Privacy Policy

1. Purpose

This Privacy Policy explains to ADMATEK’s users, partners, customers and suppliers how their personal data is processed. We are committed to transparency, security and respect for privacy, in compliance with Brazil’s General Data Protection Law (Law No. 13,709/18 – LGPD).

This policy aims to:

• Inform which personal data is collected, for what purposes and with whom it may be shared;
• Explain how we protect the personal data we process;
• Present the rights of data subjects;
• State ADMATEK’s commitment, as an OMC GROUP company, to good information security and risk management practices.

2. Data Protection Officer and Privacy Governance

In line with OMC GROUP guidelines, ADMATEK has appointed a Data Protection Officer (DPO), responsible for overseeing privacy and information security practices.

For any questions, requests or complaints, contact: [email protected].

The company follows the privacy governance defined by OMC GROUP, with periodic reviews of policies and controls.

3. Data Collected and Purposes

a) Data you provide directly:

• Contact forms: name, email, phone, city and state;
• Quote form: name, email, phone, company, job title, city and state, project information and technical attachments (drawings, 3D models and documents you send);
• Careers: name, email, phone, address, résumé and professional data;
• Ombudsman: optional identification data (name, email, phone);
• Service or partnership agreements: name, email, CPF, RG (Brazilian IDs), address.

b) Data collected automatically:

IP address, location, browser type, operating system, pages visited and visit duration. This data is collected through cookies, upon express consent when accessing our website.

The contact and quote forms are protected by Google reCAPTCHA, which tells humans from bots and protects the site against spam. For this purpose, Google may collect data such as IP address, browser and device information and interaction with the page, and may set its own cookies. This processing is subject to Google’s Privacy Policy and Terms of Service.

All data is used for specific purposes such as institutional communication, performance analysis, platform security, recruitment, service delivery and legal obligations.

4. Data Classification and Control

ADMATEK classifies the data it processes by sensitivity level: public, internal, confidential and restricted. This classification defines the access, protection and handling levels required for each type of data.

5. Data Storage and Transfer

Data is stored on secure servers located in Brazil and/or abroad by approved providers that meet the required security standards.

If there is an international data transfer, we ensure that:

• Protection mechanisms such as Standard Contractual Clauses are in place;
• The transfer only takes place to countries with an adequate level of protection or with the data subject’s consent.

6. Data Sharing

Your data may be shared with:

• Cloud service providers;
• Legal, judicial or administrative authorities, when required;
• Business partners and suppliers, for service delivery;
• In mergers, acquisitions or corporate restructuring processes.

All third parties are contractually bound to protect the personal data shared, in accordance with LGPD guidelines.

7. Data Security and Protection

We adopt technical and organizational protection measures, such as:

• Encryption of data in transit and at rest;
• Access monitoring and audit logs;
• Access control with multi-factor authentication;
• Employee training and awareness;
• Backup, retention and secure deletion policies;
• Incident Response Plan.

In the event of a high-risk security incident, ADMATEK will notify the affected data subjects and the competent authorities within the legal deadline.

8. Records and Audit

ADMATEK keeps records of data processing as required by the LGPD. Access logs are audited regularly to ensure compliance, traceability and security.

9. Data Retention and Deletion

Data is stored only for as long as necessary to fulfill the purposes set out in this policy, or to comply with legal, contractual and regulatory obligations. After this period, it is securely deleted.

10. Data Subject Rights

Under the LGPD, you may exercise the following rights:

• Confirmation of and access to data;
• Correction of incorrect data;
• Anonymization or deletion of unnecessary data;
• Portability, where applicable;
• Information about sharing;
• Objection to improper processing;
• Withdrawal of consent.

To exercise your rights, email [email protected] with: an identity document; a description of the request; proof of legal representation, if applicable.

We will respond within 15 days, except for justified legal exceptions.

11. Training and Awareness

All ADMATEK employees receive periodic training on data protection, confidentiality and information security. Awareness is an integral part of our organizational culture.

12. Changes to this Policy

ADMATEK may change this Policy at any time. Relevant changes will be communicated through our official channels. We recommend reviewing this document periodically.

13. Contact

For questions, suggestions or requests related to this Policy, contact:

Email: [email protected]

Address: Av. Antonio Artioli, 570 – Sala 05 Bloco Santis, Swisspark, Campinas – SP, CEP 13049-253, Brazil

14. Legal References

• Brazilian General Data Protection Law (Law No. 13,709/18).