Privacy Policy
1. About EDP and this Privacy Policy
This privacy policy applies to all types of activities involving the processing of personal data on the PORTALS of EDP Group in Brazil (EDP Energias do Brasil S/A) and its controlled and affiliated companies where an agreement exists for such (EDP).
This Privacy Policy aims to demonstrate EDP’s commitment to the privacy and protection of its USERS’ personal data, establishing rules regarding the collection, recording, storage, use, sharing, and deletion of personal data within the scope of the services and functionalities of the PORTALS, in accordance with applicable laws in force.
As a condition for accessing and using the exclusive functionalities of the PORTALS, USERS declare that they:
- are legally capable, and
- have read this document thoroughly and carefully, being fully aware of and in agreement with the policy set forth herein.
- USERS may contact EDP’s Data Protection Officer regarding any matter related to this privacy policy via the email address: encarregadodedados@edpbr.com.br.
2. Processing of Personal Data
EDP is the entity responsible for processing the personal data of USERS of the PORTALS https://www.edp.com.br and domains related to EDP located in Brazil, and is committed to ensuring the protection, confidentiality, and privacy of this information.
3. Personal Data
Personal data refers to information that identifies and enables us to know who the USERS are within EDP’s environment. As a USER, you voluntarily provide and/or submit your data to access and interact with the various EDP PORTALS.
Information provided by the USER
From the information provided by USERS through forms available on our websites and apps, EDP will collect personally identifiable information such as name, phone number, email, ID number (RG), taxpayer number (CPF), and address.
Other information may be requested through direct contact by EDP with USERS, in person, via email, or phone, such as installation number in the case of EDP customers.
Browsing information on the site
When accessing our websites and apps, a ‘cookie’ may be installed in your browser to identify how often you return to our address. In this case, the following information may be collected:
- IP address
- Geographic location
- Referral source
- Browser type
- Duration of visit
- Pages visited
EDP websites, through the https://www.edp.com/pt-pt/politica-de-cookies-edpcom, indicate the manner, situations, and reasons for using the collected personal information in a transparent and clear way. USERS can configure their devices and browsers at any time to accept all or some cookies, to notify them whenever a cookie is generated, or to never receive cookies.
4. Purposes of Personal Data Processing
All personal information collected through the use of EDP websites is intended to:
- Identify USERS.
- se for service provision or product delivery.
- Fulfill legal or regulatory obligations.
- Respond to requests from USERS and customers.
- Inform USERS about content, news, updates, and other matters to maintain the relationship between the USER and EDP.
- In all activities involving the processing of personal data by EDP, the following principles are observed: purpose limitation, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination (prohibition of processing for unlawful or abusive discriminatory purposes), accountability, and compliance.
EDP is not responsible for the truthfulness, accuracy, or consistency of information provided by USERS. If this data is outdated, EDP recommends that USERS contact its service channels to update their information.
EDP will inform USERS when their consent is required to carry out its activities. The consents collected by EDP will be legitimate and specific to the established purpose, requested clearly and individually.
USERS’ data may be shared with regulatory bodies related to EDP, as well as with judicial, administrative, or governmental authorities when there is a specific request on this matter, in accordance with legal provisions.
USERS’ data may be customized (“Privacy by Design”) for a specific Service or Product to better align with their preferences and interests.
5. Transfer to Other Companies
Personal data may be transferred in whole or in part to third-party companies or business partners that are not part of EDP, to ensure the proper performance of activities within the EDP environment. It is also possible that personal data may be shared among companies within EDP Energias do Brasil.
Personal data will only be transferred to third parties upon the data subject’s consent or when necessary to comply with legal or regulatory obligations, for the regular exercise of rights in judicial or administrative proceedings, for contract execution, or to serve the legitimate interests of the data subject or EDP.
6. International Data Transfer
Personal data may be transferred in whole or in part abroad, to entities located outside the USER’s country of residence. EDP complies with the requirements established by current legislation and ensures the use of appropriate tools and measures (such as the European Commission’s Standard Contractual Clauses), adopting best security and privacy practices to protect USERS’ personal data.
7. Access to Data
Access to personal data is restricted solely to EDP employees, and among them, only to individuals with specific internal authorizations. In addition to other rights provided by data protection legislation, USERS may request access at any time.
8. Rights of the Personal Data Subject
EDP provides USERS with a dedicated communication channel for handling requests: the Privacy Portal.
