Privacy Policy
Get to know our policy
1. General Information
This Privacy Policy contains information about how we, RRMG CONSULTORIA LTDA., registered under CNPJ/MF ME under No. 08.840.686/0001-30 (“Blue Service”), collect and process personal data of users (“Users” or “User”) who access our website and/or use our BPM platform (“Blue Service Access”). Its purpose is to clarify to interested parties information about the types of data that are collected, the reasons for the collection, and how the User can update, manage, or delete this information.
In this regard, our procedure for processing your personal data is carried out in full compliance with the General Data Protection Law (Law No. 13.709/2018) (“LGPD”).
The navigation of Users in the Blue Service Access indicates that the User automatically consents to the processing of their personal data by Blue Service. If you do not agree with any term, please do not continue navigating and/or using and do not provide any personal data.
2. Consent and Authorization
Users, when choosing to navigate through the Blue Service Access (i) declare that they have read and accept all the terms contained in this Privacy Policy; (ii) agree that the information provided by Users and/or generated by Blue Service during the use of the services may be stored and used for the purposes described in this document; (iii) consent and authorize Blue Service to use such information according to the terms of this policy or in a manner that complies with the law and the terms outlined in this policy; (iv) declare that all the information presented is true and valid.
3. User Rights
The User's personal data will be processed in a lawful, fair, and transparent manner (lawfulness, fairness, and transparency);
The User's personal data will be collected only for determined, explicit, and legitimate purposes, and may not be processed later in a manner incompatible with those purposes (limitation of purposes);
The User's personal data will be collected in a manner that is adequate, relevant, and limited to the needs of the purpose for which they are processed (data minimization);
The User's personal data will be accurate and kept up to date whenever necessary, so that inaccurate data is deleted or rectified when possible (accuracy);
The User's personal data will be kept in a way that allows for the identification of data subjects only for as long as necessary for the purposes for which they are processed (data retention limitation);
The User's personal data will be processed securely, protected from unauthorized or unlawful processing and against accidental loss, destruction, or damage by adopting appropriate technical or organizational measures (integrity and confidentiality).
The User of the Blue Service Access has the following rights granted by the LGPD:
Right of confirmation and access: this is the User's right to obtain confirmation about whether their personal data is being processed or not, and if so, the right to access their personal data;
Right of rectification: this is the User's right to obtain, without unjustified delay, the rectification of their inaccurate personal data;
Right to data deletion (right to be forgotten): this is the User's right to have their data deleted from the Blue Service database.
Right to limit data processing: this is the User's right to limit the processing of their personal data, which can be obtained when contesting the accuracy of the data, when the processing is unlawful, when Blue Service no longer needs the data for the proposed purposes, when the User has opposed the processing of the data, and in cases of processing unnecessary data;
Right to object: this is the User's right to, at any time, object, for reasons related to a particular situation, to the processing of personal data concerning them, being able to oppose the use of their personal data for marketing profiling;
Right to data portability: this is the User's right to receive the personal data concerning them and provided to Blue Service, in a structured, commonly used, and machine-readable format, and the right to transmit that data to third parties;
Right not to be subjected to automated decisions: this is the User's right not to be subject to any decision made solely based on automated processing, including profiling, which produces effects in their legal sphere or significantly affects them similarly.
The User may exercise their rights via the email indicated below or through written communication, specifying:
Full name or corporate name, CPF number (Cadastro de Pessoas Físicas, from the Brazilian Federal Revenue) or CNPJ (Cadastro Nacional de Pessoa Jurídica, from the Brazilian Federal Revenue) and the User's email address and, if applicable, that of their representative;
Right they wish to exercise;
Date of request and signature of the User;
Any document that may demonstrate or justify the exercise of their right.
The request must be sent to the email: dpo@blueservice.com.br, through our website https://www.blueservice.com.br.
4. Personal Data
Information, or a set of information, that allows for the identification of a natural person.
4.1. Types of data collected:
4.1.1. Data informed in the contact form
The data eventually informed by the User who uses the contact form provided in the Blue Service Access, including the content of the message sent, will be collected and stored to fulfill its due purpose, which is the provision of services by Blue Service, as indicated in this document.
The following data is collected by Blue Service: user name, email, phone, IP, and location.
All information provided must be clear, accurate, and kept up to date throughout the time the User is linked to Blue Service. The content of the information entered in Blue Service Access is the sole responsibility of the User, and Blue Service is not responsible for verifying the data entered in Blue Service Access. The User guarantees and is responsible, in any case, civilly and criminally, for the truthfulness, accuracy, and authenticity of the registered data.
Notwithstanding the above, Blue Service may, at any time and at its sole discretion, verify the data included in Blue Service Access, and may, for that purpose, request documents and evidence to verify the information provided.
Blue Service Access is integrated with different services, applications, and websites that may provide Users with their own content and products. Blue Service does not control and has no responsibility for these third parties and their services, content, or products. These third parties may have their own terms and policies, and the User's use will be governed by these terms and policies.
In the event that Blue Service Access uses third-party services to offer certain features and services to Users, such as map locators, social networks, various websites, among others, Users may have to comply with the terms of service applicable to those features and services used, under the sole responsibility of the Users.
4.1.2. Use of Personal Data
During the use of the Blue Service website, the User must provide only their personal data, and not those of third parties, in order to safeguard and protect the rights of third parties.
