms, legal advisors, and other legal representatives when necessary to defend the interests of the Organization in administrative, arbitral, or judicial proceedings.
When we share your Personal Data in the situations above, we use contractual instruments to ensure that any Third Party receiving the data provides appropriate protection.
In situations where the sharing involves a third party located outside Brazil, the Organization will rely on one of the legal bases for international data transfer.
8. HOW LONG DO WE STORE YOUR PERSONAL DATA? ↴
We will not retain your Personal Data for longer than necessary to fulfill the purposes described above, nor will we use your data for other purposes, except in situations permitted by law.
When retaining Personal Data after the purpose for which it was collected has been achieved becomes necessary, the criteria used to define the retention period are:
- whether we have a legal, contractual, or other obligation to retain personal data, or if they are needed for investigation or litigation purposes; and
- whether they are necessary to maintain accurate business and financial records.
9. HOW DO WE PROTECT YOUR PERSONAL DATA? ↴
We have internal policies and protocols that determine how personal data must be handled by the Organization. These rules aim to ensure the proper and lawful processing of the personal data we hold, including yours.
In addition to these organizational and governance measures, we also adopt several technical safeguards that further strengthen the security of your personal data, such as:
- strict control over the processing of personal data, including access limitation and password-protected access;
- the implementation of an information security program;
- segregation of access to personal data;
- guidelines for password protection; and
- access to services exclusively through secure networks.
10. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM WITH THE ORGANIZATION? ↴
Regardless of the type of relationship you have with the Organization, you are guaranteed all rights related to your Personal Data as provided by law, including:
- 1) Knowing whether we process any of your Personal Data;
- 2) Knowing which of your Personal Data we process;
- 3) Correcting incomplete, inaccurate, or outdated data;
- 4) Requesting the anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;
- 5) Requesting the portability of your data to another service or product provider;
- 6) Requesting the review of decisions made solely through automated processing that affect your interests;
- 7) Requesting the deletion of data processed based on your consent;
- 8) Obtaining information about the public or private entities with which we share your data; and
- 9) When the Processing activity requires your consent, you may refuse to consent. In such cases, we will inform you of the consequences of not performing that activity. If you provide consent, you may revoke it at any time.
You may exercise your rights at any time. To do so, you may contact our Data Protection Officer (DPO) at the email privacidade@grupasso.com.br. We ask that you identify yourself and specify which right you wish to exercise.
It is possible that additional information and/or documents may be requested by the Organization to confirm your identity or the accuracy of the information you have provided.
Requests involving Personal Data and/or documents belonging to other Data Subjects will not be fulfilled, except when supported by power of attorney, parental authority, or another legal basis allowing you to exercise the right on behalf of another Data Subject.
It is important to note that, in specific circumstances, your request may not be fulfilled. In such cases, we will explain the reasons that justify the refusal.
11. QUESTIONS? ↴
Questions about this Privacy Notice or your rights? Feel free to contact our Data Protection Officer (DPO) at the e-mail: privacidade@grupasso.com.br.
12. UPDATES ↴
Some of the information provided here may be updated or changed. Therefore, we recommend that you review this Privacy Notice periodically. Whenever a new update is made, we will communicate it through our channels.