Privacy policy

This website is maintained and operated by KickOff Music Ltda.

We collect and use some personal data that belongs to those who use our website. In doing so, we act as controller of this data and are subject to the provisions of Brazilian Federal Law n. 13.709/2018 (General Law on Personal Data Protection – LGPD).

We protect your personal data and, therefore, we provide this privacy policy, which contains important information on:

– Who should use our website
– What data we collect and what we do with it;
– Your rights in relation to your personal data; and
– How to contact us.

  1. Who should use our website

Our website should only be used by persons over the age of eighteen. Therefore, children and teenagers should not use it.

  1. What data we collect and what we do with it

Our website collects and uses certain personal data of our users, in accordance with the provisions of this section.

1) Personal data expressly provided by the user

We collect the following personal data that our users expressly provide to us when using our website:

FULL NAME, ID NUMBER, FULL ADDRESS, CELL PHONE

The collection of these data takes place at the following times:
WHEN THE USER REGISTERS ON THE SITE

The data provided by our users is collected for the following purposes:
SO THAT THE USER CAN PERFORM TRANSACTIONS ON THE SITE

2) Sensitive data

Sensitive data from our users will not be collected, as defined in arts. 11 et seq. of the Personal Data Protection Act. Thus, there will be no collection of data on racial or ethnic origin, religious conviction, political opinion, affiliation to a union or organization of a religious, philosophical or political nature, data relating to health or sexual life, genetic or biometric data, when linked to a natural person.

3) Data collection not expressly provided

Occasionally, other types of data not expressly forseen in this Privacy Policy may be collected, whereas they are provided with the user’s consent, or even if the collection is permitted based on another legal basis provided for by law.

In any case, the data collection and the processing activities arising from it will be informed to the website’s users.

  1. Sharing personal data with third parties

We do not share your personal data with third parties. Despite this, it is possible that we do so to comply with a legal or regulatory determination, or even to comply with an order issued by a public authority.

  1. How long will your personal data be stored

The personal data we collect will be stored and used for the following periods of time:

Data relating to transactions made on the website will be stored for 05 years. All other data will be stored as long as the user has an active account on the website.

The periods informed are not longer than strictly necessary, taking into account the purposes and legal justifications for the processing of data.

It is worth mentioning that, if there is any legal or regulatory justification, the data may continue to be stored even if the purpose for which they were collected or processed has been exhausted.

Once the treatment is completed, subject to the provisions of this section, the data is erased or anonymized.

  1. Legal basis for the processing of personal data

Each operation for processing personal data must have a legal basis, that is, a legal basis, which is nothing more than a justification that authorizes it, provided for in the General Law for the Protection of Personal Data (GLPD Brasileira).

All of Our personal data processing activities have a legal basis, among those permitted by law. More information about the legal basis that we use for operations for the processing of specific personal data can be obtained from our contact channels, which are informed at the end of this Policy.

  1. User rights

The website user has the following rights, granted by the Personal Data Protection Law:

– confirmation of the existence of data processing;
– access to data;
– correction of incomplete, inaccurate or outdated data;
– anonymization, blocking or deletion of unnecessary, excessive or processed data in violation of the law;
– data portability to another service or product provider, upon express request, in accordance with the regulations of the national authority, observing commercial and industrial secrets;
– deletion of personal data processed with the consent of the holder, except in cases provided for by law;
– information on public and private entities with which the controller shared the data;
– information about the possibility of not providing consent and about the consequences of denial;
– revocation of consent.

It is important to emphasize that, under the terms of the GLPD, there is no elimination right of processed data based on legal basis other than the consent, unless the data is unnecessary, excessive or processed in disagreement with the provisions of the law.

1) How the holder can exercise his rights

To ensure that the user who intends to exercise their rights is, in fact, the owner of the personal data that are the object of the requisition, we may request documents or other information that can help in their correct identification, in order to protect our rights and the rights of third parties. This will only be done, however, if absolutely necessary, and the applicant will receive all related information.

  1. Security measures in the processing of personal data

We employ technical and organizational measures capable of protecting personal data from unauthorized access and from situations of destruction, loss, misplacement or alteration of this data.

The measures we use take into account the nature of the data, the context and purpose of the processing, the risks that a possible violation would generate for the user’s rights and freedoms, and the standards currently used in the market by companies similar to ours.

Among the security measures adopted by us, we highlight the following:

– The data of our users are stored in a secure environment;
– We limit access to our users’ data so that unauthorized third parties cannot access them;
– We use SSL (Secure Socket Layer) certificate, so that data transmission between users’ devices and our servers happens in an encrypted form;
– We keep records of all those who have, in any way, contact with our data.

Even if we adopt everything in our power to avoid security incidents, it is possible that there may be a problem caused exclusively by a third party – such as in the case of hackers or crackers, or even in the case of the user’s sole fault, which it occurs, for example, when he himself transfers his data to a third party. Thus, although we are, in general, responsible for the personal data we process, we disclaim responsibility in the event of an exceptional situation such as these, over which we have no control.

In any case, in the event of any type of security incident that could generate relevant risk or damage to any of our users, we will communicate those affected and the National Data Protection Authority about what happened, in accordance with the provisions of the General Protection Law of Data.

  1. Complaint to a supervisory authority

Without prejudice to any other means of administrative or judicial recourse, holders of personal data who feel, in any way, have been harmed, may file a complaint with the National Data Protection Authority.

  1. Changes to this policy

The present version of this Privacy Policy was last updated on: 10/22/2021.

We reserve the right to modify these rules at any time, especially to adapt them to any changes made to our website, whether by making new features available, or by suppressing or modifying existing ones.

Whenever there is a change, our users will be notified of the change.

  1. How to contact us

To clarify any doubts about this Privacy Policy or about the personal data we handle, contact our Personal Data Protection Officer, through one of the channels mentioned below:

E-mail: contact@kickoffmusic.com.br

Address: Rua Primeiro de Agosto, 234 – Tijuca – Teresópolis – RJ – ZIP CODE: 25975-500