Cabeçalho Conteúdo


icon black search

Customer, Supplier, Reseller, Consumer

Last update: Februrary 10th 2022

What personal data do we process?


Legal entities that acquire or may acquire goods and/or services from Petrobras for distribution or their own use.


Individuals who purchase or may purchase goods and/or services bearing Petrobras brands for their own use


Individuals or legal entities that supply goods and/or services to Petrobras.


Legal entities that resell goods and/or services bearing Petrobras brands.

For these audiences Petrobras handles a set of personal data that may include registration, documentary, financial, contact, and location information.

What do we use your personal data for?

Pursuant to the best privacy practices, Petrobras uses personal data only for legitimate and specific purposes, including, but not limited to:

  • Managing bids and contracts, including the preparation of training for counterparts, registration of supplier, partner, and third-party documents, and managing payments for suppliers and receipts from customers.
  • Evaluating the integrity risks in Petrobras’ relationship with its counterparts, monitoring compliance risks, evaluating the internal control environment.
  • Conducting visits to the operating units, including access clearance, evaluation surveys, and provision of personal protective equipment, etc.
  • Managing the database of people and institutions with which the company relates to identify and rate people with whom Petrobras has or may have a relationship.

Sensitive personal data are processed only when necessary and for specific purposes, in accordance with the current legislation.

What are the legal assumptions used for the processing of personal data?

Petrobras processes personal data based on a few of the assumptions provided for in the General Personal Data Protection Law, such as:

  • Legitimate interest: To generate an understanding of the stakeholders affected by the company's motivators for business decisions.
  • Upon consent: When accessing Petrobras’ social networks and website, consent to allow cookies and similar technologies.
  • Execution or Preparation of Contracts: Managing the contracting of goods and services.
  • To comply with legal or regulatory obligations, to comply with regulations, resolutions, ordinances, and instructions. In these cases, some of the individuals’ data featured in documents, such as social security numbers, civil or professional identity numbers, telephone numbers and e-mails, are obliterated in the documents before they are sent to the Control Bodies.
  • For the ordinary exercise of rights in lawsuit, administrative, or arbitration proceedings.

With whom may we share personal data?

Petrobras may share personal data with other Petrobras Equity Holdings and/or third party service providers, in compliance with corporate governance rules and contractual clauses related to information privacy and security.

The Company may also share personal data with government and control bodies that are subject to the same domestic legislation regarding the privacy of the holders’ personal data.

Do we transfer data internationally?

Petrobras has operations outside of the Brazilian territory and may transfer personal data internationally to its units, and agencies, or to government entities in the jurisdictions where it operates.

In these cases, the necessary technical, organizational, contractual, and legal measures are observed to ensure that personal data is processed in accordance with the legislation of the countries involved.

How long will we keep your personal data?

All personal data collected will be incorporated into the Petrobras database for the time necessary to comply with the existing legal deadlines, including to protect the rights of Petrobras and/or its holders.

At the request of the holder, personal data may be deleted if there is no longer a legitimate purpose to keep it.

How can I exercise my rights?

The holder of personal data or his or her legal representative may request his or her personal data at any time, subject to trade and industrial secrets, based on the General Personal Data Protection Law.

Additionally, Petrobras allows full access to the holders’ personal data, allowing updates, when applicable, upon proof. The holder or his or her legal representative is responsible for updating the personal data.

Petrobras reserves the right to deny requests that (I) do not adequately fill in the fields on the forms; (II) do not reasonably allow it, at its discretion, to confirm the applicant’s identification; (III) generic requests; (IV) similar or duplicate requests within a period of 30 consecutive days.

If Petrobras deems that the request made by the holder of the Personal Data may be more adequately answered by another company in the Petrobras Group, he or she will be advised to contact the relevant company.

Click here to request your personal data and in the “PROFILE” field of the form, choose the desired audience, as the request will be reviewed based on this information. If necessary, you can fill in more than one form, generating more than one request.

It will soon also be possible to make requests in person, at Petrobras' service counters. In such case, you will need your taxpayer’s ID (CPF) and identification document numbers and your contact e-mail.

What security measures are adopted?

Petrobras has security policies in place that aim at protecting your personal data against unauthorized access and misuse, as well as at preserving the integrity of the data. Protective measures include access, authentication, and encryption controls, and other technologies, as needed.

Who is responsible for processing personal data?

The party responsible for processing personal data is Petróleo Brasileiro S/A - Petrobras, a Brazilian company, Corporate Taxpayer’s ID (CNPJ) 33.000.167/0001-01, with a registered office at Avenida República do Chile, 65, Centro, Rio de Janeiro/RJ, CEP 20031-912.

The person in charge of monitoring Law 13,709/2018 (General Personal Data Protection Law - LGPD) is Petrobras’ Privacy General Manager, Viviane do Nascimento Pereira Sá, whose contact for this topic is

This e-mail is not the dedicated channel Petrobras created to meet possible requests based on the LGPD. The guidelines featured in section 7 are to be used for this purpose.

When were the personal data privacy rules last updated?

We review the privacy rules frequently, and, if a change is made, the revision date at the top of this page will be changed and the effects will apply from that date. Therefore, we encourage you to periodically read these rules.