Law No. 13,709/2018 (General Data Protection Law – LGPD) was enacted on August 14, 2018. Its approval represented an initial milestone for a new culture, in both the private and public sectors, focused on transparency and the centrality of the individual in the processing of personal data. This new culture brings greater legal certainty for companies and more rights and guarantees for data subjects regarding their information, in addition to demanding greater protection and care in the processing of personal data.
Growing transformations in the market can already be observed since the LGPD came into force: companies implementing the principles and norms of the law in their processes, privacy awareness initiatives, clearer and more accessible contractual texts and privacy policies, greater investment in information security tools and systems, training and certification of data protection professionals, among other actions.
Although the LGPD topic has gained significant visibility, doubts and misconceptions about the law still persist. With this in mind, Nuvia prepared this Basic LGPD Manual, covering the following topics:
- Key Concepts
- Application of the Law
- Principles
- Lawfulness of Processing
- Data Subject Rights
- International Data Transfer
- Security and Best Practices
At the end of each section, we present the "Nuvia and the LGPD" box, in which we contextualize the topics covered to Nuvia's reality.
We hope this material is useful to you and wish you an excellent read!
1. Key Concepts
Nuvia does NOT process sensitive personal data or data of children or adolescents. We do not use or store data such as CPF (national ID), residential address, or personal emails. The only information processed by Nuvia relates to professional and corporate data obtained from public sources or with an appropriate legal basis.
Below, we highlight the main concepts of the LGPD:
- Personal data: Any data that identifies a natural person. In Nuvia's case, this is restricted to data of professionals in a business context, such as name, position, and professional email.
- Sensitive personal data: Nuvia does not collect or process data of this nature.
- Anonymized data: Occasionally used for statistical purposes.
- Controller: Nuvia, in most cases, is the Data Controller.
- Processor: Nuvia may act as a Processor when processing data provided by its clients.
- Processing: All activities performed with data, such as collection, analysis, storage.
A NUVIA E A LGPD
Nuvia operates strictly within the limits of the LGPD, processing professional data of natural persons (name, position, professional email, career movements, etc.) and public data of companies (CNPJ, corporate address, shareholder structure, industry sector). No sensitive or personal/domestic data is processed.
2. Application of the Law
The LGPD applies to Nuvia because:
- Nuvia is headquartered in Brazil.
- It collects and processes data of individuals and companies in Brazil.
- It provides solutions that use data for lawful commercial purposes.
3. Principles
Nuvia follows all LGPD principles, with emphasis on:
- Purpose and Adequacy: Data is processed for B2B prospecting, market analysis, and lead enrichment purposes.
- Necessity: Only the minimum and relevant data for commercial strategies are used.
- Security: Data is stored with layers of protection and robust protocols.
- Transparency: Whenever there is direct data collection, the data subject is informed and may revoke consent at any time.
A NUVIA E A LGPD
Nuvia collects and processes exclusively professional and business data, based on public sources or legitimate private databases. Data is kept up to date, stored securely, and is not used for discriminatory purposes.
4. Lawfulness of Processing
Nuvia relies on the following legal bases for data processing:
- Legitimate interest: to enrich information about companies and professionals in B2B contexts.
- Consent: when the user provides data through a form.
- Public sources: such as corporate websites, LinkedIn, government portals, and commercial registries.
A NUVIA E A LGPD
Nuvia does not process sensitive personal data or data of an intimate nature. All information processed is for professional or corporate use and has a clear legal basis for use, with consent records when applicable.
5. Data Subject Rights
Nuvia respects all rights provided by the LGPD:
- Confirmation of the existence of processing
- Access to data
- Correction
- Anonymization
- Portability
- Revocation of consent
- Deletion of data when applicable
A NUVIA E A LGPD
Data subjects may contact Nuvia to exercise their rights. We do not process data of minors, medical data, genetic data, or private data such as CPF, residential address, or personal emails.
6. International Data Transfer
Nuvia uses technology providers located in Brazil and abroad. Transfers are carried out with contractual guarantees and technical measures to protect data.
7. Security and Best Practices
Nuvia adopts measures such as:
- Secure storage with encryption
- Access control and traceability
- Internal policies and training
- Continuous monitoring
A NUVIA E A LGPD
All employees involved in data processing sign confidentiality agreements and are trained to ensure correct data use. There is no collection of sensitive, personal, or minor data.
Conclusion
Nuvia combines data intelligence with LGPD compliance. It exclusively processes public and professional information of companies and individuals operating in the corporate environment. It does not process sensitive personal data, domestic data, data of minors, or data such as CPF, residential address, or personal email. Thus, it ensures assertive results with responsibility and transparency.