PRIVACY AND PERSONAL DATA PROTECTION NOTICE

INTRODUCTION

Upholding our commitment to transparency and building a relationship of trust, this Notice aims to inform you how your personal data is processed when you use the services and/or purchase products from one of the Entities that are part of the Sistema FIEMG (SESI, SENAI, FIEMG, IEL and CIEMG), as well as to clarify the respective purposes and the rights that are guaranteed to you. 

 The Governance, Risks, Compliance and Privacy (GRC&P) team is responsible for drafting and updating this Notice, reaffirming the institution’s commitment to respecting privacy and protecting personal data, in accordance with applicable legislation and in line with the Compliance Management System (CMS). 

 If there are any doubts regarding the terms used in the document, we recommend consulting the glossary available at the end. In the absence of a specific definition, the interpretation should be carried out in light of the provisions of Law No. 13.709/2018 (Brazilian General Data Protection Law – LGPD). 

WHO WE ARE

The Sistema FIEMG works to effectively contribute to the industry in Minas Gerais, seeking results that sustain and expand its competitiveness. This is possible through the services and products offered by the five entities that make up the Sistema FIEMG: Federation of Industries of the State of Minas Gerais (FIEMG), the Industrial and Business Center of Minas Gerais (CIEMG), the Social Service of Industry (SESI), the National Service of Industrial Training (SENAI), and the Euvaldo Lodi Institute (IEL).

Regarding the processing of your personal data, we act as Controllers on certain occasions, depending on the purpose of the processing. In these cases, our identifying information is: FEDERAÇÃO DAS INDÚSTRIAS DO ESTADO DE MINAS GERAIS – FIEMG, CNPJ nº 17.212.069/0001-81, located at Av. do Contorno, nº 4.456, Bairro Funcionários, CEP 30110-02, in Belo Horizonte – MG. The Data Protection Officer (DPO) appointed by the Sistema FIEMG is Hortência Ricarte de Oliveira Paizante, whose contact information is indicated in a specific section of this document.

SCOPE

This document applies to the individuals listed below who have, have had, or wish to interact with any entities that are part of the Sistema FIEMG:

• Visitors to official websites;
• Customers and potential customers;
• Employees and job applicants;
• Legal representatives of business clients, suppliers, or other third parties.

To access a particular service or product, a user account may have to be created. In that case, in addition to this Notice, other supplementary information will be provided to reflect applicable legal practices and requirements.

Depending on the contracted services, the Sistema FIEMG may process the personal data of children and adolescents, ensuring their best interests, with the awareness of their legal guardian, and respecting the guidelines of the LGPD (Brazilian General Data Protection Law) and other applicable legislation.

HOW DO WE COLLECT YOUR PERSONAL DATA?

 We may collect personal data in the following ways:

1.   Information that you voluntarily provide to us

a) Contact and registration – By filling out registration forms available on our official website or providing contact information through physical or digital means, as well as by creating a user account on the Sistema FIEMG, you provide us with information necessary to enable contact and/or authentication.

b) Proposals and contracting – If you are interested in or decide to become a client of our products and services, we may request that you provide additional personal data necessary for sending technical and commercial proposals and/or formalizing the contract.

c) Work with us – To apply for opportunities available on the official website and participate in our selection processes, the personal data you register will be processed.

d) Events – For participation in events held by the Sistema FIEMG, which may be filmed and/or photographed, with the possible publication of images on the official website, social networks and media outlets.

2.  Information collected automatically 

a) Use of the official Sistema FIEMG website – We will collect information about how and where you use or purchase services and products from the Sistema FIEMG, through “cookies” and similar technologies, as we will explain in a later section.

b) Institutional security – For your safety, personal identification data is collected through security cameras to enter the premises of Sistema FIEMG, and, in some cases, special categories of personal dataare collected for facial or fingerprint recognition/biometrics.

