Question 1

Privacy Notice

Accepted Answer

At MLB Advogados, the union between Law and Technology is not a trend. It's our starting point.Hello! Welcome to Maldonado Latini e Braguim Advogados (“MLB Advogados”). We are a law firm specializing in Digital Law, operating with technical rigor, clarity, and a strategic vision for those who innovate responsibly.​We have prepared this Privacy Notice (“ Notice ”) to detail our privacy and personal data protection practices, in accordance with the General Data Protection Law (“ LGPD ” – Law No. 13.709/2018).This Notice is directed to clients, potential clients, candidates in selection processes, and people who access our website. For ease of understanding, we will use the term "You" to refer to all these people.

Question 2

1. Who are we?

Accepted Answer

Our legal name is Latini e Braguim Sociedade de Advocacia. We are registered with the CNPJ/MF under number 34.716.914/0001-75 and our office is located at Av. Vereador José Diniz, nº. 2270 – Campo Belo – São Paulo/SP.For questions related to privacy and data protection, you can contact us by email at privacidade@mlbadv.com.br .

Question 3

2. What personal data do we process and for what purposes?

Accepted Answer

Depending on your interaction with us, we may process different personal data about you. In general, we process the following personal data: a) Contact information: Full name, email, job title, phone number, company where you work, content of the message(s) and other information provided by you when contacting us.Main purposes: To respond to requests for proposals and preliminary questions, to present the legal solutions we offer, to establish the initial procedures for the eventual contracting of our services, and to register you on our mailing list to receive communications about topics that may be of interest to you in relation to our areas of expertise. *b) Data for the provision of services: Full name, email, job title, phone number, company where you work, and other information provided by you during the provision of our services.Main purposes: To carry out the deliveries contracted by you, to request meetings and/or clarifications for the correct provision of services, to respond to requests made within the scope of the provision of services, and to send billing documents. *c) Recruitment data: Full name, email, phone number, work history, academic background, and other information provided by you in your resume and/or interview(s) to work with us.Main purposes: To analyze your resume and its compatibility with the job(s) offered, schedule interviews, provide feedback on the selection process(es), and offer job proposal(s). *d) Marketing data: Full name, email, job title, company where you work, and other information that may be publicly available on professional social networks, such as LinkedIn.Main purposes: To send communications about topics that may be of interest to you in relation to our areas of expertise. If you no longer wish to receive our communications, you can unsubscribe from our mailing list at any time by clicking on a link available in the message and/or by sending a message to our Data Protection Officer requesting to be removed from the list.

Question 4

3. How long is personal data stored with us?

Accepted Answer

We will store your personal data only for the period necessary to fulfill the purposes for which it was collected, in accordance with this Notice. Personal data necessary for compliance with legal and regulatory obligations will be kept for the time required by applicable law. Therefore, even if you request the deletion of your personal data, we may retain certain information when there is a legal basis for doing so. In such cases, we will inform you about the retention and, where applicable, the respective legal basis. Additional information regarding retention periods and the criteria adopted for different categories of personal data can be obtained by contacting our Data Protection Officer.

Question 5

4. How do we protect your personal data?

Accepted Answer

Upon receiving your personal data, MLB Advogados implements information security measures in our systems and devices. This includes appropriate technical and administrative measures to protect this data against unauthorized access, loss, alteration, destruction, or improper disclosure. These measures may include, for example, access controls, use of credentials and passwords, multi-factor authentication, access logging and monitoring, definition of access levels, and other safeguards compatible with the nature of the information processed.Internally, access to your personal data is restricted to duly authorized professionals who have been instructed on best practices for security and confidentiality, and who are bound by professional secrecy obligations and/or confidentiality commitments.To reduce the risk of fraud and scams, we inform you that MLB Advogados does not request, through any channel (e.g., email, WhatsApp, etc.), files that can be downloaded and executed and/or requests for payment for the release of funds obtained in legal proceedings.Despite our efforts, no system is completely immune to security incidents. In the event of any incident involving personal data controlled by us, we will take appropriate measures to mitigate impacts and reduce risks, including, where applicable, communication to the data subject and the competent authorities, in accordance with the LGPD (Brazilian General Data Protection Law).If you have reason to believe that your interaction with us is no longer secure (e.g., if you suspect compromised credentials, unauthorized access, or attempted fraud), please inform us immediately through the channel provided by our Data Protection Officer.

