Privacy Policy

Privacy and Personal Data Protection Policy

Chenut (“the Firm”) is a law firm that provides legal services related to various areas of law. In the regular exercise of its activities, the Firm processes the personal data of different categories of data subjects. The Firm is aware of the importance of ensuring the protection of this data and – therefore -processes such data under the principles of personal data protection set out in the laws and regulations in force.

This policy applies to all personal data processed by the Firm and aims at informing data subjects on how their personal data is processed. It may be modified, supplemented or updated to adapt to any legislative, regulatory, case law or technical developments.

The terms used in this policy have the same meaning assigned to them by Brazilian Law 13.709/2018 – General Personal Data Protection Law.

Principles for processing personal data

The personal data processed by the Firm is usually collected directly from the data subject, either as a result of contracts entered into between the Firm and the data subject or through contact forms or applications for traineeships or jobs. However, some data may be collected indirectly, such as, for example, data from links to the Firm’s website or data collected as part of the provision of legal advisory services.

The personal data processed by the Firm is used for specific, explicit and legitimate purposes, in accordance with the applicable legislation. In this regard, personal data may be processed for the following purposes:

  • For statistical purposes;
  • To provide legal advisory services;
  • To enrich editorial content and adapt it to users' needs;
  • To respond to requests for information on the services offered by the Firm;
  • To manage access to the customer area;
  • To safeguard the rights and obligations of the Firm in relation to the use of the website;
  • For recruitment purposes when you apply for a job;
  • To comply with legal obligations;
  • For the regular exercise of its activities.

The Firm may process sensitive personal data in particular as a result of relationships with its team. Likewise, the Firm may process children’s personal data, notably in connection with benefits granted to its team or for compliance with legal obligations, for which purposes it requires the specific and prominent consent of at least one parent or legal guardian.

Sharing personal data

The Firm may share some of the personal data it processes with third parties:

  • Public authorities, in cases of legal determination, judicial request or inspections carried out by control authorities;
  • Service providers supporting the Firm's activities (IT, recruitment, general services, accounting, etc.). In this context, the Firm enters into contracts with its service providers that guarantee the protection of the personal data shared.
  • Commercial partners (organization of webinars, events), law firms, etc.

International transfer of personal data

When necessary for the performance of a contract, the Firm may transfer personal data to one of its units outside of Brazil, notably in France and Portugal. International transfers made by the Firm comply with the conditions laid down in the Brazilian Data Protection Law – LGPD.

Storage period for personal data

The Firm stores the personal data of data subjects for periods that vary according to the nature of the relationship between the parties:

  • During the entire business or employment relationship with the owner of the data;
  • For as long as necessary to achieve the purpose for which they were collected;
  • During the storage period defined by applicable laws or regulations.

Ownership rights

Under the terms of the applicable legislation, the data subject has the right to:

  • Confirm that the Firm processes your personal data;
  • Access your personal data processed by the Firm;
  • Request the correction of your incomplete, inaccurate or outdated personal data;
  • Request the anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the Brazilian Data Protection Law - LGPD;
  • Request the portability of personal data processed by the Firm to another service or product provider;
  • Request the deletion of personal data processed with your consent;
  • Obtain information on the public and private entities with which the Firm shares your personal data;