Privacy Policy

1. What do we collect?

Verx Tecnologia e Inovação is the Controller of the personal data you, the candidate (data subject), provide. We collect the following types of personal data:

Personal data (Article 5, Section I of the LGPD – General Data Protection Law): full name, address, email, phone/mobile/WhatsApp number, marital status, date of birth, CPF/MF number (taxpayer registry with the Ministry of Finance), RG number (general registry), academic background, vocational training, academic records, and sensitive personal data of spouses and underage dependents when applicable, in cases where the recruitment process evolves into an employment contract.

2. Purpose of collecting and storing personal data

These personal data are collected to provide the following services:

• Résumé registration, recruitment, and candidate selection;
• Initial technical assessments (pedagogical, cognitive, physical, and social);
• Development and application of aptitude tests;
• Preparation of reports and informational opinions;
• Sharing with business partners seeking professionals for the job openings listed in our services;
• Marketing and service updates, such as future job opportunities and promotions related to the declared purposes;
• Sending promotional emails about events, courses, products, and opportunities (“mailing list”);
• Contact via landline and mobile phone;
• Information sharing within Verx Tecnologia e Inovação’s internal systems, with the consent of the data subject (Article 7, Section I of the LGPD).

3. How long are personal data stored?

For the purposes declared above and in accordance with the data subject’s consent, we retain personal data as long as the data subject remains active on the platform, as per our Data Retention Policy. If the data subject does not object or request deletion, authorization will continue for the data to remain in our database, where processing will proceed according to the declared purposes and the LGPD.

Any personal data retained, including for marketing notifications, service updates, and other purposes described above, will remain until the data subject exercises the right to no longer receive such communications and/or to stop having their data processed (Article 18, Section VI of the LGPD), except in cases under Article 16 of the LGPD.

4. What are the rights of data subjects?

The data subject has the right to obtain from the controller, at any time and upon request, the following:

1. Confirmation of the existence of processing;
2. Access to the data;
3. Correction of incomplete, inaccurate, or outdated data;
4. Anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in violation of the LGPD;
5. Data portability to another service or product provider, upon express request, respecting trade and industrial secrets and according to regulations of the supervisory authority;
6. Deletion of personal data processed with the subject’s consent, except in the cases provided for in Article 16 of the LGPD;
7. Information on the public and private entities with which the controller has shared data;
8. Information on the possibility of denying consent and the consequences of refusal;
9. Revocation of consent, pursuant to Article 8, Paragraph 5 of the LGPD.

The data subject has the right to petition regarding their data against the controller before the ANPD – National Data Protection Authority. They may oppose processing carried out under one of the consent waiver provisions if in violation of the LGPD.

These rights are exercised through an express request by the data subject or their legally authorized representative to the processing agent. Data portability does not include anonymized data. Personal data will be stored in a format that facilitates the right of access. When processing originates from consent or contract, the subject may request a full electronic copy of their personal data, subject to trade and industrial secrecy, in a format that allows subsequent use, including in other processing operations, as regulated by the ANPD.

The data subject also has the right to request a review of decisions made solely on the basis of automated processing of personal data.

If you wish to submit a request or complaint regarding the processing of personal data, please contact the Data Protection Officer (DPO) at lgpd@verx.com.br.

If you believe that your personal data has not been processed properly under the LGPD, you may contact the ANPD – National Data Protection Authority and file a request or complaint.

5. Responsibility Statement

Verx Tecnologia e Inovação is responsible for the security of the data covered by this document and undertakes to maintain appropriate technical and administrative security measures to protect personal and sensitive data against unauthorized access and against accidental or unlawful situations of destruction, loss, alteration, communication, or any form of inappropriate processing.