Data Protection Officer (DPO)
Last updated: May 29, 2026
In compliance with Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018), Unfy has designated a Data Protection Officer (DPO) responsible for acting as a communication channel between the company, data subjects, and the National Data Protection Authority (ANPD).
DPO Responsibilities
Unfy's DPO is responsible for:
- Receiving complaints and communications from data subjects and providing clarifications;
- Guiding employees and contractors on data protection practices;
- Acting as a communication channel with the National Data Protection Authority (ANPD);
- Verifying compliance with the LGPD in Unfy's data processing operations;
- Drafting and reviewing internal privacy and data protection policies.
Data Subject Rights
As a data subject whose personal data is processed by Unfy, you have the following rights guaranteed by the LGPD:
- Confirmation and access — know whether we process your data and obtain a copy of it;
- Correction — request correction of incomplete, inaccurate, or outdated data;
- Anonymization, blocking, or deletion — when data is unnecessary or processed in non-compliance with the law;
- Portability — receive your data in a structured format for transfer to another provider;
- Deletion — request erasure of data processed based on consent;
- Withdrawal of consent — revoke consent at any time;
- Information — be informed about entities with whom we share your data;
- Objection — object to processing carried out in non-compliance with the law.
How to Exercise Your Rights
To exercise any of the rights listed above, contact our DPO at dpo@unfy.com.br. We will respond to your request within 15 business days, as provided by the LGPD.
To speed up the process, please include in your email:
- Your full name and email address registered with Unfy;
- A clear description of the right you wish to exercise;
- Any additional information you consider relevant.
Legal Basis for Processing
Unfy processes personal data based on the following legal grounds provided by the LGPD:
- Data subject's consent (art. 7, I);
- Contract performance (art. 7, V);
- Compliance with a legal or regulatory obligation (art. 7, II);
- Legitimate interest of the controller (art. 7, IX), where applicable.
Security Incidents
In the event of a security incident that may cause relevant risk or harm to data subjects, Unfy will notify the ANPD and affected data subjects within the timeframe established by applicable law.
If you suspect any compromise of your personal data, contact our DPO immediately at dpo@unfy.com.br.