The entry of third-party data will be permitted only on Blue Service's BPM platform, provided that the third party has granted such right to the User in advance, or is protected by some legal basis for that purpose.
Registration credentials are personal and non-transferable, with their custody under the responsibility of the User. The use and protection of the access data to the User's account is entirely their responsibility, which is why Blue Service recommends that the User keeps this information in a safe place and does not provide it to third parties.
All information collected from Users is used and stored only for the time necessary to fulfill the obligations established between the parties, respecting the legal provisions. After the proper use of the information, Blue Service may destroy any data to which it has access, respecting the legal provisions for that purpose.
4.1.3. Data informed by the controller
Blue Service also acts as a data processor for clients who contract our BPM platform (controllers), and in this scenario, the purpose of data processing complies exclusively with the terms established in the contract with the controller, thus fulfilling the legal basis for contract execution.
4.2. Purposes of personal data processing.
The personal data of the User collected is for restricted and internal use by Blue Service and aims to facilitate, expedite, and fulfill the commitments established with the User and controller, to comply with requests made through form filling. The information will not be sold, rented, and/or made available to third parties.
Blue Service may allow certain service providers access to the collected data in order to provide the User with some of the services outlined in this contract, with Blue Service being responsible for entering into a confidentiality agreement with this service provider so that they do not use any shared data for any purpose other than executing the contract made with Blue Service, seeking best practices in light of the LGPD.
User information may be transferred in the event of a merger, acquisition, or sale of Blue Service assets. If the processing of the information after these events is altered, Blue Service will notify the User via the email provided in their registration.
Personal data may also be used for commercial purposes, such as sending marketing emails. The User may, at any time, stop receiving marketing emails through the link provided in the body of the email (opt-out).
Furthermore, personal data may be processed to personalize the content offered to the User, as well as to provide support to the BPM platform and the website, in order to enhance the quality and functioning of its services.
Registration data will be used to allow the User access to specific content on Blue Service Access.
The processing of personal data for purposes not provided for in this Privacy Policy will only occur after prior communication to the User, and in any case, the rights and obligations set forth herein will remain applicable.
4.3. Recipients and transfer of personal data
Blue Service may use servers and internet providers in Brazil and abroad, in countries that have an adequate level of protection of personal data as provided in the LGPD for cloud storage and CRM management of the company’s data.
Blue Service will observe all applicable norms regarding security for storing Users' personal data and employs the most advanced industry standards in data protection.
4.4. Data recorded during operation
Data that arise from events, processes, and other relevant information during the operation of a computational system, called “logs”, may be generated, collected, and stored by Blue Service to ensure the protection of its systems and databases against acts from third parties and users that may jeopardize, or threaten to jeopardize, the integrity of BS products, services, and collaborators, as well as those of third parties.
5. Regarding the processing of personal data
5.1. About the data controller
The data controller, responsible for the processing of the user's personal data, is the individual or legal entity, the public authority, the agency or another body that, individually or in conjunction with others, determines the purposes and means of processing personal data.
Blue Service will directly handle the personal data entrusted to it, meaning situations in which it acts as the data controller.
In cases where Blue Service acts as a data processor, such as when our BPM platform is used by clients and partners, the responsibility for the collection and processing rests with the respective controllers, and Blue Service's role is merely to process the data in accordance with the guidelines established in the contract.
5.2. About the data protection officer
The data protection officer is the professional responsible for informing, advising, and monitoring the data controller, as well as the workers who process the data, regarding Blue Service's obligations under the General Data Protection Regulation of the European Union (GDPR), the LGPD, and other provisions for personal data protection present in national and international legislation, in cooperation with the competent supervisory authority.
At Blue Service, the data protection officer is Ubirajara Matos Sena, who can be contacted via email:
6. Security in the handling of the User's personal data
Blue Service is committed to implementing the technical and organizational measures capable of protecting personal data from unauthorized access and from situations of destruction, loss, alteration, communication, or dissemination of such data.
In order to guarantee security, solutions will be adopted that take into account: appropriate techniques; application costs; the nature, scope, context, and purposes of processing; and the risks to the rights and freedoms of the User.
Blue Service uses TLS version 1.3 (Transport Layer Security) certification which ensures that personal data is transmitted securely and confidentially, such that the transmission of data between the server and the User, and in feedback, occurs in a fully encrypted manner.
However, Blue Service disclaims liability for the sole fault of the User, as in the case where the User themselves transfers their data to a third party.
Blue Service also commits to notifying the User in a timely manner should any type of breach of security of their personal data occur.
A personal data breach is a security breach that leads, accidentally or unlawfully, to the destruction, loss, alteration, disclosure, or unauthorized access to personal data transmitted, stored, or subject to any other type of processing.
Blue Service also does not take responsibility for any malware or viruses that may affect or infect your computer and/or other devices, due to the use, access, or transfer of any material from Blue Service Access.
Finally, Blue Service commits to treating the personal data of the User with confidentiality and within legal limits.
8. How to Contact Blue Service
9. Copyrights
10. Limitation of Liability
11. Support and Complaint
12. Of the changes
13. Responsibilities and Indemnities
14. General
Blue Service
Al. Ministro Rocha de Azevedo, 1077, 4th Floor
01410-003, Cerqueira César, São Paulo - SP