Privacy Policy

General

At Federação SIGMA (“SIGMA”), protecting your privacy is one of our top priorities. We strictly protect the security of your personal information within SIGMA’s Web Services (mail, blogs, forum, resources, etc).

We do not share or sell your personal data with any third party. We protect user data from disclosure, with exceptions only requested by law or court order.

The purpose of this policy is to inform you of how SIGMA will process your personal data as data controllers and the measures and processes we have put in place to ensure its adequate protection. Providing this kind of information is also one of the requirements under the General Data Protection Regulation 2016/679 (“GDPR”).

Types of data we process and for what purposes

When you visit SIGMA’s websites, we collect some visitor statistics. The visitor statistics include information about the visitor’s truncated IP-address, usage patterns, the point in time the visitor visits our websites on sigmaco.org and information about the browser and operating system the visitor uses.

This information is collected solely for statistical purpose and is not used to identify individuals. We use these statistics to improve and optimize usability of our products and services for our users. These statistics help us determine where we need to improve and prioritize our resources. The legal basis for the processing is the legitimate interest SIGMA has in providing you with a good experience when visiting the websites.

SIGMA’s websites use cookies. A cookie is a tiny data file that resides on your computer, mobile phone or another device, and allows us to recognize you as a visitor when you return to the website using the same computer and web browser. This allows us to provide more customized experience to our visitors. The legal basis for the processing is the legitimate interest SIGMA has in providing you with a good experience when visiting the websites. You can remove or block cookies using the settings in your browser.

We keep the contact information you provide in your account profile. We use this contact information in case of lost passwords, username recovery, account confirmation, or other account-related support work. We also use this contact information to keep you updated about any technical development in our products and services and, if you have decided so, send you our newsletter.

You can unsubscribe from any of our communications at any time by clicking on “unsubscribe” link at the bottom of each email or visit https://sigmaco.org. The legal basis for the processing is the fulfillment of your request (contract) and the legitimate interest SIGMA has in providing you with updates and newsletters pertaining the services.

In order to provide our forum service and identify possible account abuse, we collect your email address, hashed IP address, profile picture, posts and topics, and the history of changes. We do not have access to your private chats. SIGMA forum uses a modified version of the Akismet plugin to mitigate spam. The plugin has been modified so that the only information sent back to Akismet is username and comment content, excluding personal data like IP and email address as the default install would require. The legal basis for the processing is the legitimate interest SIGMA has in providing you with a good experience when using our forum service.

In order to provide you our mail service we process the following email metadata: sender and recipient email addresses, the IP address from which incoming messages originated, and message sent and received times. Email messages are scanned by automated systems that allow us to detect malicious activity. The legal basis for the processing is the fulfilment of your request (contract) and the legitimate interest SIGMA has in providing you with a good experience when using our email service.

To protect our webmail and blog services from fraudulent users, we will in addition ask for your phone number as phone number verification provides an added level of security. We use the third-party service Nexmo to send you SMS and won’t use the phone number for anything else but account verification. Read more about their privacy policy.

If you use SIGMA Sync feature, the documentation about the data we collect and for what purposes for this service is available here. The legal basis for the processing is the legitimate interest SIGMA has in providing you with a good experience when using our Sync feature.

Access

SIGMA has strict restrictions on access to user data. Only a limited number of SIGMA’s employees or employees at SIGMA’s service providers for the web hosting services have access to such data.

Through SIGMA Web Services, you can directly access, edit, delete or export your personal data.

Transfer

SIGMA will not transfer any personal data to third parties except as required by law or law enforcement.

Retention and deletion

SIGMA will delete personal information when all purposes of the personal information processing have been fulfilled and when deletion is allowed pursuant to applicable laws and regulations.

When you close your SIGMA account, your data is immediately deleted from our production servers.

Email logs are stored for up to three months.

Your rights

Under certain circumstances, you have the following rights by the GDPR in relation to our processing of your personal data.

• The right to obtain confirmation that your data is being processed and access to your personal data and other supplementary information
• The right to have personal data rectified
• The right to have personal data erased and to prevent processing
• The right to restrict processing
• The right to data portability
• The right to object to the processing of personal data
• Rights not to be subject to automated decision making and profiling.

If you wish to exercise any of your rights, please contact us. You can also directly access, edit, delete or export your personal data through the SIGMA Web Services.

Data Security

We are committed to safeguarding and protecting your personal data and will implement and maintain appropriate technical and organisational measures to ensure a level of security appropriate to protect your personal data from accidental or unauthorised destruction, loss, alteration, disclosure or access.

Procedures are reviewed regularly to ensure that the policies are followed. Any non-conformance regarding the policies will be corrected without unnecessary delay.

Complaints

You are entitled to lodge a complaint with a competent data protection regulator if you consider that we have breached your data protection rights.

Updates and changes

This Privacy Statement may be updated or changed. When we post changes to this Privacy Statement, we will include the date when the Privacy Statement was last updated. If there are material changes to this statement or in how we use your personal information, we will notify you either by prominently posting a notice of such changes prior to implementing the change or by directly sending you a notification.

Contact information

If you have any questions about this Privacy Statement, or privacy on our websites, please drop us a line at [email protected] or contact us at:

SIGMA Co.
R. Ilha Dos Ayres, Ilha Dos Ayres
Vila Velha, Espírito Santo

Last modified and effective: 2022/08/24.