Privacy Policy

1. Who are we?

The Center for Climate Crime Analysis (CCCA) is a not for profit, private international organization, with its head office in the Hague, Netherlands, comprised by professionals who perform unique advocacy work, through a specifically developed method, in which CCCA preserves, collects, and handles information on illegal activities associated with deforestation and environmental degradation to support authorities, other not for profit partner organizations and individuals in order to promote compliance and enforcement of the environmental law, at both national and international levels. CCCA is committed to preserving people’s privacy and protecting personal data, always adopting all measures and best practices so that people’s information is protected and held in confidence, as well as to preserving people’s privacy, always in compliance with the legislations in effect, particularly, Law No. 13.709/2018 – General Data Protection Law (“LGPD”) applicable to the Brazilian territory.

2. What is personal data?

Personal data is any data that could identify an individual (person) or make this person identifiable in any way. The following are examples of personal data: Name, CPF No., ID (RG) No., address, and physical features of a person.

3. What is processing of personal data and what are the existing types of personal data processing?

The processing of personal data is any and all types of handling, action, and use of the personal data of a person. Types of processing include use through the collection, storage, sharing, transfer, categorization, classification, among other types of personal data handling.

4. What type of data do we collect?

CCCA processes information that may or may not contain personal data (“Information”), and is classified under the following groups:
(i) Public databases: we collect personal data made available on public databases, which disclose said information with the purpose, among others, of protecting human rights and the environment, considering that CCCA keeps the purpose for which the personal data was made available by its owner to the public base; and (ii) Data you provide: personal data provided by you when visiting our website and interacting with CCCA. CCCA does not collect sensitive personal data.

5. How do we treat personal data?

We process personal data according to the purposes they were made available on public databases, as well as to identify evidence of illegal activities associated with environmental crimes. We may also process your personal data to keep you updated with our activities, donations, and events, you must consent it in order to enable us to contact you. Whenever possible, CCCA will anonymize personal data, i.e. it will not be possible to identify the person who owns the personal data.

6. What is the purpose of the treatment?

The purpose of the processing of personal data by CCCA is to protect the environment, by providing relevant information to collaborate with partner entities and public authorities in investigating activities associated with environmental crimes, with the objective of helping promote compliance with environmental legislations, in order to protect the environment and human rights at all times.

7. Is CCCA, when treating said Information, complying with a General Data Protection Law?
CCCA is complying with the LGPD and is in accordance with the Information Access Law – Law nº 12.527/2011, as it collects and treats Information made available on public platforms for the purpose the Information was made available by the public authorities.

8. Does CCCA store and process information in a safe manner?

CCCA is engaged in implementing all types of administrative, technical, and physical preventive measures with respect to security and privacy, while performing its activities involving personal data, from training and raising awareness among collaborators, to using advanced encryption and firewall technologies. All personal data collected is safely and fully stored in a controlled, monitored, and safe environment, being considered confidential and will only be accessed by authorized users, and we ensure that our providers or partners also adopt equivalent and appropriate security measures. CCCA undertakes to immediately notify all data owners of any privacy violation that has compromised their data and will report said incident to the relevant authorities, as required by article 48 of the LGPD. CCCA requires that its providers fully comply with our Data Privacy Policy, as well as that they meet the LGPD.

9. What are the rights of the individuals that CCCA processes the personal data and how should these individuals request information about their personal data?

If your personal data consists of Information processed by CCCA, you may request, with regards to the processing of your personal data, the following from the CCCA Data Protection Officer (DPO), through the following email: liliane@lilianeleite.com.br

• To access and confirm the processing of your personal data;
• The amendment of your personal data correction; and
• The anonymization of your personal data.

For CCCA to correctly meet your request, you must make it in writing, submit it to CCCA’s DPO email mentioned above, containing your full name, the personal data you wish to have access
and obtain information about and/or request the anonymization. Should you have any questions regarding the processing of your data by CCCA, the CCCA’s DPO may confirm whether your personal data was accessed or not if you ask the DPO by writing and email the DPO, including in your message the data you wish to obtain information about.

10. Does CCCA make international transfers of personal data?

CCCA’s head office is in the Hague, Netherlands, thus CCCA informs you that your data may be transferred for purposes of studies, research, investigations, and for implementation of policies for fighting environmental deforestation and environmental protection. To ensure security and confidentiality of Personal Data transferred in this manner, CCCA implements all proper and necessary measures in order to guarantee the appropriate protection of your Personal Data in accordance with the LGPD, as well as warrants that it will only make international transfers to countries or international bodies that meet the standards of protection and privacy provided for in the LGPD.

11. Does CCCA share personal data?

As CCCA performs its activities, it may share the personal data collected, within the legal limits of the LGPD, with organizations and governmental and judicial authorities which repress environmental crimes and preserves the environment and protects human rights. Therefore, CCCA will enter into agreements intended to ensure that the recipient of the personal data meets the LGPD, as well as performs treatment within the limits under which the personal data was collected.

12. When will CCCA delete personal data?

CCCA will delete personal data once the purposes of the processing of the personal data have been met and must do so within no more than five (5) years following receipt of the personal data.

13. Applicable legislation

This document was prepared based on Federal Law nº 13.709/2018 (General Personal Data Protection Law – “LGPD”). CCCA reserves the right to change, add, or remove contents and parts of this policy at any time and at its sole discretion. We recommend that you become aware of this policy whenever browsing this website.

14. Contact Data of the Data Protection Officer

Should you have any questions regarding our Privacy Policy or any request to be made about your personal data, you must contact our Data Protection Officer through the email: liliane@lilianeleite.com.br. To provide you information or proceed with your request, the DPO first must check your identity by requesting some personal information from you, so that we can be certain that we are not providing your personal information to third parties.