Privacy Policy

The NMA website collects some personal data from its users.

Data Owner and Controller

Américas Avenue, 700 - Block 1 - Room 327 - Rio de Janeiro - RJ - Brazil.

Types of data collected

Among the types of Personal Data that the NMA website collects, by itself or through third parties, are: Cookies, Usage Data, various types of Data, email address, first name, last name and company name.

Full details about each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanatory texts displayed prior to Data collection.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using the NMA website.

Unless otherwise specified, all data requested by the NMA website is mandatory and failure to provide this data may make it impossible for NMA to provide its services. In cases where the NMA website specifically states that some Data is not mandatory, Users are free not to communicate such Data without consequences for the availability or functioning of the Service.

Users who are unsure about which personal data is required should contact the owner.

Any use of cookies – or other tracking tools – by NMA or the owners of third-party services used by NMA serves the purpose of providing the Service required by the User, in addition to any other purposes described in this document and in the Cookie Policy, if available.

Users are responsible for any third party personal data obtained, published or shared through the NMA website and confirm that they have the third party's consent to provide the data to the owner.

Mode and place of data processing

Processing methods

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of the data.

Data processing is carried out using computers and/or IT tools, following organizational procedures and modes strictly related to the indicated purposes. In addition to the Owner, in some cases, the Data may be accessible to certain types of responsible persons, involved with the operation of the Site (administration, sales, marketing, legal, system administration) or external parties (such as third parties). technical service providers, mail carriers, hosting providers, IT companies, communications agencies) designated, if necessary, as Data Processors by the Owner. An updated list of these parties may be requested from the Owner at any time.

Legal basis for processing

The Owner may process personal data relating to Users if one of the following applies:

Users have given their consent for one or more specific purposes. Note: Under some legislations, the Owner may be permitted to process Personal Data until the User objects to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases. This, however, does not apply whenever the processing of Personal Data is subject to European data protection law;
The provision of data is necessary for the execution of a contract with the user and/or for any pre-contractual obligations thereof;
Processing is necessary to comply with a legal obligation to which the Owner is subject;
Processing relates to a task that is carried out in the public interest or in the exercise of official authority vested in the Owner;
The processing is necessary for the legitimate interests of the Owner or a third party.

In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a legal or contractual requirement, or a requirement necessary to enter into a contract.

Location

The data is processed at the owner's operational offices and any other location where the parties involved in the processing are located.

Depending on your location, data transfers may involve transferring your data to a country other than your own. To find out more about the processing location of such transferred data, users can check the section containing details about the processing of personal data.

Users also have the right to learn about the legal basis of data transfers to a country outside the European Union or to any international organization governed by public international law or created by two or more countries, such as the UN, and about the security measures taken by the owner to protect your data.

If such a transfer occurs, Users may obtain further information by checking the relevant sections of this document or by consulting the Owner using the information provided in the contact section.

Retention time

Personal Data must be processed and stored for as long as required by the purpose for which it was collected.

Consequently:

Personal Data collected for purposes related to the fulfillment of a contract between the Owner and the User will be retained until such contract has been fully performed.
Personal Data collected for the purposes of the Owner's legitimate interests will be retained for as long as necessary to fulfill such purposes. Users can find specific information about the Owner's legitimate interests in the relevant sections of this document or contact the Owner.

The Owner may be authorized to retain Personal Data for a longer period whenever the User gives consent to such processing, provided that such consent is not withdrawn. Furthermore, the owner may be obliged to retain personal data for a longer period whenever necessary to perform a legal obligation or upon order of an authority.

When the retention period expires, the Personal Data will be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be fulfilled after the expiration of the retention period.

The purposes of processing

User-related data is collected to enable the Owner to provide its services, as well as for the following purposes: heat mapping and session recording, interaction with online survey platforms, user database management, payment handling, analytics, tag management, interaction with social networks and external platforms, remarketing and behavioral targeting, interaction with data collection platforms and other third parties, user contact, interaction with live chat platforms, contact management and messaging, content performance and testing of resources (A/B testing) and infrastructure monitoring.

Users can find additional detailed information about these processing purposes and about the specific Personal Data used for each purpose in the respective sections of this document.

Detailed information about the processing of personal data

Personal Data is collected for the following purposes and using the following services:

ANALYTICS

The services contained in this section allow the Owner to monitor and analyze web traffic and can be used to track user behavior.

Google Analytics (Google Inc.)

Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the collected data to track and examine the use of YourApp, prepare reports on its activities and share them with other Google services. Google may use the data collected to contextualize and personalize ads from its own advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy – Refuse. Privacy Shield Participant.

Facebook Ads Conversion tracking (Facebook, Inc.)

