LPGD

REGISTRATION OF PERSONAL DATA PROCESSING OPERATIONS

PIPEK ADVOGADOS

Controlador: PIPEK ADVOGADOS

Date: February 21, 2024.

  1. INTRODUCTION

In compliance with art. 37 of the General Data Protection Law (LGPD) and considering the Office’s position as a small processing agent, this document aims to maintain a robust and detailed record of all personal data processing operations carried out. This action is essential to ensure transparency and to demonstrate the Office’s compliance with the LGPD and Resolution CD/ANPD No. 2.

  1. HOLDER CATEGORIES AND RESPECTIVE DATA

2.1. Clients:

  • Identifying Data: Full name, date of birth, CPF, ID, full address, contact telephone number, email.
  • Procedural Data: Nature of the action, details and history of the case, case number, competent court or chamber, current status.al.
  • Financial Data: Payment method, payment history, bank details.

2.2. Employees:

  • Identifying Data: Full name, date of birth, CPF, ID, full address, contact telephone number, email.
  • Professional Data: Academic history, professional experience, current position, date of admission, salary, bank details.
  • Health Data: Information about certificates, occupational health history.
  • Financial Data: Payment method, payment history, bank details.

2.3. Service Providers and Correspondents:

  • Identification Data: Name or company name, CPF/CNPJ, full address, contact telephone number, email.
  • Contractual Data: Services provided, dates and details of contracts, agreed values, bank details for payments.
  • Financial Data: Payment method, payment history, bank details.

2.4. Parts of the Judicial Proceedings:

  • Identifying Data: Full name, CPF, ID, address, contact telephone number.
  • Procedural Data: Relationship with the main party (e.g. defendant, witness, interested third party), specific information pertinent to the process.
  • Financial Data: Payment method, payment history, bank details.

2.5. Partner lawyers:

  • Identification Data: Full name, date of birth, CPF, RG, OAB, full address, contact telephone number, email.
  • Professional Data: Academic history, professional experience, Debt Clearance Certificate, Proof of OAB annuity regularity.
  • Contractual Data: Services provided, dates and details of contracts, agreed values, bank details for payments.
  • Financial Data: Payment method, payment history, bank details.

2.6. Associated lawyers:

  • Identification Data: Full name, date of birth, CPF, ID, full address, contact telephone number, email, OAB.
  • Professional Data: Academic history, professional experience, Debt Clearance Certificate, Proof of OAB annuity regularity.
  • Contractual Data: Services provided, dates and details of contracts, agreed values, bank details for payments.
  • Financial Data: Payment method, payment history, bank details.

2.7. Lawyers (Single-person Companies)

  • Identification Data: Full name, date of birth, CPF, ID, full address, contact telephone number, email, CNPJ Card, OAB.
  • Professional Data: Academic history, professional experience, Debt Clearance Certificate, Proof of OAB annuity regularity.
  • Contractual Data: Services provided, dates and details of contracts, agreed values, bank details for payments.
  • Financial Data: Payment method, payment history, bank details.
  1. TREATMENT PURPOSES

3.1. Clients: Legal representation in disputes and consultations, communication relevant to the procedural progress, preparation of legal documents, billing, collection and sending of legal information.

3.2. Employees: Human resources management, payroll, benefits, training and development, internal communication and performance evaluations.

3.3. Service Providers and Correspondents: Hiring, management and evaluation of services provided, payment and contractual communications.

3.4. Parts of Judicial Processes: Definition of procedural strategies, preparation of legal documents, official communications.

3.5. Lawyers (Partners, associates and sole proprietorships): Hiring, management and evaluation of services provided, payment and contractual communications, training and development and internal communication.

  1. TREATMENT OPERATIONS CARRIED OUT

4.1. Collection: Capture of data from holders at the beginning and during the relationship.

4.2. Storage: Storage of data in secure systems, both physical and digital.

4.3. Use: Use of data according to previously established purposes.

4.4. Transmission: Sharing data with third parties when necessary.

4.5. Deletion: Secure disposal of data after the need for retention ends.

  1. SECURITY MEASURES IMPLEMENTED

5.1. Infrastructure: Secure servers and robust firewall.

5.2. Encryption: Both data in transit and at rest.

5.3. Access Control: Differentiation of access levels, with two-factor authentication.

5.4. Backup: Performed daily, with storage in a safe location.

5.5. Training: Constant training of employees on data protection practices and associated risks.

5.6. Update: Software and systems are always updated to the safest versions.

  1. DATA DELETION PERIOD

Depending on the need for retention to fulfill the purposes or in compliance with specific legislation. After these deadlines, the deletion will be carried out in a safe and irreversible manner.

  1. THIRD PARTIES WITH ACCESS TO DATA

Depending on the need for access to data to fulfill the purposes listed, all third parties and service providers to the office, through a specific clause in the contract, undertake to comply with the legislation, as well as to use the data in a safe and specific manner. .

  1. RESPONSIBLE FOR DATA PROCESSING

Wagner Martins Ramos

Cellphone 11 99186-1661

Email: wmramos@pipek.com.br or dpo@pipek.com.br

PERSONAL DATA RETENTION AND DISPOSAL POLICY

PIPEK, PENTEADO AND PAES MANSO ADVOGADOS ASSOCIADOS

  1. Introdution

This policy establishes guidelines on the retention and disposal of personal data within the scope of the PIPEK, PENTEADO E PAES MANSO ADVOGADOS ASSOCIADOS Office, in compliance with the requirements of the General Data Protection Law (LGPD) and other relevant regulations.PIPEK, PENTEADO AND PAES MANSO ADVOGADOS ASSOCIADOS

  1. Objective

Ensure that personal data is kept for the time necessary to achieve the purpose for which it was collected, and that it is disposed of in a safe and appropriate manner, minimizing risks related to privacy and data security.

  1. Definitions
  • Personal Data: Information related to an identified or identifiable natural person.
  • Retention Period: Duration of time during which personal data is stored to fulfill the purpose for which it was collected.
  • Disposal: Process of deleting or destroying personal data after the retention period ends.
  1. General principles

4.1. Personal data should only be kept for as long as necessary to satisfy the purpose for which it was collected.

4.2. Data disposal must be carried out safely and in a way that guarantees the impossibility of recovery.

  1. Retention Periods

Personal data will be retained according to the categories below:

  • Clients: 5 years after the end of the contract or conclusion of the legal case.
  • Employees: 10 years after the end of the employment contract.
  • Service Providers and Correspondents: 5 years after completion of the last service provided.
  • Parties to Legal Proceedings: During the duration of the process and a further 5 years after its conclusion.
  • Advogados sócios, associados e sociedades unipessoais: 10 anos após a conclusão do último serviço prestado.
  1. Disposal Procedures.

6.1. Electronic Data: Will be permanently deleted or depersonalized, ensuring the impossibility of data recovery or reconstruction.

6.2. Paper Data: Will be shredded in such a way that it cannot be reconstituted.

  1. Review and Update

This policy will be reviewed at least once every two years or whenever there are significant changes in legislation, internal processes or the nature of the data collected.

  1. Responsibility and Contact

The person responsible for processing data at the PIPEK ADVOGADOS Office is Wagner Martins Ramos, who can be contacted by email at dpo@pipek.com.br

  1. Conclusion

Considering that an adequate policy for the retention and disposal of personal data is required by art. 18, VI, of the LGPD, it is essential that all members and collaborators of the PIPEK ADVOGADOS Firm are aware of and adopt this policy in their daily practice.