K1 Group S.A Privacy Policy
Updated December 14, 2020.

SCOPE OF THIS POLICY

Please read this Privacy and Data Protection Policy (“Policy”) carefully to understand our practices for handling your Personal Data. It is Policy applies to individuals who interact with Grupo K1 S.A services, such as our consumers. This Policy explains how your Personal Data is collected, treated and shared by Grupo K1 S.A. It also tells you how you can access and update your Personal Data, and exercise your rights relating thereto.

This Policy covers our online and offline data processing activities, covering the Personal Data we collect through our various channels, including websites, third-party social networks, Customer Service, points of sale and events. Please note that We may aggregate Personal Data from different sources (website, offline event). For this, we cross-reference the Personal Data that were originally collected by different entities of Grupo K1 S.A or partners group and, always having the consent of the data subject when the processing decision require.


1. Introduction

The processes carried out by Grupo K1 SA, related to the distribution and preparation of this Policy, present the relevant information for you, holder of personal data, to understand how we are concerned and how we handle your information.

The K1 SA Group is made up of several companies. Among them are: Móveis Kappesberg, Idelli Ambientes, My Home Móveis Planejados, UZ Utilidades, Kappesberg Colchões.


2. Purpose

Provide information so that the holder of personal data can understand our policies and practices regarding their information, as well as what data we collect and how we treat it.


3. Scope

Here you can understand how we treat and what our practices are about your personal data.

This Policy explains the personal data that is collected, processed, retained, disclosed and eliminated by Grupo K1 SA, as well as informs how you can request access, update your personal data and make certain decisions about how this data is treated.

This Policy covers all data collection and processing activities, both online and offline, through our channels (Administrative Headquarters, websites, social networks, Call Center, events, in addition to other contact channels disclosed).

If you do not provide us with the necessary personal data, we may not be able to offer our products or provide our services to you.
We also inform you that this Policy may be changed periodically, and the current version will always be available on our website.

Application

This policy applies to all natural persons who interact with our services: use communication channels or work directly or indirectly for us.

This policy also applies to all our employees and directors and to all types of data and processing: whether physical or digital, regardless of the location or means of storage and transfer.


Reference documents

Law no. 12,965/2014 - Establishes principles, guarantees, rights and duties for the use of the Internet in Brazil (Marco Civil da Internet);
Decree no. 8,771/2016 - Indicate procedures for the storage and protection of data by connection and application providers;
Law no. 13,709/2018 - Provides for the protection of personal data and amends Law no. 12,965/14;
Law no. 13,853/2019 - Amends Law No. 13,709, of August 14, 2018, to provide for the protection of personal data and to create the National Data Protection Authority;

Definitions

For the purposes of this document, the following definitions are adopted:

  • Processing agents:  the controller and the operator;
  • Anonymization:  use of reasonable technical means available at the time of treatment, through which data loses the possibility of association, directly or indirectly, with an individual;
  • National authority:  public administration body responsible for ensuring, implementing and supervising compliance with this Law throughout the national territory;
  • Consent:  free, informed and unequivocal statement by which the holder agrees with the processing of his personal data for a specific purpose;
  • Controller:  natural or legal person, public or private, who is responsible for decisions regarding the processing of personal data;
  • Personal data:  information related to an identified or identifiable natural person;
  • Sensitive personal data:  personal data about racial or ethnic origin, religious conviction, political opinion, union affiliation or organization of a religious, philosophical or political nature, data referring to health or sexual life, genetic or biometric data, when linked to a natural person;
  • Anonymized data:  data relating to a holder who cannot be identified, considering the use of reasonable technical means available at the time of processing;
  • DPO:  Data Protection Officer, also called Person in Charge, is the person appointed by the controller and operator to act as a communication channel between the controller, the data subjects and the National Data Protection Authority (ANPD);
  • Deletion:  deletion of data or a set of data stored in a database, regardless of the procedure used;
  • Person in charge:  also called DPO, is the person appointed by the controller and operator to act as a communication channel between the controller, data subjects and the National Data Protection Authority (ANPD);
  • Operator:  natural or legal person, public or private, who processes personal data on behalf of the controller;
  • Personal data protection impact report (RIPD):  documentation from the controller that contains the description of the processes for processing personal data that may generate risks to civil liberties and fundamental rights, as well as measures, safeguards and risk mitigation mechanisms;
  • Holder:  natural person to whom the personal data that are subject to treatment refer;
  • Treatment:  all operations carried out with personal data, such as those referring to the collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation or control of information, modification, communication , transfer, diffusion or extraction.
     

