Data Privacy and protection policy

MALLET ADVOGADOS, in the provision of its legal services, needs to collect some personal data from its clients, employees, suppliers, and partners.

Therefore, this Data Privacy and Protection Policy aims to help clients, employees, suppliers, and partners understand what personal data is collected, how and why it is used, to whom it is disclosed, and how privacy is treated when using our services.

WHY?

MALLET ADVOGADOS has always been committed to the protection, security, and privacy of its clients, suppliers, employees, partners, and users of the website www.mallet.adv.br and its respective systems and facilities, both before and after Law No. 100/2004 was enacted. 13,709, of August 14, 2018. This Data Protection and Security Policy was drafted to reaffirm this commitment and respect, allowing data subjects to understand the general rules adopted by the firm and the terms of processing the data received, in strict compliance with applicable legislation.

MALLET ADVOGADOS strives to adhere to best practices in personal data security and protection, regularly and systematically promoting actions and improving systems to preserve the protection of the data provided by its data subjects.

Completing our forms and contractual and registration documents, using and browsing the website, and providing data, directly or indirectly, imply knowledge and acceptance of the terms of this Policy and any other specific terms, policies, and conditions relating to the provision of legal services. By providing your personal data, the individual or legal entity authorizes the receipt, processing, use, and disclosure of such data in accordance with the rules defined herein.

RESPONSIBLE FOR PROCESSING PERSONAL DATA

References in this Data Protection and Security Policy to “MALLET ADVOGADOS,” “we,” or “firm” mean MALLET ADVOGADOS (a legal entity registered with the CNPJ (Brazilian Corporate Taxpayer Registry) under no. 02.296.146/0001-51, exempt from state registration, located at Rua Itacema, 128, 2nd and 3rd floors, Itaim Bibi, São Paulo, Capital, Zip Code 04530-050), and for this purpose, is considered the entity responsible for processing data, under the terms of the General Data Protection Law (LGPD).

PERSONAL DATA

Personal data is understood as information related to an identified or identifiable natural person (data subject). Sensitive personal data includes personal data regarding racial or ethnic origin, religious beliefs, political opinions, membership in a trade union or organization of a religious, philosophical, or political nature, data relating to health or sexual life, genetic or biometric data, etc.

PERSONAL DATA COLLECTED

We collect and process personal data to provide legal services, whether litigation or advisory, and to manage our contractual relationships with clients, suppliers, employees, and partners.

For more detailed information regarding the processing purposes carried out by MALLET ADVOGADOS, please consult the table with the processing purposes, legal bases, and/or retention periods for the personal data collected.

CATEGORIES OF PERSONAL DATA PROCESSED AND PURPOSES OF PROCESSING

Clients’ personal data is generally used in the provision and management of contracted legal services. The processing of client data is, in most cases, legitimated by the contractual relationship established between MALLET ADVOGADOS and the data subject, and, in certain situations, to comply with legal obligations imposed on the firm.

The personal data of suppliers (individuals), i.e., individuals who represent or collaborate with MALLET ADVOGADOS’suppliers and service providers, to which the firm has access in the context of the provision of services, is processed for the purpose of managing the contractual relationship. This processing is legitimated by the performance of the contract established between MALLET ADVOGADOS and the supplier, and, in certain situations, to comply with legal obligations imposed on the firm.

In the context of relationships with partners, i.e., individuals and their employees with whom MALLET ADVOGADOSestablishes a partnership, and regarding the data necessary for MALLET ADVOGADOS’s partnership management, processing is legitimated by the execution of the contract established between MALLET ADVOGADOS and the partner, and, in certain situations, to comply with legal obligations imposed on the firm.

Newsletters related to legal and non-legal topics may be sent via email addresses registered in our database or other automated methods. This ensures that the information provided is protected by the email address registered by the client, thus eliminating the need for consent. Clients should note that we do not share their personal data with third parties. If you no longer wish to receive such communications, simply request this via email or access the specific link in the newsletter to unsubscribe.

