Privacy Policy
Welcome! We are COMPANHIA NACIONAL DE CIMENTO – CNC, a private legal entity registered with the National Register of Corporate Taxpayers (CNPJ/MF) under No. 07.957.149/0001-02; COMPANHIA DE CIMENTO CAMPEÃO ALVORADA – CCA, a private legal entity registered with the National Register of Corporate Taxpayers (CNPJ/MF) under No. 21.109.697/0001-03; and COMPANHIA DE CIMENTO DA PARAÍBA – CCP, a private legal entity registered with the National Register of Corporate Taxpayers (CNPJ/MF) under No. 12.616.864/0001-11. All of these companies are part of the CIMENTO NACIONAL business (hereinafter referred to as “Cimento Nacional,” “Company,” or “Enterprise”), one of the largest cement companies in Brazil, with modern factories strategically located in Arcos (MG), Cantagalo (RJ), Matozinhos (MG), Pitimbu (PB), Santa Luzia (MG), and Sete Lagoas (MG). Our goal is to ensure you receive high-quality products efficiently and promptly.
Our company culture is founded on respect for individuals and organizations. For this reason, we consistently prioritize privacy and protecting personal data belonging to our customers, partners, employees, suppliers, and everyone involved with our company.
In this context, this External Privacy Policy (“Policy,” “Document,” or “Instrument”) has been created under the General Data Protection Law – LGPD (Federal Law No. 13,709/2018) to inform you about how your personal data will be collected, used, shared, and stored in relation to the services offered and made available through our Website (“Site,” “Platform,” or “Tool”).
By accessing our platform, sending communications, or providing any kind of personal information through this channel, you freely, explicitly, and voluntarily agree to the terms outlined in this document. If you disagree with the provisions of this policy, you should cease using the services offered by our site.
Additionally, this policy should be read in conjunction with our Cookie Policy, which explains how these technologies are used to operate our site. If you have any questions or need to address any matter related to this document, please contact us at: privacy@cimentonacional.com.br
SECTION 1 – Definitions
To promote transparency and avoid multiple interpretations, we provide some key definitions to assist you in understanding this Privacy Policy:
Personal Data: Any information about an individual that can identify them or make their identification possible. Examples include name, CPF (Brazilian tax ID), phone number, WhatsApp, email, address, and more.
Sensitive Personal Data: Any information that reveals an individual’s characteristics, such as racial or ethnic origin, religious beliefs, political opinions, union membership, or affiliations with religious, philosophical, or political organizations, as well as data related to health, sexual life, or genetic and biometric information;
Processing of Personal Data: Any operation performed on Personal Data, whether by automated means or not, includes collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, transmission, dissemination, availability, harmonization, association, restriction, deletion, or destruction. Furthermore, any other operation conducted under applicable laws is also considered Processing of Personal Data.
Data Subject: You — the person whose personal data is being processed.
Controller: Us — Cimento Nacional. Once you utilize the services available on our Platform, we determine how your personal data is used.
Data Protection Laws: All legal provisions that regulate the processing of personal data, including (but not limited to) Law No. 13,709/18, the General Data Protection Law (LGPD) in Brazil.
SECTION 2 – Recipients and Scope
It is important to emphasize that the guidelines in this Privacy Policy apply to the personal information of individuals who engage with our Website or utilize its services. Depending on the context, you may be considered a “Client Representative,” a “Job Applicant” for our open positions, a “Supplier” or “Service Provider,” or a “Cimento Nacional Employee.” Therefore, when you access our Platform, we may collect your personal data through the following forms: “Contact Us” (Fale Conosco), “Pre-Registration” (Pré-cadastro), “Co-Processing” (Coprocessamento), or “Work With Us” (Trabalhe Conosco). This collection occurs after you voluntarily submit your information. Additionally, we may automatically gather browsing data through tools known as Cookies.
