Linha Belgo
POLÍTICA DE PRIVACIDADE E TRATAMENTO DE DADOS DA BELGO BEKAERT ARAMES LTDA (“POLÍTICA”)
1. INTRODUÇÃO
A ArcelorMittal Brasil adota procedimentos de Proteção de Dados alinhados ao padrão aplicado pelo
Grupo ArcelorMittal mundialmente, que estão também em conformidade com a Lei Geral de
Proteção de Dados Pessoais (Lei nº 13.709/2018, conhecida como LGPD). Nossa Política de
Privacidade tem por finalidade demonstrar, com clareza e transparência, como a ArcelorMittal Brasil
coleta e usa dados pessoais dos diferentes públicos que utilizam nossos sites e aplicativos. Nossas
plataformas digitais ou aplicações também possuem Termos de Uso específicos para o tratamento
de dados pessoais, que são complementares a esta Política e estão também alinhados aos nossos
padrões globais e à LGPD.
2. SOBRE OS DADOS QUE COLETAMOS
2.1. Como e por que coletamos Dados?
Os Dados, incluindo Dados Pessoais, poderão ser coletados
quando você os submete ao cadastrar em algum serviço ou quando interage com nossos ambientes
e serviços.
Em geral, você não é obrigado a divulgar seus dados pessoais como condição para usar um site ou
aplicativo nosso.
No entanto, em suasinterações ArcelorMittal Brasilsolicitará que você forneça alguns de seus dados
pessoais, como nome, e-mail, telefone e endereço. Isso será feito quando esses dados forem
considerados necessários para aquele tipo de interação. Caso você opte por não fornecer alguns
desses dados, podemos ficar impossibilitados de prestar total ou parcialmente nossos serviços a
você.
2.2. Quem atualiza ou confirma a veracidade dos dados?
Você é o responsável por fornecer de forma íntegra e verídica os seus dados pessoais. Para que a
ArcelorMittal Brasil mantenha a veracidade e acuracidade dos seus dados, disponibilizamos o Canal
de Atendimento Fale Conosco no endereço: https://brasil.arcelormittal.- com/faleconosco/contato#direitos-titulares. Por meio dele, você pode solicitar a correção e atualização dos
seus dados que estiverem incompletos, inexatos ou desatualizados.
É importante ressaltar que nós não somos obrigados a processar ou tratar quaisquer dosseus dados
se houver razões para crer que tal processamento ou tratamento possa nos imputar qualquer
infração de qualquer lei aplicável, ou se você estiver utilizando nossos ambientes para quaisquer
fins ilegais, ilícitos ou contrários à nossa Cultura de Integridade.
2.3. Quem é responsável pelos dados coletados?
A base de dados formada por meio da coleta de
Dados é de nossa propriedade e está sob nossa responsabilidade, sendo que seu uso, acesso e
compartilhamento, quando necessários, serão feitos dentro dos limites e propósitos dos negócios
descritos nesta Política.
2.4. A BELGO BEKAERT ARAMES LTDA. utiliza cookies e tecnologias semelhantes?
Sim. Os cookies são pequenos arquivos de texto que são colocados no seu computador pelos sites que você visita. Eles são amplamente usados para fazer com que os sites funcionem com mais eficiência. Além de fornecer suas informações para a BELGO BEKAERT ARAMES LTDA. , os cookies nos permitem armazenar suas preferências e, assim, dar um atendimento personalizado e mais ágil a você.
Você poderá controlar os dados coletados por cookies por meio do seu navegador de internet ou por meio de outras opções disponíveis nas nossas Políticas de Cookies.
2.4.1. Que outros mecanismos de rastreamento a BELGO BEKAERT ARAMES LTDA. utiliza?
Além dos cookies, para identificação e rastreamento baseado em sessões nos sites da BELGO BEKAERT ARAMES LTDA., usamos outros mecanismos de rastreamento baseados em cache, que ajudam a tornar mais rápido o carregamento de páginas, com base no histórico de páginas que você visitou anteriormente. Além disso, um ‘Identificador único’ pode ser usado para monitorar a sua atividade, dando maior segurança no acesso. O identificador único pode ser a sua localização ou a rede a qual está conectado, o dispositivo que você está usando, o sistema operacional ou a versão do seu navegador.
2.4.2. Você pode impedir o uso desses mecanismos para coleta dos seus dados?
Sim, você poderá bloquear a coleta dos dados destes mecanismos de rastreamento diretamente no seu navegador de internet, utilizando a funcionalidade de “Navegação Privada ou Anônima”.
IMPORTANTE: Caso utilize “Navegação Privada ou Anônima” a BELGO BEKAERT ARAMES LTDA. não poderá garantir o correto funcionamento de sua navegação em nossos sites. Também não temos como garantir que o seu navegador fará o bloqueio de todos os mecanismos de rastreamento. Dessa forma, a BELGO BEKAERT ARAMES LTDA. não se responsabiliza por quaisquer danos causados ao Titular de Dados pelo funcionamento incorreto da função “Navegação Privada ou Anônima”.
2.4.3. O uso dessas tecnologias é previsto pela legislação?
Sim. Todas as tecnologias que utilizamos estão de acordo com a legislação vigente e os termos da nossa Política de Privacidade.
Os Dados coletados e as atividades registradas podem ser compartilhados:
(i) Entre as subsidiárias da Belgo Arames em todo o mundo;
(ii) Com autoridades judiciais, administrativas ou governamentais competentes, sempre que houver determinação legal, requerimento, requisição ou ordem judicial;
(iii) De forma automática, em caso de movimentações societárias como fusão, aquisição e incorporação;
(iv) Com terceiros, conforme discriminado nos Termos de Uso dos nossos sites e aplicativos.
4.1. Quem tem acesso aos Dados Pessoais coletados pela BELGO BEKAERT ARAMES LTDA.?
Com relação ao compartilhamento de senhas, você também é responsável pelo sigilo de seus Dados Pessoais e deve ter sempre ciência de que o compartilhamento de senhas e dados de acesso viola esta nossa Política de Privacidade e pode comprometer a segurança dos seus dados e dos nossos ambientes. Portanto, assegure-se de nunca compartilhar a conta de acesso e a senha que utiliza para interagir em nossos sites e aplicativos.
Para a BELGO BEKAERT ARAMES LTDA., a segurança dos dados pessoais tratados é extremamente importante. Por isso, adotamos todas as medidas técnicas e administrativas possíveis para garantir a segurança da informação em nossos sites e aplicativos, por meio de protocolos, controles, políticas, procedimentos e orientações para manter tais medidas.
Internamente, os Dados Pessoais coletados são acessados somente por profissionais devidamente autorizados, respeitando os princípios de proporcionalidade, necessidade e relevância para os objetivos do nosso negócio. Todos esses profissionais são cientes de suas responsabilidades em manter nosso compromisso de confidencialidade e preservação da sua privacidade nos termos desta Política.
4.2. Como esta Política atua quando você acessa algum link externo por meio de nossos sites e aplicativos?
Se, durante a sua navegação em nossos ambientes digitais, você for conduzido via link a outros portais ou plataformas, você deve estar ciente de que estes ambientes externos poderão coletar suas informações e, em geral, terão suas próprias políticas de tratamento de dados.
Por isso, ressaltamos que, sempre que isso ocorrer, você deve ler as Políticas de Privacidade e Tratamento de Dados de tais portais ou plataformas, sendo de sua responsabilidade aceitá-las ou rejeitá-las. Nós não somos responsáveis pelas políticas de privacidade e tratamento de dados de terceiros, nem pelo conteúdo desses ambientes digitais externos.
4.3. Pode haver processamento de dados por terceiros sob nossa diretriz?
Sim. Podemos contratar empresas terceirizadas para realizarem o tratamento, em nosso nome, de dados pessoais que coletamos. Quando isso ocorrer, essas empresas respeitarão, por obrigação contratual, as condições aqui estipuladas e as nossas normas de segurança da informação.
Os dados pessoais coletados e os registros de atividades são armazenados em ambiente seguro e controlado, sendo mantidos apenas pelo prazo necessário, com duas premissas básicas:
(i) Enquanto durar a relação entre você e a BELGO BEKAERT ARAMES LTDA.;
(ii) Pelo período necessário para cumprirmos nossas obrigações legais e contratuais globais.