Facebook Ads conversion tracking is an analytics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions taken on the NMA website.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield Participant.

Google Ads Conversion Tracking (Google Inc.)

Google Ads conversion tracking is an analytics service provided by Google Inc. that connects data from the Google Ads advertising network to actions taken on the NMA website.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield Participant.

CONTACTING THE USER

GetSiteControl Contact Form (GetWebCraft Limited)

By filling out the contact form with their details, the user authorizes the NMA website to use these details to respond to requests for information, quotes or any other type of request, as indicated by the form header. If this service is installed, it may collect browsing and usage data on the pages where it is installed, even if Users do not actively use the service.

Personal Data collected: Cookies, email address and Usage Data.

Processing location: Cyprus – Privacy Policy.

CONTENT PERFORMANCE AND FEATURE TESTING (A/B TESTING)

The services contained in this section allow the Owner to track and analyze user response to web traffic or behavior related to changes in the structure, text or any other component of the NMA website.

Optimizely (Optimizely, Inc.)

Optimizely is an A/B testing service provided by Optimizely, Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy.

MANIPULATING PAYMENTS

Payment processing services allow you to process payments by credit card, bank transfer or other means. To ensure greater security, the NMA website shares only the information necessary to execute the transaction with the financial intermediaries handling the transaction.

Some of these services may also enable the sending of timed messages to the user, such as emails containing invoices or payment notifications.

ChargeBee (ChargeBee Inc.)

ChargeBee is a payment service provided by ChargeBee Inc.

Personal data collected: various types of data, as specified in the service's privacy policy.

Place of processing: United States – Privacy Policy.

HEAT MAPPING AND SESSION RECORDING

Heat mapping services are used to display the areas of a page where users most frequently move their mouse or click. This shows where the points of interest are. These services allow you to monitor and analyze web traffic and track user behavior.

Some of these services can record sessions and make them available for later visual playback

Hotjar Heat Maps & Recordings (Hotjar Ltd.)

Hotjar is a session recording and heat mapping service provided by Hotjar Ltd.

Hotjar pays homage to the generic “Do Not Track“ headers. This means that the browser can tell its script not to collect any user data. This is a setting that is available in all major browsers. Find Hotjar deactivation information here.

Personal Data collected: Cookies, Usage Data and various types of Data, as specified in the service's privacy policy.

Place of processing: Malta – Privacy Policy – Refuse.

INFRASTRUCTURE MONITORING

This type of service allows the NMA website to monitor the usage and behavior of its components so that their performance, operation, maintenance and troubleshooting can be improved.

Which personal data is processed depends on the characteristics and mode of implementation of these services, whose function is to filter the activities of the NMA website.

Pingdom (Pingdom AB)

Pingdom is a monitoring service provided by Pingdom AB.

Personal Data collected: Cookies and Usage Data.

Place of processing: Sweden – Privacy Policy.

INTERACTION WITH DATA COLLECTION PLATFORMS AND OTHER THIRD PARTIES

This type of service allows users to interact with data collection platforms or other services directly from NMA website pages to save and reuse data.

If one of these services is installed, it may collect browsing and usage data on the pages where it is installed, even if Users do not actively use the service.

GetSiteControl Promotion Widget (GetWebCraft Limited)

GetSiteControl Promo widget is a popup (lightbox) management service provided by GetWebCraft Limited.

Personal Data collected: Cookies and Usage Data.

Place of processing: Cyprus – Privacy Policy.

GetSiteControl Signature Widget (GetWebCraft Limited)

The subscription widget is a popup management service (lightbox) provided by GetWebCraft Limited.

Personal Data collected: Cookies, email address and Usage Data.

Place of processing: Cyprus – Privacy Policy.

INTERACTION WITH EXTERNAL SOCIAL NETWORKS AND PLATFORMS

This type of service allows interaction with social networks or other external platforms directly on the NMA website pages.

Interaction and information obtained through the NMA website are always subject to the user's privacy settings for each social network.

This type of service can still collect traffic data for the pages where the service is installed, even when Users do not use it.

Facebook Like Button and Social Widgets (Facebook, Inc.)

The Facebook Like button and social widgets are services that allow you to interact with the Facebook social network provided by Facebook, Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield Participant.

GetSiteControl social Widget(GetWebCraft Limited)

GetSiteControl Social Widget is a service provided by GetWebCraft Limited, which displays a widget that allows you to interact with social networks and external platforms, as well as share content from the NMA website.

Depending on the configuration, this service may display widgets belonging to third parties, such as social media managers, where interactions are shared. In this case, the third parties that provide the widget will also be informed about the interactions and Usage Data on the pages where this service is installed.

