Privacy policy

INTRODUCTION

MARKO Brasil follows global Data Protection standards in compliance with the Brazilian General Data Protection Law (LGPD). Our Privacy Policy explains how we collect and use personal data on our websites and applications transparently. Specific Terms of Use complement this policy, aligned with global standards and the LGPD.

DATA COLLECTED

We collect data, including personal data, when you register or interact with us. Generally, providing personal data is not mandatory to use our services. However, in certain interactions, MARKO may request information such as name, email, phone number, and address, which are essential for providing services properly. Refusing to provide this information may affect partial or full delivery of our services.

DATA ACCURACY AND UPDATES

You are responsible for providing accurate personal data. To maintain accuracy, we offer the Contact Channel (Fale Conosco) at [https://-], where you can request corrections. We will not process data if there is legal risk or misuse contrary to our Integrity Culture.

DATA CONTROLLER

The collected data is owned and managed by MARKO. Its use, access, and sharing, when necessary, will follow the limits and purposes described in this Policy.

USE OF COOKIES AND SIMILAR TECHNOLOGIES

MARKO uses cookies and similar technologies to improve site efficiency and provide personalized service. You can control the data collected by cookies through your browser or options provided in our Cookie Policy.
In addition to cookies, we use cache-based tracking mechanisms to speed up page loading and a “unique identifier” for security. You can block these mechanisms via your browser, but private or incognito browsing may affect site functionality and cannot guarantee total blocking.

The use of these technologies complies with current legislation and our Privacy Policy.

DATA SHARING AND DISCLOSURE

Who do we share data with?

Collected data and activity records may be shared:

  1. Among MARKO subsidiaries globally;
  2. With competent judicial, administrative, or governmental authorities, in accordance with legal requirements, requests, or court orders;
  3. Automatically, in case of corporate events such as mergers, acquisitions, or incorporations;
  4. With third parties, as detailed in the Terms of Use of our websites and applications.

DATA PROTECTION AND SHARING MECHANISMS

You are responsible for the security of your passwords and access credentials. We implement technical and administrative measures to ensure data security, limiting internal access to authorized personnel.

When accessing external links through our sites and applications, please note that those environments may have their own data policies. We recommend reading and accepting/rejecting those policies, as we are not responsible for external platforms.

We may outsource personal data processing, ensuring that contracted companies comply with the security conditions and standards we establish.

STORAGE OF PERSONAL DATA AND ACTIVITY RECORDS

Personal data and activity records are stored securely and controlled by MARKO. We retain this information for as long as necessary, under two main premises:

  1. During your relationship with MARKO;
  2. For the period required to comply with global legal and contractual obligations.

Storage periods may be extended for auditing, security, fraud control, credit protection, and rights preservation, as established by law or regulatory standards. Data may be stored on our servers in Brazil or in cloud environments, which may involve transfer or processing outside Brazil.

RIGHTS AND HOW TO EXERCISE THEM

As a data subject, you have rights that can be exercised through MARKO via Fale Conosco at [https://-]:

  1. Know which data MARKO holds about you;
  2. Correct your personal data;
  3. Request deletion of your personal data;
  4. Contest processing of your personal data;
  5. Review automated decisions involving your personal data;
  6. Revoke consent;
  7. Request portability of your personal data;
  8. Request anonymization, blocking, or deletion of your personal data;
  9. Confirm whether your personal data is being processed.

If you request deletion, data may be retained according to the LGPD to comply with legal obligations, for studies, transfer to third parties, or exclusive use by MARKO, ensuring restricted third-party access and anonymization.

Note:

If MARKO uses automated decisions, we will provide clear information on criteria and procedures upon request, respecting trade and industrial secrets.

Our Data Protection Officer (DPO) can clarify how MARKO operates under the LGPD and receive reports of security incidents involving personal data. Contact the DPO via email at [–].

GENERAL CONSIDERATIONS

  • Changes and Updates: By using our platforms, you acknowledge our right to modify this Policy at any time, without prior notice, to ensure legal compliance. Check the Policy upon accessing our platforms. The date of the latest version will appear at the end.
  • Updates Requiring New Consent: If updates require new consent, you will be notified via your registered contact information.
  • Inapplicability: If any part of this Policy is deemed unenforceable, the remaining conditions remain valid.
  • Communication: By interacting with our digital platforms, you acknowledge that emails, SMS, or digital communication apps are valid for sharing information about services, data, and terms of service.
  • Customer Service: For clarifications, contact us via Fale Conosco at [https://-].
  • Governing Law and Jurisdiction: Even without domicile in Brazil, by using our services, you are subject to Brazilian law. Any disputes must be filed in the Court of the Rio de Janeiro/RJ district.

GLOSSARY

  • Data: Any information entered, processed, or transmitted via our digital platforms.
  • Personal Data: Information relating to an identified or identifiable natural person.
  • Anonymization: Use of reasonable technical means available at the time of processing to prevent data from being associated, directly or indirectly, with an individual.
  • Cloud Computing: Virtualized services through interconnected servers over a network (e.g., Internet) to reduce costs and increase availability.
  • Our Platforms: Digital platforms and applications owned by ArcelorMittal Brasil.
  • Access Account: Credential needed to use or access exclusive platform features.
  • Cookies: Small files sent by our platforms and stored on your devices to save preferences and personalize browsing.
  • Fully Automated Decisions: Decisions programmed to function automatically, without human intervention, based on automated processing of personal data.
  • Processing: Any operation performed on personal data, such as collection, Produtoion, reception, classification, use, access, reProdutoion, transmission, distribution, processing, archiving, storage, deletion, evaluation, modification, communication, transfer, dissemination, or extraction.