1. WHAT YOU NEED TO KNOW BEFORE READING THIS POLICY.

Personal Data  is all information that allows your identification. For example, your name, CPF, email, phone, among others.

Sensitive Personal Data  is personal data related to racial or ethnic origin, religious conviction, political opinion, union affiliation or organization of a religious, philosophical or political nature, data referring to health or sexual life, genetic or biometric data, when linked to you.

Processing of Personal Data  means any operation, such as the collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation or control of information, modification, communication, transfer, dissemination or extraction, carried out with personal data.
 

2. SOURCES OF PERSONAL DATA


In order to build and maintain Our relationship of trust, it is important that you are aware of how we treat your Personal Data, and, mainly, how and where we collect your Data. See below the list of collection points:

K1 SA Group Websites  (https://www.kappesberg.com.br, https://www.idelli.com.br, https://www.myhomestore.com.br, https://www.uzutilidades. com.br), consumer-facing websites managed by or for Grupo K1 SA, including websites we operate under our own domains/URLs and commercial pages we maintain on third-party social networks such as Facebook.

E-mail, text messages and other electronic messages . Interactions we carry out with You such as electronic communications sent by the companies of Grupo K1 SA by email, for example.

SAC Grupo K1  Comunicações with our Customer Service Center.

Offline registration forms.  Printed or digital forms, and similar forms, by which we request your Personal Data, such as, for example, conventional mail, demonstrations in stores, or events, among others.

Ad Interactions . Interactions with our advertisements (for example, if you interact with one or more of our advertisements on a third party website, We may receive information about that interaction).

Data from other sources.  Third-party social networks (such as Facebook and Google), market research (if the feedback is not given in anonymized form), third-party data aggregators, promotional partners of Grupo K1 SA, public sources and data received when we acquire other companies.


3. PERSONAL DATA WE COLLECT ABOUT YOU AND HOW WE COLLECT IT


Depending on how you interact with Grupo K1 SA (online, offline, over the phone, etc.), we collect various types of information about you, as described below:

Personal  contact information. They include any information you provide to us that allows us to contact you or verify your registration, such as your full name, social security number, date of birth, gender, postal address, email, social media details, telephone number, etc.

Information, demographics and interests . Any information that describes your demographics or behavioral characteristics, such as age or age range, geographic location (eg zip code), favorite products, hobbies, lifestyle interests.

Computer/Mobile Device Technical Information . Any information about the computer system or other device that You use to access one of our websites or applications, such as IP address, operating system type, and web browser type and version. If you access a Grupo K1 SA website or application using a mobile device, such as a smartphone, the information collected will also include, where permitted, your phone's unique device ID, advertising ID, geographic location and other data similar from the mobile device.

Site/communication usage information. As you browse and interact with our websites, we use automatic data collection technologies to collect certain information about your actions. This includes information such as which links you click on, which pages or content you view and for how long, and other similar information and statistics about your interactions such as response time to content, download errors and length of visits to certain pages. This information is captured through automated technologies such as Cookies (Browser Cookies, Flash Cookies) and web beacons,

Market research and consumer feedback . Information that you voluntarily share with Grupo K1 SA about your experience using our products and services, such as complaints, satisfaction surveys and requests for improvement.