Personal Data collected: Cookies and Usage Data.

Place of processing: Cyprus– Privacy Policy.

INTERACTION WITH LIVE CHAT PLATFORMS

This type of service allows users to interact with third-party live chat platforms directly from the NMA website pages, to contact and be contacted by the NMA website support service.

If one of these services is installed, it may collect browsing and usage data on the pages where it is installed, even if Users do not actively use the service. Additionally, live chat conversations can be recorded.

GetSiteControl Chat Widget (GetWebCraft Limited)

GetSiteControl Chat Widget is a service for interacting with the GetSiteControl live chat platform provided by GetWebCraft Limited.

Personal Data collected: Cookies and Usage Data.

Processing location: Cyprus – Privacy Policy.

INTERACTION WITH ONLINE RESEARCH PLATFORMS

This type of service allows users to interact with third-party online research platforms directly from NMA website pages.

If one of these services is installed, it may collect browsing and usage data on the pages where it is installed, even if Users do not actively use the service.

Hotjar Poll & Survey widgets (Hotjar Ltd.)

Hotjar Poll & Survey widgets are services that allow interaction with the Hotjar platform provided by Hotjar Ltd.

Hotjar pays homage to the generic “Do Not Track“ headers. This means that the browser can tell its script not to collect any user data. This is a setting that is available in all major browsers. Find Hotjar deactivation information here.

Personal Data collected: Cookies, Usage Data and various types of Data.

Place of processing: Malta - Privacy Policy – Refuse

GetSiteControl Search Widget (GetWebCraft Limited)

The GetSiteControl Survey Widget is a service for interacting with the GetSiteControl online survey platform provided by GetWebCraft Limited.

Personal Data collected: Cookies and Usage Data.

Place of processing: Cyprus – Privacy Policy.

MANAGING CONTACTS AND SENDING MESSAGES

This type of service makes it possible to manage a database of email contacts, telephone contacts or any other contact information to communicate with the user. These services may also collect data about the date and time the message was viewed by the user, as well as when the user interacted with it, for example by clicking on links included in the message.

MailChimp (The Rocket Science Group, LLC.)

MailChimp is an email address management and messaging service provided by The Rocket Science Group, LLC.

Personal data collected: company name, email address, first and last name.

Place of processing: United States – Privacy Policy. Privacy Shield Participant.

REMARKETING AND BEHAVIORAL SEGMENTATION

This type of service allows the NMA website and its partners to inform, optimize and serve advertising based on the user's past use of NMA.

This activity is carried out by tracking Usage Data and using Cookies, information that is transferred to partners who manage remarketing and behavioral segmentation activity.

In addition to any opt-out offered by any of the services below, you may opt out of a third-party service's use of cookies by visiting Network Advertising Initiative opt-out page.

Facebook Remarketing (Facebook, Inc.)

Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. that connects NMA website activity with the Facebook advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy – Refuse. Privacy Shield Participant.

Google AdWords Remarketing (Google Inc.)

Google AdWords Remarketing is a behavioral targeting and remarketing service provided by Google Inc. that connects NMA website activity to the Google AdWords advertising network and the DoubleClick Cookie.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States– Privacy Policy – Refuse.

TAGS MANAGEMENT

This type of service helps the owner to manage the necessary tags or scripts on the NMA website centrally.

This results in user data flowing through these services, potentially resulting in the retention of that data.

Google Tag Manager (Google LLC)

Google Tag Manager is a tag management service provided by Google LLC.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield Participant.

USER DATABASE MANAGEMENT

This type of service allows the owner to create user profiles starting from an email address, a personal name or other information provided by the user to the NMA website, as well as to track user activities through analytical features. This personal data may also be combined with publicly available information about the user (such as social media profiles) and used to create private profiles that the owner can view and use to improve the feature.

Some of these services may also allow timed messages to be sent to the user, such as emails based on specific actions performed on the NMA website.

Pipedrive (Pipedrive OÜ)

Pipedrive is a User database management service provided by Pipedrive OÜ.

Personal data collected: various types of data, as specified in the service's privacy policy.

Place of processing: Estonia – Privacy Policy.

Intercom (Intercom Inc.)

Intercom is a User database management service provided by Intercom Inc. Intercom can also be used as a means of communication, either by email or through messages within the NMA website.

Personal Data collected: Cookies, email address, Usage Data and various types of Data, as specified in the service's privacy policy.

Place of processing: United States - Privacy Policy.

