Privacy and Cookies Policy

Last updated: July 11, 2026.

The Union of Sanitation Workers of the North and Northwest of the State of Rio de Janeiro (STAECNON-RJ), registered under CNPJ No. 28.980.464/0001-20, headquartered at Rua Marechal Floriano, 147, Centro, Campos dos Goytacazes/RJ, ZIP code 28010-166, is the controller of the personal data processed through the website staecnon.org.br and through the internal member management processes, pursuant to Law No. 13,709/2018 (Brazilian General Data Protection Law — LGPD).

This policy explains, clearly, what data we collect, why, how we protect that information, and what rights you have over it.

1. WHAT DATA WE COLLECT

1.1 Members, Directors and Employees of the union

To manage the registry of members, directors and employees of STAECNON-RJ, we collect and keep:

Full name, date of birth and address;
Documents: CPF, RG, CTPS, PIS/PASEP and voter registration card;
Contact phone number and e-mail;
Employee registration number(s) at the employing company (including former and current numbers, when there is more than one), job role, company, regional unit and municipal branch/base to which the worker is linked;
Bank details, when necessary for transfers or benefits;
Names of dependents linked to the member (spouse, children and others);
Membership status (active, retired, disaffiliated, deceased, among other situations provided for in the registry);
Administrative notes recorded by the union's secretariat.

Special attention — sensitive data: the very condition of "being a member of a union" is classified by the LGPD (art. 5, II) as sensitive personal data, in the same group as data on health, religion or political opinion. For this reason, we treat this information with extra care, and access to it is restricted to authorized people within the union, through an access-level system (Admin, Executive Director, Staecnon Employee, Fiscal Director/Member) that limits what each authorized person can see.

About dependents: the names of registered dependents are personal data of third parties (spouses, children), not of the member. By providing this data, the member declares to have due authorization (or legal responsibility, in the case of minor dependents) to share it with us for this specific purpose.

1.2 Website Contact Form

When you send a message through the website's contact form, we collect:

Name, phone and/or WhatsApp;
E-mail;
Subject and content of the message sent.

This data is used exclusively to reply to your message, unless you actively and optionally check (the box is never checked by default) the option to receive news by e-mail and/or WhatsApp (see item 2).

1.3 Reporting Channel (harassment and abuse at work)

STAECNON-RJ maintains its own channel for reporting cases of workplace bullying, sexual harassment, abuse of power or discrimination. This channel was designed to protect the anonymity of whoever reports as much as possible, with one simple rule: the report is never linked to the person who sent it.

You do not need to create an account or provide your CPF or any other personal data to report. To limit abusive submissions, only technical control data is temporarily stored (such as an irreversible code derived from the network address), with no connection to the text of the report. The text of the report is stored in a completely separate table, with no column linking the report to whoever sent it. Access to the reports received is restricted to Admin and Executive Director.

1.4 Access accounts (Administrative Panel and website login)

Directors, employees and collaborators authorized to use the website's Administrative Panel — or to log in to the restricted area of the public site — have an access account, which stores name, e-mail, password (always encrypted, never in plain text) and the person's access level. Those who enable two-step verification (2FA) also have their own security key associated with the account.

1.5 Cookies and browsing data

We automatically collect technical browsing information (IP address, browser used, pages visited) through cookies. See the "Cookie Policy" section at the end of this document for details.

2. WHAT WE USE YOUR DATA FOR (PURPOSE AND LEGAL BASIS)

Purpose	Data involved	Legal basis (LGPD)
Management of the membership relationship, issuing of membership cards, contributions and benefits	Complete registry of members, directors and employees	Compliance with legal/statutory obligation and performance of the membership relationship (art. 7, II and V)
Replying to messages sent through the contact form	Name, e-mail, phone/WhatsApp, message	Performance of procedures at the data subject's request (art. 7, V)
Sending news, newsletters and announcements by e-mail/WhatsApp	E-mail and/or phone	Specific and optional consent (art. 7, I), actively given by the data subject
Receiving and investigating reports of harassment/abuse at work, preserving the anonymity of whoever reports	Text of the report (with no link to whoever sent it) and technical anti-abuse control data (temporary)	Compliance with legal obligation and regular exercise of rights (art. 7, II and VI)
Access control to the Administrative Panel and the restricted area of the site, by permission level	Name, e-mail, password (hash), access level	Performance of a contract/employment or volunteer relationship with the union (art. 7, V) and legitimate interest in security (art. 7, IX)
Improving the security and operation of the site	Browsing data/technical cookies	Legitimate interest (art. 7, IX)

About sending news: this purpose depends on your explicit consent, given through an option that you check yourself (never pre-checked). You may withdraw this consent at any time, free of charge, without affecting the rest of your relationship with STAECNON-RJ.

