Fontana S.A., located at Rua Coronel Sobral n° 450, Nossa Senhora Aparecida neighborhood, Encantado – Rio Grande Do Sul, takes your privacy and the protection of your personal data seriously, and this Privacy Notice for Employment Candidates (“Notice” ) aims to explain, in a clear and transparent way, how Fontana S.A treats your personal data when you are a candidate for one of our job openings and participate in our selection processes for this purpose, as well as your rights and obligations regarding the protection of personal data.

In this context, Fontana S.A, as a rule, is the controller of personal data and, therefore, responsible for making decisions related to the form and extent of the Processing of personal data collected and maintained due to its relationship with us.

Furthermore, we clarify that the General Data Protection Law requires that all personal data processed by Fontana S.A. be treated in accordance with specific principles determined in Art. 6 of this law. Thus, personal data must:

a) Be treated in good faith and in a transparent manner;
b) Be collected for legitimate, specific, explicit, and informed purposes and not be further processed in a manner incompatible with those purposes;
c) Be adequate and limited to the minimum necessary to achieve the purposes for which they are processed;
d) Be accurate, clear, relevant, and up to date, and all reasonable measures must be taken to ensure that personal data that is inaccurate or inapplicable to the purposes for which they are collected, stored, and/or processed are erased or rectified without delay;
e) Be treated in such a way as to guarantee adequate security of personal data, including using technical and administrative measures able to protect personal data from unauthorized access and accidental or illegal situations of destruction, loss, alteration, communication, or dissemination; It is
f) Not be processed for illegal or abusive discriminatory purposes.

As the personal data is yours, the General Data Protection Law also ensures that you can exercise a series of rights, which we detail for you in Chapter 5 of this Notice.

TERMS DEFINITIONS

With the purpose of simplifying the reading and understanding of this Notice, below we present the definition of some terms that will be used throughout the document, both in the singular and in the plural:

National Data Protection Authority (“ANPD”): body that will supervise and guide the application of the LGPD and be responsible for applying administrative sanctions in case of violation of the law.

Candidates: natural persons enrolled in the recruitment and selection process for job vacancies and internships at Fontana S.A through registration in the candidate’s portal on the website of Fontana S.A.

Personal Data: any information related to an identified or identifiable natural person.

General Data Protection Law (“LGPD”): Law No. 13,709 of August 14, 2018, which provides for processing an individual’s personal data, aiming to protect the fundamental rights of freedom and privacy and the free development of the person’s natural personality.

Data subject: in this case, it is you, the natural person to whom the personal data that are the subject of Processing refer.

Treatment or handling: any operation carried out with personal data, such as collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation, information control, communication, transfer, diffusion, or extraction.

WHAT TYPES OF PERSONAL DATA DOES FONTANA S.A. PROCESS ABOUT YOU, AND FOR WHAT PURPOSES?

Fontana S.A. collects and maintains Personal Data directly from you and from other publicly available sources.

We can collect the following:

• full name;
• date of birth;
• education;
• phone number;
• personal email address;
• professional qualification courses;
• title, function, or desired sector;
• previous professional experiences;

Fontana S.A. collects Personal Data informed directly by you upon requesting your consent in an appropriate document (“Consent Term”).

We understand that the Personal Data we collect is necessary and serves specific and legitimate purposes, so we have listed below the situations in which we may process your Personal Data in the context of our relationship:

Purposes

The Personal Data collected may be processed for the selection process for the vacancy, the possible establishment of a contractual relationship, and all acts arising from the possible employment relationship to be signed between the Candidate and Fontana S.A.

HOW WE STORE YOUR PERSONAL DATA

Our personal Data is stored in physical files on the premises of Fontana S.A. on a digital file server.

Only people authorized by Fontana S.A have access to the places where data is stored, and these have an obligation of secrecy signed with Fontana S.A.

The storage of personal data will only be maintained for the period necessary to fulfill the purpose for which the data was collected or until there is a request for deletion made by the Candidate, except for compliance with a legal obligation, observing the storage period determined by law. Brazilian.

WITH WHOM WE SHARE YOUR PERSONAL DATA

Fontana S.A may share your Personal Data on the following occasions:

With the internal area of ​​people management, with the manager of the area that gave rise to the vacancy;

By virtue of a court order or administrative authorities’ requests to defend Fontana S.A’s interests.

Fontana S.A. adopts measures capable of guaranteeing that this sharing takes place in accordance with the best practices regarding the protection of Personal Data.

