Privacy Policy

Schulz > Privacy Policy

SCHULZ S.A., registered with the CNPJ under No. 84.693.183/0001-68, headquartered at Rua Dona Francisca, No. 6.901, Industrial District, in the city of Joinville, State of Santa Catarina, CEP 89.219-600 and its subsidiary SCHULZ TECH SOLUÇÕES LTDA., (hereinafter referred to as “SCHULZ” and/or “SCHULZ AUTOMOTIVA”), reaffirming its commitment to protecting the personal data of customers, suppliers, business partners such as: resellers, distributors, representatives, and/or other users of its websites (“SITES”):

 

thus establishes its Privacy Policy (“POLICY”), in accordance with Law No. 13,709/18 — the General Data Protection Law (hereinafter “LGPD”).

 

This POLICY stems from the recognition of the importance of the protection that must be given to personal data, especially in virtual environments, considering that the information collected during the USER’s access, as well as issues involving Information Technology security, are topics relevant to Schulz.

 

It is essential that the HOLDER carefully reads the POLICY and understands it.

 

Thus, by choosing to continue with its relationship with SCHULZ, the HOLDER agrees with all the terms and conditions established in this POLICY.

 

In case of doubt(s), the HOLDER must contact us through the service channels indicated at the end of this document.

 

CONCEPTS USED IN THIS POLICY

This POLICY adopts, among others, technical concepts provided for in applicable legislation, mainly those contained in the LGPD. For the purposes of better understanding, the main concepts used are the following:

  • Personal Data: any information related to an identified or identifiable natural person, that is, information that directly identifies a person, such as: full name, CPF, ID, photograph; or that indirectly identifies them, such as: email address, IP, address, date of birth, etc.
  • Sensitive Personal Data: information that reveals more intimate characteristics of the holder and that could give rise to some discriminatory treatment, such as racial or ethnic origin, religious belief, political opinion, membership of a union or organization of a religious, philosophical or political nature, data relating to health or sexual life, genetic or biometric data, when linked to a natural person; data of children and adolescents.
  • Holder or User: natural person to whom the personal data refers;
  • Controller: natural or legal person, under public or private law, responsible for decisions regarding the processing of personal data;
  • Operator: natural or legal person, under public or private law, who processes personal data on behalf of the controller;
  • Data Protection Officer (“DPO”): person appointed by the Controller and Operator to act as a communication channel between the controller, data subjects and the National Data Protection Authority (ANPD);
  • Processing: any and all operations carried out with personal data, whether by the Controller or the Operator, such as collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination or extraction.

DATA CONTROLLER

SCHULZ will act as Controller of personal data when the processing is related to its line of business and that of its subsidiaries, in accordance with applicable regulations.

In some cases, SCHULZ may act as Operator of personal data, in which case it will process personal data within the strict limits of the commitment entered into with the Controller of such data.

Any new products or services offered by SCHULZ will be subject to the Privacy Policy in force at the time of their enjoyment.

WHAT LEGAL BASES SUPPORT OUR PROCESSING OF PERSONAL DATA?

The main legal bases that support the data processing carried out by Schulz are:
• Compliance with legal or regulatory obligations;
• Execution of contract or preliminary procedures
• Regular exercise of rights, including in contracts and in judicial, administrative and arbitration proceedings, the latter under the terms of Law No. 9,307, of September 23, 1996 (Arbitration Law);
• Guarantee of fraud prevention and security of the holder, in the processes of identification and authentication of registration in electronic systems;
• Legitimate interest of the Schulz Group or third parties, safeguarding the fundamental rights and freedoms of the holders
• For credit protection, including the provisions of the relevant legislation.
• Manifest consent expressly by the holder.

 

When the processing of personal data is based on Consent, at the time of data collection, the data subject will be asked to expressly express their consent in writing or through other appropriate means. It is possible for him, at any time and whenever he deems it necessary, to revoke his consent, which can be done by contacting us through the data subject request channel or through direct contact with our data officer.

 

HOW DOES SCHULZ COLLECT PERSONAL DATA?

In order to carry out its commercial and business activities, Schulz may collect and process various categories of data subjects. Below we list the main situations in which we may process your data, the purpose of the processing and the main categories of data processed.