SECTION 3 – Collected Data
Our top priority is to keep all collected and transmitted information secure, strictly adhering to industry regulations and legal requirements. Furthermore, we ensure that all data we collect will only be used for the purposes explicitly communicated to you. To maintain full transparency, we have outlined below the personal data we process and the reasons for its collection.
| Contact Us & Customer Service | |
| Data | Purpose |
| Name Channel Email Product Phone Number Subject Full Address | Customer identification; Order processing; Inquiry about orders and schedules; General follow-ups and after-sales service requests, such as technical support; Registering inquiries, complaints, compliments, and suggestions; Sending notifications and order updates. |
| Pre-Registration | |
| Data | Purpose |
| Company Name Corporate Taxpayer ID No. (CNPJ) Full Address Contact Name Email Phone Number Mobile Number | Customer identification; Customer registration; Verify the company’s legal status with the Federal Revenue Service; Communication, marketing campaigns, and advertisement distribution; Credit analysis; Proposal creation and commercial budgeting. |
| Co-Processing | |
| Data | Purpose |
| Company Name Corporate Taxpayer ID No. (CNPJ) Contact Name Email Phone Number Mobile Number | Customer identification; Waste disposal facilitation. |
| Work With Us | |
| Data | Purpose |
| Foreign National (Yes/No) Full Name Phone Number Email Full Address Birth Date Physical Disability (PCD) Resumé (CV) Medical Report (PCD) Professional Level Gender Professional Experience Academic Background Languages Last Salary Desired Salary | Recruitment and selection processes; Talent pool development; Job postings and candidate searches; Inclusion of PCD (People with Disabilities) candidates; Recruitment process updates; Answering questions; Interview scheduling; Candidate profile evaluations. |
| Website Navigation | |
| Data | Purpose |
| Device Browser Operating System IP Address Logical Port Geolocation Session Date, Time, and Duration User Preferences Advertisement Interaction | Compliance with regulatory obligations related to the use of services provided by the Platform; Development and improvement of the website; Preparation of usage reports and performance analysis of marketing campaigns; Provision of Platform functionalities. |
We emphasize that access to our services is directly dependent on the data listed above. If you choose not to provide certain personal information, you may be unable to use some features of our Platform. Additionally, it is your sole responsibility to ensure the accuracy, truthfulness, and reliability of the information provided. Cimento Nacional is not obligated to process data that violates legal provisions or is used for unlawful purposes.
SECTION 4 – Purpose
As noted in the previous section, we may utilize the data you provide or that is collected through your use of the Platform for various purposes. Among these, we highlight:
Responding to Requests: If you reach out to us with a request, suggestion, or complaint, Cimento Nacional will need to utilize your personal data in order to address and respond to your inquiry.
Compliance with Legal Obligations: Personal data must also be used to comply with applicable laws, regulations, and standards related to the services provided through the Platform.
Marketing and Advertising: We will need to use your registration data to communicate with you actively and send messages, promotions, offers, newsletters, advertisements, and notifications about our products and services.
Promoting and Operating Product Sales: To promote and facilitate the sale of our products and services, the Company must process personal data across various categories. This includes pre-registration, verification of a company’s legal status with the Federal Revenue Service, and credit analysis.
Enhancing the Website: Your data will also be processed to improve the services offered through our Platform. We analyze user behavior in an aggregated and anonymized way while using the Platform to continuously adapt functionalities to meet customer needs.
Business Process Management: Personal data is utilized in business process management activities, including the generation of commercial reports.
Recruitment, Selection, and Talent Pool Management: Personal data is processed for recruitment and selection purposes, such as hiring new employees or forming a Talent Pool. It is used to possibilitate participation in all stages and activities of the selection process.
Credit Analysis: If you want to buy our products, we will use your personal information to assess and evaluate your financial capacity, ensuring credit protection.
SECTION 5 – Data Sharing
To provide our services, Cimento Nacional may share the personal information collected through the Platform with commercial partners, financial institutions, marketing companies, accountants, lawyers, professional consultants, service providers — including security and information technology providers — cloud storage services, computer systems, and other suppliers, as well as with official agencies and public authorities when necessary. This data sharing will always be conducted in your best interest, with the utmost respect for your privacy. The Company will implement contractual, technical, and organizational measures to safeguard your information when shared with third parties. To ensure transparency, here are the possible cases in which data may be shared:
Companies in Our Group: Personal data may be shared with companies in our Economic Group to streamline intra-group operations and enhance customer service, including using integrated enterprise resource planning (ERP) systems.