Consumer generated content.  We understand as information generated by You, any content that You create and share with Grupo K1 SA on third-party social networks or through posts on one of our websites, including the use of third-party social network applications, such as Facebook. Examples include photos, videos, personal stories or other similar content and media. Where permitted, We collect and publish content generated by consumers in connection with a variety of activities, website community features, consumer engagement and third-party social networks.

Third-party social media information. Any information that You publicly share on a third-party social network or information that forms part of Your profile on a third-party social network (such as Facebook or Google). Examples include your basic account information (registration details, current city, profile picture, user ID, friends list, etc.) and any other information or additional activities that You allow the third-party social network to share. We collect your third-party social networking profile information (or parts of it) whenever you download an item or interact with a K1 SA Group website, on a third-party social network, whenever you use a social network feature that is integrated into a K1 SA Group website (such as Facebook Connect) or whenever you interact with Us through a third-party social network. To learn more about how your third-party social network information is collected by Grupo K1 SA or to opt out of sharing this social network information, please visit the specific third-party social network website. (such as Facebook Connect) or whenever you interact with Us through a third-party social network. To learn more about how your third-party social network information is collected by Grupo K1 SA or to opt out of sharing this social network information, please visit the specific third-party social network website. (such as Facebook Connect) or whenever you interact with Us through a third-party social network. To learn more about how your third-party social network information is collected by Grupo K1 SA or to opt out of sharing this social network information, please visit the specific third-party social network website.

Calls to Customer Service.  Communications with Our Customer Service (“SAC”) may be recorded or listened to, in accordance with applicable laws, for local operational needs (for example, for quality or training reasons). Payment card details are not recorded. Where required by law, you will be informed of such recording at the start of your call.

Sensitive Personal Data.  We always try to handle as little Sensitive Personal Data as possible. In some market research or personalized service. When it is necessary to process your Sensitive Personal Data, we will inform you of the intended purpose and rely on your prior and express consent, when this is a legal requirement.

 

4. HOW DO WE USE YOUR PERSONAL DATA?

We process your Personal Data, mainly, to enable our business relationship, fulfill certain contractual and legal obligations, as well as engage our brand.

Consumer service.  We use your Personal Data to provide you with customer services, including responding to your inquiries, complaints and requests. This usually requires the use of your contact and registration Personal Data, as well as information about the product purchased and the reason for your inquiry (for example, order status, technical problem, product question or complaint, general inquiry and etc.).

Order fulfillment.  Grupo K1 SA uses your Personal Data to process, bill and ship your orders, inform you about the status of your orders, correct addresses, conduct identity verification and other activities to check for fraud.

Targeted Communications . Grupo K1 SA uses your Personal Data to provide information about products or services (for example, marketing communications or campaigns or promotions). This can be done by means such as email, advertisements, SMS, telephone calls and postal correspondence, to the extent permitted by applicable law and consented by the holder of the personal data. Some of our campaigns and promotions run on third-party websites and/or social networks.

In addition, Grupo K1 SA captures your Personal Data when you interact with third-party social networking functions, such as “liking” a post, in order to serve you with advertisements and create an interaction. This use of your Personal Data is not mandatory, which means that you can request the deletion of your Personal Data from our database at any time and, therefore, we will stop processing your data for these purposes.

Personalization of your preferences (offline and online) . Grupo K1 SA, whenever it has the consent of the holder of the personal data, may use your Personal Data:

  1. to analyze your preferences and habits;
  2. to anticipate your needs, based on Our analysis of your profile;
  3. to improve and personalize your experience on our websites;
  4. to ensure that the content on our websites is optimized for you and your computer or device;
  5. to send you targeted advertising and content, and
  6. to allow you to participate in interactive functions, when you choose to do so.

Legal reasons or merger/acquisition.  If Grupo K1 SA or its assets are acquired by, or merged with, another company, including due to bankruptcy, we will share your Personal Data with our legal successors.