  1. Data provided by the holder through the website
When data can be collected
What data
Purpose
When the USER contacts SCHULZ through the contact sections of the websites Name, email, CPF, telephone, city, state, country Receive requests from USERS and provide due service
Clarification of doubts, reception of complaints, compliments and suggestions
Send the USER informative e-mails related to the operation of SCHULZ that may be of interest to them, such as product launches, promotions, invitations to events, etc.
When the USER contacts SCHULZ through the “Contact – Code of Ethics” section of the website schulzsa.com Name, Email, Phone, City, State, Country (schulzsa.com) To respond to manifestations and complaints related to the SCHULZ Code of Ethics and Conduct
To receive news, information and advertising in the “E-mail Alert” section of the website ri.schulzsa.com Name, Email, Company & Profile (ri.schulzsa.com) The registration on the SCHULZ AUTOMOTIVA website aims to send the USER news related to the Company’s operation that may be of interest. In the case of SCHULZ’s Investor Relations website, registration is for the purpose of receiving information and news from the Investor Relations area
When the USER contacts SCHULZ through the “Talk to IR” section of the website ri.schulzsa.com Name, phone number, e-mail and if you are a shareholder of Schulz For matters related to the Company’s business, such as balance sheets, publications and other clarifications
Browsing the SCHULZ websites (data processing in the background) Pages with which the USER interacted; type of device and browser used; Internet Protocol (IP) address; Average visitation time; Geographical location To understand the user’s browsing behavior and how the website is being used, in order to improve it and customize its functionalities.
To display to the USER content and marketing materials of the SCHULZ operation that may be of interest to him.
Draw consumption profiles for product improvement and development.
Perform statistical analysis for marketing campaign development
To download materials from our website Name, E-mail, Telephone, State, City. Enable the USER to access materials of interest, such as catalogs and manuals.
Conduct marketing research, in which case the data may be shared for this purpose with companies that specialize for this purpose.
Registration for access to the Schulz Portal. Email and password Enable registration and access to the Schulz Portal by employees and suppliers.
Registration of access to the electronic catalog. Name, telephone, e-mail, CPF, City, State, Country, follow-up of performance and position, employing organization. Enable registration and access to the electronic catalog by users.
  1. Data collected when hiring an employee and during the employment relationship 
When data can be collected
What data
Purpose
When the candidate sends their resumes via e-mail (recrutamento@schulz.com.br), they deliver them to one of our entrances or apply through partner recruitment agencies. Full name; Date of birth; Sex; Address; Telephone; Email; Naturalness; Marital status; Number of children; CPF; CNH; IDENTIFICATION; CTPS; SUS National Card; PIS/PASEP; Birth or marriage certificate; Voter ID; Certificate of Exemption of; Military Incorporation; Bank account number; Proof of education; Registration with the Class Council (if performing regulated activities); Employment history (company name, position, admission, dismissal, last salary, main activities, reason for leaving, whether or not it is the current job, whether or not you have worked at SCHULZ); Indication of social network profiles (Facebook, Instagram, LinkedIn); Dependent data. Carry out the selection process of HOLDERS interested in filling job vacancies at SCHULZ.
Carry out the hiring process of selected candidates.
Registration of employees on the Schulz Portal, for access and management of payroll, vacations and other information.
Sensitive personal data and data of children and adolescents
Schulz is a company engaged in inclusion and diversity. In this way, we hire apprentice minors and people with disabilities. In addition, during the process of hiring new employees, we may have access to data on dependents of candidates, including children and adolescents. This requires the collection and processing of specific data related to these groups, in order to comply with legal and administrative requirements. Below we list the main data collected from these groups:
Data on dependents of candidates (children and adolescents): Full name, age, Parents’ names, Age, Nationality, Date of birth, Birth or adoption certificate of children and stepchildren.
Young Apprentice: Full name; Signatures; Gender; Age; Date of birth; Place of birth; Nationality; ID; CPF; CTPS; PIS/PASEP.
People with disabilities (PCD): Full name; Date of birth; Sex; Address; Telephone; Email; Naturalness; Marital status; Number of children; CPF; CNH; IDENTIFICATION; CTPS; SUS National Card; PIS/PASEP; Birth or marriage certificate; Voter ID; Certificate of Exemption of; Military Incorporation; Bank account number; Proof of education; Registration with the Class Council (if performing regulated activities); Employment history (company name, position, admission, dismissal, last salary, main activities, reason for leaving, whether or not it is the current job, whether or not you have worked at SCHULZ); Indication of social network profiles (Facebook, Instagram, LinkedIn); Dependent data; and whether or not they are a person with disabilities, if they use any device or equipment.

