Arauco Complaints Channel

ARAUCO values integrity, transparency and responsibility in all our relationships. Therefore, true and honest information and care for the ethical conduct of its leaders, employees, customers, suppliers and partners are considered fundamental aspects for the development of the Company.

Any act contrary to our Code of Ethics, which violates the policies we define, or that affects any of the people who are related to ARAUCO, deserves attention and should be reported in due course to the ARAUCO Complaints Channel.

The Complaints Channel is operated by Deloitte, a serious and independent company, responsible for ensuring the confidentiality of your information, ensuring that there is no registration of the IPs of computers that are used to make a complaint over the Internet.

Get to know the Code of Ethics of Arauco, just click here.

It is worth mentioning that in addition to this channel, you can also report by sending an email to: reportsarauco@ethicspeakup.com (the former e-mail address keeps active), or by contacting us on 0800 721 9141 if you are in Brazil.

This Whistleblower Channel is operated by Deloitte Brazil at the request of Arauco, so this Privacy Notice aims to inform exclusively how Deloitte Brazil processes your personal data as the manager of this system and Data Processor.

When mentioned on this website, terms such as “we” or “our” refer exclusively to Deloitte Brazil. By reading this Privacy Notice, you will learn about our commitment to processing personal data responsibly and ethically, in accordance with our principles and values and, especially, in compliance with Law No. 13.709/2018 – General Data Protection Law (LGPD) and other applicable legislation.

PURPOSES OF PROCESSING YOUR INFORMATION

By using this platform, Deloitte Brazil will collect and process your data, provided voluntarily by you and at the request of Arauco, performing the following processing activities:
• Receiving your data, provided by you on this platform (via website, 0800 phone number, or email);
• Reviewing the information provided to ensure the confidentiality required for the process;
• Sending the information provided to Arauco.

For more information about data processing in the context of whistleblower investigations (in addition to receiving data in this system and sending it to the Controller), please visit the Arauco Privacy Notice.

DATA PROCESSING

The data processed within the scope of this platform will be limited to those provided voluntarily by you. The categories of personal data that may be processed, if provided by you, may include the following:

• Personal Identification Data, such as full name, date of birth, CPF number, RG number, driver’s license, passport number, nationality, marital status, maiden name, parentage, birth certificate, marriage certificate, voter ID, work card, military ID, PIS/PASEP number;
• Genetic and Biometric Data, such as fingerprints, facial recognition, iris pattern, voice pattern, DNA, typing patterns, heart rate, hand and finger geometry measurements, eye movement tracking;
• Contact Data, such as full residential address, email address, landline and mobile phone numbers, business address, emergency contacts, postal mailing address;
• Location Data, such as GPS geolocation, IP address, mobile device location data, real-time location history, financial transaction location data, travel history, check-in data at public places, Wi-Fi network usage location;
• Financial Data, such as bank account and branch numbers, credit or debit card numbers, card security code, card expiration date, credit history, income tax return, salary information, pay slips, investments and financial assets, debts and financial obligations;
• Professional and Academic Data, such as employment history, educational background, current position, roles performed, professional registrations such as CRM or OAB, certifications and professional licenses, training information, performance evaluations, projects and academic publications, recommendation letters, information about promotions and terminations;
• Sensitive Health Data, such as medical records, health conditions, disease history, medical reports, lab tests, medication information, allergies, hospitalization details, surgery history, psychological treatments, information about physical or mental disabilities;
• Consumer Habit Data, such as purchase history, product or service preferences, consumption frequency, average spending, loyalty program interaction history, return and exchange information, dietary or lifestyle preferences, e-commerce app usage history, online shopping behavior;
• Other Sensitive Data, such as racial or ethnic origin, religious beliefs, political opinions, union membership, participation in political demonstrations, ideological preferences, participation in religious, ethnic, or cultural communities.

LEGAL BASIS FOR PROCESSING YOUR DATA

Deloitte acts as a Data Processor on behalf of Arauco, performing personal data processing exclusively according to the instructions of this Controller. For more information about the legal basis for processing your data, please visit the Arauco Privacy Notice.

SHARING WITH THIRD PARTIES AND INTERNATIONAL DATA TRANSFER

Deloitte acts as a Data Processor on behalf of Arauco, performing personal data processing exclusively according to the instructions of this Controller. For more information about sharing or international transfers, please visit the Arauco Privacy Notice.

INFORMATION SECURITY

For processing your data in this system, we use a series of physical, electronic, and administrative measures to keep your personal data secure, accurate, and up to date. These measures include:
• Education and training of our professionals to ensure they are aware of our privacy and data protection obligations when handling personal data;
• Administrative and technical controls to restrict access to personal data, based on the need-to-know principle;
• Technological security measures, including firewalls, encryption, and antivirus software;
• Physical security measures, such as security cards to access our facilities. Although we use appropriate security measures, once we receive your personal data, data transmission over the internet (including by email) is never completely secure. We strive to protect your personal data, but we cannot guarantee the security of data transmitted to or from us over the internet.

We emphasize that Deloitte acts as a Data Processor on behalf of Arauco, performing personal data processing exclusively according to the instructions of this Controller. For more information about other security measures to protect your data, please visit the Arauco Privacy Notice.

RETENTION OF INFORMATION

Deloitte acts as a Data Processor on behalf of Arauco, performing personal data processing exclusively according to the instructions of this Controller. Therefore, we will retain your personal data according to the Controller’s guidelines, unless there is a legal obligation requiring us to keep such data stored. For more information about data retention, please visit the Arauco Privacy Notice.

YOUR RIGHTS

Deloitte acts as a Data Processor on behalf of Arauco, performing personal data processing exclusively according to the instructions of this Controller. To request the exercise of your rights, please visit the Arauco Privacy Notice, where you will find contact information for this purpose.

CHANGES TO THIS PRIVACY NOTICE

We may modify or update this Privacy Notice from time to time. To inform you when we make changes to this Privacy Notice, we will update the revision date at the top of this page. The new modified or updated Privacy Notice will apply from that revision date. Therefore, we encourage you to review this Notice periodically to stay informed about how we protect your information. By providing information through this website, you agree to the information described above.