Privacy Policy

1. Introduction

The Pormade Economic Group is committed to transparency, privacy, and the security of its customers' data, acting to protect the personal data processed and controlled within the scope of its responsibilities.

Pormade Online is a brand that is part of the Pormade Economic Group, composed of the companies listed below:

Pormade Portas de Madeiras Decorativas Ltda – 81.639.023/0018-90 / 81.639.023/0001-42

DRZ Portas Ecológicas Ltda – 10.652.922/0001-37 / 10.652.922/0002-18

Transportes Rodoviários SBA Ltda – 82.574.245/0001-97

Pormade Franchising Ltda – 30.358.654/0001-52

Decore Tech Ltda – 49.933.965/0001-26

The Privacy Policy detailed below explains how personal data is processed, what information we collect, and how we use and store it, both physically and digitally, in accordance with the provisions of the General Data Protection Law (Law 13.709/18).

To ensure proper understanding of the Privacy Policy, it is essential to clarify some key concepts:

2. Concepts

National Data Protection Authority (ANPD) – The body that supervises and guides the application of the LGPD, and is responsible for applying administrative sanctions in case of law violations.Consent – a clear and explicit authorization from the data subject for processing personal data for a specified purpose. Consent can be revoked at any time, but revocation does not affect prior processing.Client – any individual or legal entity that purchases products or services from the site or otherwise uses our platform.Personal Data – any information related to an individual that identifies them, either directly or indirectly.Sensitive Personal Data – personal data revealing racial or ethnic origin, religious beliefs, political opinions, union membership, health or sexual life, genetic or biometric data.

Purpose – what we aim to achieve by processing personal data.

Legitimate interest – processing conducted by the Controller for its own interest, that of other companies, or society, without affecting the rights and freedoms of the Data Subject.

Free access – the right of the Data Subject to access all information regarding the processing of their personal data.

Necessity – data processing must be limited to the minimum necessary for the intended purpose: relevant, proportional, and not excessive.

Opposition – the right of the Data Subject to object to the processing of their data. This can be exercised in specific situations.Security – the adoption of technical and administrative measures to protect personal data from unauthorized access and accidental or illicit situations of destruction, loss, alteration, communication or dissemination.Processing – covers all operations on personal data: collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, storage, filing, elimination, evaluation or control, communication, transfer, dissemination or extraction of personal data.Transparency – Ensuring clear, precise and easily accessible information to Data Subjects about processing activities and data controllers, respecting commercial and industrial confidentiality.Data Subject – any natural person whose personal data is processed by Pormade Online.

3. Application

Applies to all customers, employees, and service providers of the Pormade Economic Group as well as to those whose personal data is processed by us in any way. Using our online platform implies acceptance of this Privacy Policy.

4. Personal Data Collection

Generally, personal data is collected directly from the data subjects who have a contractual relationship or expressed interest...In other situations, personal data can be obtained from publicly available sources or third‑party providers...Data can be collected directly (registration, contact forms, resumes, contracts) or indirectly via technology on our site.If you submit third‑party data, you must ensure they are aware of this Privacy Policy and have consented.

4.1 Children and Adolescents

The collection of data from children and adolescents, that is, individuals under 18, will only occur with the explicit authorization of the parent(s) and/or legal guardian(s) via a specific instrument, in person, and informing the legitimate purposes. We do not deliberately collect personal data from children and adolescents in any other way. If the User is under 18, they must not register on our platforms nor provide any personal data in that situation. If we become aware that we have collected personal data from a child or adolescent, we will take reasonable steps to delete the data in question.

5. Processing

Regarding personal data processed in our activities, we highlight:Registration Data: may include name, email, address, CPF, phone, photo, audio, etc.Contact Data: gathered via forms, communications, commercial activities.Financial Transaction Data: related to product or service purchases, including address, CPF, bank or credit card data.Usage Data: site, products, cloud and apps usage data.Pormade collects customer info when you create an account, place an order, interact with support, participate in surveys or promotions.Mobile device info may include location and device data to personalize content and ads. You can disable location services via your device settings.Sensitive data is collected for clear, lawful purposes, such as employee records, biometric time clocks, exams, etc.Further purposes may be applied with specific terms for knowledge and/or consent.It is important that you understand how we use your data and the legal basis for such use. General purposes include:

1Opening of salary account at banksContract execution

2CAT monitoringLegal obligation

3Website access by data subjectsConsent

4Employee hiringLegal obligation

5Active search for professionals on social networksLegitimate interest

6Customer registrationContract execution

7Registration for sales formalization and invoice issuanceContract execution

8Campaign registration (data collection – leads)Consent

9Partner registrationContract execution

10Registration in the EAD training platformLegitimate interest

11Contractual clausesContract execution

12Sharing with supplierLegitimate interest

13Employee benefit agreementsConsent

14Sending campaigns (with data registered in SIS)Legitimate interest

15Invoice issuanceContract execution

16Exams (scheduling appointments, execution, vaccines)Consent

17Document storage of approved registrationsContract execution

18Document storage after employee terminationLegal obligation

19Sales management for tracking performance of professionals, sales agents, partner search and relationshipLegitimate interest

20Order identificationContract execution

21Personal identification to make a paymentConsent

22Inclusion in contentLegitimate interest

23Enrollment of employees in external training programsConsent

24Health and dental planConsent

25Use of company contract templatesContract execution

Personal data is processed for the purposes and legal bases mentioned above, not limited to those specified in electronic or physical terms.

