a member of groupelephant.combeyond corporate purpose
a member of groupelephant.com
This Privacy Policy describes how Valcann collects, uses, shares and protects the personal data processed through the valcann.com.br website and the forms available on it, in accordance with Brazilian Law No. 13,709/2018 (LGPD) and other applicable regulations. By using the website, you acknowledge the conditions described herein.
For the purposes of this Policy, the LGPD definitions apply: personal data is information relating to an identified or identifiable natural person; sensitive personal data concerns racial or ethnic origin, religious belief, political opinion, health, sex life, genetic or biometric data, among others; data subject is the person to whom the data relates; processing is any operation performed with personal data, such as collection, use, access, storage, sharing and deletion; controller is the party that makes decisions about the processing; processor is the party that processes data on behalf of the controller; and ANPD is the Brazilian Data Protection Authority.
Valcann — a Cloud Intelligence company working with Cloud, Data and AI, operating as EPI-USE Cloud Services for Latin America, an AWS Premier Tier Services Partner and part of the Group Elephant ecosystem — is the controller of the personal data processed through this website (valcann.com.br). This Policy covers the corporate website and the forms available on it, such as contact, careers and product or service inquiries. When you engage Valcann services or products, the related processing is also governed by the respective agreement; in the event of conflict, the specific contractual terms prevail.
We process only the data necessary for each purpose, which may include:
We do not request sensitive personal data through the website and ask that you do not include it in your messages.
We collect data: (i) directly from you, when you fill in forms, request contact or apply for a job; (ii) automatically, through cookies and browsing logs while you use the website; and (iii) from legitimate third-party sources, such as Group Elephant companies and professional networking platforms, where applicable and permitted. Providing data is voluntary, but some fields are required so we can handle your request.
We use data to: respond to inquiries, questions and proposal requests; run recruitment and selection processes; present and enable our Cloud, Data and AI services and products such as FinCop, Wizzi and Next Gen AI; operate cloud-service billing through an authorized broker, when engaged; operate, secure and improve the website; produce aggregate usage statistics; and comply with legal, regulatory and contractual obligations.
Each processing operation relies on an LGPD legal basis: the data subject’s consent, for example for marketing communications; pre-contractual steps or performance of a contract at the data subject’s request, for example to prepare a proposal; legitimate interest, for example for website security and service improvement, always balanced against your rights and freedoms; and compliance with a legal or regulatory obligation.
We use necessary cookies, essential to the website’s operation, and, where applicable, performance and analytics cookies, which help us understand, in aggregate, how the website is used in order to improve it. We do not use cookies for third-party behavioral advertising. You can manage, block or delete cookies in your browser settings; disabling certain cookies may affect functionality.
We do not sell personal data. We may share it, to the extent necessary and with contractual safeguards, with: (i) group companies (EPI-USE / Group Elephant), to enable service and operations; (ii) processors and service providers, including cloud infrastructure providers (for example, Amazon Web Services), analytics and support tools, which process data under our instructions; (iii) the authorized broker responsible for issuing invoices under the cloud-billing model, where applicable; and (iv) competent authorities, when required by law or for the regular exercise of rights.
Part of the data we collect is processed and stored outside Brazil, in the United States of America. We use the HubSpot CRM platform (with servers in the US) for commercial relationship management (CRM) with customers and prospects.
Destination and sharing: data is processed on the HubSpot platform (US). Group access is restricted to authorized administrators — contacts created by the Brazil operation are not broadly available to the US team, and full access is limited to designated administrators. The purpose is commercial relationship management (CRM).
Safeguards: the transfer is supported by the Cláusulas-Padrão Contratuais (the Brazilian standard contractual clauses approved by the ANPD, Resolution CD/ANPD No. 19/2024), adapted to Valcann's reality and executed in a specific agreement between Valcann and the US entity, ensuring a level of protection consistent with the LGPD.
Responsibility of the agents: with respect to the customer and prospect data in its CRM, Valcann acts as the controller — it decides on the purposes and means of processing —, under the supervision of the Data Protection Officer (DPO), Renato Andrade — dpo@valcann.com.br.
Retention: the prospect contact data transferred is retained for 5 (five) years, as set out in the Retention section of this Policy, after which it is deleted or anonymized.
We retain data only for as long as necessary for the purposes of this Policy or to comply with legal, regulatory and contractual obligations. In particular, prospect contact data — potential clients who interact through forms or commercial requests — is stored for 5 (five) years, and is deleted or anonymized at the end of that period. For other data, criteria such as the nature of the data, the purpose and any legal terms guide retention; once the applicable period ends, data is securely deleted or anonymized.
We adopt appropriate technical and organizational measures to protect data against unauthorized access, loss, alteration or improper disclosure, including least-privilege access control, encryption of data in transit, environment segregation and cloud security best practices (AWS). No method of transmission or storage is entirely infallible, but we work continuously to prevent and mitigate risks.
Under the LGPD, you may at any time request: confirmation that processing exists; access to data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary data or data processed in non-compliance; portability; information about the parties with whom we share data; and withdrawal of consent. We will handle requests within legal timeframes and may request additional information to confirm your identity. You may also file a complaint with the ANPD.
The website is intended for a professional audience and is not directed at minors. We do not knowingly collect data from children or adolescents. If we identify undue processing of this nature, we will take the appropriate steps to delete it.
This Policy may be updated to reflect legal, technical or business changes. The current version is always the one published on this page, with the last-updated date shown at the top. Material changes may be communicated through appropriate channels. We recommend reviewing it periodically.
Valcann maintains a Data Protection Officer (DPO), Renato Andrade, responsible for receiving communications from data subjects and the ANPD and for advising on data protection practices. To exercise your rights, ask questions or report incidents related to personal data, write to dpo@valcann.com.br or use the contact form. We will respond as soon as possible, within legal limits.