Podem ocorrer prazos de armazenamento superiores, por exemplo, para fins de auditoria, segurança, controle de fraudes, proteção ao crédito e preservação de direitos, conforme hipóteses que a lei ou norma regulatória assim estabelecer. Os dados coletados poderão ser armazenados em nossos servidores localizados no Brasil, bem como em ambientes ou servidores na nuvem (cloud computing), o que poderá exigir uma transferência e/ou processamento destes dados fora do Brasil.
Como titular de Dados Pessoais você possui os seguintes direitos, que podem ser solicitados à BELGO BEKAERT ARAMES LTDA.
por meio do Fale Conosco no endereço: http://belgo.local/fale-conosco/
(i) Saber quais dados pessoais a BELGO BEKAERT ARAMES LTDA. tem sobre você;
(ii) Corrigir os seus dados pessoais;
(iii) Solicitar a exclusão dos seus dados pessoais;
(iv) Contestar o tratamento realizado com os seus dados pessoais;
(v) Revisar as decisões automatizadas envolvendo os seus dados pessoais;
(vi) Revogar o seu consentimento;
(vii) Solicitar a portabilidade dos seus dados pessoais;
(viii) Solicitar anonimização, bloqueio ou eliminação dos seus dados pessoais;
(ix) Confirmar se há tratamento dos seus dados pessoais.
Caso você solicite a exclusão de seus Dados Pessoais, pode ocorrer que estes sejam mantidos por período posterior ao seu pedido, nos casos previstos pelo artigo 16 da Lei Geral de Proteção de Dados Pessoais, ou seja, para:
(i) Cumprimento de obrigação legal ou regulatória;
(ii) Estudo por órgão de pesquisa;
(iii) Transferência a terceiro (respeitados os requisitos de tratamento de dados dispostos na mesma Lei);
(iv) Uso exclusivo da BELGO BEKAERT ARAMES LTDA., que garantirá a vedação de acesso por terceiros e anonimizará os dados.
Os seus dados pessoais serão excluídos com uso de métodos de descarte seguro ou utilizados de forma anonimizada para fins estatísticos, após o prazo legal de manutenção.
Observação:
Caso a BELGO BEKAERT ARAMES LTDA. utilize decisões unicamente automatizadas, nós iremos prestar, mediante solicitação, informações claras a respeito dos critérios e procedimentos utilizados, observados os segredos comercial e industrial.
6.1. A BELGO BEKAERT ARAMES LTDA tem um responsável por informar sobre a atuação da empresa em relação à LGPD?
Sim. É o nosso Encarregado de Proteção de Dados (DPO) que poderá ajudá-lo a entender como a empresa está atuando em relação à Lei Geral de Proteção de Dados. Além disso, o DPO é responsável por receber relatos sobre incidentes de segurança com dados pessoais. Você pode entrar em contato com nosso DPO através do e-mail: dpo@arcelormittal.com.br.
7.1. Alterações e atualizações.
Ao utilizar nossos ambientes, você reconhece o nosso direito de alterar o teor desta Política a qualquer momento, e sem prévia notificação a você, conforme a finalidade ou necessidade.
Isso poderá ocorrer para adequação e conformidade legal de disposição de lei ou norma que tenha força jurídica equivalente, cabendo a você verificá-la sempre que efetuar o acesso aos nossos ambientes ou utilizar nossos serviços. A data da última versão atualizada constará sempre ao final desta Política.
7.1.1. Ocorrendo atualizações neste documento que demandem nova coleta de consentimento, você será notificado por meio dos dados informados no seu cadastro.
7.2. Inaplicabilidade. Caso algum ponto desta Política seja considerado inaplicável por Autoridade de Dados ou judicial, as demais condições permanecerão em pleno vigor e efeito.
7.3. Comunicação. Ao interagir em nossos ambientes digitais, você reconhece que toda comunicação realizada por e-mail, SMS, aplicativos de comunicação instantânea ou qualquer outra forma digital e virtual, conforme dados informados no seu cadastro, também são válidas, eficazes e suficientes para a divulgação de qualquer assunto que se refira aos serviços que prestamos, aos seus dados, bem como às condições de sua prestação ou a qualquer outro assunto nele abordado, sendo exceção apenas o que essa Política prevê como tal.
7.4. Canal de Atendimento. Para esclarecer qualquer dúvida com relação às disposições constantes desta Política de Privacidade, você poderá entrar em contato, por meio do Fale Conosco no endereço: http://belgo.local/fale-conosco/
7.5. Lei aplicável e foro. Como a BELGO BEKAERT ARAMES LTDA oferece serviços apenas no território nacional, mesmo que você não possua domicílio no Brasil também estará submetido à legislação brasileira, concordando, portanto, que, em havendo litígio a ser solucionado, a ação deverá ser proposta no Foro da Comarca de Contagem/MG.
Para melhor compreensão desta Política, devem ser consideradas as seguintes definições e descrições dos termos abaixo:
(i) Dados: Quaisquer informações inseridas, tratadas ou transmitidas através dos Nossos Ambientes digitais.
(ii) Dados Pessoais: Dados relacionados a pessoa natural identificada ou identificável.
(iii) Anonimização: Utilização de meios técnicos razoáveis e disponíveis no momento do tratamento de dados, por meio dos quais um dado perde a possibilidade de ser associado, direta ou indiretamente, a um indivíduo.
(iv) Cloud Computing: Ou computação em nuvem, é a tecnologia de virtualização de serviços construída a partir da interligação de mais de um servidor por meio de uma rede de informação comum (p.ex. a Internet), com objetivo de reduzir custos e aumentar a disponibilidade dos serviços oferecidos.
(v) Nossos Ambientes: Plataformas digitais e aplicações de propriedade da BELGO BEKAERT ARAMES LTDA.
(vi) Conta de Acesso: Credencial necessária para utilizar ou acessar as funcionalidades exclusivas dos Nossos Ambientes.
(vii) Cookies: Pequenos arquivos enviados pelos Nossos Ambientes e salvos nos seus dispositivos, que armazenam as preferências e outras informações, com a finalidade de personalizar sua navegação de acordo com o seu perfil.
(viii) Decisões unicamente automatizadas: Trata-se de decisões que foram programadas para funcionar automaticamente, sem a necessidade de uma operação humana, com base em tratamento automatizado de dados pessoais.
(ix) Tratamento: Toda operação realizada com dados pessoais, como as que se referem a coleta, produção, recepção, classificação, utilização, acesso, reprodução, transmissão, distribuição, processamento, arquivamento, armazenamento, eliminação, avaliação ou controle da informação, modificação, comunicação, transferência, difusão ou extração.
Atualização: Política de Privacidade | Versão 1 | 28 de Janeiro de 2022
PRIVACY POLICY
1. Introduction
A ArcelorMittal Brasil adota procedimentos de Proteção de Dados alinhados ao padrão aplicado pelo
Grupo ArcelorMittal mundialmente, que estão também em conformidade com a Lei Geral de
Proteção de Dados Pessoais (Lei nº 13.709/2018, conhecida como LGPD). Nossa Política de
Privacidade tem por finalidade demonstrar, com clareza e transparência, como a ArcelorMittal Brasil
coleta e usa dados pessoais dos diferentes públicos que utilizam nossos sites e aplicativos. Nossas
plataformas digitais ou aplicações também possuem Termos de Uso específicos para o tratamento
de dados pessoais, que são complementares a esta Política e estão também alinhados aos nossos
padrões globais e à LGPD.
2. About the data we collect
2.1. How and why do we collect Data?
Data, including Personal Data, may be collected when you submit it when you register for a service or when you interact with our environments and services.
In general, you are not required to disclose your personal data as a condition of using our website or application.
However, in your interactions, ArcelorMittal Brazil will ask you to provide some of your personal data, such as name, email, telephone and address. This will be done when this data is deemed necessary for that type of interaction. If you choose not to provide some of this data, we may be
2.2. Who updates or confirms the veracity of the data?
You are responsible for providing your personal data in full and truthful manner. In order for ArcelorMittal Brazil to maintain the veracity and accuracy of its data, we provide the Contact Us Service Channel at: https://brasil.arcelormittal.- com/faleconosco/contato#direitos-titulares. Through it, you can
request the correction and updating of your data that is incomplete, inaccurate or out of date.
It is important to note that we are not obliged to process or handle any of your data if there is reason to believe that
such processing or handling may impute any violation of any applicable law to us, or if you are using our environments for any purposes that are illegal, unlawful or contrary to our Integrity Culture.
2.3. Who is responsible for the data collected?
The database created through data collection is owned by us and is under our responsibility, and its use, access and
sharing, when necessary, will be done within the limits and purposes of the business described in this Policy.