3.  Information obtained from third parties 

a) Clients: On certain occasions, we act as Operators, following instructions provided by third-party companies, by virtue of a servicesprovisionor product supply contract, circumstances in which clients will share with us the personal data of their employees and legal representatives.

b) Suppliers: Companies that provide services to the Sistema FIEMG may send personal data related to registrationsand records, to ensure compliance with their contract with us, including financial information, for the purpose of credit protection and fraud prevention.

4.  Publicly available information 

The Sistema FIEMG may use data made manifestly public by the data subject, safeguarding their rights and the principles set forth in the LGPD (Brazilian General Data Protection Law), such as data available on social networks and in public registries maintained by public authorities. 

WHAT PERSONAL DATA DO WE PROCESS? 

The personal data we process will vary depending on your relationship with us, but the main categories are: 

• Registration data: name, date of birth, ID, CPF (Brazilian tax identification number), driver’s license, profession/position, username and password, among others; 
• Contact information: phone number, mobile phone number, email address, physical address, and proof of residence; 
• Image data: photo, video and voice; 
• Financial information: bank, account, credit/debit card information, income, credit profile; 
• Special categories of personal data: depending on the contracted services, we may process racial or ethnic origin, religious beliefs, political opinions, and trade union membership or an organization of a religious, philosophical or political nature, data relating to health or sexual life or sexual orientation, genetic or biometric data; 
• Professional Data: We will process personal data related to job applicants and employees, including information contained in their resumes, information registered on the “Work with Us” portal, as well as information additionally collected during the selection process or contractual relationship, such as interview results, assessments, questionnaires, and professional history. For the purpose of promoting equal employment opportunities, we may also collect data regarding nationality, racial and/or ethnic origin. Furthermore, information such as sexual orientation may be requested on an optional basis, exclusively to support diversity and inclusion programs. 
• Family relationship data: we may process the personal data of legal guardians, spouses or dependents, in accordance with the provision of services. 
• Behavioral and access information: cookies, IP addresses, geolocation data, information related to device characteristics, browser, provider and operating system, date and time of access, pages visited, click logs and consumption profile. 

COOKIES AND SIMILAR TECHNOLOGIES 

The Sistema FIEMG uses cookies and similar technologies that collect and store information, including personal information, when you visit our websites, to provide, develop and improve the services or products offered. 

 Privacy preferences can be edited through the Sistema FIEMG websites, and the purpose of data collection follows the categories below: 

To help manage cookies in your browsers, we have provided the following links: 

• Mozilla Firefox 

• Google Chrome 

• Safari 

• Microsoft Edge 

• Opera Help 

FOR WHAT PURPOSES DO WE USE YOUR PERSONAL DATA? 

We process your personal data for the following purposes: 

• Customer service: to handle and respond to your requests whenever you contact us, including clarifying any doubts; 

• Communication: interactions with you through institutional communication and relationship channels (such as email, telephone, social networks); 

• Marketing: We may send you newsletters and personalized offers according to your preferences, based on your use of the services, purchase history, participation in promotions campaigns and satisfaction surveys. You can update your preferences at any time or use the unsubscribe button available in our communications. 

• Execution of a signed contract or preliminary due diligence: to enable the supply of any contracted product or service, to register and verify any potential identity matches or duplicate names, as well as to manage payments, issue invoices and conduct collections, if necessary. We may share some of this information with mobile payment service providers and credit/score analysis companies, exclusively to enable the transaction; 

• Event organization: to manage your event registration, whose data may be shared with partners, sponsors, and event organizers; 

• Recruitment and selection: for you to apply for our job openings available on the website and continue the selection process; 

• Access management: to ensure that only you can access your account, as well as to control access to the Sistema FIEMG infrastructure, including the possibility of facial and digital recognition/biometrics in some Units, in addition to visitor registration; 

• Notification: If you are a customer, we may contact you to provide updates or notices necessary for the proper functioning, maintenance, or continuity of products and/or services; 

• Monitoring: Our facilities may be equipped with properly marked surveillance cameras, aimed at protecting the safety and security of employees, visitors, and the assets of the Sistema FIEMG. 