User rights

Users can exercise certain rights over their data processed by the owner. In particular, users have the right to do the following:

Withdraw your consent at any time. Users have the right to withdraw consent, provided they have given their consent to the processing of their personal data.
Object to the processing of your data. Users have the right to object to the processing of their data if the processing is carried out on a legal basis other than consent. More details are provided in the dedicated section below.
Access your data.Users have the right to know whether Data is being processed by the Owner, obtain information about certain aspects of the processing and obtain a copy of the Data being processed.
Check and seek rectification. Users have the right to verify the accuracy of their data and request that it be updated or corrected.
Restrict the processing of your data. Users have the right, under certain circumstances, to restrict the processing of their data. In this case, the owner will not process your data for any purpose other than storing it.
Have your personal data deleted or removed. Users have the right, under certain circumstances, to obtain the erasure of their data from the owner.
Receive your data and transfer it to another controller. Users have the right to receive their data in a structured, commonly used and machine-readable format and, if technically feasible, to transmit it to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User's consent, on a contract to which the User is part or on pre-contractual obligations thereof.
File a complaint. Users have the right to lodge a complaint with their competent data protection authority.

DETAILS ABOUT THE RIGHT TO OPPOSE TO PROCESSING

When Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the Owner's legitimate purposes, Users may object to such processing by providing a ground related to their particular situation. justify the objection.

Users should know that, however, if their personal data is processed for direct marketing purposes, they can object to this processing at any time without providing any justification. To find out whether the Owner is processing personal data for direct marketing purposes, Users can refer to the relevant sections of this document.

HOW TO EXERCISE THESE RIGHTS

Any requests to exercise user rights may be directed to the Owner via the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Owner as soon as possible and always within one month.

Additional information about data collection and processing

LEGAL ACTION

The User's Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from misuse of the Application or related Services. The User declares to be aware that the Owner may be obliged to reveal personal data upon request from public authorities.

ADDITIONAL INFORMATION ABOUT THE USER’S PERSONAL DATA

In addition to the information contained in this privacy policy, the NMA website may provide the user with additional and contextual information about certain services or the collection and processing of personal data upon request.

LOGS AND SYSTEM MAINTENANCE

For operation and maintenance purposes, the NMA website and any third party services may collect files that record interaction with the NMA website (system logs) using other personal data (such as IP address) for this purpose.

INFORMATION NOT CONTAINED IN THIS POLICY

Further details regarding the collection or processing of personal data may be requested from the Owner at any time. Please see the contact information at the top of this document.

HOW “DO NOT TRACK” REQUESTS ARE HANDLED

YourApp does not support “Do Not Track” requests. To determine whether any of the third-party services you use honor “Do Not Track” requests, read their privacy policies.

CHANGES TO THIS PRIVACY POLICY

The Owner reserves the right to make changes to this privacy policy at any time by notifying its users on this page and possibly within the user itself and/or – as far as technically and legally possible – sending a notice to users via any contact information available to the Owner. We highly recommend checking this page frequently, referring to the last modified date listed at the bottom.

If the changes affect processing activities carried out on the basis of user consent, the Owner must collect new user consent where necessary.

LEGAL DEFINITIONS AND REFERENCES

Personal Data (or Data)

Any information that directly, indirectly or in connection with other information – including a personal identification number – allows the identification or identifiability of a natural person.

Usage Data

Information collected automatically by the NMA website (or third-party services employed in YourApp), which may include: the IP addresses or domain names of the computers used by Users using the NMA website, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to send the request to the server, the size of the file received in response, the numeric code indicating the status of the server's response (successful result, error, etc.), the country of origin, the characteristics of the browser and the system operational data used by the user, the various time details per visit (e.g. the time spent on each page within the Application) and details about the path followed within the Application, with special reference to the sequence of pages visited; and other parameters about the device's operating system and/or the user's IT environment.

User

The individual using the NMA website who, unless otherwise specified, coincides with the Data Subject.

Data subject

The natural person to whom the personal data refers.

Data processor (or data supervisor)

The natural or legal person, public authority, agency or other body that processes Personal Data on behalf of the Controller, as described in this privacy policy.

Data controller (or owner)

The natural or legal person, public authority, agency or other body that, individually or jointly with others, determines the purposes and means of processing Personal Data, including security measures relating to the operation and use of the NMA website. The Data Controller, unless otherwise specified, is the owner of the NMA website.

NMA (or this website)

The means by which User Personal Data is collected and processed.

Service

The service provided by NMA as described in the relative terms (if available) and on this website/app.

European Union (or EU)

Unless otherwise indicated, all references in this document to the European Union include all current member states of the European Union and the European Economic Area.

Small sets of data stored on the user's device.

Legal information

This privacy statement was prepared based on provisions of multiple legislations, including art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation). This privacy policy refers solely to SeuApp, if not otherwise indicated in this document.

Last updated: June 29, 2022

GO BACK TO HOMEPAGE