Privacy Policies - ForesToken Platform
Summary
1. Introduction
2. About Our Policy
3. What are your rights over your own data?
4. How and why do we collect your personal data?
5. How do we share your data?
6. Do we store your data internationally?
7. How do we guarantee the security of data processed at Forestoken?
8. Changes to this Privacy Policy
9. How can I resolve any processing regarding personal data?
Introduction
At Forestoken, our priority is to ensure the privacy and security of the data of our customers and partners. To this end, we are committed to ensuring that personal information is managed professionally, always in compliance with the principles and guidelines of the General Data Protection Law (Law No. 13,853/2019), as well as other current legislation, such as the Marco Civil da Internet (Law No. 12,965/2014) and the Federal Constitution.
Therefore, this Privacy Policy’s main objective is to demonstrate, with transparency, how and why we collect, store, share and use your personal data and, in addition, to explain how we seek to protect this information.
But what is personal data?
Under Law No. 13,709 of 2018, “personal data” is considered to be any data that can identify a natural person, including identification numbers, location data or electronic identifiers. Therefore, they can refer to both a name, CPF, ID, address, as well as your age, religion and political opinion.
About Our Policy
This Policy sets out the essential details relating to your listing of personal data with Forestoken. That said, it is important to say that this Policy extends and applies to all services provided and products offered by the Forestoken Platform.
The terms set out here also affect and bind the “Foristoken Terms of Use”.
That said, the objective of this Policy is:
1. Ensure that you can understand the reasons why we collect and use your personal data and how it is shared;
2. Explain how we use your personal data, in order to provide you with an excellent experience using the systems and products offered on the Forestoken Platform;
3. Explain your rights and choices regarding your personal data that we collect and process and how we preserve your privacy.
We seek to develop this Policy in the most educational and accessible way possible, so that you can have full access to your rights as a data subject within the experience of being a Forestoken customer or partner.
What are your rights over your own data?
Current Brazilian legislation grants a range of rights to holders of personal data, and Forestoken’s mission is to provide its customers and partners with access to these rights.
Due to the principle of transparency and seeking to ensure that you are aware of and have access to all your rights, we list below what they are:
- Right of access – the right to be informed and request access to personal data processed by us;
- Right to rectification – the right to request that we change or update your personal data when it is incorrect or incomplete;
- Right to revoke consent – the right to revoke consent to receive marketing actions and use of cookies (see point 4 of this Privacy Policy);
- Right to removal/deletion – the right to request the removal of your personal data;
- Right to restriction – the right to request that we stop, temporarily or permanently, processing all or some of your personal data;
- Right to object – the right, at any time, to object to the processing of your personal data for reasons related to your particular situation, as well as the right to object to the handling of your personal data for direct marketing purposes; It is
- Right to data portability – the right to request a copy of your personal data in electronic format and the right to transmit said personal data for use in the third party service.
To put any of these rights into practice or even ask any questions regarding them, you can contact Forestoken via the email address lgpd@forestoken.com.br.
How and why do we collect and process your personal data?
Your personal data will be collected through active and voluntary registration as a potential user of our platform when accessing the Forestoken email address (lgpd@forestoken.com.br).
Without a doubt, the general purpose for which we collect your personal data is to fulfill a contract with you and provide you with the best experience within the platform, in the most secure, transparent, efficient and customized way. Likewise, we seek to use your data to develop, analyze, communicate, operate, deliver and improve our products, processes and services.
