Política de Privacidade

Privacy Policy

This website is maintained and operated by Univy China.

We collect and use some personal data belonging to those who use our website. In doing so, we act as controller of this data and are subject to the provisions of Federal Law no. 13,709/2018 (General Personal Data Protection Law – LGPD).

We care about the protection of your personal data and, therefore, we provide this privacy policy, which contains important information about:

– Who should use our website;

– What data we collect and what we do with it;

– Your rights in relation to your personal data; It is

– How to contact us.

Who should use our website

Our website should only be used by people over eighteen years of age. Therefore, children and teenagers should not use it.

Data we collect and reasons for collection

Our website collects and uses some personal data from our users, in accordance with the provisions of this section.

Personal data expressly provided by the user

We collect the following personal data that our users expressly provide to us when using our website:

full name, ID, CPF, date of birth, full address, telephone number;

This data is collected at the following times:

registration to make a purchase on the website.

The data provided by our users is collected for the following purposes:

so that the customer can purchase and receive their products purchased on our website.

Sensitive data

The website may collect the following sensitive data from users:

– data relating to the user’s health

The collection of sensitive data occurs at the following times:Durante a navegação
Estes dados são coletados com as seguintes finalidades:
Para fins de sugestão de produtos que mais se adequam a necessidade de cada paciente.
The collection and use of sensitive personal data will only be done with the specific and prominent consent of its holders, except, if applicable, in cases where the General Data Protection Law allows the processing of this type of data based on other legal bases other than consent.

In any case, the processing of sensitive personal data will only occur to meet specific purposes expressed in this policy or duly informed to the user by other means.

Cookies are small text files automatically downloaded to your device when you access and browse a website. They basically serve to identify devices, activities and user preferences.

Cookies do not allow any file or information to be extracted from the user’s hard drive, and it is not possible, through them, to access personal information that did not come from the user or the way in which they use the website’s resources. .

The. Website cookies

Website cookies are those sent to the user and administrator’s computer or device exclusively by the website.

The information collected through these cookies is used to improve and personalize the user experience, and some cookies can, for example, be used to remember the user’s preferences and choices, as well as to offer personalized content.

Cookie management

The user may oppose the registration of cookies by the website, simply by disabling this option in their browser. More information on how to do this in some of the main browsers used today can be accessed from the following links:

Internet Explorer:

https://support.microsoft.com/pt-br/help/17442/windows-internet-explorer-delete-manage-cookies

Safari:

https://support.apple.com/pt-br/guide/safari/sfri11471/mac

Google Chrome:

https://support.google.com/chrome/answer/95647?hl=pt-BR&hlrm=pt

Mozilla Firefox:

https://support.mozilla.org/pt-BR/kb/active-e-desative-os-cookies-que-os-sites-usam

Opera:

https://www.opera.com/help/tutorials/security/privacy/

Disabling cookies, however, may affect the availability of some tools and functionalities on the website, compromising their correct and expected functioning. Another possible consequence is the removal of user preferences that may have been saved, compromising their experience.

Collection of data not expressly provided for

Occasionally, other types of data not expressly provided for in this Privacy Policy may be collected, provided that they are provided with the user’s consent, or that collection is permitted based on another legal basis provided for by law.

In any case, data collection and resulting processing activities will be communicated to website users.

Sharing of personal data with third parties

We do not share your personal data with third parties. Despite this, it is possible that we do so to comply with some legal or regulatory determination, or even to comply with an order issued by a public authority.

How long will your personal data be stored

Personal data collected by the website is stored and used for a period of time that corresponds to what is necessary to achieve the purposes listed in this document and that takes into account the rights of its holders, the rights of the website controller and the applicable legal or regulatory provisions.

Once the storage periods for personal data have expired, they are removed from our databases or anonymized, except in cases where there is the possibility or need for storage due to legal or regulatory provision.

Legal bases for processing personal data

A legal basis for the processing of personal data is nothing more than a legal basis, provided for by law, which justifies it. Therefore, each personal data processing operation must have a corresponding legal basis.