• Security and prevention, detection and investigation of fraud: we may use personal data to prevent, detect and investigate fraud, as well as to enforce the terms and conditions applicable to the purchase of products or services from the Sistema FIEMG; 

• Accountability and reporting: Personal data may be requested and processed for accountability purposes, transparency in the application of resources, especially in the requirements of the control and oversight bodies to which the entities that are part of the S System are subject, including the National Confederation of Industry (CNI); 

• Research: We may invite you to participate in surveys, studies, and technical analyses focused on the development, innovation, competitiveness, and strengthening of the industry; 

• Other legally foreseen situations: with the consent of the data subject; to comply with legal/regulatory obligations or requests from tax authorities, the Judiciary and/or other competent authority; to meet the legitimate interests of the Controller or third parties; for the regular exercise of our rights in judicial or administrative proceedings, protection of life or physical integrity, credit protection, fraud prevention and security of the data subject. 

WITH WHOM WILL YOUR PERSONAL DATA BE SHARED? 

Personal data is processed exclusively for the purposes stated in this Notice and may be shared, for strictly necessary purposes, with the following parties: 

• Partners and sponsors of the Sistema FIEMG; 

• Suppliers and/or subcontractors of the Sistema FIEMG; 

• Clients, by virtue of a service agreement for the benefit of their employees, or the mobilization of Sistema FIEMG employees for the provision of services; 

• Public authorities, government entities, competent regulatory/fiscal agencies, when necessary to comply with a legal/regulatory obligation to which the Entity(ies) comprising the Sistema FIEMG is/are subject or as permitted by law; 

• Entities that are part of the Sistema FIEMG and the National Confederation of Industry (CNI). In case of doubt, we suggest consulting the SENAI Transparency or SESI Transparency portals, which brings together the governing regulations. 

In the event that your personal data is transferred to clients, partners, or suppliers of Sistema FIEMG, we inform you that we have adopted technical, organizational, contractual, and legal measures to ensure that your data is processed exclusively for the purposes described in this Notice and that adequate levels of protection have been implemented to safeguard your personal data and ensure compliance with the conditions set forth herein. 

Some of the transfers mentioned above may occur outside Brazilian territory. Therefore, Sistema FIEMG informs you that it may carry out international data transfers to partners or suppliers located in other countries in order to enable the provision of services or the supply of products, provided that the recipient country ensures a level of personal data protection equivalent to that provided for in the LGPD (Brazilian General Data Protection Law), or through the adoption of appropriate guarantees and safeguards. 

Our website may occasionally contain links to third-party websites. By accessing such links, you will leave the Sistema FIEMG environment and access a third-party website that is not controlled by us. Your rights and obligations will be governed by the terms and policies of these companies, which we recommend you read carefully. 

RIGHTS OF THE DATA SUBJECTS 

Data subjects may request information about their personal data from the Sistema FIEMG through the Data Subject Access Request (DSAR), such as: 

• Confirmation of the existence of data processing; 

• Access to personal data; 

• Correction of incomplete, inaccurate, or outdated data; 

• Anonymization, blocking, or deletion of unnecessary or excessive data; 

• Data portability, within legal limits; 

• withdrawal of consent; 

• Information regarding the sharing of personal data 

In cases where treatment is based on consent, you have the right to withdraw it at any time through the channel described above. This will not affect the validity of the processing carried out prior to withdrawal. 

If a data subject requests the deletion of their personal data, the Sistema FIEMG may delete or render it unidentifiable. However, personal data may be retained if strictly necessary for the execution of a contract, compliance with a legal obligation, court order, regular exercise of the Sistema FIEMG’s rights in judicial, administrative, or arbitration proceedings, in the event of a determination by the National Data Protection Agency (ANPD) or another control body, or in legally authorized cases. 

To safeguard the confidentiality and security of personal data, we will request photo identification to confirm the identity of the data subject before processing the request as a security measure and to prevent fraud. Additional information may also be requested from the data subject, when necessary, to enable proper analysis and correct processing of the request. 