To make all this possible and in a more specific way, we collect and process personal data from a few different perspectives and purposes:
To register on the Forestoken Platform:
| Purpose of Treatment | Legal Basis for Processing | Personal Data Collected | Elimination |
| Preliminary registration and registration validation on the Forestoken Platform; | Execution of Contract and Preliminary Procedures thereto (Art. 7, item V, Law 13,709/2018): when necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party, at the request of the data subject; |
| The data will be deleted after 10 (ten years) to be counted after 01 (one) year of user inactivity on the GeoBI platform, based on the statute of limitations provided for in art. 205 of the Civil Code. |
| Preliminary registration and registration validation on the Forestoken Platform; | Fraud Prevention (Art. 11, item II, g of Law 13,709/2018): “guarantee of fraud prevention and security of the holder, in the processes of identification and authentication of registration in electronic systems, safeguarding the rights mentioned in art. 9th of this Law and except in the case where fundamental rights and freedoms of the holder prevail that require the protection of personal data.” |
| The data will be deleted after 10 (ten years) to be counted after 01 (one) year of user inactivity on the GeoBI platform, based on the statute of limitations provided for in art. 205 of the Civil Code. |
To register potential future users of Forestoken who are not yet suited to our functionalities and enable future contact regarding the eventual release of functionality of interest to the user and sending advertising content:
| Purpose of Treatment | Legal Basis for Processing | Personal Data Collected | Elimination |
| Data provided by the Data Holder in the event that they select the option that they do not represent industry, agroforestry company or investment fund and have their registration prevented. | Consent (Article 7, item I, of Law 13,709/2018): “upon provision of consent by the holder”. |
| The data will be deleted after 10 (ten years) to be counted after 01 (one) year of user inactivity on the Forestoken platform, based on the statute of limitations provided for in art. 205 of the Civil Code. |
Para atividades de marketing:
| Purpose of Treatment | Base Legal para Tratamento | Personal Data Collected | Elimination |
| Marketing, remarketing and e-mail marketing actions aimed at promoting Forestoken products, actions, differences and content. | Consent, (Art. 7, item I, of Law 13,709/2018): “upon provision of consent by the holder”. |
| The data will be deleted after 10 (ten years) to be counted after 01 (one) year of user inactivity on the GeoBI platform, based on the statute of limitations provided for in art. 205 of the Civil Code. |
To effectively open a wallet on the Forestoken Platform:
| Purpose of Treatment | Legal Basis for Processing | Personal Data Collected | Elimination |
| User registration control and maintenance | Compliance with Legal or Regulatory Obligation, provided for in art. 7th, II, of the LGPD, namely: Circular 3,978/2020 of the Central Bank; Normative Instruction 1,888/2019 of the Federal Revenue and Federal Law 9,613/1998. |
| The data will be deleted after 10 (ten years) to be counted after 01 (one) year of user inactivity on the GeoBI platform, based on the statute of limitations provided for in art. 205 of the Civil Code. |
| User registration control and maintenance | Compliance with Legal or Regulatory Obligation, provided for in art. 11th, item II, paragraph a of the LGPD, namely: Central Bank Circular 3,978/2020; Normative Instruction 1,888/2019 of the Federal Revenue and Federal Law 9,613/1998. |
|
Stay calm! Access to the information provided and collected will always be carried out only by qualified and competent people for the activity, aiming for the best and safest experience on the platform.
About the use of cookies
Cookies support the process of customer identification, communication and other marketing actions, in addition to enabling the protection of collected data. They are the ones who will store your information in browsers, used on computers, phones and other devices. They are therefore useful in the processes of authentication, advertising, recommendations, audience measurements, channel resources and functionalities, security analyzes for improvement and development of anti-fraud tools.
Typically, cookies do not contain information that directly identifies a Forestoken customer personally, but the personal information stored may be linked to information obtained from cookies.
Therefore, it is important to point out: the Forestoken website uses cookie technology!
The ForesToken website uses this technology for the purposes of:
- Functionality – used so that the system user can be recognized and previously selected navigation preferences, such as location, are maintained. A combination of first-party and third-party cookies are used; It is
- Advertising – used to collect information about the visit to the Forestoken website, the content that was viewed, the links and information about the browser, device and IP address. In the manner described in this Privacy Policy, as well as in compliance with applicable legislation, some limited aspects of this data may be shared with third parties for advertising purposes. Online data collected through cookies may also be shared with Forestoken’s advertising partners.
How do we share your data?
