Universum Lab.
This agreement is intended to record the free, informed, and unequivocal expression by which the Data Subject consents to the processing of their personal data for a specific purpose, in accordance with Law No. 13,709 – General Personal Data Protection Law.
By accepting this agreement, the Data Subject consents to our Company (Universum Lab), known as the Controller, processing their personal data, including the following operations: collection, use, storage, and deletion.
Personal Data:
The Controller is authorized to process the following personal data of the Data Subject:
Name
Phone number
Email address
Purpose of Data Processing
The processing of the personal data listed in this agreement has the following purposes:
To enable the Controller to identify and contact the Data Subject for commercial purposes. To allow the Controller to send or provide services to the Data Subject, whether paid or free of charge. Sharing
The company ensures that it does not share the Data Subject’s personal data with other data processing agents. Furthermore, under no circumstances will it commercialize customer information or pass it on to third parties, except to established authorities, in strict compliance with the law.
Security Measures:
The Controller is responsible for maintaining technical and administrative security measures capable of protecting personal data from unauthorized access and accidental or unlawful destruction, loss, alteration, communication, or any form of inappropriate or unlawful processing.
In accordance with Article 48 of Law No. 13,709, the Controller will notify the Data Subject and the National Data Protection Authority (ANPD) of any security incident that may pose a significant risk or harm to the Data Subject.
Data Subject Rights
The Data Subject has the right to obtain from the Controller, regarding the data processed by it, at any time and upon request:
I – Confirmation of the existence of processing;
II – Access to data;
III – Correction of incomplete, inaccurate, or outdated data;
IV – Anonymization, blocking, or deletion of unnecessary, excessive, or data processed in noncompliance with the provisions of Law No. 13,709;
V – Portability of data to another service or product provider, upon express request and in compliance with trade and industrial secrets, in accordance with the regulations of the controlling authority;
VI – Deletion of personal data processed with the consent of the data subject, except in the cases provided for in Article 16 of Law No. 13,709;
VII – Information on public and private entities with which the controller shared data;
VIII – Information on the possibility of not providing consent and the consequences of refusal;
IX – Revocation of consent, pursuant to Article 8, § 5, of Law No. 13,709.
X – Support for complaints to the National Data Protection Authority.
XI – Review of decisions made exclusively by automated systems.
XII – Agreement to object to processing if irregular.
Termination of Data Processing
Personal Data will be deleted after 5 (five) years from the date of consent or immediately upon request.
The Data Subject may request, at any time, via email or in person, that the personal data for which consent was granted be deleted. The Data Subject is aware that it may be impossible for the Data Subject to continue providing services to the Data Subject after the deletion of the personal data.
Right to Recall Consent
This consent may be revoked by the Data Subject at any time by requesting it via email or in person to the Data Subject.
Contact:
The Data Subject may contact the Data Subject with any request by email: