Privacy Policy

Learn how Metasa collects, uses, stores, protects, and deletes personal data in compliance with the LGPD, and how to exercise your rights as a data subject.

1. Who we are

This Privacy Policy explains how Metasa S/A Indústria Metalúrgica (“Metasa”), registered under CNPJ No. 88.236.293/0001-02, collects, uses, stores, shares, protects, and deletes the personal data of customers and non-customers who interact with this website.

Metasa acts as the controller of the personal data processed through this website, under the Brazilian General Data Protection Law (LGPD).

2. Applicable legislation

This Policy complies with Brazilian legislation, in particular:

  • Consumer Protection Code (Código de Defesa do Consumidor – Law No. 8.078/1990);
  • Brazilian Internet Civil Rights Framework (Marco Civil da Internet – Law No. 12.965/2014);
  • General Data Protection Law – LGPD (Law No. 13.709/2018).

3. Data we collect

We collect only the data required for each purpose:

  • Contact form: department of interest, name, email, phone number, city, state, subject, and message.
  • Careers form: name, email, phone number, unit and position of interest, professional experience, message, and attached resume.
  • Browsing data: technical and usage information, such as pages visited, clicks, scrolling, device type, and browser, collected through cookies and similar technologies, as described in the “Cookies” section.

4. Purposes and legal bases

Personal data is processed for the following purposes:

  • Responding to requests, questions, and quote requests submitted through the contact form, based on Metasa's legitimate interest and on preliminary procedures related to a contract (LGPD, Article 7, items V and IX).
  • Evaluating applications and conducting recruitment processes, based on preliminary procedures related to an employment contract (LGPD, Article 7, item V).
  • Measuring and improving website performance and usability through analytics cookies, only with your consent (LGPD, Article 7, item I).
  • Complying with legal and regulatory obligations and exercising rights in judicial, administrative, or arbitration proceedings (LGPD, Article 7, items II and VI).

5. Data sharing

Metasa does not sell personal data. Data may be shared only with:

  • Technology providers that operate the website on Metasa's behalf, such as hosting, database, and email delivery services, which process data solely according to our instructions.
  • Microsoft (Microsoft Clarity), for website usage analysis, only if you allow analytics cookies.
  • Google (Google Tag Manager), a tool that manages the website's measurement features according to your cookie preferences.
  • Public authorities, when required by law or court order.

6. International transfer

Some providers may store or process data on servers located outside Brazil. In these cases, Metasa adopts the safeguards set forth in Article 33 of the LGPD, such as contractual clauses and the selection of providers with an adequate level of data protection.

7. Retention and deletion

Personal data is kept only for as long as necessary to fulfill the purposes described in this Policy or to comply with legal and regulatory obligations. After this period, the data is securely deleted or anonymized.

Resumes received may be kept in Metasa's talent pool for future recruitment processes. You may request their deletion at any time.

8. Security

Metasa adopts technical and administrative measures to protect personal data against unauthorized access and against accidental or unlawful destruction, loss, alteration, or disclosure, such as encrypted connections (HTTPS), restricted access control, and masking of form fields in analytics tools.

9. Your rights

Under Article 18 of the LGPD, you may request at any time:

  • confirmation that your data is being processed;
  • access to your data;
  • correction of incomplete, inaccurate, or outdated data;
  • anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in violation of the LGPD;
  • portability of your data to another service or product provider;
  • deletion of data processed based on your consent;
  • information about the entities with which your data has been shared;
  • information about the possibility of not giving consent and the consequences of refusal;
  • withdrawal of consent.

To exercise these rights, please contact our Data Protection Officer at lgpd@metasa.com.br. You may also file a complaint with the Brazilian National Data Protection Authority (ANPD).

10. Cookies

Cookies are small files stored in your browser. This website uses:

  • Necessary cookies (always active): cc_cookie, which stores your cookie preferences for up to 6 months, and local storage of your selected language.
  • Analytics cookies (only with your consent): _clck and _clsk, from Microsoft Clarity, which identify the visit and the session to generate anonymous session recordings and heatmaps. They last up to 1 year and 1 day, respectively.

Until you give your permission, no analytics cookies are stored and Google features run without cookies. You can change your choice at any time using the button below or the “Cookie preferences” link in the website footer.

11. Data Protection Officer (DPO)

The Data Protection Officer is the communication channel between Metasa, data subjects, and the Brazilian National Data Protection Authority (ANPD).

Data Protection Officer: Pedro Henrique Kaiper Cruz – Legal Advisor, Compliance and DPO.

Email: lgpd@metasa.com.br

12. Changes to this Policy

This Policy may be updated periodically. The current version will always be available on this page, along with the date of the last update.