WHAT ARE YOUR RIGHTS, AND HOW CAN YOU EXERCISE THEM?

Fontana S.A. undertakes to comply with the rights that the LGPD guarantees you as a Personal Data Holder. Are they:

Confirmation of treatment and access: you can ask Fontana S.A for confirmation about the existence of processing of your Personal Data, and you will be able to access them by requesting Fontana S.A;

Correction: You can request correction of your Personal Data if it is incomplete, inaccurate, or out of date. In this sense, it is important that changes in your Personal Data are informed to Fontana S.A as soon as possible so that we can update our databases and keep your Personal Data correct;

Anonymization, blocking, or deletion: you can request anonymization (we will no longer be able to connect this Personal Data to you), blocking (we will temporarily suspend use), or erasure (we will permanently delete your Personal Data) of your Personal Data , if you understand that it is unnecessary or excessive for the purposes, indicated or that are being treated in violation of the provisions of the LGPD;

Portability: you can request that Fontana S.A transfer your Personal Data to a third party, safeguarding intellectual property rights, trade secrets, and confidential information;

Information about sharing: you can consult such information in the topic of this Notice called “With whom we share your Personal Data”; however, in case of doubt, you can also ask us for more details. Keep in mind that some information may be restricted to the extent that disclosure may violate intellectual property rights, trade secrets, and confidential information;

Information about the possibility of not giving consent and the consequences of its refusal: the LGPD grants Data Subjects the right to receive information about the possibility of denying consent (in cases where it is applicable), as well as in cases where we process your Personal Data based on your consent, you are free not to authorize the use of the Personal Data;

Review of automated decisions: you can request the review of decisions made solely based on automated processing of your Personal Data, and that affect your interests, such as decisions aimed at defining your personal and professional profile or aspects of your personality. Fontana S.A, as a rule, does not perform automated processing, but in case of doubt, just let us know;

Revocation of consent: in cases where you have given us your consent to authorize the processing of your Personal Data, you have the right to withdraw this consent. On this occasion, you will be informed of the negative consequences of such revocation;

Opposition: in cases where you have not given us your consent, we may still process your Personal Data for legitimate purposes (e.g., in cases where we need to carry out access control to our building to ensure our and your security). In these cases, you are guaranteed the right to object to the treatment if you disagree, and we will be able to evaluate your request.

However, as we commented above, in some cases, we will not be able to fully process your request for exclusion or your opposition as we process your Personal Data to comply with our legal and/or regulatory obligations to exercise rights in proceedings or even for the legitimate interest of Fontana S.A. When this occurs, we will inform you in response to your request and be available to answer your questions on the subject.

In addition to the aforementioned rights, you have the right to petition the ANPD if you believe that processing your Personal Data has been carried out illegally or violates the applicable legislation.

Please consider that we may request information for the purpose of verifying your identity before complying with any requests to exercise the rights listed above.

HOW FONTANA S.A PROTECTS YOUR PERSONAL DATA

We undertake and assume responsibility for using your Personal Data with the greatest care and security possible, always respecting the purposes described in this Notice. For this purpose, we have adopted technical and organizational measures to secure all Personal Data processed by Fontana S.A.

Examples of such measures are segmented access controls (levels and control lists of access to systems), non-disclosure agreements, equipment usage policies, anti-malware, firewall, logical access control, network authentication and regular updates of software, and backup of Personal Data, among other controls.

We strive to create and maintain a secure environment when it comes to protecting Personal Data, but unfortunately, we cannot guarantee complete security. Hardware or software failures that are not under the control of Fontana S.A and other external factors may compromise the security of your Personal Data. Therefore, it is essential that you, as part of Fontana S.A., also act with the aim of keeping this environment as safe as possible, complying with our rules and policies. Therefore, if you identify or become aware of any factor that compromises the security of your Personal Data or that of third parties in Fontana S.A. environments, please contact us through the communication channel indicated in this Notice.

HOW AND WITH WHOM TO TALK TO FONTANA S.A ABOUT PERSONAL DATA PROTECTION

In case of doubts about the content of this Notice or about any subject related to the way Fontana S.A treats Personal Data, as well as to exercise your rights as a Data Subject as described in chapter 5 of this Notice, just contact us through email dpo@fontana.ind.br, requests being considered in accordance with applicable laws.

UPDATES TO THIS NOTICE

This Notice may be amended from time to time at the sole discretion of Fontana S.A. You will be notified of any material changes to the terms of this Notice that occur during your relationship with us through an appropriate channel (depending on how we normally communicate with you).