Question 6

5. With whom can we share your personal data?

Accepted Answer

We may share your personal data with third parties when necessary to fulfill the purposes set out in this Notice. These instances include:• At the request or with the authorization of the data subject : we will share your personal data whenever you expressly request and/or authorize us to do so.• Compliance with legal obligations and determinations of authorities : we may share your personal data with public bodies and entities to meet legal and/or regulatory obligations, as well as to comply with judicial or administrative orders or requests from competent authorities.• Service providers and business support partners: we may share personal data with suppliers and partners who assist us in carrying out activities necessary for the operation of MLB Advogados and the provision of services (e.g., technology providers, cloud hosting/storage, communication and relationship management), always through contracts and adequate safeguards for confidentiality and data protection, and only for the necessary time.

Question 7

6. Can we send your personal data outside of Brazil?

Accepted Answer

We may transfer your personal data to other countries, including for storage and processing purposes in cloud computing infrastructure located outside of Brazil, always limited to the purposes set forth in this Notice.The transfer may involve countries that have or do not have specific data protection legislation. In any case, we will take the necessary measures to ensure that your personal data remains protected and is processed in accordance with applicable law. To this end, we will use the mechanisms provided for in articles 33 to 36 of the LGPD (Brazilian General Data Protection Law), as well as the guidelines and instruments provided for in Resolution CD/ANPD No. 19/2024.If you wish to obtain additional information regarding international transfers, including the criteria and safeguards adopted, you may request it by contacting our Data Protection Officer through the channels indicated in this Notice.

Question 8

7. What are our responsibilities regarding the processing of personal data?

Accepted Answer

We carry out all personal data processing in accordance with the LGPD (Brazilian General Data Protection Law) and other applicable data protection regulations. When data is shared with third parties, such as suppliers and service providers, this processing will only occur through the formalization of appropriate contractual instruments, with provisions for confidentiality, security and data protection, in addition to verifying, whenever applicable, that such third parties adopt security and governance standards compatible with those of MLB Advogados .If we are unable to resolve your requests or questions, or if you believe there has been a violation of applicable data protection rules, you may file a complaint with the competent authority, in particular the National Data Protection Agency (ANPD), without prejudice to your right to seek appropriate legal action.

Question 9

8. What are your rights as a personal data subject?

Accepted Answer

As the owner of your own personal data, you have a number of rights under the LGPD (Brazilian General Data Protection Law), which can be exercised upon request:Confirm the existence of the processing of personal data.Accessing the personal data processedCorrect incomplete, inaccurate, or outdated data.Anonymize, block, or delete unnecessary, excessive, or improperly processed data in violation of the LGPD (Brazilian General Data Protection Law).Transferring personal data to another service provider, in accordance with parameters defined by the ANPD (Brazilian National Data Protection Authority).Delete the personal data processed with your consent.Receive information about who has shared your personal data with.Revoke consentSubmit a petition to the ANPD

Question 10

9. Who is our Data Protection Officer?

Accepted Answer

The Data Protection Officer is the professional responsible for the protection of personal data at MLB Advogados.Our Data Protection Officer is Lucas Maldonado Diz Latini , who can be contacted by email at privacidade@mlbadv.com.br . In cases of absences, impediments, and vacancies, our Deputy Data Protection Officer, Guilherme Cunha Braguim , can be contacted at the same email address.

Question 11

10. Conclusion

Accepted Answer

This Notice may be revised at any time, at the discretion of MLB Advogados , to reflect legislative, regulatory, jurisprudential changes, recommendations from competent authorities and/or changes in our personal data processing practices. The most recent version will be available on our official channels.This Privacy Notice shall be interpreted and enforced in accordance with the laws of the Federative Republic of Brazil, in particular the LGPD (Brazilian General Data Protection Law), without prejudice to the application of other relevant regulations.

Digital Law | MLB Lawyers | Brazil