2.4. . Does ArcelorMittal Brazil use cookies and similar
technologies?
Yes. Cookies are small text files that are placed on your computer by the websites you visit. They are widely used
to make websites work more efficiently. In addition to providing your information to ArcelorMittal Brazil, cookies
allow us to store your preferences and thus give you a personalized and more agile service.
You may control the data collected by cookies through your internet browser or through other options available in our Cookie Policies.
2.4.1. Yes. Cookies are small text files that are placed on your computer by the websites you visit. They are widely used to make websites work more efficiently. In addition to providing your information to ArcelorMittal Brazil, cookies allow us to store your preferences and thus give you a personalized and more agile service.
You may control the data collected by cookies through your internet browser or through other options available in our Cookie Policies.
2.4.2. Can you prevent the use of these mechanisms to collect your data? Yes, you can block the collection of data
from these tracking mechanisms directly in your web browser, using the “Private or Anonymous Browsing” feature
IMPORTANT: If you use “Private or Anonymous Browsing”, ArcelorMittal Brazil cannot guarantee the
correct functioning of your navigation on our websites. We also cannot guarantee that your browser will block all
tracking mechanisms. Thus, ArcelorMittal Brazil is not responsible for any damages caused to the Data Subject
by the incorrect operation of the “Private or Anonymous Browsing” function.
2.4.3. Is the use of these technologies provided for by law?
Yes. All technologies we use are in accordance with current legislation and the terms of our Privacy Policy.
Data collected and activities recorded may be shared:
(i) Among the subsidiaries of ArcelorMittal worldwide;
(ii) With competent judicial, administrative or governmental authorities, whenever there is a legal determination, request, requisition or court order;
(iii) Automatically, in case of corporate transactions such as merger, acquisition and incorporation;
(iv) With third parties, as detailed in the Terms of Use of our websites and applications.
4.1. Who has access to the Personal Data collected by ArcelorMittal Brazil?
Regarding the sharing of passwords, you are also responsible for the confidentiality of your Personal Data
and should always be aware that the sharing of passwords and access data violates our Privacy Policy and may compromise the security of your data and our environments. So make sure you never share the access
account and password you use to interact on our websites and applications.
For ArcelorMittal Brazil, the security of the personal data processed is extremely important. Therefore, we adopt all possible technical and administrative measures to ensure the security of information on our websites and applications, through protocols, controls, policies, procedures and guidelines to maintain such measures.
Internally, the Personal Data collected is accessed only by duly authorized professionals, respecting the principles of
proportionality, necessity and relevance to the objectives of our business. All such professionals are aware of their
responsibilities to maintain our commitment to confidentiality and preservation of your privacy under this
Policy.
4.2. How does this Policy work when you access an
external link through our websites and applications?
If, during your navigation in our digital environments, you are led via link to other portals or platforms, you should be aware that these external environments may collect your information and, in general, will have their own data processing policies.
Therefore, we emphasize that, whenever this occurs, you should read the Privacy and Data Processing Policies of such portals or platforms, and it is your responsibility to accept or reject them. We are not responsible for the
privacy and data processing policies of third parties, nor for the content of these external digital environments.
4.3. Can there be data processing by third parties
under our guideline?
Yes. We may hire third-party companies to process, on our behalf, the personal data we collect. When this occurs,
these companies will respect, by contractual obligation, the conditions stipulated herein and our information security
standards.
The personal data collected and the activity records are stored in a safe and controlled environment, being kept
only for the necessary period, with two basic premises:
(i) For the duration of the relationship between you and
ArcelorMittal Brazil;
(ii) For the period necessary for us to comply with our
global legal and contractual obligations.
Longer storage periods may occur, for example, for the purposes of audit, security, fraud control, credit protection
and preservation of rights, according to hypotheses established by law or regulatory standard.
In the context of ArcelorMittal Brazil’s Personal Data processing activities, your Personal Data may be shared
with third parties located outside Brazil for the performance and development of activities by ArcelorMittal Brazil and other companies in its corporate group.
6.1. What is the purpose of the international transfer o
personal data?
International transfers may be carried out for activities suchas: (i) the active processing of Personal Data in Cloud
Computing and physical media used by ArcelorMittal Brazil and companies in its corporate group, including for
payment processing and other operational and administrative activities; (ii) the storage of Personal Data in
Cloud Computing and physical media, including the creation, maintenance, and restoration of backups; (iii)
sharing with ArcelorMittal Brazil’s corporate group for the purposes of coordinating global operations, offering
products and services to customers, and managing human resources; (iv) the use of specialized vendors located in
other countries; and (v) ensuring compliance with ArcelorMittal Brazil’s legal and/or regulatory obligations.
6.2. What personal data may be transferred abroad?
All Personal Data indicated in this Policy may be transferred internationally outside Brazilian territory, given
the purposes listed above.
6.3. To what countries may personal data be transferred?
Personal data may be transferred to and processed in different locations, depending on the needs of ArcelorMittal
Brazil’s operations. In this regard, transfers may occur to countries where its servers, applications, services,
vendors, and other companies in ArcelorMittal Brazil’s corporate group are located, such as the United States and
European Union Member States including Luxembourg, Ireland, France, the Netherlands, and Belgium
6.4. What additional rights do you have?
Data subjects have the right to request a copy of the clauses used to carry out the international transfer of
data—subject to ArcelorMittal Brazil’s trade and industrial secrets—through the channels indicated in Section 7.
6.5. For how long will my personal data be transferred internationally?
The international transfer of personal data may be carried out for as long as necessary to fulfill the purposes indicated in this Policy and in light of other contracts and/or agreements entered into with third parties and/or clients.
The sharing period may vary according to the nature of the personal data transferred, the purposes, and other
applicable legal requirements.
6.6. On what mechanism and guarantees of
compliance is the international transfer based?
International transfers of personal data to recipients located in countries outside Brazil that do not offer an
adequate level of protection will be based on appropriate safeguards, such as binding corporate rules (BCRs),
Standard Contractual Clauses approved by the Brazilian Data Protection Authority (ANPD), or on specific
contractual clauses, or by adopting other international transfer mechanisms provided for in the LGPD and other
applicable rules, in addition to supplementary measures to protect your personal data. When recipients are located in
a country outside Brazil that is subject to an ANPD adequacy decision, the Personal Data will be transferred
on the basis of that adequacy decision. ArcelorMittal Brazil adopts the controls described in Section 4 (“How do we protect your data and how can you also protect it?”) to ensure the security of personal data transferred outside
Brazil.
7. What are your rights and how to exercise them?
As a holder of Personal Data you have the following rights, which can be requested from ArcelorMittal Brazil through
Contact Us at: https://brasil.arcelormittal.com/fale-conosco/contato#direitos-titulares
(i) Know what personal data ArcelorMittal Brazil has
about you;
(ii) Correct your personal data;
(iii) Request the deletion of your personal data;
(iv) Dispute the processing carried out with your personal
data;
(v) Review automated decisions involving your personal
data;
(vi) Revoke your consent;
(vii) Request the portability of your personal data;
(viii) Request anonymization, blocking or deletion of your
personal data;
(ix) Request information about the sharing of your data in
Brazil and/or abroad;
(x) Confirm that your personal data is being processed. If you request the deletion of your Personal Data, it may
occur that it is maintained for a period after to your request, in the cases provided for in Article 16 of the General
Personal Data Protection Law, that is, to:
(i) Compliance with legal or regulatory obligation;
(ii) Study by research agency;
(iii) Transfer to a third party (in compliance with the data
processing requirements set forth in the same Law);
(iv) Exclusive use of ArcelorMittal Brazil, which will
guarantee the prohibition of access by third parties and
anonymize the data.
Your personal data will be deleted using secure disposal methods or used anonymously for statistical purposes after
the legal maintenance period.
Note:
If ArcelorMittal Brazil uses solely automated decisions, we will provide, upon request, clear information regarding the criteria and procedures used, taking into account commercial and industrial secrets.
7.1. Does ArcelorMittal Brazil have a person responsible for informing about the company’s
performance in relation to LGPD?
Yes. It is our Data Protection Officer (DPO) who can help you understand how ArcelorMittal Brazil is acting in relation to the General Data Protection Law. In addition, the DPO is responsible for receiving reports of personal data security incidents. You can contact Marcelo Araujo, DPO of ArcelorMittal Brazil, via email at
dpo@arcelormittal.com.br
8. More Information
8.1. Changes and updates.
By using our environments, you acknowledge our right to change the content of this Policy at any time, and without
prior notice to you, depending on the purpose or need.