This channel is exclusively for handling requests related to the processing of personal data, such as:
- Confirmation of the existence of personal data processing within the EDP environment.
- Blocking or objection to data processing.
- Deletion of unnecessary and/or excessive data.
- Deletion of data, subject to compliance with legal or regulatory obligations.
- Review of automated decisions.
- Revocation of consent.
To correct incomplete, inaccurate, or outdated data – see the service channels https://www.edp.com/pt-pt/politica-de-cookies-edpcom, in accordance with ANEEL Normative Resolution No. 1.000/2021.
EDP Suppliers
https://edpartners.miisy.eu/login?locale=pt_BR
https://sinergie.miisy.eu/login
EDP Soluções (Solar or Energy Efficiency)
https://empresas.edp.com.br/
Customer Service Center, available from 8 a.m. to 8 p.m., Monday to Friday.
EDP Espírito Santo (Networks Distribution)
https://www.edponline.com.br
https://www.edp.com.br
0800 721 0707
Hearing Impaired: 0800 727 2655
EDP São Paulo (Networks Distribution)
https://www.edponline.com.br
https://www.edp.com.br
0800 721 0123
Hearing Impaired: 0800 727 2872
Volunteer Portal
https://voluntariado.edp.com/pt-BR
9. Data Retention
The retention period for personal data within EDP complies with the requirements of sector-specific legislation and may vary depending on the purpose for which the data was collected.
In any case, USERS’ and customers’ data is stored in a secure and controlled environment for the period required by applicable law.
USERS may use the Privacy Portal to request the deletion of their data before this period. However, data may need to be retained to comply with legal or regulatory obligations, court orders, fraud prevention (Art. 11, II, “a” of the LGPD), credit protection (Art. 7, X, LGPD), among other legitimate interests provided for in the LGPD (General Data Protection Law).
Once legal deadlines have been met, personal data will be deleted using internal methodology or anonymized for statistical purposes.
10. Security Measures
EDP is committed to ensuring the protection and security of the personal data provided to it. Accordingly, various technical and organizational security measures are adopted to protect the personal data made available against dissemination, loss, misuse, alteration, unauthorized processing or access, as well as any other form of unlawful processing.
Despite the security measures adopted, as an INTERNET USER, visitors to the website should always take additional security precautions, such as ensuring they use a computer and browser that are up to date with properly configured security patches, with an active firewall, antivirus, and antispyware, and verifying the authenticity of the websites they visit, avoiding sites with questionable reputations.
Use of the PORTALS implies full knowledge of this Privacy Policy, which may be changed without prior notice. Therefore, USERS are encouraged to regularly consult this page to stay up to date.
11. Communication of Data Privacy Incidents
A data privacy incident occurs when there is any accidental or unlawful situation that results in the destruction, loss, alteration, unauthorized access, or improper or unlawful processing of personal data, such as a personal data breach.
To report privacy incidents, suspected or confirmed cases can be sent to the email address: incidente.privacidade@edpbr.com.br, so that appropriate clarifications can be provided and necessary measures taken.
12. Advertisements
Like other websites, when a USER clicks on an EDP advertisement on a third-party website, EDP collects and uses the information contained in those ads, made available through the USER’s access. The information contained in the ads includes your IP address (Internet Protocol), your ISP (Internet Service Provider), the browser you used to visit our website (such as Internet Explorer or Firefox), the time of your visit, and which pages you visited within the PORTALS.
13. Access to Third-Party Websites
EDP is not responsible for the privacy policy or content present on third-party websites. USERS should always consult the privacy policies when accessing another website from the PORTALS.
14. Jurisdiction
This document is governed by and must be interpreted in accordance with the laws of the Federative Republic of Brazil. In the absence of a legal provision to the contrary, the Court of the District of São Paulo, State of São Paulo, is elected as the competent jurisdiction to resolve any issues arising from this document, with express waiver of any other, no matter how privileged it may be. The use of EDP’s PORTALS by USERS implies acceptance of the conditions set forth in this Privacy Policy, including any future amendments.
15. Data Protection Officer Identification
Name: Fabio William Loreti
Deputy: Cynthia Alves Rosa Fernandes
Email: encarregadodedados@edpbr.com.br
Original version publication date: 08/27/2020
Last version publication date: 09/17/2024