Forestoken may share data from its customers or partners with service providers, suppliers and other professional partners that enable and assist in the better functioning of the platform.
| Recipient Categories | Reason for Sharing |
| Service Providers | We collaborate with service providers who work on our behalf and who may need to access certain personal data in order to provide us with their services. Such companies may include services such as operating the technical infrastructure necessary to provide the services offered by Forestoken, helping to protect and secure our systems, as well as providing assistance in using the Forestoken platform. |
| Registration Validation Providers | We share your personal data with recognized suppliers in the market, as necessary, for registration validation and consistent confirmation of the identity of our users. This exercise is consistent with market fraud prevention practices, KYC (Know Your Client), Anti-Money Laundering and Combating Terrorism (AML/CFT) practices and with the requirements determined by the regulatory and supervisory bodies of the Brazilian government. |
| Brazil’s federal revenue | In compliance with Normative Instruction No. 1,888/2019 of the Federal Revenue of Brazil, Forestoken complies with the legal obligation to report data on all its operations, including balances in crypto assets and/or fiat currencies, movements and executed purchase and sale orders through the platform. |
| Law enforcement and personal data protection authorities | We share your personal data when we, in good faith, believe it is necessary to do so to comply with a legal obligation under applicable law, or respond to a valid legal process, such as a search warrant, court order or subpoena. We also share your personal data when we, in good faith, believe it is necessary to do so for the purposes of our own legitimate interests or the legitimate interests of a third party in national security, compliance with the law, litigation, criminal investigation, protection of safety of any person or to avoid death or imminent physical harm, provided that we consider that such interest is not overridden by your interests or fundamental rights and freedoms that require the protection of your personal data. |
| Foreign Account Tax Compliance (FATCA) | If the platform user resides in the United States, Forestoken complies with the legal obligation to report data on all its operations, including balances in crypto assets and/or fiat currencies, movements and purchase and sale orders executed through the platform. to local and foreign authorities competent under FATCA. |
| Forestoken group companies | We transfer data between Forestoken group platforms, such as the GeoBI platform. At the same time, for your security, we guarantee that such platforms are subject to strict Privacy Policies and the appropriate adaptation of their activities to the LGPD for the operation and continuation of such transfer. |
Do we store, process or share your data internationally?
Forestoken may transfer and store collected data in countries other than the country in which the data was originally collected due to the use of cloud software and services. Furthermore, we may carry out international data transfers due to legal and tax obligations with other countries. In these cases, the applicable legal requirements will be strictly observed for the regular occurrence of international data transfer.
How do we guarantee the security of data processed at Forestoken?
Forestoken understands that the security of personal information is crucial. To ensure that the protection of personal data is the utmost constant in our activities, Forestoken:
- It uses constant testing and improvement techniques within its operations;
- It uses renowned security and information technology systems, such as WAF (Web Application Firewall), antivirus systems and SSH encryption systems;
- It has a flow of weekly reports to identify any system failures and sensitivities; It is
- It has a strict internal policy regarding access to information and data by employees and suppliers, who are limited to accessing information relevant to their respective activities.
Don’t worry: Forestoken is committed to processing your personal data within the strict limits and conditions under which it was obtained, always respecting legal limits and/or your consent. Under no circumstances will data be shared or used for any other purpose that you have not given prior consent and/or the law does not authorize.
But you can help: in the event of any suspicion of improper access to your wallet and/or your Forestoken account, or any activity similar to this, let us know immediately!
You can contact us via email at lgpd@forestoken.com.br so that we can take the necessary steps for analysis, account verification and preparation of a technical report.
Final Considerations and Changes to this Privacy Policy
This Privacy and Personal Data Protection Policy is governed, interpreted and regulated by Brazilian law and must be read in addition to our Terms of Use.
Forestoken may occasionally make changes to this Policy to ensure its compliance with the law, as well as to adjust to the guidelines of the National Data Protection Authority (ANPD). Whenever there is a relevant change, such as a new purpose for the personal data already provided, you will be notified using the contact information provided by you or by a notice on the Platform.
Please be sure to read any notice of this nature carefully. And if you have any questions, don’t hesitate to contact us.
How can I resolve any processing regarding personal data?
If you have any questions about this Policy, or would like to resolve any issues regarding privacy and protection of personal data in the Forestoken environment, you can contact us via email at lgpd@forestoken.com.br or via from the Contact field on our website.
Thank you very much for reading our Policy to the end! Forestoken is grateful and committed to perpetuating privacy premises within legal limits.