3. WHO WE SHARE YOUR DATA WITH

STAECNON-RJ does not sell, rent or trade personal data.

We share data only when strictly necessary, with:

Hosting provider (Hostinger), exclusively to keep the website and internal systems running;
Google, through Google Analytics (website visit statistics) and Google reCAPTCHA (protection against bots in the login, contact and reporting forms) — subject to Google's privacy policy;
Meta (Facebook and Instagram), through the Meta Pixel, which measures the results of our ads and allows STAECNON-RJ to be shown to people who have already visited the site — loaded only if you accept cookies, and subject to Meta's privacy policy;
Public authorities, upon legal requirement or court order;
Federations, labor confederations or partner entities, only when necessary for union representation, and always respecting the original purpose of the collection.

4. YOUR RIGHTS AS A DATA SUBJECT

Under Article 18 of the LGPD, you have the right to:

Confirm whether we process your data, and access what data it is;
Correct incomplete, inaccurate or outdated data;
Request the anonymization, blocking or deletion of unnecessary data;
Request the portability of your data to another service provider;
Request the deletion of data processed on the basis of your consent;
Be informed about who we share your data with;
Withdraw your consent at any time, free of charge and in an easy manner.

Important regarding disaffiliation from the union: deleting an access account on the site (when this function exists) or requesting the removal of contact data does not, by itself, disaffiliate a member from the ranks of STAECNON-RJ. Disaffiliation follows the procedure set out in the union's Bylaws, formalized in writing and signed by the member.

To exercise any of the rights above, contact us by e-mail at staecnon@staecnon.org.br, with the subject "PROCESSING OF PERSONAL DATA".

5. HOW LONG WE KEEP YOUR DATA

Data of members, directors and employees: kept throughout the relationship with the union and, after the end of the relationship, for the period necessary to comply with legal and labor obligations (e.g., proof of contributions), as provided in art. 16 of the LGPD.
Contact form data: kept for the time necessary to resolve the request, unless you have consented to receive news — in which case, until you request removal.
Reporting Channel: since the report is never linked to whoever sent it, there is no technical way to "delete a specific report at the request of whoever sent it" without compromising the anonymity of all the other reports. The records are kept as long as the channel is active, for the purposes of investigation and the union's internal history.
Cookies: according to the periods detailed in the Cookie Policy below.

6. DATA SECURITY

We adopt technical and administrative measures to protect your data against unauthorized access and situations of destruction, loss, alteration or leakage, including:

Encrypted connection (SSL/HTTPS) across the entire site;
Access passwords always stored in encrypted form, never in plain text;
Two-step verification (2FA) available for Administrative Panel accounts;
Protection against automated access attempts (attempt limits, temporary blocking and anti-bot verification in the login forms);
Restricted access to sensitive data, limited to authorized union personnel, by permission level and under a confidentiality commitment;
Storage in a secure environment.

No system is 100% free of risk. Should a security incident occur that may generate a relevant risk to data subjects, we will notify those affected and the National Data Protection Authority (ANPD), as required by the LGPD.

7. CHANGES TO THIS POLICY

This policy may be updated periodically. Significant changes will be communicated through a prominent notice on the website's home page.

8. CONTACT

Questions about this policy or about the processing of your data can be sent to staecnon@staecnon.org.br or to the physical address given at the beginning of this document.

COOKIE POLICY

The website staecnon.org.br uses cookies — small text files saved in your browser — for technical operation and to understand how the site is used.

Types of cookies used

First-party/technical cookies: used to keep you logged in during a session (login) and to remember simple browsing preferences. Essential for the basic operation of the site.
Google Analytics: third-party cookie used to understand how the site is used (most visited pages, source of access), in aggregate form, for future improvements. It is only loaded after you click “Accept” on the cookie notice.
Meta Pixel (Facebook and Instagram): third-party cookie used to measure the results of STAECNON-RJ's ads and to show the union to people who have already visited the site. It is only loaded after you click “Accept” on the cookie notice. Meta may process this browsing data on servers outside Brazil, according to the company's privacy policy.
Google reCAPTCHA: third-party cookie used in the login, contact and reporting forms to tell human access apart from automated attempts (bots).

Display preferences (such as dark mode) are stored only in your own browser (they are not cookies and are not sent to STAECNON-RJ).

How to manage cookies

Google Analytics and the Meta Pixel are non-essential cookies: without your acceptance on the cookie notice, they are not activated. To withdraw consent, you may, at any time and at no cost, block or delete cookies and site data through your browser settings; the notice will appear again on your next visit. In addition, you can block or delete cookies through your browser settings. Disabling certain cookies may limit the operation of some parts of the site, such as the login area.

This document replaces any previous version of the STAECNON-RJ Privacy and Cookie Policy.