This Brazilian Data Protection Privacy Notice (“Notice”) supplements and forms part of the World Check Privacy Statement and the Enhanced Due Diligence Privacy Statement, but only where the relevant privacy statement expressly incorporates this Notice.
It applies solely to the processing of personal data subject to the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados – LGPD), including where the data subject is located in Brazil, for which Refinitiv Limited or another LSEG Group entity acts as a data controller in connection with the World-Check and Enhanced Due Diligence services.
Where the processing is covered by the LSEG group level Privacy Statement (and its Brazil annex), or where LSEG acts solely as a data processor, this Notice does not apply.
This Notice does not apply to LSEG Group personnel, job applicants or contractors, nor to marketing activities or the personnel of our clients.
Section 1: Notice of processing of personal data
“Personal data” is defined by the LGPD as any “information regarding an identified or identifiable natural person” (Art. 5, I).
Section 2: Data subjects’ rights under the LGPD
Subject to certain exceptions, you have certain rights regarding your personal information, as described below. Under the LGPD you have the right to:
I – Confirmation of the existence of the processing;
II – Access to the data;
III – Correction of incomplete, inaccurate or out-of-date data;
IV – Anonymization, blocking or deletion of unnecessary or excessive data or data processed in noncompliance with the provisions of this Law;
V – Portability of the data to another service provider or product provider, by the means of an express request, pursuant with the regulations of the national authority, and subject to commercial and industrial secrets;
VI – Deletion of personal data processed with the consent of the data subject, except in the situations provided in Art. 16 of the LGPD;
VII – Information about public and private entities with which the controller has shared data;
VIII – Information about the possibility of denying consent and the consequences of such denial;
IX – Revocation of consent as provided in §5 of Art. 8 of the LGPD.
There are limits to the rights that you have in relation to your personal information and in certain circumstances we may not be required or able to meet your request, or we may meet your request in part only. Where this occurs, we will provide you with an explanation as to why we are unable or not required to meet your request. You can also find further information on our approach towards any requests you make in the relevant service product FAQ or privacy statement.
See also the "How to contact us" section in the relevant privacy statement for details of how to contact us to exercise these rights and data protection regulators if you disagree with a decision we have reached.
Additional Information: Requests made under the Data Subject’s Rights Section of the LGPD (Art. 18) are free of charge. Please note that under the LGPD, Refinitiv may in good faith reject, deny, or otherwise not respond to requests that are duplicative, excessive, and/or repetitive.