We will also disclose your Personal Data to third parties (i) when required by applicable law; (ii) in response to legal proceedings; (iii) in response to a request from the competent legal authority; (iv) to protect our rights, privacy, safety or property; or (v) to enforce the terms of any agreement or the terms of our website.

In addition, your Personal Data may be used to comply with obligations set forth by law, regulations by government bodies, tax authorities, the Judiciary, such as judgments and agreements, and/or any other competent authority. This treatment may include your identification data and personal documents.

General Purposes . Grupo K1 SA uses your Personal Data for other general business purposes, such as maintaining your account, conducting internal or market research and measuring the effectiveness of Our advertising campaigns. We reserve the right, if you have Grupo K1 SA accounts, to compile these accounts into a single account. We also use your Personal Data for the management and operation of our communications, IT and security systems.


5. SIMILAR COOKIES/TECHNOLOGIES, LOG FILES AND WEB BEACONS

Cookie  is a small file added to your device or computer by websites you visit. They are widely used to make websites work, or work more efficiently, as well as to provide a personalized access experience and provide information to website owners.

We use Cookies to improve the use and functionality of Grupo K1 SA websites and better understand how our visitors use our websites, as well as the tools and services offered there. Cookies help us adapt Grupo K1 SA's websites to your personal needs, make them easier to use, receive customer satisfaction feedback and communicate with you from other places on the internet.

What categories of Cookies are used on Grupo K1 SA websites?

Session Cookie.  These are temporary cookies, which are deleted when you close your browser. When you restart your browser and return to the website that created the Cookie, that website treats you as a new visitor.

Example: performance cookie - Helps us understand how visitors interact with our site by providing information about areas visited, time spent and any issues encountered, such as message errors. This helps us to improve the performance of our websites.

Persistent Cookies.  These are Cookies that remain in your browser until you delete them manually or until your browser deletes them in accordance with the duration period established by the Cookie. These Cookies will recognize your return as a visitor.

Example: Flash Cookies - may store your preferences, such as volume control or high game scores, or display content based on what You see on the site to personalize your visit. Our partners may provide certain features on the Site, such as promotions and games, and use Flash Cookies to collect and store your information.

Necessary Cookies . These are Cookies that are strictly necessary for the operation of a Grupo K1 SA website. They allow you to browse the website and use our resources. It is not possible to oppose this treatment or disable these Cookies.

Cookies that send us information about you . These are Cookies placed by us on a K1 Group website and can only be read by that website. They are known as “first party” Cookies.

We also place Cookies on K1 Group advertisements that are displayed on third-party websites (such as Facebook). We obtain information through these Cookies when You click on or interact with the advertisement. In this situation, Grupo K1 SA is placing a “third party” Cookie. Grupo K1 SA may use the information obtained by these Cookies to send you other advertisements that are relevant or of interest to you based on your previous online behavior.

Example: Targeted/Advertising Cookie - These Cookies are used to deliver targeted ad content relevant to You and Your interests, or to limit the number of times You see a specific advertisement. We also use it to measure the effectiveness of Our Campaigns on Grupo K1 SA or third-party websites. We may share this information with other parties, including our agencies.

Other similar technologies s. Grupo K1 SA websites also use other tracking technologies, including IP addresses, log files and web beacons, which also help us to adapt our websites to your personal needs.

IP Address.  An IP Address is a number used by computers on the network to identify your computer every time you connect to the internet. We may log IP Addresses for the following purposes: (i) technical troubleshoot problems (problems that a product, process or operating system may have); (ii) maintaining the protection and security of the Site; (iii) better understanding how our websites are used; and (iv) content better adapted to your needs, depending on the country you are in.

Registry Files . We may collect information in the form of Log Files that store website activities and collect statistics about user browsing habits. These logs are generally generated anonymously and help us collect (i) the user's browser type and system; (ii) user session information (such as your originating URL, the date, time and which pages the user visited on Our Site and how long they stayed there); and, (iii) other navigation or click count data.