Non-sensitive personal data

We process our users’ non-sensitive personal data in the following cases:

– with the consent of the holder of personal data;

– for the execution of a contract or preliminary procedures related to a contract to which the holder is a party, at the request of the holder of the personal data;

– for credit protection;

Sensitive personal data

We process our users’ sensitive personal data in the following circumstances:

Consent

Certain personal data processing operations carried out on our website will depend on the user’s prior consent, which must be expressed freely, informed and unequivocally.

The user may revoke their consent at any time, and if there is no legal hypothesis that allows or requires the storage of data, the data provided through consent will be deleted.

Furthermore, if desired, the user may not agree to any processing operation of personal data based on consent. In these cases, however, it is possible that you will not be able to use some functionality of the website that depends on that operation. The consequences of a lack of consent for a specific activity are informed prior to the treatment.

Contract execution

For the execution of a purchase and sale or service provision contract eventually signed between the website and the user, other data related to or necessary for its execution may be collected and stored, including the content of any communications made with the user.

Legal bases for processing personal data

Non-sensitive personal data

We process our users’ non-sensitive personal data in the following cases:

– with the consent of the holder of personal data;

– for the execution of a contract or preliminary procedures related to a contract to which the holder is a party, at the request of the holder of the personal data;

– for credit protection;

Sensitive personal data

We process our users’ sensitive personal data in the following circumstances:

Consent

Certain personal data processing operations carried out on our website will depend on the user’s prior consent, which must be expressed freely, informed and unequivocally.

The user may revoke their consent at any time, and if there is no legal hypothesis that allows or requires the storage of data, the data provided through consent will be deleted.

Contract execution

User rights

The website user has the following rights, granted by the Personal Data Protection Law:

– confirmation of the existence of treatment;

– access to data;

– correction of incomplete, inaccurate or outdated data;

– anonymization, blocking or deletion of unnecessary, excessive or processed data that does not comply with the provisions of the law;

– portability of data to another service or product provider, upon express request, in accordance with the regulations of the national authority, observing commercial and industrial secrets;

– deletion of personal data processed with the holder’s consent, except in cases provided for by law;

– information on public and private entities with which the controller shared data;

– information about the possibility of not providing consent and the consequences of refusal;

– revocation of consent.

It is important to highlight that, under the terms of the LGPD, there is no right to delete data processed based on legal bases other than consent, unless the data is unnecessary, excessive or processed in non-compliance with the law.

How the holder can exercise their rights

To ensure that the user who intends to exercise their rights is, in fact, the holder of the personal data subject to the request, we may request documents or other information that can assist in their correct identification, in order to protect our rights and the rights of third parties. This will only be done, however, if absolutely necessary, and the applicant will receive all related information.

Security measures when processing personal data

We employ technical and organizational measures capable of protecting personal data from unauthorized access and situations of destruction, loss, loss or alteration of that data.

The measures we use take into account the nature of the data, the context and purpose of the processing, the risks that a possible violation would generate for the user’s rights and freedoms, and the standards currently used in the market by companies similar to ours.

Among the security measures adopted by us, we highlight the following:

– Our users’ data is stored in a secure environment;

– We limit access to our users’ data, so that unauthorized third parties cannot access it;

– We keep records of everyone who has, in some way, contact with our data.

Even if you do everything you can to avoid security incidents, it is possible that a problem may occur caused exclusively by a third party – such as in the case of attacks by hackers or crackers, or even in the case of the user’s sole fault, which This occurs, for example, when he himself transfers his data to a third party. Therefore, although we are, in general, responsible for the personal data we process, we are exempt from responsibility if an exceptional situation such as these occurs, over which we have no control.

In any case, if any type of security incident occurs that could create significant risk or damage for any of our users, we will inform those affected and the National Data Protection Authority about what happened, in accordance with the provisions of the General Protection Law. of Data.

Complaint to a supervisory authority

Without prejudice to any other administrative or judicial remedy, holders of personal data who feel, in any way, aggrieved, may lodge a complaint with the National Data Protection Authority.

Changes to this policy

This version of this Privacy Policy was last updated on: 10/30/2020.

We reserve the right to modify these rules at any time, especially to adapt them to any changes made to our website, whether by making new features available or by deleting or modifying existing ones.

Whenever there is a modification, our users will be notified about the change.

How to contact us

To clarify any doubts about this Privacy Policy or the personal data we process, please contact our Personal Data Protection Officer