Consent is deemed given upon electronic or physical acceptance of privacy terms.

Personal data will not be used for purposes incompatible with those informed, except as required by law or vital interest.

6. Third‑Party Data Transfers

We may share your personal data with any company within our group, as reasonably necessary for stated purposes and in compliance with applicable law.We may share data with insurers, advisors, suppliers, and service providers when necessary for insurance, risk management, professional advice, or service provision.Payment service providers process financial transactions; data is shared only to process payments, refunds, and inquiries.We may disclose data to comply with legal or regulatory obligations, or to protect vital interests, taking steps to ensure adequate protection.We have representatives, stores, and suppliers in Brazil and abroad; data transfer outside Brazil is carried out under LGPD and contractual safeguards.You acknowledge that your personal data may be transferred internationally in connection with the services provided.

7. Storage and Deletion of Personal Data

7.1 We retain personal data only as long as necessary, according to specific procedures for retention and record management based on legal grounds:

During the relationship with the Data Subject;

For the period needed to meet legal, contractual, or rights defense obligations;

While consent remains valid.

7.2 When exact retention periods are not predetermined, we set retention based on:

Laws/regulations demanding data retention for specific time;

Pormade internal policies;

Judicial or administrative proceedings;

Requests from authorities.

8. Your Rights

Pormade respects the rights of data subjects under LGPD, including:

Confirm existence of data processing.

Access my personal data held by Pormade;

Correct my personal data;

Request anonymization, blocking, or deletion of unnecessary data;

Request portability of my data;

Request deletion of personal data processed with consent;

Know with whom my data was shared;

Information about the possibility of withholding consent and consequences;

Revoke consent

Right not to be subject to automated decisions and profiling;

You have the right to confirm whether we process your data and where, and to receive a copy, unless third‑party rights are affected.

In certain circumstances, you have the right to have your data erased without undue delay. These include:

Data no longer necessary for original purposes;

You withdraw consent;

Processing for marketing purposes;

Data processed unlawfully.

There are exceptions to your right to object to processing, such as when necessary for freedom of expression, legal obligations, or legitimate interests.

If you object, we will cease processing unless we demonstrate compelling legitimate grounds or for legal dispute purposes.

If you believe your data processing violates data protection law, you may file a complaint with the competent authority and request immediate cessation.

If consent is the legal basis, you have the right to revoke consent at any time; revocation does not affect prior processing.

You may exercise your rights via written notice to Pormade or electronically at dpo@pormade.com.br.

9. Cookies, Identifiers, Trackers, and Third‑party Information

We use cookies on our site. To the extent such cookies are not strictly necessary for navigation and/or provision of our Services, we will ask for your consent upon your first visit.

Cookies typically don’t contain personal identifiers, but the personal data we store about you may be linked to cookie‑derived information. We use cookies for:

Authentication – to identify you when using our portals and applications;

Status – to determine if you're logged in;

Personalization – store your preferences and personalize services;

Security – to protect user accounts and prevent credential misuse;

Advertising – to display relevant ads;

Analytics – to analyze usage and performance;

Cookie consent – to store your overall cookie preferences.

Our service providers use cookies that may be stored on your computer when you use our portals and electronic applications. Most browsers allow you to refuse or delete cookies. Methods vary by browser and version. Blocking all cookies may negatively impact the usability of many sites.

In addition to identifiers, we also use Web Beacons to better manage our content, informing us which content is effective. Web Beacons are embedded or associated with certain emails or other communications you receive from us.

We may use third‑party services, such as open search tools and social networks, to gather publicly available information about you (e.g., name or company) and enrich your personal data.

10. Incidents

Pormade Economic Group promptly evaluates and responds to incidents that may compromise personal data. If aware of any incident, Pormade will notify you and the competent authorities.

11. Data Security and Best Practices

Pormade Economic Group utilizes top information and physical security protocols to preserve customer data privacy, and also recommends personal protective measures.

We implement organizational security measures, both physical and technical, to promote good governance of personal data.

Protocols, controls, and related policies, as well as procedures and guidance, have been established based on risk mapping.

Regular training, capacity‑building actions, and privacy awareness campaigns are included in our preventive efforts.

The Information Security and Data Privacy Committee continuously proposes improvements to our privacy policy, information security, and best practices.

12. Data Protection Officer (“DPO”)

Pormade Economic Group has appointed a Data Protection Officer (DPO), Ms. Miriam Götz Mayer, who serves as the communication channel between the controller, data subjects, and the ANPD. Contact details are available on our website or via the LGPD portal.

For questions or clarifications about this Privacy Policy, contact us by email at dpo@pormade.com.br.

13. Changes to the Privacy Policy

Pormade may update this policy at any time. Updates are posted on our website and platforms. Please review periodically.

For significant changes, we may notify you by email or platform message.

14. Legislation and Jurisdiction

This policy is governed by Brazilian federal law, especially Law No. 13.709/2018, with jurisdiction in União da Vitória – PR for any questions arising from this document.

15. Our Data

Pormade Economic Group is headquartered at Rua Prudente de Morais, 940, Centro, União da Vitória, Paraná, Brazil, CEP 84600‑905.

Download or print Request