Regulatory Bodies, Judicial, or Administrative Authorities: In certain situations, Cimento Nacional may need to provide data to government, law enforcement, or regulatory authorities during legal or administrative proceedings. In such cases, we will only share the information necessary to meet legal or regulatory obligations or to exercise our rights.
Partners, Suppliers, and Service Providers: Due to the execution of commercial and operational activities, Cimento Nacional maintains multiple contracts with partners, suppliers, and service providers. As a result, your personal data may be shared with third parties, including technology and system service providers, logistics and operational support providers, transportation companies, advertising and marketing agencies, law and accounting firms, auditors, and consultants.
Credit Protection Entities: Personal data may be shared with financial institutions and credit protection agencies for analysis, minimizing credit risk, preventing fraud, and offering credit. In this context, Cimento Nacional may also consult credit bureaus for credit scoring and evaluation as needed to sell our products or provide our services.
Mergers and Acquisitions: In the event of any corporate reorganization, merger, sale, joint venture, assignment, transfer, or acquisition of part or all of Cimento Nacional’s assets or capital (including in cases of bankruptcy or similar proceedings), your personal data may be shared with third parties interested in the business combination or acquisition — both during pre-contractual due diligence and after the transfer is finalized.
Recruitment and Selection Companies: Since the recruitment and selection process consists of multiple steps and requires specialized recruiters, your personal data may be shared with Partner Companies or Consultants who conduct recruitment on behalf of Cimento Nacional. These partners conduct interviews, technical assessments, and behavioral evaluations to determine candidates’ compatibility with job openings or to build our Talent Pool.
SECTION 6 – Legal Bases
Whenever personal data is processed, the operation must adhere to one of the lawful bases established in Articles 7 and 11 of the General Data Protection Law (LGPD). At Cimento Nacional, we depend on the following legal grounds for the activities conducted under this Policy:
Consent: The Company may process personal data only after obtaining your explicit authorization. Before you give consent, you will be informed about the scope of data processing, which will clearly explain how your personal data will be used.
Legitimate Interest: Personal data may be processed to support the Company’s legitimate interests. These interests usually involve commercial or operational activities, such as sending newsletters and marketing emails, scheduling reminders, tracking orders, and responding to customer inquiries.
Compliance with Legal or Regulatory Obligations: Cimento Nacional is permitted to process personal data as required, requested, or authorized by law. The type and extent of processing must be necessary for the legally authorized activity and must adhere to applicable legal provisions, regardless of their nature — such as issuing invoices.
Performance of Contracts: The Company may process personal data to enter into, perform, and/or terminate a contract. Additionally, before a contract is finalized, personal data may be processed to prepare proposals, purchase orders, or to fulfill other requests related to the conclusion of the contract.
Regular Exercise of Rights: Personal data processing is allowed whenever necessary to exercise legal rights in judicial, arbitration, or administrative proceedings. The type and extent of data processing must be essential for the activity aimed at protecting a right and must adhere to the other provisions of this Policy.
Credit Protection: Cimento Nacional will also handle personal data as needed for credit protection, evaluating your financial ability to purchase our products or services.
SECTION 7 – Storage and Retention
The personal data collected and processed will be stored only for as long as necessary to fulfill its intended purposes, taking into account its nature and the need for the Company to retain the information. However, data may be deleted from our servers upon request through a simple and free procedure, unless there is another reason for retention, such as compliance with legal, regulatory, or contractual obligations, as well as the defense of Cimento Nacional’s interests and the regular exercise of rights.
Retention periods are established based on the specificities of each data processing operation, considering the applicable legal basis and the completion of the procedure in accordance with its intended purpose. In summary, data processing will cease in the following situations: (i) when the purpose for which personal information was collected is achieved or is no longer relevant; (ii) when you request the deletion of your data; or (iii) when required by a legal request issued by an administrative or judicial authority.
