PRIVACY AND PERSONAL DATA PROTECTION POLICY


The EDUCATIONAL FOUNDATION OF CRICIÚMA - FUCRI, the maintainer of the University of Southern Santa Catarina - Unesc, a private legal entity registered under CNPJ No. 83.661.074/0001-04, headquartered at Universitária Avenue, No. 1105 – Universitário Criciúma – SC, 88806-000, respects the privacy of its users, whether internal or external, and through this Policy, establishes the rules regarding the processing of personal data, in accordance with the laws in force, especially Law No. 13.709/2018 (General Data Protection Law – LGPD).

This Privacy Policy applies to all activities carried out within the scope of the Educational Foundation of Criciúma and the University of Southern Santa Catarina - Unesc, encompassing academic, administrative, cultural, and other structures that integrate FUCRI/UNESC.

This privacy and personal data protection policy establishes general guidelines regarding privacy for the security of information of registered users and visitors of the domains and subdomains where the Unesc website is hosted, as well as sites that have Unesc domains and subdomains governed by contracts with third parties and also by institutional partnerships, and also for the compliance of the Educational Foundation of Criciúma – Fucri, maintainer of the University of Southern Santa Catarina – UNESC with the current regulations related to the processing of personal data.

PROCESSING OF PERSONAL DATA AND PURPOSE

According to the institutional needs and purposes, there is a variation in the types and volume of personal data we collect, always observing the principles of purpose, necessity, and adequacy. Data collection at FUCRI/UNESC occurs whenever necessary to fulfill its educational, research, and extension activities and to comply with obligations arising from laws, regulations, and determinations of authorities and public agencies.

1.1 The activities of collecting personal data occur through digital or physical forms, as well as through phone calls, or by accessing the website, relationship channels, communication, or tools, software, or applications. We may also collect personal data during campaigns, events, and research we conduct or during the provision of services contracted with third parties, and also through the following means: Third-party social media, such as Facebook, Instagram, etc.; Partners; Mobile applications for smartphones; During public relationship actions; Records of interactions provided by email and their shared content; Events held and organized by FUCRI/UNESC; Events in which FUCRI/UNESC participates as a partner, sponsor, or exhibitor; Records of contacts made on our websites, applications, and communication and relationship platforms; Records of content shared on the university's official social media; Other processes and systems used in the educational, extension, and research activities developed by FUCRI/UNESC; We also use buttons and/or social media plugins. They allow the user to connect with their social network in various ways to share content. For these to work, social media sites, including Facebook®, Twitter®, and LinkedIn, will set cookies on our site that may be used to enhance profiles or contribute to the data stored for various purposes outlined in their respective privacy policies. The data collected automatically may be used for ad personalization, generating statistics, analyzing website performance, and monitoring and improving our services and the use of our site.

1.2 The purposes for which your personal data is processed correspond to: a) The personal data of students will be collected and processed during academic processes for the provision of educational services, provision of various services such as events, supply of products, administrative, academic, commercial, and marketing management; b) The personal data of suppliers and service providers will be collected and processed for the purpose of formalizing the contractual relationships established between the parties; c) The personal data of candidates and prospects will be collected and processed for the purposes of registration and execution of selection processes, for the management of enrollment, and for advertising and marketing actions, as well as with public and private funding agencies or institutions financing research, cultural, and extension projects in general; d) The personal data of employees will be collected and processed for the purposes of executing processes related to human resources management, advertising and marketing, as well as with public and private funding agencies or institutions financing research, cultural, and extension projects in general; and e) Personal data, including sensitive data, among them, data related to health, collected during university extension activities and community service provision, as well as in activities carried out in integrated clinics, dental care, and the Center for Legal Practices, provided free of charge or for a fee, will be processed respecting the purpose of the activity performed and the principles of necessity, adequacy, minimization, transparency, and security.

1.3 The data collected in accordance with the purpose may include: a) Identification data: name, social name, student ID, photograph, parentage, nationality, place of birth, date of birth, gender, marital status, identification document number; b) Contact data: residential address, billing address, email address, landline and/or mobile phone number; c) Academic data: education level, mode of education; enrollment date, admission type, attendance regime, data on transfer from higher education institutions, grades, certificates, diplomas, academic status; d) Payment data: amounts paid, amounts receivable, debt clearance statement, scholarship status, credit titles, receipt, account statement by student; e) Sound, voice, and image data: photographs and videos; f) Health data: medical history, medication use, allergies, intolerances, vaccination card, medical certificate; g) Biometric data: fingerprint and facial recognition; h) Technical data: IP address; date and time of access; website accessed; cookies; and i) Others, for the purpose of meeting the needs related to institutional purposes.

