Privacy Notice

This Whistleblowing Channel is operated by Deloitte Brazil at the request of Arauco. This Privacy Notice is intended solely to inform you how Deloitte Brazil processes your personal data as the manager of this system and as a Data Processor.

When referenced on this website, terms such as “we”, “us”, or “our” refer exclusively to Deloitte Brazil.

By reading this Privacy Notice, you will be made aware of our commitment to the responsible and ethical processing of personal data, in accordance with our principles and values and, in particular, with the provisions of Law No. 13,709/2018 – the Brazilian General Data Protection Law (LGPD) – and other applicable legislation.

PURPOSES OF PROCESSING YOUR INFORMATION

When using this platform, Deloitte Brazil will collect and process the data you voluntarily provide, at the request of Arauco, for the following purposes:

• Receipt of your data provided through this platform (via website or toll-free telephone number 0800);
• Review of the information provided in order to ensure the confidentiality required for the process;
• Forwarding of the information provided to Arauco;
• If your data is recorded as confidential or identified, it may be used for contact by Deloitte (when confidential or identified) and by Arauco (when identified), should interaction be required during the investigation process;
• While the report is under analysis by Arauco, alerts may be sent to the email address registered on the platform at the time of submission, if there is any interaction within the system.

For further information regarding the processing of data within the scope of whistleblowing investigations, in addition to its receipt in this system and transmission to the Controller, please consult Arauco’s Privacy Notice.

DATA PROCESSING

The data processed within the scope of this platform will be limited to information voluntarily provided by you. Depending on the information supplied, such data may include personal identification data, genetic and biometric data, contact data, location data, financial data, professional and academic data, sensitive health data, data related to consumption habits, and other sensitive data, as permitted under applicable law.

LEGAL GROUNDS FOR PROCESSING YOUR DATA

Deloitte acts as a Data Processor on behalf of Arauco, carrying out the processing of personal data strictly in accordance with the instructions of the Data Controller. For more information on the applicable legal grounds, please consult Arauco’s Privacy Notice.

SHARING WITH THIRD PARTIES AND INTERNATIONAL DATA TRANSFERS

The sharing of personal data with third parties or international data transfers, when applicable, will occur exclusively in accordance with Arauco’s instructions. For further details, please refer to Arauco’s Privacy Notice.

INFORMATION SECURITY

Deloitte adopts appropriate physical, technical, and administrative measures to protect your personal data, including access controls, employee training, and the use of security technologies. Nevertheless, data transmission over the internet is never entirely secure.

RETENTION OF INFORMATION

Personal data will be retained in accordance with Arauco’s instructions, except where legal obligations require retention for longer periods.

YOUR RIGHTS

To exercise your rights as a data subject, please consult Arauco’s Privacy Notice, where you will find the appropriate contact details.

CHANGES TO THIS PRIVACY NOTICE

This Privacy Notice may be updated from time to time. Whenever changes are made, the revision date at the top of this page will be updated. We encourage you to periodically review this Notice to stay informed about how we protect your information.

By providing information through this website, you agree to the terms described above.