This may occur for the adequacy and legal compliance of a provision of law or standard that has equivalent legal
force, and it is up to you to verify it whenever you access our environments or use our services. The date of the last
updated version will always appear at the end of this Policy.
8.1.1. If there are updates to this document that require a new collection of consent, you will be notified through the
data informed in your registration.
8.2. Inapplicability. If any point of this Policy is considered inapplicable by the Data or judicial Authority, the other
conditions will remain in full force and effect.
8.3. Communication. By interacting in our digital environments, you acknowledge that all communication
carried out by e-mail, SMS, instant communication applications or any other digital and virtual form, according
to the data informed in your registration, are also valid, effective and sufficient for the disclosure of any subject that refers to the services we provide, your data, as well as the conditions of its provision or any other subject addressed
therein, with the exception only what this Policy provides as such.
8.4. Service Channel. To clarify any doubts regarding the provisions of this Privacy Policy, you can contact us
through Contact Us at:
https://Brazil.arcelormittal.com/faleconosco/contato#
direitos-titulares.
8.5. Governing law and venue. As ArcelorMittal Brazi offers services only in the national territory, even if you do
not have a domicile in Brazil, you will also be subject to Brazilian law, therefore agreeing that, in the event of a
dispute to be resolved, the action must be filed in the District Court of Belo Horizonte/MG.
8. Glossary
For a better understanding of this Policy, the following definitions and descriptions of the terms below should be
considered:
(i) Data: Any information entered, processed or
transmitted through our Digital Environments.
(ii) Personal Data: Data related to the identified or
identifiable natural person.
(iii) Anonymization: Use of reasonable and available
technical means at the time of data processing, whereby a
data loses the possibility of being associated, directly or
indirectly, with an individual.
(iv) Cloud Computing: Is the service virtualization
technology built from the interconnection of more than one
server through a common information network (e.g. the
Internet), with the objective of reducing costs and increasing
the availability of the services offered.
(v) Our Environments: Digital platforms and applications
owned by ArcelorMittal Brazil.
(vi) Access Account: Credential required to use or access
the exclusive functionalities of Our Environments.
(vii) Cookies: Small files sent by Our Environments and
saved on your devices, which store preferences and other
information, in order to personalize your navigation
according to your profile.
(viii) Uniquely automated decisions: These are decisions
that have been programmed to work automatically, without
the need for a human operation, based on automated
processing of personal data.
(ix) Processing: Any operation involving personal data,
such as those related to the collection, production,
reception, classification, use, access, reproduction,
transmission, distribution, processing, filing, storage,
elimination, evaluation or control of information, change,
communication, transfer, dissemination or extraction.
ArcelorMittal Brazil | Privacy Policy | Version 2 | September 22, 2025
PRIVACY POLICY
1. Introduction
A ArcelorMittal Brasil adota procedimentos de Proteção de Dados alinhados ao padrão aplicado pelo
Grupo ArcelorMittal mundialmente, que estão também em conformidade com a Lei Geral de
Proteção de Dados Pessoais (Lei nº 13.709/2018, conhecida como LGPD). Nossa Política de
Privacidade tem por finalidade demonstrar, com clareza e transparência, como a ArcelorMittal Brasil
coleta e usa dados pessoais dos diferentes públicos que utilizam nossos sites e aplicativos. Nossas
plataformas digitais ou aplicações também possuem Termos de Uso específicos para o tratamento
de dados pessoais, que são complementares a esta Política e estão também alinhados aos nossos
padrões globais e à LGPD.
2. About the data we collect
2.1. How and why do we collect Data?
Data, including Personal Data, may be collected when you submit it when you register for a service or when you interact with our environments and services.
In general, you are not required to disclose your personal data as a condition of using our website or application.
However, in your interactions, ArcelorMittal Brazil will ask you to provide some of your personal data, such as name, email, telephone and address. This will be done when this data is deemed necessary for that type of interaction. If you choose not to provide some of this data, we may be
2.2. Who updates or confirms the veracity of the data?
You are responsible for providing your personal data in full and truthful manner. In order for ArcelorMittal Brazil to maintain the veracity and accuracy of its data, we provide the Contact Us Service Channel at: https://brasil.arcelormittal.- com/faleconosco/contato#direitos-titulares. Through it, you can
request the correction and updating of your data that is incomplete, inaccurate or out of date.
It is important to note that we are not obliged to process or handle any of your data if there is reason to believe that
such processing or handling may impute any violation of any applicable law to us, or if you are using our environments for any purposes that are illegal, unlawful or contrary to our Integrity Culture.
2.3. Who is responsible for the data collected?
The database created through data collection is owned by us and is under our responsibility, and its use, access and
sharing, when necessary, will be done within the limits and purposes of the business described in this Policy.
2.4. . Does ArcelorMittal Brazil use cookies and similar
technologies?
Yes. Cookies are small text files that are placed on your computer by the websites you visit. They are widely used
to make websites work more efficiently. In addition to providing your information to ArcelorMittal Brazil, cookies
allow us to store your preferences and thus give you a personalized and more agile service.
You may control the data collected by cookies through your internet browser or through other options available in our Cookie Policies.
2.4.1. Yes. Cookies are small text files that are placed on your computer by the websites you visit. They are widely used to make websites work more efficiently. In addition to providing your information to ArcelorMittal Brazil, cookies allow us to store your preferences and thus give you a personalized and more agile service.
You may control the data collected by cookies through your internet browser or through other options available in our Cookie Policies.
2.4.2. Can you prevent the use of these mechanisms to collect your data? Yes, you can block the collection of data
from these tracking mechanisms directly in your web browser, using the “Private or Anonymous Browsing” feature
IMPORTANT: If you use “Private or Anonymous Browsing”, ArcelorMittal Brazil cannot guarantee the
correct functioning of your navigation on our websites. We also cannot guarantee that your browser will block all
tracking mechanisms. Thus, ArcelorMittal Brazil is not responsible for any damages caused to the Data Subject
by the incorrect operation of the “Private or Anonymous Browsing” function.
2.4.3. Is the use of these technologies provided for by law?
Yes. All technologies we use are in accordance with current legislation and the terms of our Privacy Policy.
Data collected and activities recorded may be shared:
(i) Among the subsidiaries of ArcelorMittal worldwide;
(ii) With competent judicial, administrative or governmental authorities, whenever there is a legal determination, request, requisition or court order;
(iii) Automatically, in case of corporate transactions such as merger, acquisition and incorporation;
(iv) With third parties, as detailed in the Terms of Use of our websites and applications.
4.1. Who has access to the Personal Data collected by ArcelorMittal Brazil?
Regarding the sharing of passwords, you are also responsible for the confidentiality of your Personal Data
and should always be aware that the sharing of passwords and access data violates our Privacy Policy and may compromise the security of your data and our environments. So make sure you never share the access
account and password you use to interact on our websites and applications.
For ArcelorMittal Brazil, the security of the personal data processed is extremely important. Therefore, we adopt all possible technical and administrative measures to ensure the security of information on our websites and applications, through protocols, controls, policies, procedures and guidelines to maintain such measures.
Internally, the Personal Data collected is accessed only by duly authorized professionals, respecting the principles of
proportionality, necessity and relevance to the objectives of our business. All such professionals are aware of their
responsibilities to maintain our commitment to confidentiality and preservation of your privacy under this
Policy.
4.2. How does this Policy work when you access an
external link through our websites and applications?
If, during your navigation in our digital environments, you are led via link to other portals or platforms, you should be aware that these external environments may collect your information and, in general, will have their own data processing policies.
Therefore, we emphasize that, whenever this occurs, you should read the Privacy and Data Processing Policies of such portals or platforms, and it is your responsibility to accept or reject them. We are not responsible for the
privacy and data processing policies of third parties, nor for the content of these external digital environments.
4.3. Can there be data processing by third parties
under our guideline?
Yes. We may hire third-party companies to process, on our behalf, the personal data we collect. When this occurs,
these companies will respect, by contractual obligation, the conditions stipulated herein and our information security
standards.
The personal data collected and the activity records are stored in a safe and controlled environment, being kept
only for the necessary period, with two basic premises:
(i) For the duration of the relationship between you and
ArcelorMittal Brazil;
(ii) For the period necessary for us to comply with our
global legal and contractual obligations.
Longer storage periods may occur, for example, for the purposes of audit, security, fraud control, credit protection
and preservation of rights, according to hypotheses established by law or regulatory standard.