PERSONAL DATA RETENTION PERIOD

The personal data collected will be retained by MALLET ADVOGADOS for the duration of its relationship with the client, supplier, employee, or partner. It may be retained for a longer period, as established by law, to defend rights/interests in legal proceedings, or to send legal information, as set forth above.

WEBSITE USERS

MALLET ADVOGADOS guarantees that visitors to the website www.mallet.adv.br (“User” or “Users”) will respect your privacy. Visiting this website alone does not automatically record any personal data that identifies you.

Data Receipt and Processing: MALLET ADVOGADOS does not receive any personal data from its website.

Security Measures: MALLET ADVOGADOS protects Users’ personal data against unauthorized access via the Internet. To this end, it uses security systems, rules, and other procedures to ensure the protection of Users’ personal data, as well as to prevent unauthorized access, misuse, disclosure, loss, or destruction.

 MALLET ADVOGADOS protects Users’ personal data. Users should regularly monitor the security of their equipment to ensure this same internal protection.

Cookies: MALLET ADVOGADOS does not use cookies on its website.

DATA SUBJECT RIGHTS

Under Article 9 of the LGPD, data subjects have the right to easy access to information about the processing of their data. This information must be made available in a clear, appropriate, and conspicuous manner, including, among other things, the characteristics provided for in regulations to comply with the principle of free access: i – specific purpose of the processing; ii – form and duration of the processing, respecting commercial and industrial secrets; iii – identification of the controller; iv – contact information of the controller; v – information about the shared use of data by the controller and its purpose; vi – responsibilities of the agents who will perform the processing; and vii – rights of the data subject, with explicit mention of the rights contained in Article 18 of the LGPD.

The data subject may exercise these rights by submitting a written request to the Data Protection Officer at MALLET ADVOGADOS, emailed to [email protected].

Under the law, the data subject also has the right to revoke consent at any time, by expressly expressing their consent. Data processing carried out under the previously granted consent will be ratified as long as there is no request for deletion, pursuant to item VI of the caput of article 18 of the LGPD.

SECURITY MEASURES ADOPTED BY MALLET ADVOGADOS

MALLET ADVOGADOS is committed to protecting the personal data it stores against damage, loss, disclosure, misappropriation, alteration, and destruction.

To this end, it implements technical and organizational security and access control measures aimed at mitigating existing risks.

CIRCUMSTANCES UNDER WHICH DATA MAY BE SUBJECT TO INTERNATIONAL TRANSFERS

The provision of services by MALLET ADVOGADOS may involve the transfer of data subjects’ personal data to other countries.

In this case, MALLET ADVOGADOS will implement the necessary and appropriate measures to comply with art. 33 et seq. of the LGPD.

DATA LOSS PREVENTION

The firm uses security solutions integrated with the Microsoft 365 environment, with data loss prevention (DLP) policies, sensitive information sharing controls, and restricted access through multi-factor authentication. Furthermore, it performs regular backups of stored information, with secure and encrypted retention.

DATA LEAK RESPONSE: 

If any information security incident or potential data leak is identified, the official communication channels are:

Responsible: Dr. Renato Dote, partner and DPO

Email: [email protected]

Phone: (11) 3165-6465

The incident is recorded, evaluated internally, and, if necessary, communicated to the affected parties, as provided for in the General Data Protection Law (LGPD).

CORPORATE EQUIPMENT AND DEVICE CONTROL

The firm provides corporate laptops to its employees, which are pre-configured with security and monitoring solutions. All devices are cataloged and managed through the Microsoft Intune platform, enabling compliance tracking, security policy enforcement, inventory control, and, if necessary, remote data wiping.

CONTACTS

Data subjects may contact MALLET ADVOGADOS for more information about the processing of their personal data, as well as any questions related to the exercise of their rights granted by applicable law, and in particular, those referred to in this Policy, by sending a message to the DPO, Dr. Renato Dote, via the following email address: [email protected]

CHANGES TO THE DATA SECURITY AND PROTECTION POLICY

MALLET ADVOGADOS may modify its data security and protection policy at any time, while maintaining it in strict compliance with the LGPD.

Last updated: May 2025.