2.1. Sensitive personal data collected during the employment relationship

During the established employment relationship, in order to comply with legal and administrative requirements, data considered sensitive may be collected, such as:

When data can be collected
What data
Purpose
When registering employees in the registration and management systems of Personal Protective Equipment (PPE). Name, position/function, Biometric data (fingerprints). Register and manage the provision of personal protective equipment to employees.
When the employee delivers medical certificates. Full name, ICD, information on the holder’s health conditions. Register employees’ medical certificates.
Carry out the necessary registrations required by labor and social security legislation.
Data collection through the Inova Schulz registration form (https://www.schulzautomotiva.com.br/inovacao/) Educational Institution Registration Form: Full Name, Email,Phone,Name of the Institution to which he/she belongs, identification of the holder’s link with the institution: Student, Professor, others. Enable registration for participation in Schulz Automotiva’s open innovation program.
Registration form of Companies / Startups: Name of the representative, email, telephone.
Employee registration form: Full name, e-mail, phone.
  1. Data collected as a result of the commercial relationship with customers, suppliers, service providers or other business partners.
When data can be collected
What data
Purpose
Business relationships with customers Name, phone number, e-mail and job title. Interactions with customer representatives (e.g. directors, managers, buyers) necessary for the business relationship, such as preliminary contacts, budgets, financial adjustments, satisfaction surveys.
Business relationships with third parties and suppliers of inputs and services. Name, CPF, RG, position, address, telephone, e-mail, marital status (articles of association), Occupational Health Certificate (third party service providers). Make contacts prior to the signing of contracts, with budgets, quotations, etc.
Maintain contact with suppliers (through their representatives) to enter into and comply with contracts for the purchase of inputs, products and services.
Comply with legal obligations, such as those of a tax or labor nature (e.g., occupational safety rules, issuance of invoices, tax withholdings), as well as supervise compliance with the same obligations by third parties and suppliers.
Regularly exercise rights, such as collection, legal defense of interests, etc.
Maintain records and databases.
During visits to the physical environments of SCHULZ. Name, RG, CPF and images (photos and videos). Management of internal security and access to the Company’s facilities.
Property security and physical protection of the holder.
Register visitors. Identification of the entrant to the facilities, photograph, issuance of a provisional badge.
  1. Other data not expressly provided for

Eventually, other types of data not expressly provided for in this Privacy Policy may be collected, provided that they are provided with the consent of the holder, or that the collection is allowed or imposed by law.

DATA SHARING WITH THIRD PARTIES

SCHULZ may share personal data with third parties when necessary to:

  • Conducting satisfaction surveys, in order to improve products and processes to provide greater satisfaction to customers;
    • Registration in our various computerized systems and platforms used to support and continue our business and commercial relationships.
    • Send the USER informative e-mails with marketing material that may be of interest to him, informing him about product launches, promotions, invitations to events, etc.;
    • Make publications on social networks, in order to promote products, promotions and events, interacting with customers;
  • Confirmation of the authenticity of the registration carried out on the SITES or in internal registration systems, in which case these third parties may contact the HOLDER to carry out the confirmation;
  • Credit analysis;
  • Ensure the secure flow of credit card data when making payments (gateways);
    • Market studies, consumption profile analysis, sending advertising campaigns, marketing, etc.;
  • Data storage and processing (storage providers, cloud software);
  • Generation of bills, collection, audits, provision of support, exercise of rights in legal proceedings;
  • Shipping of goods (products and/or gifts) via carriers;
  • With authorities and public bodies or private bodies in the performance of typically public activity to comply with a determination or legal obligation, such as information shared with tax agencies, compliance with court orders or orders from the National Data Protection Authority.

