UTC BRASIL INDÚSTRIA E COMÉRCIO DE TABACO LTDA (hereinafter referred only as UTC), registered with the CNPJ under no. 04.551.794/0001-32, with headquarters in Santa Cruz do Sul/RS, understands as very important and relevant the personal data left by you, “User” when using the website and when filling in the forms “CONTACT”, “CONTACT US” and “WORK WITH US”. This Privacy Policy aims to regulate which data and information will be obtained and when it can be used by UTC.

To facilitate the understanding of how we process data, we describe below a summary of our website Privacy Policy (“Policy”):

Summary table

Action Agent	UTC BRASIL INDÚSTRIA E COMÉRCIO DE TABACO LTDA (UTC), CNPJ: 04.551.794/0001-32 Address: Rodovia BR-471 – Industrial District. PO Box 96.835-642 – Santa Cruz do Sul/RS
Role Action	Predominantly controlling.
Nature of Processed Data	Personal data provided by the user and/or collected automatically.
Purpose as controller	Use personal data for contacts received through the “CONTACT US” and “WORK WITH US” forms.
Legal Base	Contract Execution, 7º, section I; Legal Obligation, 7º, Section II; e Legitimate Interest, 7º, Section IX of General Data Protection Law nº 13.709/2018.
Sharing	Sharing may occur with companies that have a contract with the company, for issues of “Contract Execution”, “Legal Obligation” and “Legitimate Interest”.
Data Protection	Appropriate security, technical and administrative measures.
Your Rights	Your rights as Data Owner are granted on Article 18º Law n. º 13.709/2018, and General Data Protection Law (item VIII).

UTC may update the Privacy Policy whenever necessary and advises the User to periodically review the Policy. These changes are effective immediately upon being posted on this page.

1. DATA COLLECTION AND PROCESSING

UTC may use the personal information actively entered by the User at the time of registration and the information collected automatically when using the page, IP with date and time of connection, among others.

Two types of personal data are processed: (a) those provided by the User; and (b) those collected automatically.

Actively Collected Data - May be collected by UTC, when filling in the “CONTACT US” and “WORK WITH US” forms in the “CONTACT” form. The veracity of it is of User’s responsibility: name and email. After collecting this data, UTC will be able to use this information whether employees, customers, participants in job selection, service and product suppliers, integrated rural farmers, among others, all in accordance with the guidelines of the General Data Protection Law.

Data collected automatically - UTC will use standard technology, such as cookies, which are used with the aim of improving the User's browsing experience on the Page, according to their habits and preferences.

The automatic collection of information through technologies, such as cookies and caches, can be disabled through your internet browser settings and on our website, specifically regarding cookies. However, the User must be aware that, when disabling these technologies, some features offered by the websites may not work correctly, as they depend on data processing to do so.

Any information provided by the USER will be collected and stored in accordance with the strictest security and reliability standards and will not be publicly available, provided or sold under any circumstances.

All information collected from the USER travels securely, using a standard Internet encryption process.

Unless there is a legal or judicial determination or prior authorization from the USER himself, the USER's information will never be transferred or used for purposes other than those for which it was collected.

The information collected may eventually be shared by UTC with: (a) partner companies, when necessary for the correct maintenance of the website; and (b) upon judicial decision or request from a competent administrative authority.

UTC's partner companies are aware of and are committed to respecting, under the terms of this Policy, data protection and privacy when there is a need to share this data. These companies may use the USER's personal data with the aim of improving the User's experience. However, these companies do not have any right to share such information.

The User will be able to access, update, add and even delete their data collected by UTC, to do so, send an email to dpo@utcleaf.com.br

We will make our best efforts to respond to you in the shortest possible time, respecting the retention periods established by law.

1. HOW YOUR DATA IS USED

The information collected by UTC aims to establish a relationship with the User, as well as management, administration, expansion and improvements of the Page to the User, adapting them to their preferences and collaborating in the creation of new services to be offered by UTC to Users.

In addition to the above hypotheses, UTC may use the USER's personal data to:

Comply with legal obligations of any nature, investigate possible violations, detect, predict or identify fraud or technical and/or security problems, protect rights, properties or safety of UTC or third parties/USERS against possible damages, as provided for or permitted by law.

Improvement of the USER experience on the Website, in addition to targeted marketing practices.

III. HOW COOKIES ARE USED

Cookies are files or information that can be stored on devices when the User visits the UTC Page and accepts their use by UTC. In general, cookies contain the name of the website that originated it, its lifetime and a value, generated randomly.

UTC uses cookies to facilitate use and adapt the Page to your interests and needs. Cookies are also used to compile information about the use of our websites and services, helping to improve our structures and content.

