Rules of Security and Privacy


1. This Exhibit is an integral part of the Global Privacy Policy - Grupo UOL. If the USER uses the services, resources, technologies, or features provided by Grupo UOL for payment processing, the following supplementary conditions shall be applicable.

2. The terms defined herein are supplementary to the ones set in the Global Privacy Policy - Grupo UOL. Except if otherwise provided herein, capitalized terms shall have the same meaning that was attributed to them in the Global Privacy Policy - Grupo UOL.

3. If there is any conflict, this Exhibit shall prevail over the Global Privacy Policy - Grupo UOL.

(i) Handling Data

4. As for the use of services of BoaCompra and the website of BoaCompra, the entity in charge of the data handling (who establishes the purposes and the means of handling Personal Data) is Boa Compra Tecnologia Ltda..

5. BoaCompra is committed to protect the USERS’ privacy, and it ensures the full compliance with the principles and rules set in legislation in force, namely, the provisions in Regulation (EU) 2016/679 of the European Parliament and Council, of April 27, 2016 (“RGPD”).

(ii) Handling Personal Data

6. In addition to the Personal Data mentioned in the Global Privacy Policy - Grupo UOL, Grupo UOL may proceed to record calls the USERS make to the call center, who works on our behalf, in a way to (i) prove that business transactions were made (as well as the performance of other communication concerning BoaCompra services), (ii) for purposes of monitoring and quality assurance of customer support, and (iii) for training purposes. Whenever a call is recorded, we ensure that all applicable legal requirements have been complied with.

7. Grupo UOL may also, in order to improve BoaCompra services and the proper operation of BoaCompra website, collect additional technical information on time zone settings and types and versions of browser’s plug-ins; information on the USER's visits, including the full URL clickstream (including date and time); products that you have viewed or researched; webpage response time, download errors; webpage interaction information (e.g., rolling, clicks, and mouse tracking); methods used for browsing outside the webpage; and telephone numbers used to call our customer support line. These data will be used with the same purposes established in the Global Privacy Policy - Grupo UOL, in full compliance with the principles and rules set in legislation in force, namely, the GDPR.

(iii) Purpose of handling and legality

8. BoaCompra ensures that all activities handling Personal Data shall be based on one of the grounds of legality/legal grounds, such as, but not limited to, (i) USER’s consent; (ii) entering into an agreement to which the USER is a party (or under pre-contractual diligences upon USER’s request); (iii) compliance with all legal obligations binding BoaCompra; (iv) pursuit of BoaCompra’s (or third party’s) legitimate interests, except if the USER’s interests or fundamental rights and freedom; (v) ensured studies, whenever possible, anonymization of sensitive personal data; (vi) due right exercise; and (vii) credit protection.

9. Applicable legal grounds shall rely on the purpose of the handling of Personal Data and on the specific form how the USER interacts with BoaCompra services and/or BoaCompra website.

10. In addition to the data usage provided in Global Privacy Policy - Grupo UOL, Grupo UOL may also handle the Data to investigate suspicious transactions. If any breach is suspected or confirmed, Grupo UOL may inform the USER or competent authorities, as the case may be.

(iv) Children

11. Please, note that BoaCompra services and BoaCompra websites are not made for children under 16. Grupo UOL undertakes to protect the privacy of children, specially in the on-line environment. If you are aware that a child has provided Personal Data to Grupo UOL without consent to use one of the services, resources, technologies, or features offered by Grupo UOL for processing payments, please contact us at BoaCompra suggests the proper monitoring of children’s activities by their parents.

Versions in other languages are provided just for reference, if any question arises, the Portuguese version shall prevail.