In the context of ArcelorMittal Brazil’s Personal Data processing activities, your Personal Data may be shared
with third parties located outside Brazil for the performance and development of activities by ArcelorMittal Brazil and other companies in its corporate group.
6.1. What is the purpose of the international transfer o
personal data?
International transfers may be carried out for activities suchas: (i) the active processing of Personal Data in Cloud
Computing and physical media used by ArcelorMittal Brazil and companies in its corporate group, including for
payment processing and other operational and administrative activities; (ii) the storage of Personal Data in
Cloud Computing and physical media, including the creation, maintenance, and restoration of backups; (iii)
sharing with ArcelorMittal Brazil’s corporate group for the purposes of coordinating global operations, offering
products and services to customers, and managing human resources; (iv) the use of specialized vendors located in
other countries; and (v) ensuring compliance with ArcelorMittal Brazil’s legal and/or regulatory obligations.
6.2. What personal data may be transferred abroad?
All Personal Data indicated in this Policy may be transferred internationally outside Brazilian territory, given
the purposes listed above.
6.3. To what countries may personal data be transferred?
Personal data may be transferred to and processed in different locations, depending on the needs of ArcelorMittal
Brazil’s operations. In this regard, transfers may occur to countries where its servers, applications, services,
vendors, and other companies in ArcelorMittal Brazil’s corporate group are located, such as the United States and
European Union Member States including Luxembourg, Ireland, France, the Netherlands, and Belgium
6.4. What additional rights do you have?
Data subjects have the right to request a copy of the clauses used to carry out the international transfer of
data—subject to ArcelorMittal Brazil’s trade and industrial secrets—through the channels indicated in Section 7.
6.5. For how long will my personal data be transferred internationally?
The international transfer of personal data may be carried out for as long as necessary to fulfill the purposes indicated in this Policy and in light of other contracts and/or agreements entered into with third parties and/or clients.
The sharing period may vary according to the nature of the personal data transferred, the purposes, and other
applicable legal requirements.
6.6. On what mechanism and guarantees of
compliance is the international transfer based?
International transfers of personal data to recipients located in countries outside Brazil that do not offer an
adequate level of protection will be based on appropriate safeguards, such as binding corporate rules (BCRs),
Standard Contractual Clauses approved by the Brazilian Data Protection Authority (ANPD), or on specific
contractual clauses, or by adopting other international transfer mechanisms provided for in the LGPD and other
applicable rules, in addition to supplementary measures to protect your personal data. When recipients are located in
a country outside Brazil that is subject to an ANPD adequacy decision, the Personal Data will be transferred
on the basis of that adequacy decision. ArcelorMittal Brazil adopts the controls described in Section 4 (“How do we protect your data and how can you also protect it?”) to ensure the security of personal data transferred outside
Brazil.
7. What are your rights and how to exercise them?
As a holder of Personal Data you have the following rights, which can be requested from ArcelorMittal Brazil through
Contact Us at: https://brasil.arcelormittal.com/fale-conosco/contato#direitos-titulares
(i) Know what personal data ArcelorMittal Brazil has
about you;
(ii) Correct your personal data;
(iii) Request the deletion of your personal data;
(iv) Dispute the processing carried out with your personal
data;
(v) Review automated decisions involving your personal
data;
(vi) Revoke your consent;
(vii) Request the portability of your personal data;
(viii) Request anonymization, blocking or deletion of your
personal data;
(ix) Request information about the sharing of your data in
Brazil and/or abroad;
(x) Confirm that your personal data is being processed. If you request the deletion of your Personal Data, it may
occur that it is maintained for a period after to your request, in the cases provided for in Article 16 of the General
Personal Data Protection Law, that is, to:
(i) Compliance with legal or regulatory obligation;
(ii) Study by research agency;
(iii) Transfer to a third party (in compliance with the data
processing requirements set forth in the same Law);
(iv) Exclusive use of ArcelorMittal Brazil, which will
guarantee the prohibition of access by third parties and
anonymize the data.
Your personal data will be deleted using secure disposal methods or used anonymously for statistical purposes after
the legal maintenance period.
Note:
If ArcelorMittal Brazil uses solely automated decisions, we will provide, upon request, clear information regarding the criteria and procedures used, taking into account commercial and industrial secrets.
7.1. Does ArcelorMittal Brazil have a person responsible for informing about the company’s
performance in relation to LGPD?
Yes. It is our Data Protection Officer (DPO) who can help you understand how ArcelorMittal Brazil is acting in relation to the General Data Protection Law. In addition, the DPO is responsible for receiving reports of personal data security incidents. You can contact Marcelo Araujo, DPO of ArcelorMittal Brazil, via email at
dpo@arcelormittal.com.br
8. More Information
8.1. Changes and updates.
By using our environments, you acknowledge our right to change the content of this Policy at any time, and without
prior notice to you, depending on the purpose or need.
This may occur for the adequacy and legal compliance of a provision of law or standard that has equivalent legal
force, and it is up to you to verify it whenever you access our environments or use our services. The date of the last
updated version will always appear at the end of this Policy.
8.1.1. If there are updates to this document that require a new collection of consent, you will be notified through the
data informed in your registration.
8.2. Inapplicability. If any point of this Policy is considered inapplicable by the Data or judicial Authority, the other
conditions will remain in full force and effect.
8.3. Communication. By interacting in our digital environments, you acknowledge that all communication
carried out by e-mail, SMS, instant communication applications or any other digital and virtual form, according
to the data informed in your registration, are also valid, effective and sufficient for the disclosure of any subject that refers to the services we provide, your data, as well as the conditions of its provision or any other subject addressed
therein, with the exception only what this Policy provides as such.
8.4. Service Channel. To clarify any doubts regarding the provisions of this Privacy Policy, you can contact us
through Contact Us at:
https://Brazil.arcelormittal.com/faleconosco/contato#
direitos-titulares.
8.5. Governing law and venue. As ArcelorMittal Brazi offers services only in the national territory, even if you do
not have a domicile in Brazil, you will also be subject to Brazilian law, therefore agreeing that, in the event of a
dispute to be resolved, the action must be filed in the District Court of Belo Horizonte/MG.
8. Glossary
For a better understanding of this Policy, the following definitions and descriptions of the terms below should be
considered:
(i) Data: Any information entered, processed or
transmitted through our Digital Environments.
(ii) Personal Data: Data related to the identified or
identifiable natural person.
(iii) Anonymization: Use of reasonable and available
technical means at the time of data processing, whereby a
data loses the possibility of being associated, directly or
indirectly, with an individual.
(iv) Cloud Computing: Is the service virtualization
technology built from the interconnection of more than one
server through a common information network (e.g. the
Internet), with the objective of reducing costs and increasing
the availability of the services offered.
(v) Our Environments: Digital platforms and applications
owned by ArcelorMittal Brazil.
(vi) Access Account: Credential required to use or access
the exclusive functionalities of Our Environments.
(vii) Cookies: Small files sent by Our Environments and
saved on your devices, which store preferences and other
information, in order to personalize your navigation
according to your profile.
(viii) Uniquely automated decisions: These are decisions
that have been programmed to work automatically, without
the need for a human operation, based on automated
processing of personal data.
(ix) Processing: Any operation involving personal data,
such as those related to the collection, production,
reception, classification, use, access, reproduction,
transmission, distribution, processing, filing, storage,
elimination, evaluation or control of information, change,
communication, transfer, dissemination or extraction.
ArcelorMittal Brazil | Privacy Policy | Version 2 | September 22, 2025
PRIVACY POLICY
1. Introduction
A ArcelorMittal Brasil adota procedimentos de Proteção de Dados alinhados ao padrão aplicado pelo
Grupo ArcelorMittal mundialmente, que estão também em conformidade com a Lei Geral de
Proteção de Dados Pessoais (Lei nº 13.709/2018, conhecida como LGPD). Nossa Política de
Privacidade tem por finalidade demonstrar, com clareza e transparência, como a ArcelorMittal Brasil
coleta e usa dados pessoais dos diferentes públicos que utilizam nossos sites e aplicativos. Nossas
plataformas digitais ou aplicações também possuem Termos de Uso específicos para o tratamento
de dados pessoais, que são complementares a esta Política e estão também alinhados aos nossos
padrões globais e à LGPD.
2. About the data we collect
2.1. How and why do we collect Data?
Data, including Personal Data, may be collected when you submit it when you register for a service or when you interact with our environments and services.
In general, you are not required to disclose your personal data as a condition of using our website or application.