Name of the Data Officer or DPO (Data Protection Officer): Rodrigo de Almeida
Contact email: lgpd@forestoken.com.br
Summary
1. Introduction
2. About Our Policy
3. What are your rights over your own data?
4. How and why do we collect your personal data?
5. How do we share your data?
6. Do we store your data internationally?
7. How do we guarantee the security of data processed at Forestoken?
8. Changes to this Privacy Policy
9. How can I resolve any processing regarding personal data?
Introduction
At Forestoken, our priority is to ensure the privacy and security of the data of our customers and partners. To this end, we are committed to ensuring that personal information is managed professionally, always in compliance with the principles and guidelines of the General Data Protection Law (Law No. 13,853/2019), as well as other current legislation, such as the Marco Civil da Internet (Law No. 12,965/2014) and the Federal Constitution.
Therefore, this Privacy Policy’s main objective is to demonstrate, with transparency, how and why we collect, store, share and use your personal data and, in addition, to explain how we seek to protect this information.
But what is personal data?
Under Law No. 13,709 of 2018, “personal data” is considered to be any data that can identify a natural person, including identification numbers, location data or electronic identifiers. Therefore, they can refer to both a name, CPF, ID, address, as well as your age, religion and political opinion.
About Our Policy
This Policy sets out the essential details relating to your listing of personal data with Forestoken. That said, it is important to say that this Policy extends and applies to all services provided and products offered by the Forestoken Platform.
The terms set out here also affect and bind the “Foristoken Terms of Use”.
That said, the objective of this Policy is:
1. Ensure that you can understand the reasons why we collect and use your personal data and how it is shared;
2. Explain how we use your personal data, in order to provide you with an excellent experience using the systems and products offered on the Forestoken Platform;
3. Explain your rights and choices regarding your personal data that we collect and process and how we preserve your privacy.
We seek to develop this Policy in the most educational and accessible way possible, so that you can have full access to your rights as a data subject within the experience of being a Forestoken customer or partner.
What are your rights over your own data?
Current Brazilian legislation grants a range of rights to holders of personal data, and Forestoken’s mission is to provide its customers and partners with access to these rights.
Due to the principle of transparency and seeking to ensure that you are aware of and have access to all your rights, we list below what they are:
- Right of access – the right to be informed and request access to personal data processed by us;
- Right to rectification – the right to request that we change or update your personal data when it is incorrect or incomplete;
- Right to revoke consent – the right to revoke consent to receive marketing actions and use of cookies (see point 4 of this Privacy Policy);
- Right to removal/deletion – the right to request the removal of your personal data;
- Right to restriction – the right to request that we stop, temporarily or permanently, processing all or some of your personal data;
- Right to object – the right, at any time, to object to the processing of your personal data for reasons related to your particular situation, as well as the right to object to the handling of your personal data for direct marketing purposes; It is
- Right to data portability – the right to request a copy of your personal data in electronic format and the right to transmit said personal data for use in the third party service.
To put any of these rights into practice or even ask any questions regarding them, you can contact Forestoken via the email address lgpd@forestoken.com.br.
How and why do we collect and process your personal data?
Your personal data will be collected through active and voluntary registration as a potential user of our platform when accessing the Forestoken email address (lgpd@forestoken.com.br).
Without a doubt, the general purpose for which we collect your personal data is to fulfill a contract with you and provide you with the best experience within the platform, in the most secure, transparent, efficient and customized way. Likewise, we seek to use your data to develop, analyze, communicate, operate, deliver and improve our products, processes and services.
