Privacy Policy

Citrosuco establishes its Privacy Policy in line with the General Data Protection Law, aiming to demonstrate its commitment to treating personal data securely, transparently, and with respect to the privacy of its holders.

This document describes the types of personal data collected, purposes, possibilities of sharing, security measures we adopt to protect the data, holder’s rights, and how to exercise them.

The content is applicable to everyone whose personal data is processed by Citrosuco.
What personal data do we process and how is it collected?

When you interact with us, you may voluntarily provide some of your personal data; we may also collect them automatically when you use some of our communication channels or receive them from third parties, from publicly available sources.

Below are the categories of personal data used:

– Biographical attributes: natural person data such as civil or social name, date of birth, parentage, place of birth, nationality, sex, marital status, family group, address, employment ties, profession, phone number, or email address;
– Registration data: identifying information in public registries, such as Social Security number, National Identification Number, Social Integration Program number, Public Servant’s Patrimony Formation Program number, Voter Registration number;
– Data related to the financial institution used by the holder;
– Access data: automatically collected data, such as the characteristics of the access device, browser, location, IP address, accessed pages, and average duration of a visit.
What are the purposes of using your personal data?
– Compliance with legal obligations, regulations from governmental agencies, tax authorities, judiciary, and/or any other competent authority;
– Safeguarding rights and actions in inspections, judicial, administrative, and arbitration processes;
– Tax payments;
– Disclosure of job vacancies and receipt of resumes;
– Enabling a commercial relationship originated from a contract signed with the data holder, their company, or the company the holder represents;
– Monitoring contracted service/provided during the contractual term;
– Customer prospecting, sales, and similar activities (building a historical purchase base, records of commercial transactions, and payments);
– Maintenance of communication channels, processing requests or complaints, and responses to holders;
– Contract and obligations management.

Who can your personal data be shared with?

Your personal data may be shared with third parties, such as service providers related to Citrosuco, certifying bodies, public agencies, and others, as provided by law.


Citrosuco uses cookies to enhance the user experience while navigating its website. Cookies are small files added to your mobile device or computer that enable faster and personalized access.

We also use cookies to analyze our website’s performance based on anonymous data related to your navigation, such as visited pages and the number of visits.
How long is your personal data kept?

We will retain your personal data for as long as necessary to fulfill the purpose for which they were collected or until the holder requests their deletion unless a longer retention period is necessary to comply with legal or contractual obligations, safeguard our rights, or comply with judicial/extrajudicial agreements.
How do we keep your personal data safe?

We adopt strict policies and procedures that dictate how personal data should be treated at Citrosuco. Such standards aim to ensure the proper and lawful processing of personal data.

We also adopt technical measures capable of keeping your personal data safe and protected from unauthorized access and accidental or unlawful situations of destruction, loss, alteration, communication, or any other form of inappropriate or unlawful treatment, always in light of applicable data protection and information security rules and in accordance with legislation.

In the event of a security incident involving personal data, Citrosuco will ensure transparency with the holders and take appropriate actions to remedy the possible impacts of the event.

What are your rights?

As a personal data holder, you have the right to:

– Confirm the existence of processing by Citrosuco;
– Access your personal data;
– Correct or request the correction of incomplete, inaccurate, or outdated data;
– Request the anonymization, blocking, or deletion of unnecessary, excessive data, or data processed in non-compliance with the legislation;
– Obtain information about the sharing of your personal data with third parties;
– Obtain information about the possibility of not providing your consent, as well as the consequences, in case of refusal;
– Revoke consent, when applicable;
– Request the deletion of data collected and used based on your consent, except when kept based on the law.

The fulfillment of requests will be subject to evaluation, adoption of measures that ensure the holder’s right, and compliance with legal obligations.

To exercise your rights or in case of questions related to this document, please contact us through the website


Citrosuco may change or update the information provided in this Privacy Policy as necessary. Therefore, we advise you to consult it periodically.

Last Update: June 2021