The highlighted fields must be filled in with the company's details before publication. Until then, this page is kept out of search engines.
Summary
- What we collect: only the data you send through the contact form and the technical access information recorded by the server.
- What for: to reply to you and to keep the site secure. We do not sell personal data.
- Cookies: the site uses no advertising or audience-measurement cookies.
- Your rights: you may ask for access to, correction of or deletion of your data at any time by writing to privacy e-mail address.
Who we are
This Privacy Policy explains how Aureon (“Aureon” or “we”) handles the personal data of those who access this site and get in touch with us, in accordance with the Brazilian General Data Protection Law (Law no. 13,709/2018, the “LGPD”).
The controller of this data is legal name, registered under CNPJ no. CNPJ, with its registered office at full address.
Who this policy applies to
This policy applies to visitors to this site and to people who send us messages through the contact form.
Relationships with fund investors and unitholders, partners and suppliers follow their own documents and channels, which may complement this policy.
What data we collect
Data you send us
When you use the contact form, you provide:
- name;
- e-mail;
- phone (optional);
- the content of your message.
We also record that you accepted this Privacy Policy. Please do not use the form to send sensitive data (such as health, religious or political information), bank details or passwords.
Technical access data
As on any website, the hosting server automatically records information about each visit: IP address, date and time, page or file accessed (including the fund documents) and browser and device data. No registration is required to view or download the fund documents.
Restricted area
The administrative area of the site is for the exclusive use of Aureon's authorized team. There we handle the user name, the password (stored only as a cryptographic code, which does not allow it to be recovered) and records of access attempts, in which the IP address is replaced by a code (pseudonymization).
How we use the data
We use personal data only for the purposes below, each one with its corresponding legal basis under the LGPD.
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your message and moving your request forward | Contact form data | Consent (art. 7, I) and, where the request involves a possible engagement, preliminary procedures at the request of the data subject (art. 7, V) |
| Keeping the site secure and running, preventing fraud and improper access | Technical access data | Legitimate interest (art. 7, IX) |
| Keeping the access records required by law | Technical access data | Compliance with a legal obligation (art. 7, II), under the Brazilian Internet Civil Framework (Law no. 12,965/2014) |
| Controlling access to the restricted area | User name, password as a cryptographic code and records of access attempts | Legitimate interest (art. 7, IX) |
| Responding to authorities and exercising rights in proceedings | The data needed in each case | Legal or regulatory obligation (art. 7, II) and the regular exercise of rights (art. 7, VI) |
We do not use the form data to send advertising or to make automated decisions.
Cookies
Cookies are small files that websites store in the browser. The Aureon site uses no advertising, social media or audience-measurement cookies, and loads no third-party content: fonts, images and documents are served by the site itself.
The restricted area uses a single essential cookie (“aureon_painel”), only to keep the authorized team's session open. It is deleted when the browser is closed, and the session expires after 60 minutes of inactivity.
If we start using other cookies, this policy will be updated beforehand.
Who we share it with
We do not sell, rent or assign personal data. It may be shared only with:
- the company that hosts the site, which stores the files and the access records;
- the e-mail service provider that receives the messages sent through the form;
- legal, accounting and technology advisers, when necessary and under a duty of confidentiality;
- public authorities, where there is a legal obligation or a court order.
These suppliers handle the data only in accordance with our instructions and for the purposes described in this policy.
International transfers
Some technology suppliers may store data on servers outside Brazil. Where that happens, the transfer will follow the cases set out in article 33 of the LGPD and the rules of the Brazilian data protection authority (ANPD).
How long we keep it
- Form messages: for as long as needed to handle your request and keep a record of the contact; after that, they are deleted, unless the law requires them to be kept for longer.
- Site access records: for the 6-month period set out in article 15 of the Brazilian Internet Civil Framework, or longer if requested by an authority.
- Records of access attempts to the restricted area: used for 15 minutes for the security lockout and then discarded automatically.
- Session cookie of the restricted area: deleted when the browser is closed.
Once the period ends, the data is deleted or anonymized.
How we protect the data
We adopt technical and administrative measures to protect personal data against unauthorized access, loss or alteration, among them:
- an encrypted connection (HTTPS);
- access to the restricted area only with a user name and password, with a lockout after incorrect attempts;
- passwords stored only as a cryptographic code;
- data folders protected against access through the browser;
- internal access restricted to the people who need the data to do their jobs.
No system is completely immune to incidents. If a security incident occurs that may cause relevant risk or harm, we will notify the data subjects affected and the ANPD, under article 48 of the LGPD.
Your rights
Under article 18 of the LGPD, you may, at any time:
- confirm whether we process your personal data;
- access your data;
- correct incomplete, inaccurate or out-of-date data;
- ask for the anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the LGPD;
- ask for your data to be ported to another supplier, subject to commercial and industrial secrecy;
- ask for the deletion of data processed on the basis of your consent;
- find out which public and private entities we have shared your data with;
- be informed that you may withhold consent and of the consequences of doing so;
- withdraw your consent;
- object to processing carried out on another legal basis, where the LGPD has not been complied with.
To exercise your rights, write to privacy e-mail address. We may ask for information to confirm your identity before meeting the request. The full statement will be sent within 15 days, under article 19 of the LGPD.
Withdrawing consent does not affect processing carried out before it. You may also file a complaint with the Brazilian data protection authority (ANPD), at gov.br/anpd.
Children and teenagers
This site is not intended for people under 18, and we do not knowingly collect data from children or teenagers. If we identify a submission of that kind, the data will be deleted.
Links to other sites
If this site links to third-party sites, they will have their own privacy policies, for which Aureon is not responsible.
Changes to this policy
We may update this policy to reflect changes to the site, to our processes or to the law. The date of the last update is always at the top of the page, and relevant changes will be highlighted on the site.
Contact and data protection officer
- Data Protection Officer (DPO)
- name of the officer
- privacy e-mail address
- Address
- full address
You can also reach us through our contact page.