We can list the following types of cookies:

• Necessary: help us to understand how visitors interact with the UTC Page, providing information about the areas visited, the time spent on the website and any problems encountered, such as error messages.
• Functional: allow the page to remember your choices as a way of providing a more personalized experience. Furthermore, they enable Users to watch videos and use social tools, comment fields, forums, among others.
• Marketing: used to provide content of interest to the User and present more targeted advertising or limit the number of advertisements served on the UTC Page. It is also possible to measure the effectiveness of an advertising campaign.

After the User consents to the use of cookies, when using the UTC Page, UTC will store a cookie on its device to remember this for the next session.

The User may revoke their consent to cookies, when considering it appropriate, and, if the User does not accept some cookies from the UTC Website, certain services may not function correctly.

In some special cases, we also use cookies provided by trusted third parties. The following section details which third-party cookies you may encounter through this website.

This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us understand how you use the site and ways we can improve your experience. These cookies may track things like how long you spend on the site and the pages you visit so we can continue to produce engaging content. For more information about Google Analytics cookies, see the official Google Analytics page.

Third-party analytics are used to track and measure usage of this site so that we can continue to produce engaging content. These cookies may track things like the time you spend on the site or the pages you visit, which helps us understand how we can improve the site for you.

Periodically, we test new features and make refined changes to the way the site appears. When we are still testing new features, these cookies may be used to ensure that you receive consistent experience while on the site, while we understand which optimization our USERS appreciate most.

1. WHO WE SHARE THE DATA WITH

As already mentioned, unless there is legal or judicial determination or prior authorization from the User, your information will not be transferred or used for purposes other than those for which it was collected.

We reserve the right to share information with partner companies and service providers, so that these companies can use the User's personal data for the exclusive purpose of assisting in providing better service to its customers. However, these companies do not have any right to share such information.

1. HOW WE WILL SECURE YOUR DATA

The information collected will be stored by UTC on its own servers or those contracted by it.

The company uses market and legally permitted means to preserve the privacy of data collected on its Page. Based on this, the following precautions are adopted, in compliance with the guidelines on safety standards established in Decree No. 8,771/2016:

• We have protection against unauthorized access to our systems.
• We only authorize access by previously established people to the location where the collected information is stored.
• Those who get in contact with the information must undertake to maintain absolute confidentiality, being established that breach of confidentiality will result in civil liability and the person will be held responsible in accordance with current Brazilian legislation.
• We maintain the records indicating the moment, duration, identity of the employee or person responsible for the access and the file, based on connection and application access records, as determined in article 13 of Decree No. 8,771/2016.

It is important to note that the company adopts its best efforts to preserve the privacy of Users' data, however, no website is completely secure, and we cannot fully guarantee that all information that passes through the Page is not the target of unauthorized access through methods developed to obtain information improperly. For this reason, we recommend Users to take appropriate measures to protect themselves by keeping all usernames and passwords confidential.

1. RETENTION OF COLLECTED INFORMATION

The information collected by UTC through its Page will be automatically deleted from its servers if it is no longer useful for the purposes for which it was collected, or when the User requests the removal of their personal data.

However, information may be retained to comply with legal or regulatory obligations, transfer to a third party, once data processing requirements are respected and exclusively use of UTC, with access by third parties prohibited.

VII. LINKS TO THIRD PARTY PAGES

You may find links to third party websites on our page. These sites may have their own privacy policies which you should check. Therefore, we have no responsibility for third-party pages and their policies, as we have no control over them.

VIII. USER RIGHTS

UTC respects and guarantees to the User the possibility of submitting requests based on the following rights:

Requesting access to your Personal Data.

Request for correction of your Personal Data.

Request for removal or cancellation of your Personal Data.

Right to information about companies or public entities that UTC may have shared or received your data.

Right to contest the processing of Personal Data.

Right to data portability.

Right to withdraw consent at any time.

Right to review automated decisions.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise your other rights). This is a security measure to ensure that Personal Data is not disclosed to anyone who does not have a right to receive it.

We will respond to all legitimate requests within 15 days.

Any questions that may arise regarding this Privacy Policy can be sent to the email: dpo@utcleaf.com.br

1. FOR CONTACTS ABOUT THIS POLICY

We welcome you to contact us with any questions, comments or requests you may have regarding this policy, please do not hesitate to contact us by email at dpo@utcleaf.com.br

1. LEGISLATION AND JURISDICTION

This Policy will be governed, interpreted and executed in accordance with the Laws of the Federative Republic of Brazil, especially Law No. 13,709/2018, with the jurisdiction of the District of Santa Cruz do Sul/RS being competent to resolve any doubts arising from this document.

Version updated on 01/24/2025.