Under certain circumstances, it may not be possible to fully meet the data subject’s request. In such cases, we will explain the factual or legal reasons for the inability to comply. 

For other matters that do not concern privacy or the protection of personal data, please see the main channels of the Sistema FIEMG below: 

• SAC: https://www.fiemg.com.br/fale-conosco/ | 0800 181 8189 | crc@fiemg.com.br 

• Whistleblowing and Ombudsman: https://www.canaldeintegridade.com.br/ouvidoriafiemg/ | 0800 882 2525 | ouvidoria@fiemg.com.br 

STORAGE AND SECURITY OF YOUR PERSONAL DATA 

Except for the cases described above and legal hypotheses that authorize retention, personal data will be kept for as long as it is necessary or relevant to achieving the specific purpose sought, within the scope and technical limits of the activities. 

We have implemented technologies and policies aimed at protecting your personal data. against unauthorized access and misuse. For more details, the Sistema FIEMG encourages data subjects to familiarize themselves with the Sistema FIEMG Information Security Policy.  

FINAL PROVISIONS

Thank you for taking the time to read this Notice, which reflects our commitment to transparency, the protection of personal data, and respect for your rights. 

In case of any requests regarding the processing of your personal data, data subjects should use the Data Subject Request Channel . Public authorities and regulatory bodies, in turn, can contact us at the email address lgpd@fiemg.com.br . We emphasize that departmental email should not be used to address issues related to the fulfillment of rights as a data subject.  

This Privacy Notice is subject to constant improvement and enhancement. Therefore, the Sistema FIEMG reserves the right to modify it at any time, according to changes in its purposes, as well as for adaptation and compliance with current legislation. For this reason, we advise you to consult it periodically. 

Last updated: March 11, 2026. 

GLOSSARY 

• Anonymization: the use of reasonable and available technical means at the time of processing, through which data loses the possibility of direct or indirect association with an individual. 

• Compliance Management System (CMS): a set of interrelated or interactive elements of an organization designed to establish guidelines, controls, and processes to ensure compliance with legal, regulatory, normative, and internal requirements applicable to its activities, including those related to privacy and the protection of personal data. 

• Consent: a free, informed, and unequivocal expression by which the data subject agrees to the processing of their personal data for a specific purpose. 

• Controller: a natural or legal person, governed by public or private law, who is responsible for decisions regarding the processing of personal data. 

• Data processing: Any operation performed with personal data, such as those relating to collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation or control of information, modification, communication, transfer, dissemination or extraction. 

• Data Protection Officer: Person appointed by FIEMG as a communication channel between the controller, data subjects, and the National Data Protection Agency (ANPD). 

• Data subject: the natural person to whom the personal data being processed refers. 

• Deletion: the removal of data or a set of data stored in a database, regardless of the procedure used. 

• Legal basis: hypotheses that legitimize the processing of personal data, as provided for in Article 7 for personal data and in Article 11 for special categories of personal data. 

• Legitimate interest: legitimate purposes, considered from specific situations, which include, but are not limited to, supporting and promoting the activities of the controller. 

• Operator: a natural or legal person, governed by public or private law, who processes personal data on behalf of the controller. 

• Partners: Trade unions, affiliated industries, clients and other business partners. 

• Personal data: Information relating to an identified or identifiable natural person, such as name, ID number, tax identification number, email address, and phone number. 

• Service providers: Individuals contracted directly or indirectly by FIEMG, SESI, SENAI, IEL, and CIEMG. 

• Shared use of data: sharing, dissemination, international transfer, interconnection of personal data or shared processing of personal databases by public bodies and entities in the performance of their legal duties, or between these and private entities, reciprocally, with specific authorization, for one or more processing modalities permitted by these public entities, or between private entities. 

• Special categories of personal data: Personal data concerning racial or ethnic origin, religious beliefs, political opinions, membership of a trade union or religious, philosophical or political organization, data concerning health or sex life, genetic or biometric data, when linked to a person.