SCHULZ may also process and share data with its subsidiaries, affiliates, subsidiaries and companies related to them, in compliance with the applicable data protection regulations, for legitimate purposes or whenever necessary for: i) fraud prevention, registration control and its proper identification; ii) analysis of credit risks; iii) or for the provision of services that benefit SCHULZ’s customers as a whole.

DATA TRANSFER TO OTHER COUNTRIES?

SCHULZ may carry out international data transfers with other countries, such as the United States of America and countries in the European Union and Latin America, in order to carry out some processes that make up the operation, such as storing information on international servers, managing sales and resales, etc.

In any case of sharing with partners located in other countries, we contractually establish that the partner has the duty to maintain the standard of data protection and information security compatible with this Privacy Policy and with the LGPD and with Resolution 19/2024 of the ANPD.

COOKIES AND SIMILAR TECHNOLOGIES

  1. What are cookies

Cookies, tags, pixels, or similar technologies (hereinafter generically referred to as “Cookies”) are small files sent by the website to the device, which are stored in the browser used by the Data Subject, with information related to their interaction with the website. This information allows the website to recognize the Data Subject and draw a behavioral profile about him/her. The most common functions of cookies are to enable and personalize navigation, direct marketing, and carry out statistical surveys to guide the market strategy of companies.

It is important to clarify that we are not responsible for the use of cookies from third-party platforms. Be aware that cookies installed as a result of your interaction with third-party platforms may eventually continue to monitor your online activities even after your interaction with the platforms, and it is recommended that you clear your browsing history regularly to make sure that your device only uses the technologies of interest to you.

  1. Why we use cookies

Some of the reasons why we use Cookies:

Authentication: We use cookies and similar technologies to recognize you when you access our products and services. These technologies help us display the correct information and personalize your experience according to your settings, making it easier for you to access and navigate your experience.

Preferences and features: We use cookies to maximize the personalization of your browsing experience and to enable the broad functionality of our products and services by storing some of your preferences.

Personalized content and advertising: We use cookies and similar technologies to target you with personalized content, including marketing and advertising content, based on information about your interaction with our platforms.

Website performance measurement and analytics: We use cookies to understand how our products and services are being used and consequently improve your user experience.

  1. What cookies do we use?

When interacting with SCHULZ WEBSITES, some USER data may be collected in the background, such as information about your browsing preferences and consumption interests corresponding to the products viewed. The cookies most commonly used by us on our websites are listed below:

Essential Cookies – These are essential in order to enable you to move around our website and provide access to features such as your profile and purchases, and other areas of information that are exclusive to logged in users. These cookies do not gather information about you that could be used for marketing purposes, nor do they remember where you have been on the internet. This category of cookies cannot be disabled.

Analytical Cookies – These are used only for statistical analysis and creation purposes, without collecting personal information. We use Google Analytics cookies to collect information about how visitors use our website. These cookies collect aggregated information to give us an idea of ​​how our website is being used. We anonymize IP addresses in Google Analytics and the anonymized data is transmitted to and stored by Google on servers in the United States. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.

Marketing Cookies – We also use a marketing database management program that deploys a cookie when a user interacts with a marketing communication, such as a marketing email or a marketing-based landing page on our website. This cookie collects personal information such as your name, which pages you visit on our website, as well as purchases you have made at our store. The information collected is used to evaluate the effectiveness of our marketing campaigns or to provide better targeting for marketing.

Also regarding validity, there are two types of cookies that we use:

  1. Persistent cookies – these are cookies that are stored on access devices (computer, mobile phone, smartphone or tablet), at the level of the internet browser, and are used whenever the user visits our website again. In general, they are used to direct navigation according to the user’s interests, allowing us to provide a more personalized service;
  2. Session cookies – these are temporary cookies, which are generated and are available until the end of the session. The next time the user accesses their internet browser, the cookies will no longer be stored. The information obtained allows us to manage sessions, identify problems and provide a better browsing experience.
  3. How to manage cookies:

The cookies that may be found on the website can be managed in the settings of the internet browser used by the Data Controller. To this end, we provide the cookie management link of the most popular browsers on the market (addresses may vary depending on the browser version):

Firefox

Chrome

Safari

Internet Explorer

Microsoft Edge

You can also adjust your cookie preferences by accessing our “Cookie Settings”, where you can enable or disable categories as desired.