Web flags. Usamos os Sinalizadores da web (ou GIFs transparentes) nos sites do Grupo K1 S.A. Os sinalizadores da web (também conhecidos como “web bugs”) são pequenas sequências de código que permitem a entrega de uma imagem gráfica em uma página da web com o objetivo de transferir dados de volta para Nós. Usamos as informações dos sinalizadores da web para os mais variados propósitos, inclusive informações sobre como um usuário responde a campanhas de e-mail (por exemplo, a hora em que o e-mail é aberto, que link o usuário faz a partir do e-mail), relatórios de tráfego do site, contagem de visitantes únicos, auditoria e relatórios de anúncios e e-mail e personalização.

Managing your Cookies/Preferences. You can manage and disable Cookies in your browser settings. You can even configure your browser to warn you before accepting Cookies or simply refuse them. But remember, some of them are necessary to make the use of our websites possible. You do not need to have Cookies to use or browse most of Grupo K1 SA's websites, although you will probably not be able to access all of its features in that case. See the "help" button of your browser (such as Internet Explorer, Google Chrome or Firefox) how you can manage this.


6. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

During our relationship, Grupo K1 SA may share your Personal Data with companies that are part of our group, provided that for the same purpose as the initial treatment.

Service providers:  External companies that we use to help us run our business. In these cases, only selected employees will be authorized to access their Personal Data on behalf of Grupo K1 SA, for the specific tasks that are requested of them, based on our instructions. In addition, the providers with whom we share your Personal Data are required to keep it confidential and secure.

Credit Analysis/Debt Collection Agencies:  Outside companies that We use to help us verify your credit status (particularly for orders placed by Boleto) or to collect overdue Boletos.

Third-party companies  that use Personal Data for their own marketing purposes:  We do not license or sell your Personal Data to third-party companies for their own marketing purposes. Eventually, if this occurs, we will ask for your consent, making it clear to you the purpose for which it is intended. The identity of said companies will be revealed once their consent is requested.

Third parties who use your Personal Data for legal reasons or due to merger/acquisition:  We will share your Personal Data with third parties for legal reasons or in the context of a merger or acquisition.

International transfer of Personal Data: Due to the international nature of our business, it is possible that we may have to transfer your Personal Data within Grupo K1 SA and to third parties, in order to achieve the purposes established in this Privacy Policy. For this reason, we may transfer your Personal Data to other countries, which may have laws and data protection requirements different from those that apply in Brazil. In such cases, we will take all measures to protect your personal data,


7. STORAGE OF PERSONAL DATA

We will use your Personal Data for as long as necessary to achieve the purposes for which it was collected or to comply with applicable legal obligations.


8. YOUR RIGHTS

You, as the holder of Personal Data and our customer, have the following rights regarding your personal information:

  1. Access, review, find out if we have processed your Personal Data and request an electronic copy of the information we have about you;
  2. Correct or request correction of incomplete, inaccurate or outdated Personal Data;
  3. Request the anonymization, blocking or deletion of unnecessary and excessive Personal Data;
  4. Request the portability of Personal Data to another provider of similar products or services;
  5. Request deletion of Personal Data collected and used based on your consent;
  6. Obtain information about the public or private entities with which we share your Personal Data;
  7. When the processing activity requires your consent, you can refuse to consent. In that case, we will inform you of the consequences of not carrying out such activity;
  8. When the processing activity requires your consent, you can revoke it at any time when previously provided.

To exercise your rights, use the channels provided at the end of this Policy.


9. HOW DO WE KEEP YOUR PERSONAL DATA SECURE?

We use appropriate measures (described below) to keep your Personal Data confidential and secure. Please note, however, that these protections do not apply to information that You choose to share in public areas, such as third-party social networks.