1.4 We do not intentionally collect, store, or process excessive or unnecessary personal data for the provision of our services and use of our website. Therefore, we ask that you refrain from sharing sensitive personal data with us unless required to comply with a legal or regulatory obligation.

1.5 In certain situations, the processing of personal data may require the use of algorithms designed to automate stages of our work. This also occurs when it is necessary to use profiling processes, especially regarding the management of educational services, the performance of academic and research activities, human resources management, and marketing actions. FUCRI/UNESC uses clear criteria for its automated decision-making processes and informs the data subject whenever their data undergoes this type of decision.

1.6 Processing of children's data: The processing of data from children and adolescents can only be carried out with the specific consent of a legal guardian and exclusively to meet the educational activities developed by the institution.

1.7 Access, use, and activities on websites, portals, and apps: FUCRI/UNESC, by allowing access and use of its services through third-party credentialing tools such as Google, Facebook, and LinkedIn, is not responsible for the security or privacy of any information collected by these third-party sites or applications.

By registering and/or submitting your personal information to FUCRI/UNESC, you also agree to the use of this information in accordance with these Terms of Use and Privacy Policy.

The data stored by FUCRI/UNESC may be used for intelligence and analytics activities. This data is aggregated to provide a macro analysis of a given scenario and, therefore, does not seek to identify or make identifiable the holders of personal data, but rather to better understand how they access our platforms, in order to improve service delivery and customize products more aligned with user interests.

1.8 Activities on the website, portals, and applications: In some cases, FUCRI/UNESC and its service providers use cookies, web beacons, and other technologies to automatically collect certain types of information when you access our website, as well as when we exchange emails with you. We also use cookies and browsing data, such as URLs (Uniform Resource Locators), to collect information about the date and time of the visit, the solutions and information that visitors searched for and viewed. Data is collected with consent, and we store it in log files whenever the user visits our sites or accesses their account on our network.
[...]

3. RIGHTS OF PERSONAL DATA SUBJECTS: The data subject may oppose the processing activity by refusing consent or revoking it, being aware that the impossibility of processing their data may hinder access to services or functionalities. In such cases, we make it clear that we cannot be held responsible for any losses or damages incurred.

3.1 FUCRI/UNESC observes the rights and guarantees established in Law No. 12.965/14 (Internet Civil Framework), in Law No. 13.709/18 (General Data Protection Law – LGPD), which are: the right to confirm the existence of processing; the right to access data; the right to correct incomplete, inaccurate, or outdated data; the right to anonymization, blocking, or deletion of unnecessary, excessive data or data processed in non-compliance with the Law; the right to data portability to another product or service provider; the right to guarantee the availability, authenticity, integrity, and confidentiality of data; the right to be notified about changes in data processing; the right to restrict data processing; the right to delete personal data processed with the consent of the holder, except in legally necessary and permitted cases; the right to information about the possibility of not providing consent and the consequences of refusal; the right to information about the public and private entities with which the University shares data and the right to revoke consent, in accordance with the Law.

3.2 To fulfill these commitments, we base our personal data processing activities on the consent of the data subject, as well as other authorizing provisions set forth in applicable legislation. We inform you that we may use the following legal bases for processing your personal data: Compliance with legal or regulatory obligations, execution of a contract, regular exercise of rights in judicial, administrative, or arbitration processes, credit protection, legitimate interest of the controller, research activities, and safeguarding life and health.

3.3 By reading and accepting this Privacy Policy, you consent to the processing of personal data in the ways indicated herein.
[...]

5. DATA PROTECTION OFFICER AND CONTACT CHANNEL: By becoming aware of and accepting the terms of our Privacy Policy, the decision regarding how your data is processed may rest with FUCRI/UNESC when you access our website, platforms, or participate in our academic or cultural events, use our services, even if free of charge, as well as when you contract our educational, research, or extension services, or with the regulatory body, in cases established by law, or with the company or institution, public or private, that hires FUCRI/UNESC to perform any service or activity, situations in which we will act as operators.

5.1 As the controller of personal data, we designate a Data Protection Officer, who is responsible for: accepting complaints and communications, providing clarifications or taking actions of interest to the data subjects, as well as receiving communications from the National Data Protection Authority (ANPD), in addition to other duties provided by law or established by this authority.

5.2 If the data subject wishes to obtain information, clarify doubts, or make requests regarding the processing of personal data carried out by FUCRI/UNESC, they may contact our Data Protection Officer (DPO) at the following email: lgpd@unesc.net