Objective

ASIA SHIPPING TRANSPORTES INTERNACIONAIS LTDA, as the controller of personal data, respects the privacy of users of the “AS Tracking 2.0 APP” and is committed to protecting the personal data processed, in accordance with Law No. 13.709/2018 – General Data Protection Law (LGPD).

Terms and Definitions

AS TRACKING 2.0: Application developed by Asia Shipping to provide customers with access to data on shipments through the company.

  • Controller: a natural or legal person, under public or private law, responsible for the processing of personal data;
  • Personal data: information related to an identified or identifiable natural person;
  • Operator: an individual or legal entity, under public or private law, that processes personal data on behalf of the controller;
  • Ownership: for the purposes of this policy, the data subject is considered to be the individual linked to the legal entity contracting Asia Shipping's services.
  • Processing: any operation performed with personal data, such as those related to collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination, or removal.

Legal Basis

Data processing is carried out based on Article 7, Section V, of the LGPD, i.e., for the execution of the service provision contract signed between Asia Shipping and the client to which the data subject is linked.

Purpose

The application aims to provide customers with access to logistical information for their international shipments, such as shipping forecast, boarding, arrival forecast, attraction, and other information inherent to the international logistics flow. To this end, the only personal data collected is the email address of the individual linked to the company contracting Asia Shipping's services. This data is used for authentication, access to the application, and recording usage history.

Data Collected

Asia Shipping will collect and process data from the email addresses of individuals linked to "clients" who contract the services. These emails may contain the first name, last name, or even be anonymized, such as (operational@xxxx), (comex01@xxxx) and analog. Collection and processing is limited to this data email, which will be used for registration purposes in the application and the user's access history within the application.

Storage and Security

The collected data will be stored in the cloud at “Microsoft do Brasil Ltda.”, which acts as the data processor. The data is stored for the duration of the email registration in Asia Shipping's corporate system. Technical and administrative measures are adopted to protect information against unauthorized access, accidental loss, or any form of unlawful processing. Once the purpose and need have been met, the email will be deactivated and retained for audit purposes, taking into account integrity ratings.

Retention Period

Data will be blocked for as long as there is an active relationship between the user and the contracting company. After access is revoked, the email will be deactivated, but may remain stored for a reasonable period for auditing purposes and compliance with legal obligations, respecting the principles of purpose and necessity, in accordance with the LGPD.

Data Sharing

Data is not shared with third parties, except under legal obligations or at the request of competent authorities. Asia Shipping does not sell, transfer, or disclose personal data processed in the application.

Data Subject Rights

The data subject may, at any time, request:

  • Confirmation of the existence of processing;
  • Access to data;
  • Correction of incomplete, inaccurate or outdated data;
  • Anonymization, blocking, or deletion of unnecessary, excessive, or processed data in a manner that is not convenient for the processing of personal data;
  • Deletion of personal data processed based on consent, provided there is no other legal basis justifying its retention;
  • Information on data sharing, if applicable;
  • Revocation of subscription (where applicable);
  • Objection to processing, where permitted by law.

These rights can be exercised by submitting a request to the Data Protection Officer (DPO) through the contact channels below.

Questions, Contacts, and Notifications

The data subject may, at any time, request information from the Data Controller regarding the processing of their personal data using the contact form:

https://forms.gle/oQ7XB4ze5LTTPyxP7

DPO: FIGUEIREDO FILHO SOCIEDADE INDIVIDUAL DE ADVOCACIA, CNPJ nº 16.628.038/0001-43 at Alameda Campinas, 463, 5º Andar, conjunto 5A, Jardim Paulista, São Paulo/SP, Zipcode: 01404-902.

For all purposes of this Policy, responses to data subjects will occur within 10 business days from the business day following receipt of the request. Occasionally, it may take more than 10 business days if your request is particularly complex or if the data subject has made multiple requests. In this case, we will notify the data subject and keep them updated on the progress of their request. As a precautionary measure, if the data subject does not receive a response within the above timeframe, we ask that they resubmit the request.