Persons who may access your Personal Data.  Your Personal Data will be processed by our employees or authorized agents, as long as they need to have access to such information, depending on the specific purposes for which your Personal Data was collected (e.g. our employees responsible for matters related to customer service will have access to your consumption records).

Measures taken in operational environments.  We store your Personal Data in operating environments that use reasonable security measures to prevent unauthorized access. We follow reasonable protocols to protect Personal Data. The transmission of information over the Internet is unfortunately not completely secure, and although we do our best to protect your Personal Data, we cannot guarantee the security of data during transmission through our websites.

We have adopted strict policies and procedures that determine how Personal Data must be treated here at Grupo K1 SA Such rules are intended to ensure the proper and lawful treatment of your Personal Data.

Our security measures are continuously monitored and revised according to the most current technological advances and organizational resources.

 

10. YOUR CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR PERSONAL DATA

We do our best to give you choices about the Personal Data you provide to us. The following mechanisms give you the following control over your Personal Data:

Cookies/Similar Technologies.  You can manage your consent through your browser settings. To refuse some or all Cookies/similar technologies, or to alert you when they are being used, see Section 5 above.

Advertising, marketing and promotions. You can consent for your Personal Data to be used by Grupo K1 SA to promote its products or services, through checkboxes located in the registration forms, or when answering questions presented by representatives of Our Customer Service. If you decide that you no longer wish to receive marketing-related communications from us, you may withdraw your consent at any time by following the instructions provided in such communications. To unsubscribe from marketing communications sent by any means,

Personalization (offline and online):  If you want your Personal Data to be used by Grupo K1 SA to provide you with a personalized experience or targeted advertising and content, you can indicate this through the checkboxes located on the registration form or by answering to questions put forward by Our Customer Service representatives. If you decide that you no longer want to benefit from this personalization, you can opt out at any time.


11. CHANGES TO OUR POLICY

In the event of a change in the way your Personal Data is processed, we will update this Policy and make it available to everyone.

We reserve the right to make changes to our practices and policies at any time. Please check back often to check for any updates or changes.


12. CONTACT

Personal Data Controller and Data Protection Officer (DPO) Contact

According to Law nº 13.709/2018 (LGPD), Grupo K1 SA is predominantly considered to be the controller of personal data. In this case, it is one of our companies, depending on the data and related purpose:

Regarding the sale of Furniture online:

Kappesberg furniture:

CNPJ No. 00912882-0001-61

Regarding the sale of Planned Furniture:

Idelli environments:

CNPJ No. 00912882-0001-61

Regarding the sale of Planned Furniture:

My Home Planned Furniture:

CNPJ No. 00912882-0001-61

Regarding the sale of housewares

UZ utilities:

CNPJ No. 00912882-0001-61

Regarding the sale of Mattresses:

K1 Mattresses:

CNPJ No. 741788070001-55

 

The data below can be used to contact the person in charge of processing personal data (DPO), to clarify doubts about the processing of personal data or to request information, corrections or deletions, as well as to request any of your rights as a data subject:

E-mail:  dpo@grupok1.com.br

By mail: with the brand linked to your request
Rua Emancipação 2000
Tupandi/RS, Bairro Industrial
CEP 95775-000
A/C Data Protection Officer


Final recommendations

It is important that Internet Users check the terms of Use of Cookies of all the websites they eventually browse, seeking adequate information on how to collect and process their data.

As we are always looking to improve our products, this Privacy Policy may be updated. Therefore, we recommend that you periodically visit this page so that you are aware of the changes. If material changes are made that require your new consent, we will post that update and request your new consent.

If the order is submitted by a person other than You without providing evidence that the order is legitimately made on your behalf, the order will be rejected. Please note that any identifying information provided by us will only be processed in accordance with applicable laws.

We will receive and investigate any complaints about the way we manage Personal Data (including complaints about your rights being violated under applicable privacy laws and regulations).