Protection of Personal Data - Customer Information

This "Privacy Policy" prioritizes transparency and the protection of the privacy of the data of users (holders) who browse the b2card.com.br website. It aims to clarify the collection, processing, and storage of this data, in accordance with Law 13.709/2018 (LGPD - General Data Protection Law).

All information provided by users in their registration and collected during their access and use of the website will be exclusively used by B2. This information is added to its database for business contacts and to operationalize the delivery of its services, which means the achievement of its corporate purpose (development of software solutions for the financial market and payment methods).

Upon registration, the user must agree to this Privacy Policy, thereby giving their free, express, and informed consent to the collection, processing, and storage of their data as described below.

For users who only access the B2 commercial website, consent arises from mere use and access to the site, by which they also authorize the collection, processing and sharing of data as mentioned.

B2 is a software development company and provides consulting services in payment methods. Therefore, we don't process personal data as the core of our business.

Personal information provided by the user at the time of their registration for business contact includes Name, email, and telephone. To seek job opportunities at B2, when choosing 'Work With Us', access will be directed to the website of Solides - B2 HR partner company.

Exceptionally, in some situations, we may handle your personal data. In these cases, the primary collection channels are:

- Internet protocol (IP) addresses, logical ports and browser features.
- Automated collection of information through tools such as cookies (small text sent to the user's) browser. Users can configure their browser to refuse cookies and other automated data collection tools. However, some features or services available on the B2 commercial website may not function correctly without these tools.
- Access logs to the application, in accordance with Brazilian legislation, particularly Law No. 12.965/14, during every access to the B2 commercial website, including during registration.
- Forms on our website, which are voluntarily filled out. Business prospecting through contacts from the LinkedIn social network. Voluntary registration for receiving newsletters, advertising and promotions.
- Drafting of contracts for the execution of consultancy.

In all the described cases, you have the right to know:

(i) the type of processing your data undergoes;

(ii) categories of personal data processed;

(iii) which B2 collaborators are involved in the activity processing your personal data;

(iv) the duration of processing and storage;

(v) their intended purposes;

(vi) in which cases they are shared;

(vii) or if any automated decision-making process is conducted on them.

B2 collects and stores visitor data through the use of cookies.
Most web browsers are set to automatically accept cookies, although users can set their browsers to refuse all cookies or to indicate when a cookie is being sent.
When a cookie is accepted, on subsequent visits to B2 website, the internet server will recognize the user's computer or mobile device.

The collected data is used exclusively for commercial purposes and to provide information about B2 services. Data collected via cookies are used for statistical analysis of site visits. User browser data ensures compatibility with the B2 commercial site, facilitating access to all its features.

B2 does not share the provided data, except with internal team members who have explicit permission to access and handle the collected data as outlined in this Privacy Policy. Data may be shared during corporate transactions involving B2 (where information transfer is essential for service continuity), by court order, or when requested by legally competent administrative authorities.

a) IP address data and browser specifications may be shared with institutions like the Federal Police, the Civil Police of Minas Gerais, and other authorities to support investigations and combat fraud.

b)  Strictly for procedures specified in Law No. 12.965/14 and Decree No. 8.771/16, user registration data can be provided to competent authorities without a court order.

Third parties will never have access to this data for commercial or advertising purposes.

B2 commits to maintaining security measures, both technical and administrative, to protect personal data from unauthorized access and accidental or illicit situations like destruction, loss, alteration, or inappropriate handling.

In alignment with B2 Information Security Policy, we implement role-based access controls, with annual access profile reviews, ensuring users only access necessary data.

As per Article 48 of Law No. 13.709/2018, B2 will notify users and the National Data Protection Authority (ANPD) of significant security incidents that might pose a risk.

B2 may retain and handle user personal data as long as it serves the purposes listed herein. Anonymized data can be kept indefinitely.

Users can request the deletion of non-anonymized personal data by emailing dpo@b2.solutions.

Users can request information from B2 about the data processed. Rights include data access, rectification, deletion, limitation, objection, portability, transfer to another provider, and not being subject to decisions based solely on automated processing. These rights can be exercised by emailing dpo@b2.solutions.

B2 may update this "Privacy Policy" to comply with applicable law or best Information Security practices. Users are responsible for periodically reviewing updates.

CONTACT – DATA PROTECTION OFFICER (DPO):
Jorge William de Souza - dpo@b2.solutions. LAST UPDATED: September 21, 2020

For inquiries or concerns about personal data handling, contact B2 at dpo@b2.solutions. Users also have the right to lodge complaints with the National Data Protection Authority as stipulated by law.

This Privacy and Personal Data Protection Policy may be updated at any time. Significant changes will be communicated to users through the provided contact details.