1. Who we are
This policy belongs to Clonar, a forest-health research and development company headquartered in Viçosa, Minas Gerais, Brazil, the controller of the personal data processed through the website grupoclonar.com.br.
Data Protection Officer (DPO):.
2. Data we collect
- Contact form: name, work email, company or institution, job title, country, preferred language, service of interest, technical information you choose to send (diseases, number of clones, program stage) and your message.
- WhatsApp and email: whatever you send us through these channels.
- Browsing, only with consent: pages visited, source of the visit, device type and approximate location, through Google Analytics.
- Technical logs: IP address and date and time of access, kept by the server for security purposes.
We do not ask for sensitive data, and the site is not intended for people under 18.
3. Purposes and legal bases
| Purpose | Legal basis (LGPD) | Legal basis (GDPR) |
|---|---|---|
| Replying to your message and preparing proposals | Preliminary steps toward a contract, at the data subject's request (art. 7, V) | Art. 6(1)(b) |
| Subsequent business and technical relationship | Legitimate interest (art. 7, IX) | Art. 6(1)(f) |
| Website usage statistics | Consent (art. 7, I) | Art. 6(1)(a) |
| Security and fraud prevention | Legitimate interest (art. 7, IX) | Art. 6(1)(f) |
4. Sharing
Form data is stored in the site's admin panel and in the technical team's service spreadsheet, in Clonar's Google Drive, and is accessed only by the team that replies to your message; it may also be recorded in Grupo Clonar's customer service platform. The site's hosting provider, Google (Google Drive and, if you consent, Google Analytics) and Google Tag Manager act as processors.
We do not sell, rent or transfer personal data to third parties for marketing purposes. Data may be disclosed to authorities when required by law.
5. International transfer
Google (Google Drive and Google Analytics) may process data outside Brazil. This transfer takes place with the safeguards provided for in art. 33 of the LGPD (Brazil's General Data Protection Law) and, for visitors from the European Union, in arts. 44 to 49 of the GDPR.
6. How long we keep data
- Contacts and proposals: for the duration of the relationship and for up to after the last contact, or for the period required by law.
- Statistics: up to 14 months in Google Analytics.
- Server technical logs: six months, as required by Brazil's Internet Civil Rights Framework (Marco Civil da Internet, art. 15).
7. Your rights
Under the LGPD (art. 18), you may request at any time: confirmation that we process your data, access, correction, anonymization or deletion of unnecessary data, portability, information on whom we share data with, and withdrawal of consent. Visitors from the European Union also have the rights set out in arts. 15 to 22 of the GDPR, including the right to object to processing.
To exercise any right, write to comercialclonar@gmail.com. We reply within 15 days. You may also lodge a complaint with Brazil's National Data Protection Authority (ANPD) or with the data protection authority of your country.
8. Security
The site uses an encrypted connection (HTTPS), access to data is restricted to the team that needs it, the form is protected against automated submissions and the systems have daily backups.
9. Cookies
Necessary cookies are always active. Statistics cookies are only set after you accept them in the cookie notice, and you can change your choice at any time via the "Cookie preferences" link in the footer.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| clonar_cookies | necessary | Stores your choice in the cookie notice | 12 months |
| pll_language | necessary | Remembers the language you chose (PT, EN or ES) | 12 months |
| _ga, _ga_* | statistics | Google Analytics: count of visits and page views | up to 2 years |
10. Changes and contact
This policy may be updated. The version in force is always on this page, with the date of the last update at the top. Questions: comercialclonar@gmail.com.