PRIVACY STATEMENT – Gerdau IR
A GERDAU S/A (“Gerdau”), private legal entity, located at Av. Dra. Ruth Cardoso, No. 8501, 8th Floor, Suite 2, Pinheiros, São Paulo/SP, registered under CNPJ/MF No. 33.611.500/0001-19, establishes the Privacy Statement of the “Gerdau IR” website (“Statement”), to inform the rights, obligations, and responsibilities of its Users.
1. GENERAL INFORMATION
- Gerdau provides the Gerdau IR portal (https://ri.gerdau.com/) (“SITE”) to offer information to its investors about its corporate governance, disclosures and results, financial information, and other investor relations services
- The SITE allows navigation only for non-logged in Users, meaning that, in general, User identification is not required for its use. However, some services provided through the SITE require the provision of personal data, as explained below.
- All collected information will be stored in Gerdau’s database, which has security systems compatible with Brazilian and international market standards.
- For the purposes of this Privacy Statement, words and terms in uppercase that are not defined here will have the definitions established in the General Data Protection Law (LGPD) – Law 13.79/2018.
2. HOW GERDAU HANDLES YOUR PERSONAL DATA
- As mentioned in clause 1.2 of this Statement, access to some services provided through the SITE requires the User to provide personal data, as indicated below:
- Email alert: Users who wish to receive email alerts about Gerdau-related issues, such as Corporate Governance, Disclosures and Results, Financial Information, and other IR Services, must provide their name, email, company, and profile. These data are necessary to identify the investor’s profile and interests, as well as to enable the sending of communications.
- The processing of personal data due to registration on the Gerdau IR portal will be carried out for an indefinite period, and the User may request their deregistration at any time through the weblink available in the email alert or by sending an email to inform@gerdau.com. By requesting the cancellation of the registration, the User is aware that they will NO longer have access to the exclusive content of the SITE.
3. DATA PROCESSING AGENTS AND PERSONAL DATA SHARING
- The personal data collected, stored, or processed in any way due to the use of the SITE are controlled by Gerdau. Thus, Gerdau should be consulted by the Data Subject for any exercise of the rights provided for in the General Data Protection Law (LGPD).
- Personal data will not be sold, transferred, or shared with companies outside the Gerdau group without prior authorization, being used, when not for Gerdau’s legal and regulatory obligations, in the same ways described in item 2 of this Statement
- To meet the purposes listed in item 2 of this Statement, the User’s personal data may be shared with (1) Gerdau employees, independent contractors, subsidiaries, affiliates, consultants, service providers, and suppliers, if the disclosure enables the entity to perform a business, professional, or technical support function for Gerdau; (2) Gerdau employees, independent contractors, service providers, and suppliers to fulfill a service or product request. In these cases, third parties who have access to personal data will, whenever possible, be considered Operators in the processing of personal data, being subject to specific contractual clauses regarding data processing, as well as Gerdau’s internal privacy and data protection policies and practices
- Occasionally, personal data may be shared with third-party Controllers beyond those indicated here, which will only occur after User authorization.
4. ACCURACY OF INFORMATION
- The User guarantees the truthfulness and accuracy of the information and data provided to Gerdau, assuming the corresponding responsibility in case of inaccuracy, and commits to keeping them updated. Gerdau assumes no responsibility in case of inaccuracy of the provided dat
- Gerdau may, at its sole discretion, suspend and/or cancel the User’s registration at any time if any inaccuracy in the provided information is detected, until the inaccuracy is corrected.
5. COOKIES AND OTHER TECHNOLOGIES
The SITE, online services, email messages, and advertising materials may use “cookies” and other technologies, such as pixel tags and web beacons. These technologies help us better understand User behavior, tell us which parts of our site people have visited, and facilitate and measure the effectiveness of advertising and web searches. We treat the information obtained through cookies and other technologies as non-personal information. However, to the extent that IP addresses (Internet Protocol) or similar identifiers are considered personal information by local law, we also treat these identifiers as personal information. Similarly, to the extent that non-personal information is combined with personal information, we treat the combined information as personal information for the purposes of this Privacy Statement. If you wish to block cookies, please refer to your browser’s instructions/settings.
- Gerdau also uses cookies and other technologies to remember personal information when you use the SITE and our online services. Our goal in these cases is to make your experience more convenient and personalized
- As with most websites, we automatically obtain some information and store it in log files. This information includes IP addresses, browser type and language, Internet service provider (ISP), referring and exit pages, operating system, date/time information, and clickstream data. We use this information to understand and analyze trends, administer the site, learn about User behavior on the site, and gather demographic information about our user base as a whole. Gerdau may use this information in our marketing and advertising services
- In some of our email messages, we use a “click-through URL” linked to content on the SITE. When users click on one of these URLs, they are sent to a different web server before arriving at the destination page on our site. We track this click-through data to understand interest in particular topics and measure the effectiveness of our customer communications. If you prefer not to be tracked in this way, do not click on text or image links in email messages.
- Pixel tags allow us to send email messages in formats that customers can read and tell us whether the email has been opened. We may use this information to reduce or eliminate messages sent to users.
- At any time, if you no longer wish to receive future contacts via email, simply access the unsubscribe link included in the message.
6. EXTERNAL LINKS
- The SITE may contain links to other sites with their own content and Privacy Policy. Whenever this occurs, the User will be informed.
7. USER RIGHTS REGARDING THEIR PERSONAL DATA
- Users have the right, upon request to the Data Protection Officer:
1.Confirmation of the existence of processing;
2.Access to personal data;
- Correction of incomplete, inaccurate, or outdated data;
1.Anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data.
2.Data portability to another service or product provider, upon express request, in accordance with ANPD regulations
3.Revocation of consent and consequent deletion of processed personal data, except in cases provided for in art. 16 of the LGPD;
- Information on public and private entities with which the controller has shared data;
- Information on the possibility of not providing consent and the consequences of refusal;
- Gerdau reserves the right to continue data processing if it has a legal basis applicable to the specific case, such as, but not limited to, legal obligations, contract execution, legitimate interest, among others.
8. DATA PROTECTION OFFICER CONTACT INFORMATION
- For matters related to personal data processing, please contact dpo@gerdau.com.br.
9. COMPLAINTS TO THE NATIONAL DATA PROTECTION AUTHORITY
- Currenty, the National Data Protection Authority does not have communication channels.
10. RESPONSIBILITY
- As there are no infallible or inviolable security systems, Gerdau is not responsible for any damage, loss, or information loss caused by third-party actions, as well as in cases of fortuitous events or force majeure beyond its control.
11. PRIVACY POLICY MODIFICATIONS
In pursuit of continuous improvement, Gerdau may change this Statement at any time, with changes being disclosed on the SITE for consultation at any time.
- By using the SITE’s services, the User is aware of the terms of this Statement in effect on the date of use, and it is their responsibility to check it beforehand each time they visit the SITE.
Last updated: August 27, 2020