To make all this possible and in a more specific way, we collect and process personal data from a few different perspectives and purposes:
To register on the Forestoken Platform:
| Purpose of Treatment | Legal Basis for Processing | Personal Data Collected | Elimination |
| Preliminary registration and registration validation on the Forestoken Platform; | Execution of Contract and Preliminary Procedures thereto (Art. 7, item V, Law 13,709/2018): when necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party, at the request of the data subject; |
|
The data will be deleted after 10 (ten years) to be counted after 01 (one) year of user inactivity on the GeoBI platform, based on the statute of limitations provided for in art. 205 of the Civil Code. |
| Preliminary registration and registration validation on the Forestoken Platform; | Fraud Prevention (Art. 11, item II, g of Law 13,709/2018): “guarantee of fraud prevention and security of the holder, in the processes of identification and authentication of registration in electronic systems, safeguarding the rights mentioned in art. 9th of this Law and except in the case where fundamental rights and freedoms of the holder prevail that require the protection of personal data.” |
|
The data will be deleted after 10 (ten years) to be counted after 01 (one) year of user inactivity on the GeoBI platform, based on the statute of limitations provided for in art. 205 of the Civil Code. |
To register potential future users of Forestoken who are not yet suited to our functionalities and enable future contact regarding the eventual release of functionality of interest to the user and sending advertising content:
| Purpose of Treatment | Legal Basis for Processing | Personal Data Collected | Elimination |
| Data provided by the Data Holder in the event that they select the option that they do not represent industry, agroforestry company or investment fund and have their registration prevented. | Consent (Article 7, item I, of Law 13,709/2018): “upon provision of consent by the holder”. |
|
The data will be deleted after 10 (ten years) to be counted after 01 (one) year of user inactivity on the Forestoken platform, based on the statute of limitations provided for in art. 205 of the Civil Code. |
Para atividades de marketing:
| Purpose of Treatment | Base Legal para Tratamento | Personal Data Collected | Elimination |
| Marketing, remarketing and e-mail marketing actions aimed at promoting Forestoken products, actions, differences and content. | Consent, (Art. 7, item I, of Law 13,709/2018): “upon provision of consent by the holder”. |
|
The data will be deleted after 10 (ten years) to be counted after 01 (one) year of user inactivity on the GeoBI platform, based on the statute of limitations provided for in art. 205 of the Civil Code. |
To effectively open a wallet on the Forestoken Platform:
| Purpose of Treatment | Legal Basis for Processing | Personal Data Collected | Elimination |
| User registration control and maintenance | Compliance with Legal or Regulatory Obligation, provided for in art. 7th, II, of the LGPD, namely: Circular 3,978/2020 of the Central Bank; Normative Instruction 1,888/2019 of the Federal Revenue and Federal Law 9,613/1998. |
|
The data will be deleted after 10 (ten years) to be counted after 01 (one) year of user inactivity on the GeoBI platform, based on the statute of limitations provided for in art. 205 of the Civil Code. |
| User registration control and maintenance | Compliance with Legal or Regulatory Obligation, provided for in art. 11th, item II, paragraph a of the LGPD, namely: Central Bank Circular 3,978/2020; Normative Instruction 1,888/2019 of the Federal Revenue and Federal Law 9,613/1998. |
|
Stay calm! Access to the information provided and collected will always be carried out only by qualified and competent people for the activity, aiming for the best and safest experience on the platform.
About the use of cookies
Cookies support the process of customer identification, communication and other marketing actions, in addition to enabling the protection of collected data. They are the ones who will store your information in browsers, used on computers, phones and other devices. They are therefore useful in the processes of authentication, advertising, recommendations, audience measurements, channel resources and functionalities, security analyzes for improvement and development of anti-fraud tools.
Typically, cookies do not contain information that directly identifies a Forestoken customer personally, but the personal information stored may be linked to information obtained from cookies.
Therefore, it is important to point out: the Forestoken website uses cookie technology!
The ForesToken website uses this technology for the purposes of:
- Functionality – used so that the system user can be recognized and previously selected navigation preferences, such as location, are maintained. A combination of first-party and third-party cookies are used; It is
- Advertising – used to collect information about the visit to the Forestoken website, the content that was viewed, the links and information about the browser, device and IP address. In the manner described in this Privacy Policy, as well as in compliance with applicable legislation, some limited aspects of this data may be shared with third parties for advertising purposes. Online data collected through cookies may also be shared with Forestoken’s advertising partners.
How do we share your data?