However, in your interactions, ArcelorMittal Brazil will ask you to provide some of your personal data, such as name, email, telephone and address. This will be done when this data is deemed necessary for that type of interaction. If you choose not to provide some of this data, we may be
2.2. Who updates or confirms the veracity of the data?
You are responsible for providing your personal data in full and truthful manner. In order for ArcelorMittal Brazil to maintain the veracity and accuracy of its data, we provide the Contact Us Service Channel at: https://brasil.arcelormittal.- com/faleconosco/contato#direitos-titulares. Through it, you can
request the correction and updating of your data that is incomplete, inaccurate or out of date.
It is important to note that we are not obliged to process or handle any of your data if there is reason to believe that
such processing or handling may impute any violation of any applicable law to us, or if you are using our environments for any purposes that are illegal, unlawful or contrary to our Integrity Culture.
2.3. Who is responsible for the data collected?
The database created through data collection is owned by us and is under our responsibility, and its use, access and
sharing, when necessary, will be done within the limits and purposes of the business described in this Policy.
2.4. . Does ArcelorMittal Brazil use cookies and similar
technologies?
Yes. Cookies are small text files that are placed on your computer by the websites you visit. They are widely used
to make websites work more efficiently. In addition to providing your information to ArcelorMittal Brazil, cookies
allow us to store your preferences and thus give you a personalized and more agile service.
You may control the data collected by cookies through your internet browser or through other options available in our Cookie Policies.
2.4.1. Yes. Cookies are small text files that are placed on your computer by the websites you visit. They are widely used to make websites work more efficiently. In addition to providing your information to ArcelorMittal Brazil, cookies allow us to store your preferences and thus give you a personalized and more agile service.
You may control the data collected by cookies through your internet browser or through other options available in our Cookie Policies.
2.4.2. Can you prevent the use of these mechanisms to collect your data? Yes, you can block the collection of data
from these tracking mechanisms directly in your web browser, using the “Private or Anonymous Browsing” feature
IMPORTANT: If you use “Private or Anonymous Browsing”, ArcelorMittal Brazil cannot guarantee the
correct functioning of your navigation on our websites. We also cannot guarantee that your browser will block all
tracking mechanisms. Thus, ArcelorMittal Brazil is not responsible for any damages caused to the Data Subject
by the incorrect operation of the “Private or Anonymous Browsing” function.
2.4.3. Is the use of these technologies provided for by law?
Yes. All technologies we use are in accordance with current legislation and the terms of our Privacy Policy.
Data collected and activities recorded may be shared:
(i) Among the subsidiaries of ArcelorMittal worldwide;
(ii) With competent judicial, administrative or governmental authorities, whenever there is a legal determination, request, requisition or court order;
(iii) Automatically, in case of corporate transactions such as merger, acquisition and incorporation;
(iv) With third parties, as detailed in the Terms of Use of our websites and applications.
4.1. Who has access to the Personal Data collected by ArcelorMittal Brazil?
Regarding the sharing of passwords, you are also responsible for the confidentiality of your Personal Data
and should always be aware that the sharing of passwords and access data violates our Privacy Policy and may compromise the security of your data and our environments. So make sure you never share the access
account and password you use to interact on our websites and applications.
For ArcelorMittal Brazil, the security of the personal data processed is extremely important. Therefore, we adopt all possible technical and administrative measures to ensure the security of information on our websites and applications, through protocols, controls, policies, procedures and guidelines to maintain such measures.
Internally, the Personal Data collected is accessed only by duly authorized professionals, respecting the principles of
proportionality, necessity and relevance to the objectives of our business. All such professionals are aware of their
responsibilities to maintain our commitment to confidentiality and preservation of your privacy under this
Policy.
4.2. How does this Policy work when you access an
external link through our websites and applications?
If, during your navigation in our digital environments, you are led via link to other portals or platforms, you should be aware that these external environments may collect your information and, in general, will have their own data processing policies.
Therefore, we emphasize that, whenever this occurs, you should read the Privacy and Data Processing Policies of such portals or platforms, and it is your responsibility to accept or reject them. We are not responsible for the
privacy and data processing policies of third parties, nor for the content of these external digital environments.
4.3. Can there be data processing by third parties
under our guideline?
Yes. We may hire third-party companies to process, on our behalf, the personal data we collect. When this occurs,
these companies will respect, by contractual obligation, the conditions stipulated herein and our information security
standards.
The personal data collected and the activity records are stored in a safe and controlled environment, being kept
only for the necessary period, with two basic premises:
(i) For the duration of the relationship between you and
ArcelorMittal Brazil;
(ii) For the period necessary for us to comply with our
global legal and contractual obligations.
Longer storage periods may occur, for example, for the purposes of audit, security, fraud control, credit protection
and preservation of rights, according to hypotheses established by law or regulatory standard.
In the context of ArcelorMittal Brazil’s Personal Data processing activities, your Personal Data may be shared
with third parties located outside Brazil for the performance and development of activities by ArcelorMittal Brazil and other companies in its corporate group.
6.1. What is the purpose of the international transfer o
personal data?
International transfers may be carried out for activities suchas: (i) the active processing of Personal Data in Cloud
Computing and physical media used by ArcelorMittal Brazil and companies in its corporate group, including for
payment processing and other operational and administrative activities; (ii) the storage of Personal Data in
Cloud Computing and physical media, including the creation, maintenance, and restoration of backups; (iii)
sharing with ArcelorMittal Brazil’s corporate group for the purposes of coordinating global operations, offering
products and services to customers, and managing human resources; (iv) the use of specialized vendors located in
other countries; and (v) ensuring compliance with ArcelorMittal Brazil’s legal and/or regulatory obligations.
6.2. What personal data may be transferred abroad?
All Personal Data indicated in this Policy may be transferred internationally outside Brazilian territory, given
the purposes listed above.
6.3. To what countries may personal data be transferred?
Personal data may be transferred to and processed in different locations, depending on the needs of ArcelorMittal
Brazil’s operations. In this regard, transfers may occur to countries where its servers, applications, services,
vendors, and other companies in ArcelorMittal Brazil’s corporate group are located, such as the United States and
European Union Member States including Luxembourg, Ireland, France, the Netherlands, and Belgium
6.4. What additional rights do you have?
Data subjects have the right to request a copy of the clauses used to carry out the international transfer of
data—subject to ArcelorMittal Brazil’s trade and industrial secrets—through the channels indicated in Section 7.
6.5. For how long will my personal data be transferred internationally?
The international transfer of personal data may be carried out for as long as necessary to fulfill the purposes indicated in this Policy and in light of other contracts and/or agreements entered into with third parties and/or clients.
The sharing period may vary according to the nature of the personal data transferred, the purposes, and other
applicable legal requirements.
6.6. On what mechanism and guarantees of
compliance is the international transfer based?
International transfers of personal data to recipients located in countries outside Brazil that do not offer an
adequate level of protection will be based on appropriate safeguards, such as binding corporate rules (BCRs),
Standard Contractual Clauses approved by the Brazilian Data Protection Authority (ANPD), or on specific
contractual clauses, or by adopting other international transfer mechanisms provided for in the LGPD and other
applicable rules, in addition to supplementary measures to protect your personal data. When recipients are located in
a country outside Brazil that is subject to an ANPD adequacy decision, the Personal Data will be transferred
on the basis of that adequacy decision. ArcelorMittal Brazil adopts the controls described in Section 4 (“How do we protect your data and how can you also protect it?”) to ensure the security of personal data transferred outside
Brazil.
7. What are your rights and how to exercise them?
As a holder of Personal Data you have the following rights, which can be requested from ArcelorMittal Brazil through
Contact Us at: https://brasil.arcelormittal.com/fale-conosco/contato#direitos-titulares
(i) Know what personal data ArcelorMittal Brazil has
about you;
(ii) Correct your personal data;
(iii) Request the deletion of your personal data;
(iv) Dispute the processing carried out with your personal
data;
(v) Review automated decisions involving your personal
data;
(vi) Revoke your consent;
(vii) Request the portability of your personal data;
(viii) Request anonymization, blocking or deletion of your
personal data;
(ix) Request information about the sharing of your data in
Brazil and/or abroad;
(x) Confirm that your personal data is being processed. If you request the deletion of your Personal Data, it may
occur that it is maintained for a period after to your request, in the cases provided for in Article 16 of the General
Personal Data Protection Law, that is, to:
(i) Compliance with legal or regulatory obligation;
(ii) Study by research agency;
(iii) Transfer to a third party (in compliance with the data
processing requirements set forth in the same Law);
(iv) Exclusive use of ArcelorMittal Brazil, which will
guarantee the prohibition of access by third parties and
anonymize the data.