Finally, it is important to emphasize that the data received by Cimento Nacional will be stored on servers located within the national territory. However, the international transfer and processing of this information may take place due to the use of cloud-based systems and resources.
SECTION 8 – Data Subject Rights
The personal data we collect and use belongs to you. Accordingly, Data Protection Laws grant you a series of rights concerning this information. As a company committed to privacy and the protection of personal data, we take the fulfillment of these rights very seriously! Below, we explain these legal guarantees:
Confirmation: You have the right to verify if we process your personal data.
Access: This right permits you to request and obtain the personal data we have about you.
Rectification: This right allows you to request the correction or update of your personal data at any time if you notice any inaccuracies or outdated information.
Deletion: This right allows you to request the deletion of personal data we hold about you when it is processed based on your consent. Additionally, if there is any other reason for data retention, such as a legal obligation to retain data or the need to preserve it for Cimento Nacional’s legal protection, the data may remain in our systems.
Objection: You have the right to object to specific irregular personal data processing activities. In certain situations, we may show that we have legitimate grounds to process your data that override your rights. Regardless, the Company will evaluate each request individually and take the necessary steps to resolve the issue.
Anonymization, Blocking, or Erasure: This right allows you to request that your data be anonymized so it cannot be linked to you. You may also block the use of specific personal data and delete your information from our records when it is unnecessary, excessive, or in violation of the law.
Data Portability: This right relies on regulations set forth by the National Data Protection Authority (“ANPD”). Whenever feasible and without jeopardizing our trade secrets, we will provide you with the option to transfer your data.
Withdrawal of Consent: You have the right to withdraw your consent concerning this Privacy Policy. However, this will not affect the legality of any processing carried out before your withdrawal. If you decide to withdraw your consent, we may no longer be able to provide certain services to you.
Refusal to Provide Consent: If consent is the legal basis for processing your data, you have the right to be informed about the consequences or the possibility of not providing it.
Data Sharing Information: This right permits you to request details regarding the public and/or private entities with whom we share your personal data.
Filing a Complaint: You have the right to file complaints with the National Data Protection Authority concerning your rights and any practices that are not in compliance with data protection laws.
Your requests will receive special attention to ensure your rights are effectively exercised. You may need to verify your identity to guarantee that personal data is shared only with you or your legally authorized representative, preventing fraud and maintaining the confidentiality and integrity of your information.
Please note that your request may not be fulfilled immediately in some cases (for example, due to legal requirements). Additionally, we may be unable to comply due to legal or regulatory obligations.
SECTION 9 – Security Mechanisms
We are dedicated to implementing every possible security measure within Cimento Nacional’s capabilities to safeguard personal data from unauthorized access and from incidents that could lead to destruction, loss, alteration, communication, or dissemination of such data. These measures are adopted by considering suitable technologies, their implementation costs, the purpose of data processing, and the risks such processing may present to data subjects’ rights and freedoms. Some of the security measures we employ include access log monitoring and recording, segmentation, antivirus software, firewalls, backups, and encrypted connections.
Additionally, we make certain that all company employees with access to personal data have received proper training on their responsibilities and are fully dedicated to maintaining the security and confidentiality of that information.
We strive to protect your privacy and personal data; however, complete security does not depend solely on our actions and procedures. Unauthorized access by third parties, hardware or software failures beyond our control, and other external factors can threaten the security of your data. Therefore, your involvement is vital in maintaining a secure environment for everyone.
Cimento Nacional is not liable for security breaches caused solely by third parties, such as cyberattacks by hackers, or for situations in which you contribute to security vulnerabilities. You can help protect your personal information by following sound security practices regarding your account and data (for instance, by not sharing your password with others).
If you notice any situation that threatens the security of your data, we strongly encourage you to reach out to us right away through the channels outlined in this Policy.
If a security breach involving personal data occurs and poses risks to your rights, we guarantee we will notify you of the incident within an appropriate timeframe, in accordance with the guidelines set by the ANPD (National Data Protection Authority). Such breaches may include unauthorized access by third parties or the accidental or unlawful destruction, loss, alteration, communication, or dissemination of personal data.
