Objective
ASIA SHIPPING TRANSPORTES INTERNACIONAIS LTDA, as the controller
of personal data, respects the privacy of users of the “AS
Tracking 2.0 APP” and is committed to protecting the personal data
processed, in accordance with Law No. 13.709/2018 – General Data
Protection Law (LGPD).
Terms and Definitions
AS TRACKING 2.0: Application developed by Asia
Shipping to provide customers with access to data on shipments
through the company.
-
Controller: a natural or legal person, under
public or private law, responsible for the processing of
personal data;
-
Personal data: information related to an
identified or identifiable natural person;
-
Operator: an individual or legal entity, under
public or private law, that processes personal data on behalf of
the controller;
-
Ownership: for the purposes of this policy, the
data subject is considered to be the individual linked to the
legal entity contracting Asia Shipping's services.
-
Processing: any operation performed with
personal data, such as those related to collection, production,
reception, classification, use, access, reproduction,
transmission, distribution, processing, archiving, storage,
deletion, evaluation or control of information, modification,
communication, transfer, dissemination, or removal.
Legal Basis
Data processing is carried out based on Article 7, Section V, of
the LGPD, i.e., for the execution of the service provision
contract signed between Asia Shipping and the client to which the
data subject is linked.
Purpose
The application aims to provide customers with access to
logistical information for their international shipments, such as
shipping forecast, boarding, arrival forecast, attraction, and
other information inherent to the international logistics flow. To
this end, the only personal data collected is the email address of
the individual linked to the company contracting Asia Shipping's
services. This data is used for authentication, access to the
application, and recording usage history.
Data Collected
Asia Shipping will collect and process data from the email
addresses of individuals linked to "clients" who contract the
services. These emails may contain the first name, last name, or
even be anonymized, such as (operational@xxxx), (comex01@xxxx) and
analog. Collection and processing is limited to this data email,
which will be used for registration purposes in the application
and the user's access history within the application.
Storage and Security
The collected data will be stored in the cloud at “Microsoft do
Brasil Ltda.”, which acts as the data processor. The data is
stored for the duration of the email registration in Asia
Shipping's corporate system. Technical and administrative measures
are adopted to protect information against unauthorized access,
accidental loss, or any form of unlawful processing. Once the
purpose and need have been met, the email will be deactivated and
retained for audit purposes, taking into account integrity
ratings.
Retention Period
Data will be blocked for as long as there is an active
relationship between the user and the contracting company. After
access is revoked, the email will be deactivated, but may remain
stored for a reasonable period for auditing purposes and
compliance with legal obligations, respecting the principles of
purpose and necessity, in accordance with the LGPD.
Data Sharing
Data is not shared with third parties, except under legal
obligations or at the request of competent authorities. Asia
Shipping does not sell, transfer, or disclose personal data
processed in the application.
Data Subject Rights
The data subject may, at any time, request:
- Confirmation of the existence of processing;
- Access to data;
- Correction of incomplete, inaccurate or outdated data;
-
Anonymization, blocking, or deletion of unnecessary, excessive,
or processed data in a manner that is not convenient for the
processing of personal data;
-
Deletion of personal data processed based on consent, provided
there is no other legal basis justifying its retention;
- Information on data sharing, if applicable;
- Revocation of subscription (where applicable);
- Objection to processing, where permitted by law.
These rights can be exercised by submitting a request to the Data
Protection Officer (DPO) through the contact channels below.
Questions, Contacts, and Notifications
The data subject may, at any time, request information from the
Data Controller regarding the processing of their personal data
using the contact form:
https://forms.gle/oQ7XB4ze5LTTPyxP7
DPO: FIGUEIREDO FILHO SOCIEDADE INDIVIDUAL DE
ADVOCACIA, CNPJ nº 16.628.038/0001-43 at Alameda Campinas, 463, 5º
Andar, conjunto 5A, Jardim Paulista, São Paulo/SP, Zipcode:
01404-902.
For all purposes of this Policy, responses to data subjects will
occur within 10 business days from the business day following
receipt of the request. Occasionally, it may take more than 10
business days if your request is particularly complex or if the
data subject has made multiple requests. In this case, we will
notify the data subject and keep them updated on the progress of
their request. As a precautionary measure, if the data subject
does not receive a response within the above timeframe, we ask
that they resubmit the request.