Your personal data will be deleted using secure disposal methods or used anonymously for statistical purposes after
the legal maintenance period.
Note:
If ArcelorMittal Brazil uses solely automated decisions, we will provide, upon request, clear information regarding the criteria and procedures used, taking into account commercial and industrial secrets.
7.1. Does ArcelorMittal Brazil have a person responsible for informing about the company’s
performance in relation to LGPD?
Yes. It is our Data Protection Officer (DPO) who can help you understand how ArcelorMittal Brazil is acting in relation to the General Data Protection Law. In addition, the DPO is responsible for receiving reports of personal data security incidents. You can contact Marcelo Araujo, DPO of ArcelorMittal Brazil, via email at
dpo@arcelormittal.com.br
8. More Information
8.1. Changes and updates.
By using our environments, you acknowledge our right to change the content of this Policy at any time, and without
prior notice to you, depending on the purpose or need.
This may occur for the adequacy and legal compliance of a provision of law or standard that has equivalent legal
force, and it is up to you to verify it whenever you access our environments or use our services. The date of the last
updated version will always appear at the end of this Policy.
8.1.1. If there are updates to this document that require a new collection of consent, you will be notified through the
data informed in your registration.
8.2. Inapplicability. If any point of this Policy is considered inapplicable by the Data or judicial Authority, the other
conditions will remain in full force and effect.
8.3. Communication. By interacting in our digital environments, you acknowledge that all communication
carried out by e-mail, SMS, instant communication applications or any other digital and virtual form, according
to the data informed in your registration, are also valid, effective and sufficient for the disclosure of any subject that refers to the services we provide, your data, as well as the conditions of its provision or any other subject addressed
therein, with the exception only what this Policy provides as such.
8.4. Service Channel. To clarify any doubts regarding the provisions of this Privacy Policy, you can contact us
through Contact Us at:
https://Brazil.arcelormittal.com/faleconosco/contato#
direitos-titulares.
8.5. Governing law and venue. As ArcelorMittal Brazi offers services only in the national territory, even if you do
not have a domicile in Brazil, you will also be subject to Brazilian law, therefore agreeing that, in the event of a
dispute to be resolved, the action must be filed in the District Court of Belo Horizonte/MG.
8. Glossary
For a better understanding of this Policy, the following definitions and descriptions of the terms below should be
considered:
(i) Data: Any information entered, processed or
transmitted through our Digital Environments.
(ii) Personal Data: Data related to the identified or
identifiable natural person.
(iii) Anonymization: Use of reasonable and available
technical means at the time of data processing, whereby a
data loses the possibility of being associated, directly or
indirectly, with an individual.
(iv) Cloud Computing: Is the service virtualization
technology built from the interconnection of more than one
server through a common information network (e.g. the
Internet), with the objective of reducing costs and increasing
the availability of the services offered.
(v) Our Environments: Digital platforms and applications
owned by ArcelorMittal Brazil.
(vi) Access Account: Credential required to use or access
the exclusive functionalities of Our Environments.
(vii) Cookies: Small files sent by Our Environments and
saved on your devices, which store preferences and other
information, in order to personalize your navigation
according to your profile.
(viii) Uniquely automated decisions: These are decisions
that have been programmed to work automatically, without
the need for a human operation, based on automated
processing of personal data.
(ix) Processing: Any operation involving personal data,
such as those related to the collection, production,
reception, classification, use, access, reproduction,
transmission, distribution, processing, filing, storage,
elimination, evaluation or control of information, change,
communication, transfer, dissemination or extraction.
ArcelorMittal Brazil | Privacy Policy | Version 2 | September 22, 2025
PRIVACY POLICY
1. Introduction
A ArcelorMittal Brasil adota procedimentos de Proteção de Dados alinhados ao padrão aplicado pelo
Grupo ArcelorMittal mundialmente, que estão também em conformidade com a Lei Geral de
Proteção de Dados Pessoais (Lei nº 13.709/2018, conhecida como LGPD). Nossa Política de
Privacidade tem por finalidade demonstrar, com clareza e transparência, como a ArcelorMittal Brasil
coleta e usa dados pessoais dos diferentes públicos que utilizam nossos sites e aplicativos. Nossas
plataformas digitais ou aplicações também possuem Termos de Uso específicos para o tratamento
de dados pessoais, que são complementares a esta Política e estão também alinhados aos nossos
padrões globais e à LGPD.
2. About the data we collect
2.1. How and why do we collect Data?
Data, including Personal Data, may be collected when you submit it when you register for a service or when you interact with our environments and services.
In general, you are not required to disclose your personal data as a condition of using our website or application.
However, in your interactions, ArcelorMittal Brazil will ask you to provide some of your personal data, such as name, email, telephone and address. This will be done when this data is deemed necessary for that type of interaction. If you choose not to provide some of this data, we may be
2.2. Who updates or confirms the veracity of the data?
You are responsible for providing your personal data in full and truthful manner. In order for ArcelorMittal Brazil to maintain the veracity and accuracy of its data, we provide the Contact Us Service Channel at: https://brasil.arcelormittal.- com/faleconosco/contato#direitos-titulares. Through it, you can
request the correction and updating of your data that is incomplete, inaccurate or out of date.
It is important to note that we are not obliged to process or handle any of your data if there is reason to believe that
such processing or handling may impute any violation of any applicable law to us, or if you are using our environments for any purposes that are illegal, unlawful or contrary to our Integrity Culture.
2.3. Who is responsible for the data collected?
The database created through data collection is owned by us and is under our responsibility, and its use, access and
sharing, when necessary, will be done within the limits and purposes of the business described in this Policy.
2.4. . Does ArcelorMittal Brazil use cookies and similar
technologies?
Yes. Cookies are small text files that are placed on your computer by the websites you visit. They are widely used
to make websites work more efficiently. In addition to providing your information to ArcelorMittal Brazil, cookies
allow us to store your preferences and thus give you a personalized and more agile service.
You may control the data collected by cookies through your internet browser or through other options available in our Cookie Policies.
2.4.1. Yes. Cookies are small text files that are placed on your computer by the websites you visit. They are widely used to make websites work more efficiently. In addition to providing your information to ArcelorMittal Brazil, cookies allow us to store your preferences and thus give you a personalized and more agile service.
You may control the data collected by cookies through your internet browser or through other options available in our Cookie Policies.
2.4.2. Can you prevent the use of these mechanisms to collect your data? Yes, you can block the collection of data
from these tracking mechanisms directly in your web browser, using the “Private or Anonymous Browsing” feature
IMPORTANT: If you use “Private or Anonymous Browsing”, ArcelorMittal Brazil cannot guarantee the
correct functioning of your navigation on our websites. We also cannot guarantee that your browser will block all
tracking mechanisms. Thus, ArcelorMittal Brazil is not responsible for any damages caused to the Data Subject
by the incorrect operation of the “Private or Anonymous Browsing” function.
2.4.3. Is the use of these technologies provided for by law?
Yes. All technologies we use are in accordance with current legislation and the terms of our Privacy Policy.
Data collected and activities recorded may be shared:
(i) Among the subsidiaries of ArcelorMittal worldwide;
(ii) With competent judicial, administrative or governmental authorities, whenever there is a legal determination, request, requisition or court order;
(iii) Automatically, in case of corporate transactions such as merger, acquisition and incorporation;
(iv) With third parties, as detailed in the Terms of Use of our websites and applications.
4.1. Who has access to the Personal Data collected by ArcelorMittal Brazil?
Regarding the sharing of passwords, you are also responsible for the confidentiality of your Personal Data
and should always be aware that the sharing of passwords and access data violates our Privacy Policy and may compromise the security of your data and our environments. So make sure you never share the access
account and password you use to interact on our websites and applications.
For ArcelorMittal Brazil, the security of the personal data processed is extremely important. Therefore, we adopt all possible technical and administrative measures to ensure the security of information on our websites and applications, through protocols, controls, policies, procedures and guidelines to maintain such measures.
Internally, the Personal Data collected is accessed only by duly authorized professionals, respecting the principles of
proportionality, necessity and relevance to the objectives of our business. All such professionals are aware of their
responsibilities to maintain our commitment to confidentiality and preservation of your privacy under this
Policy.
4.2. How does this Policy work when you access an
external link through our websites and applications?
If, during your navigation in our digital environments, you are led via link to other portals or platforms, you should be aware that these external environments may collect your information and, in general, will have their own data processing policies.