SECTION 10 – Miscellaneous
Third-Party Data: If you provide us with personal data regarding other individuals or legal entities, you represent that you have the authority to do so and confirm that you have obtained the necessary permissions to use such information with our Company. Cimento Nacional is not responsible for any improper or unlawful use of third-party personal data by you on our Website.
Amendments: Cimento Nacional is constantly updating and improving how we provide our products and services to you. For this reason, we reserve the right to modify this Policy over time so that the document reflects new practices and procedures adopted, aiming to offer you greater security and transparency regarding our activities. Therefore, it is essential that you periodically review this document. To facilitate this, we indicate the date of the last update at the beginning of the Policy. We will make the new version available on our Website within a reasonable timeframe whenever changes occur. You will also be notified of updates through our official channels or via the contact details in our file whenever the changes are significant or require new consent. We reaffirm our commitment not to process your Personal Data in ways inconsistent with the objectives outlined in this document, except when required by law or court order. If you continue to use the Site after the amendments have been made, you accept the revised Privacy Policy. If, after reading the revised version, you do not agree with its terms, please discontinue your use of the Website.
Contact and Data Protection Officer: If you wish to exercise any of the rights outlined in this Policy or the General Data Protection Law (LGPD), or if you would like to share compliments, suggestions, criticisms, or comments regarding our Governance practices in Privacy and Data Protection, please reach out to us at privacy@cimentonacional.com.br.
Data Controllers: COMPANHIA NACIONAL DE CIMENTO – CNC, a private legal entity registered with the National Register of Corporate Taxpayers (CNPJ/MF) under No. 07.957.149/0001-02; COMPANHIA DE CIMENTO CAMPEÃO ALVORADA – CCA, a private legal entity registered with the National Register of Corporate Taxpayers (CNPJ/MF) under No. 21.109.697/0001-03; and COMPANHIA DE CIMENTO DA PARAÍBA – CCP, a private legal entity registered with the National Register of Corporate Taxpayers (CNPJ/MF) under No. 12.616.864/0001-11. All these entities belong to the corporate group known as CIMENTO NACIONAL (“Cimento Nacional,” “Company,” or “Enterprise”). Our headquarters is located at Avenida Engenheiro Domingos Ferreira, No. 2589, 3rd Floor, Alexandre de Castro e Silva Business Building, Boa Viagem, Recife/PE, ZIP Code: 50.020-031. According to the General Data Protection Law, these entities act as the Controllers of personal data.
External Links and Third-Party Applications: When using our Platform, you may be redirected to other websites, applications, portals, social networks, or platforms that could collect personal information. It is important for you to know that these pages have their own policies for processing personal data, and it is your responsibility to review and understand those policies. Therefore, Cimento Nacional does not control, endorse, represent, or take responsibility for the content or data processing practices of these third parties. For more information on how these companies handle personal data, you can access their respective Privacy Policies:
– Facebook – https://pt-br.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
– YouTube – https://www.youtube.com/intl/ALL_br/howyoutubeworks/user-settings/privacy/
– Google – https://policies.google.com/privacy
– Twitter – https://twitter.com/pt/privacy
– LinkedIn – https://br.linkedin.com/legal/privacy-policy
Fraud and Scams: Cimento Nacional informs you that we never request banking details, passwords, or credit card numbers through instant messaging apps, SMS, or phone calls. Therefore, we cannot be held responsible for any information shared with third parties who attempt to obtain such data fraudulently. You are fully responsible for the information you provide, so please remain vigilant.
Non-Applicability: If any provision of this Policy is found to be invalid or unenforceable by the National Data Protection Authority, the judiciary, or any competent authority, the remaining provisions will continue to be valid and in full force and effect.
Governing Law and Jurisdiction: This document is governed by and should be interpreted in accordance with the laws of the Federative Republic of Brazil. The courts of the city of Recife, state of Pernambuco, are hereby designated, waiving the jurisdiction of any other court, regardless of its preference, to resolve any disputes arising from this document.