Privacy and Cookies Policy

Privacy Policy of the www.mrsul.com.br service

To receive information about your personal data, the purposes, and the parts of information that are shared, please contact the Owner.

If you need more details and wish to understand your rights, you can also view the full version of this privacy policy by clicking the link at the bottom of this page.

Data Owner and Controller

MRSUL: Rodovia Paulo Rolin Loureiro - até km 11,000
Vila Moraes
Mogi das Cruzes/SP
CEP: 08766-500

Owner contact email:mrsul@mrsul.com.br

Types of Data Collected

Data Use and Other Collected Data

Complete details about each type of Personal Data collected are provided in the specific sections of this privacy policy or by specific explanatory texts displayed prior to Data collection.

Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically when using this Application.

Unless stated otherwise, all Data requested by this Application is mandatory and failure to provide such Data may make it impossible for this Application to provide its Services. In cases where this Application specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or functioning of the Service.

Users who have doubts about which Personal Data is mandatory are invited to contact the Owner.

Any use of cookies – or of other tracking tools – by this Application or by the owners of third-party services used by this Application will serve the purpose of providing the Services requested by the User, as well as the other purposes described in this document and in the Cookie Policy.

Users are responsible for any third-party Personal Data obtained, published or shared through this Service (this Application).

Cookie Policy

This Application uses Trackers. For more information, Users may refer to the Cookie Policy.

Additional information for users

Legal basis for processing

The Owner may process Personal Data relating to Users if one of the following applies:

• Users have given their consent for one or more specific purposes;
• provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof;
• processing is necessary for compliance with a legal obligation to which the Owner is subject;
• processing is related to a task carried out in the public interest or in the exercise of official authority vested in the Owner;
• processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.

In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

Further information on retention time

Unless otherwise specified in this document, Personal Data shall be processed and stored for as long as required by the purpose they have been collected for, and may be retained for a longer period due to legal obligations or with User consent.

Therefore:

• Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.
• Personal Data collected for the purposes of the Owner’s legitimate interests shall be retained as long as needed to fulfill such purposes.

• Receive your Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used, and machine-readable format and, if technically feasible, to have it transmitted to another controller without hindrance.
• Lodge a complaint. Users have the right to bring a claim before their data protection authority.

Users also have the right to be informed about the legal basis for Data transfers to a country outside Brazil or to any international organization, such as the UN, and about the security measures taken by the Owner to safeguard their Data.

Details about the right to object to processing

Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner, or for the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection.

Users must know that, however, if their Personal Data is processed for direct marketing purposes, they can object to that processing at any time without providing any justification. To learn whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to exercise these rights

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. These requests are free of charge and will be addressed by the Owner as early as possible and always within one month, providing legally required information. Any correction or deletion of Personal Data or restriction of processing will be communicated by the Owner to each recipient to whom the Personal Data has been disclosed, unless this proves impossible or involves disproportionate effort. Upon request, the Owner will inform Users about those recipients.

Why we process your personal information

To understand why we process your personal data, you may read the sections titled "Detailed information on the processing of Personal Data" and "Purposes of processing" in this document.

Your privacy rights as a Brazilian user, how to submit a request and our responses

Your privacy rights as a Brazilian citizen

You have the right to:

• obtain confirmation of the existence of processing activities involving your personal information;
• access your personal information;
• have incomplete, inaccurate, or outdated personal information corrected;
• obtain the anonymization, blocking, or deletion of unnecessary or excessive personal information, or of information that is not being processed in compliance with the LGPD;
• obtain information about the possibility of giving or refusing consent and the consequences thereof;
• obtain information about third parties with whom we share your personal information;
• obtain, upon your express request, the portability of your personal information (excluding anonymous data) to another provider, as long as it does not compromise our commercial and industrial secrets;
• obtain the deletion of your personal information processed based on your consent, except when retention is permitted under Article 16 of the LGPD;
• withdraw your consent at any time;
• file a complaint regarding your personal information with the ANPD or consumer protection agencies;
• object to the processing of personal data not in compliance with legal requirements;
• request clear and adequate information regarding the criteria and procedures used for automated decision-making;
• request the review of decisions made solely based on automated processing that affect your interests.

International data transfers permitted by law

We are allowed to transfer your personal data outside Brazil under the following circumstances:

• when required for international legal cooperation between intelligence, investigation, and prosecution authorities under international law;
• when necessary to protect your life or physical safety or that of a third party;
• when authorized by the ANPD;
• when agreed under an international cooperation agreement;
• when necessary for the execution of a public policy or legal obligation;
• when necessary to fulfill a legal or regulatory obligation, perform a contract, or exercise rights in legal, administrative, or arbitration proceedings.

Cookie Policy of www.mrsul.com.br

This document informs Users about the technologies that help this Application achieve the purposes described below. These technologies allow the Owner to access and store information (e.g., using a Cookie) or use resources (e.g., running a script) on a User’s device as they interact with this Application.

For simplicity, all such technologies are referred to as "Trackers" in this document – unless a specific distinction is required. For example, while Cookies can be used in web and mobile browsers, it would be incorrect to refer to Cookies in mobile app contexts; hence, the term is used only where it applies.

Some purposes of using Trackers may require the User’s consent. Where consent is given, it can be freely withdrawn at any time by following the instructions in this document.

This Application uses only first-party Trackers managed directly by the Owner. The expiration periods of these Trackers may vary as defined by the Owner. Some expire when the browsing session ends.

How this Application uses Trackers

Strictly necessary

This Application uses technical Cookies and similar Trackers for activities strictly necessary to operate or provide the Service.

Data Owner and Controller

MRSUL: Av. Pref. Carlos Ferreira Lopes, 1149
Mogi das Cruzes
São Paulo - SP
CEP: 08773-490

Owner contact email:mrsul@mrsul.com.br

Due to the objective complexity of tracking technologies, Users are encouraged to contact the Owner for further details on their usage in this Application.

Definitions and Legal References

Personal Data (or Data)

Any information that directly or indirectly identifies a natural person, including personal identification numbers.

Usage Data

Information automatically collected via this Application (or third-party services used by it), which may include: IP addresses, domain names, URI addresses, request timestamps, response status codes, browser and OS types, page visit durations, navigation paths, and other IT-related parameters.

User

The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The individual to whom the Personal Data refers.

Data Processor

The individual or legal entity processing Personal Data on behalf of the Controller as described in this Privacy Policy.

Data Controller

The legal entity that determines the purposes and means of processing Personal Data.

This Application

The digital environment where Personal Data is collected and processed.

Service

The service provided by this Application as described.

European Union (EU)

Unless otherwise stated, all references to the EU include all current member states and the EEA.

Cookie

Cookies are small data sets stored in the User\'s browser used for tracking purposes.

Tracker

Any technology that enables User tracking, such as cookies, web beacons, embedded scripts, or fingerprinting.

Legal Information

This privacy statement is prepared based on multiple legal frameworks.

This privacy policy refers only to this Application unless stated otherwise.

Last updated: July 1, 2025