Our Privacy Policy is publicy avaiable, check it here.
<\/p>\n\n\n\n
RD Sa\u00fade’s Data Privacy Policy ensures that data subjects have the right to access, rectify, and delete their personal data. Additionally, we have a Data Subject Portal through which requests and inquiries can be made in a simplified manner. You can also check the information about how we deal with personal data on our Sustainability Report – https:\/\/rdsaude.com.br\/sustentabilidade\/indicadores-e-relatorios\/
<\/p>\n\n\n\n
We have some Policies related to the topic, such as \u201cSecurity Incident Management Policy\u201d and \u201cSecurity Incident Communication Policy to ANPD and Data Holders\u201d. The materials, however, are not public as they contain strategic information from RD Sa\u00fade.
<\/p>\n\n\n\n
Periodic and independent audits are conducted to assess the maturity and effectiveness of our cybersecurity management.
<\/p>\n\n\n\n
The Audit Committee of the Board of Directors is responsible for overseeing risk management activities, data management and protection, and cybersecurity.
<\/p>\n\n\n\n
Our current practices involve storing only personal data and\/or sensitive personal data for the regular exercise of our rights or for the fulfillment of legal or regulatory obligations, in accordance with the provisions of Article 27 of the Brazilian Consumer Defense Code (CDC), from the date of purchase. The data collected from customers is anonymized and processed in a grouped manner.<\/p>\n\n\n\n
More information can be found at our Sustainability Report (from pages 37 to 40) and also at the Cybsersecurity and Data Privacy Policies.
<\/p>\n\n\n\n
As stated in our Privacy Policy RD does not rent, sell, or provide personal data to third parties
<\/p>\n\n\n\n
According to Brazilian law (LGPD), companies are required to limit the retention of personal data as follows: 5 years for data related to payment management or paid hours control; 20 years for medical record data; 3 years for contact information of a potential customer who has not responded to any requests; and 6 months for log data. Our company’s data privacy policy explicitly states that we adhere to these legal limits for data retention.
<\/p>\n\n\n\n
Trainnig on Cybersecurity and Data Protection is offered to employees and contractors
<\/p>\n\n\n\n
In 2023, RD Sa\u00fade received certification in the ISO\/IEC 27001:2022 standard for its digital channels (Raia & Drogasil websites) and Univers benefit channels, as detailed in our sustainability report on page 39. This international standard aims to protect the confidentiality, integrity, and availability of data, ensuring rigorous measures are in place to address cybersecurity threats.
<\/p>\n\n\n\n
Inspections are conducted on a regular basis
<\/p>\n","protected":false},"template":"","meta":{"footnotes":""},"tags":[],"categoria-msci":[66],"class_list":["post-813","msci","type-msci","status-publish","hentry","categoria-msci-ambiental-e-social"],"acf":[],"yoast_head":"\n