Therefore, we emphasize that, whenever this occurs, you should read the Privacy and Data Processing Policies of such portals or platforms, and it is your responsibility to accept or reject them. We are not responsible for the
privacy and data processing policies of third parties, nor for the content of these external digital environments.
4.3. Can there be data processing by third parties
under our guideline?
Yes. We may hire third-party companies to process, on our behalf, the personal data we collect. When this occurs,
these companies will respect, by contractual obligation, the conditions stipulated herein and our information security
standards.
The personal data collected and the activity records are stored in a safe and controlled environment, being kept
only for the necessary period, with two basic premises:
(i) For the duration of the relationship between you and
ArcelorMittal Brazil;
(ii) For the period necessary for us to comply with our
global legal and contractual obligations.
Longer storage periods may occur, for example, for the purposes of audit, security, fraud control, credit protection
and preservation of rights, according to hypotheses established by law or regulatory standard.
In the context of ArcelorMittal Brazil’s Personal Data processing activities, your Personal Data may be shared
with third parties located outside Brazil for the performance and development of activities by ArcelorMittal Brazil and other companies in its corporate group.
6.1. What is the purpose of the international transfer o
personal data?
International transfers may be carried out for activities suchas: (i) the active processing of Personal Data in Cloud
Computing and physical media used by ArcelorMittal Brazil and companies in its corporate group, including for
payment processing and other operational and administrative activities; (ii) the storage of Personal Data in
Cloud Computing and physical media, including the creation, maintenance, and restoration of backups; (iii)
sharing with ArcelorMittal Brazil’s corporate group for the purposes of coordinating global operations, offering
products and services to customers, and managing human resources; (iv) the use of specialized vendors located in
other countries; and (v) ensuring compliance with ArcelorMittal Brazil’s legal and/or regulatory obligations.
6.2. What personal data may be transferred abroad?
All Personal Data indicated in this Policy may be transferred internationally outside Brazilian territory, given
the purposes listed above.
6.3. To what countries may personal data be transferred?
Personal data may be transferred to and processed in different locations, depending on the needs of ArcelorMittal
Brazil’s operations. In this regard, transfers may occur to countries where its servers, applications, services,
vendors, and other companies in ArcelorMittal Brazil’s corporate group are located, such as the United States and
European Union Member States including Luxembourg, Ireland, France, the Netherlands, and Belgium
6.4. What additional rights do you have?
Data subjects have the right to request a copy of the clauses used to carry out the international transfer of
data—subject to ArcelorMittal Brazil’s trade and industrial secrets—through the channels indicated in Section 7.
6.5. For how long will my personal data be transferred internationally?
The international transfer of personal data may be carried out for as long as necessary to fulfill the purposes indicated in this Policy and in light of other contracts and/or agreements entered into with third parties and/or clients.
The sharing period may vary according to the nature of the personal data transferred, the purposes, and other
applicable legal requirements.
6.6. On what mechanism and guarantees of
compliance is the international transfer based?
International transfers of personal data to recipients located in countries outside Brazil that do not offer an
adequate level of protection will be based on appropriate safeguards, such as binding corporate rules (BCRs),
Standard Contractual Clauses approved by the Brazilian Data Protection Authority (ANPD), or on specific
contractual clauses, or by adopting other international transfer mechanisms provided for in the LGPD and other
applicable rules, in addition to supplementary measures to protect your personal data. When recipients are located in
a country outside Brazil that is subject to an ANPD adequacy decision, the Personal Data will be transferred
on the basis of that adequacy decision. ArcelorMittal Brazil adopts the controls described in Section 4 (“How do we protect your data and how can you also protect it?”) to ensure the security of personal data transferred outside
Brazil.
7. What are your rights and how to exercise them?
As a holder of Personal Data you have the following rights, which can be requested from ArcelorMittal Brazil through
Contact Us at: https://brasil.arcelormittal.com/fale-conosco/contato#direitos-titulares
(i) Know what personal data ArcelorMittal Brazil has
about you;
(ii) Correct your personal data;
(iii) Request the deletion of your personal data;
(iv) Dispute the processing carried out with your personal
data;
(v) Review automated decisions involving your personal
data;
(vi) Revoke your consent;
(vii) Request the portability of your personal data;
(viii) Request anonymization, blocking or deletion of your
personal data;
(ix) Request information about the sharing of your data in
Brazil and/or abroad;
(x) Confirm that your personal data is being processed. If you request the deletion of your Personal Data, it may
occur that it is maintained for a period after to your request, in the cases provided for in Article 16 of the General
Personal Data Protection Law, that is, to:
(i) Compliance with legal or regulatory obligation;
(ii) Study by research agency;
(iii) Transfer to a third party (in compliance with the data
processing requirements set forth in the same Law);
(iv) Exclusive use of ArcelorMittal Brazil, which will
guarantee the prohibition of access by third parties and
anonymize the data.
Your personal data will be deleted using secure disposal methods or used anonymously for statistical purposes after
the legal maintenance period.
Note:
If ArcelorMittal Brazil uses solely automated decisions, we will provide, upon request, clear information regarding the criteria and procedures used, taking into account commercial and industrial secrets.
7.1. Does ArcelorMittal Brazil have a person responsible for informing about the company’s
performance in relation to LGPD?
Yes. It is our Data Protection Officer (DPO) who can help you understand how ArcelorMittal Brazil is acting in relation to the General Data Protection Law. In addition, the DPO is responsible for receiving reports of personal data security incidents. You can contact Marcelo Araujo, DPO of ArcelorMittal Brazil, via email at
dpo@arcelormittal.com.br
8. More Information
8.1. Changes and updates.
By using our environments, you acknowledge our right to change the content of this Policy at any time, and without
prior notice to you, depending on the purpose or need.
This may occur for the adequacy and legal compliance of a provision of law or standard that has equivalent legal
force, and it is up to you to verify it whenever you access our environments or use our services. The date of the last
updated version will always appear at the end of this Policy.
8.1.1. If there are updates to this document that require a new collection of consent, you will be notified through the
data informed in your registration.
8.2. Inapplicability. If any point of this Policy is considered inapplicable by the Data or judicial Authority, the other
conditions will remain in full force and effect.
8.3. Communication. By interacting in our digital environments, you acknowledge that all communication
carried out by e-mail, SMS, instant communication applications or any other digital and virtual form, according
to the data informed in your registration, are also valid, effective and sufficient for the disclosure of any subject that refers to the services we provide, your data, as well as the conditions of its provision or any other subject addressed
therein, with the exception only what this Policy provides as such.
8.4. Service Channel. To clarify any doubts regarding the provisions of this Privacy Policy, you can contact us
through Contact Us at:
https://Brazil.arcelormittal.com/faleconosco/contato#
direitos-titulares.
8.5. Governing law and venue. As ArcelorMittal Brazi offers services only in the national territory, even if you do
not have a domicile in Brazil, you will also be subject to Brazilian law, therefore agreeing that, in the event of a
dispute to be resolved, the action must be filed in the District Court of Belo Horizonte/MG.
8. Glossary
For a better understanding of this Policy, the following definitions and descriptions of the terms below should be
considered:
(i) Data: Any information entered, processed or
transmitted through our Digital Environments.
(ii) Personal Data: Data related to the identified or
identifiable natural person.
(iii) Anonymization: Use of reasonable and available
technical means at the time of data processing, whereby a
data loses the possibility of being associated, directly or
indirectly, with an individual.
(iv) Cloud Computing: Is the service virtualization
technology built from the interconnection of more than one
server through a common information network (e.g. the
Internet), with the objective of reducing costs and increasing
the availability of the services offered.
(v) Our Environments: Digital platforms and applications
owned by ArcelorMittal Brazil.
(vi) Access Account: Credential required to use or access
the exclusive functionalities of Our Environments.
(vii) Cookies: Small files sent by Our Environments and
saved on your devices, which store preferences and other
information, in order to personalize your navigation
according to your profile.
(viii) Uniquely automated decisions: These are decisions
that have been programmed to work automatically, without
the need for a human operation, based on automated
processing of personal data.
(ix) Processing: Any operation involving personal data,
such as those related to the collection, production,
reception, classification, use, access, reproduction,
transmission, distribution, processing, filing, storage,
elimination, evaluation or control of information, change,
communication, transfer, dissemination or extraction.
ArcelorMittal Brazil | Privacy Policy | Version 2 | September 22, 2025
2025.09.22_Privacy Policy Englidh_VF