Remember that the use of cookies allows us to offer you a better experience on our products and services. If you block cookies on our products or decide not to allow some of them to work, we cannot guarantee that all the functionalities of our platforms will work correctly and you may not be able to access certain areas of our products. In addition, it is possible that certain functions and pages will not work properly.

RIGHTS OF PERSONAL DATA SUBJECTS

Through the data subject request channel or via email dpo@schulz.com.br , the personal data subject may request:

  • confirmation of the existence of processing;
  • access to data;
  • correction of incomplete, inaccurate or outdated data;
  • anonymization, blocking or deletion of unnecessary, excessive data or data processed in non-compliance with the provisions of the LGPD;
  • portability of data to another service or product provider, in compliance with commercial and industrial secrets;
  • deletion of personal data processed with your consent;
  • information on public and private entities with which SCHULZ shared data;
  • revocation of consent;
  • request review of decisions made solely based on automated processing of personal data that affect your interests, including decisions intended to define your personal, professional, consumer and credit profile or aspects of your personality.

It is worth remembering that the request will be met within the legal deadline, however, if there is legal grounds, it may be partially met or even denied, in which case the necessary clarifications will be provided.

HOW LONG WILL SCHULZ STORE PERSONAL DATA?

SCHULZ will keep the personal data stored for as long as it is necessary to fulfill the purposes for which it was collected.

Once the purpose has ceased, as a rule, the data will be deleted or anonymized, unless there are grounds to store them for legitimate purposes, as defined by law, to comply with legal or regulatory obligations, as well as to exercise or safeguard SCHULZ’s rights.

The holder may request correction, deletion, removal or deletion of their data as provided for in this policy and guaranteed by the LGPD. The request can be made through the data subject request channel, accessible through the Data Request link or by contacting our data officer. The request will be analyzed in accordance with the LGPD, taking into account the personal data involved and the regulatory and inspection activities applicable to the organization.

RECOMMENDATIONS TO USERS

It is the responsibility of USERS to:

  • Maintain the secrecy of all your credentials (IDs, tokens, logins and passwords), not sharing them with third parties;
  • Do not provide information such as bank or financial passwords by email or WhatsApp, as SCHULZ does not request this information;
  • To communicate to SCHULZ any and all suspicions or findings of violation of this POLICY, such as unauthorized access to your account, suspicious purchases, etc.;
  • To provide SCHULZ with truthful and complete information and always keep it up to date;
  • If you wish to exercise any right in relation to your personal data, please contact SCHULZ through the contact channel dpo@schulz.com.br;
  • Adopt cybersecurity measures on mobile devices and computers used in the use of the SITES, such as updating antivirus, firewalls, passwords;
  • Refrain from using the website for any illegal or unauthorized processing of personal data of third parties;
  • Do not pay slips supposedly sent by SCHULZ without first making sure of the authenticity of the document, checking the amount, the barcode, the financial institution and the beneficiary.

JURISDICTION

Any disputes will be submitted to the jurisdiction of the District of Joinville, State of Santa Catarina, to the exclusion of any other, however privileged it may be.

SERVICE CHANNELS

 

For any matter related to the processing of personal data, SCHULZ can be contacted through its Data Protection Officer (DPO) at the contacts below:

  • Name: Bianca Gulminie Josué Wehmuth
  • Address: Rua Dona Francisca, nº 6.901-A – 89.219-600 – Distrito Industrial, Joinville, Santa Catarina
  • Email: dpo@schulz.com.br
  • Data Subject Portal: Data Request

For other matters, requests should be directed to the contact channels of the “Contact Us” channel indicated on the respective SITES.

UPDATES

This document was prepared in accordance with current legislation, in particular, Law No. 13,709/18 (Personal Data Protection Law or LGPD), Law No. 8,078/90 (Consumer Protection Code or CDC) and Law No. 12,965/2014 (Civil Rights Framework for the Internet or MCI).

SCHULZ may change this POLICY at any time it deems appropriate. In such cases, SCHULZ will notify you by means of a prominent announcement on its own SITES.

This Privacy Policy was last updated on March 27, 2025.

Good browsing!