Forestoken may share data from its customers or partners with service providers, suppliers and other professional partners that enable and assist in the better functioning of the platform.
| Recipient Categories |
Reason for Sharing |
| Service Providers |
We collaborate with service providers who work on our behalf and who may need to access certain personal data in order to provide us with their services. Such companies may include services such as operating the technical infrastructure necessary to provide the services offered by Forestoken, helping to protect and secure our systems, as well as providing assistance in using the Forestoken platform. |
| Registration Validation Providers |
We share your personal data with recognized suppliers in the market, as necessary, for registration validation and consistent confirmation of the identity of our users. This exercise is consistent with market fraud prevention practices, KYC (Know Your Client), Anti-Money Laundering and Combating Terrorism (AML/CFT) practices and with the requirements determined by the regulatory and supervisory bodies of the Brazilian government. |
| Brazil’s federal revenue |
In compliance with Normative Instruction No. 1,888/2019 of the Federal Revenue of Brazil, Forestoken complies with the legal obligation to report data on all its operations, including balances in crypto assets and/or fiat currencies, movements and executed purchase and sale orders through the platform. |
| Law enforcement and personal data protection authorities |
We share your personal data when we, in good faith, believe it is necessary to do so to comply with a legal obligation under applicable law, or respond to a valid legal process, such as a search warrant, court order or subpoena. We also share your personal data when we, in good faith, believe it is necessary to do so for the purposes of our own legitimate interests or the legitimate interests of a third party in national security, compliance with the law, litigation, criminal investigation, protection of safety of any person or to avoid death or imminent physical harm, provided that we consider that such interest is not overridden by your interests or fundamental rights and freedoms that require the protection of your personal data. |
| Foreign Account Tax Compliance (FATCA) |
If the platform user resides in the United States, Forestoken complies with the legal obligation to report data on all its operations, including balances in crypto assets and/or fiat currencies, movements and purchase and sale orders executed through the platform. to local and foreign authorities competent under FATCA. |
| Forestoken group companies | We transfer data between Forestoken group platforms, such as the GeoBI platform. At the same time, for your security, we guarantee that such platforms are subject to strict Privacy Policies and the appropriate adaptation of their activities to the LGPD for the operation and continuation of such transfer. |
Do we store, process or share your data internationally?
Forestoken may transfer and store collected data in countries other than the country in which the data was originally collected due to the use of cloud software and services. Furthermore, we may carry out international data transfers due to legal and tax obligations with other countries. In these cases, the applicable legal requirements will be strictly observed for the regular occurrence of international data transfer.
How do we guarantee the security of data processed at Forestoken?
Forestoken understands that the security of personal information is crucial. To ensure that the protection of personal data is the utmost constant in our activities, Forestoken:
- It uses constant testing and improvement techniques within its operations;
- It uses renowned security and information technology systems, such as WAF (Web Application Firewall), antivirus systems and SSH encryption systems;
- It has a flow of weekly reports to identify any system failures and sensitivities; It is
- It has a strict internal policy regarding access to information and data by employees and suppliers, who are limited to accessing information relevant to their respective activities.
Don’t worry: Forestoken is committed to processing your personal data within the strict limits and conditions under which it was obtained, always respecting legal limits and/or your consent. Under no circumstances will data be shared or used for any other purpose that you have not given prior consent and/or the law does not authorize.
But you can help: in the event of any suspicion of improper access to your wallet and/or your Forestoken account, or any activity similar to this, let us know immediately!
You can contact us via email at lgpd@forestoken.com.br so that we can take the necessary steps for analysis, account verification and preparation of a technical report.
Final Considerations and Changes to this Privacy Policy
This Privacy and Personal Data Protection Policy is governed, interpreted and regulated by Brazilian law and must be read in addition to our Terms of Use.
Forestoken may occasionally make changes to this Policy to ensure its compliance with the law, as well as to adjust to the guidelines of the National Data Protection Authority (ANPD). Whenever there is a relevant change, such as a new purpose for the personal data already provided, you will be notified using the contact information provided by you or by a notice on the Platform.
Please be sure to read any notice of this nature carefully. And if you have any questions, don’t hesitate to contact us.
How can I resolve any processing regarding personal data?
If you have any questions about this Policy, or would like to resolve any issues regarding privacy and protection of personal data in the Forestoken environment, you can contact us via email at lgpd@forestoken.com.br or via from the Contact field on our website.
Thank you very much for reading our Policy to the end! Forestoken is grateful and committed to perpetuating privacy premises within legal limits.
Name of the Data Officer or DPO (Data Protection Officer): Rodrigo de Almeida
Contact email: lgpd@forestoken.com.br
