Customers

Legal entities that acquire or may acquire goods and/or services from Petrobras for distribution or their own use.

Consumers

Individuals who purchase or may purchase goods and/or services bearing Petrobras brands for their own use

Suppliers

Individuals or legal entities that supply goods and/or services to Petrobras.

Resellers

Legal entities that resell goods and/or services bearing Petrobras brands.

For these audiences Petrobras handles a set of personal data that may include registration, documentary, financial, contact, and location information.

Pursuant to the best privacy practices, Petrobras uses personal data only for legitimate and specific purposes, including, but not limited to:

• Managing bids and contracts, including the preparation of training for counterparts, registration of supplier, partner, and third-party documents, and managing payments for suppliers and receipts from customers.
• Evaluating the integrity risks in Petrobras’ relationship with its counterparts, monitoring compliance risks, evaluating the internal control environment.
• Conducting visits to the operating units, including access clearance, evaluation surveys, and provision of personal protective equipment, etc.
• Managing the database of people and institutions with which the company relates to identify and rate people with whom Petrobras has or may have a relationship.

Sensitive personal data are processed only when necessary and for specific purposes, in accordance with the current legislation.

Petrobras processes personal data based on a few of the assumptions provided for in the General Personal Data Protection Law, such as:

• Legitimate interest: To generate an understanding of the stakeholders affected by the company's motivators for business decisions.
• Upon consent: When accessing Petrobras’ social networks and website, consent to allow cookies and similar technologies.
• Execution or Preparation of Contracts: Managing the contracting of goods and services.
• To comply with legal or regulatory obligations, to comply with regulations, resolutions, ordinances, and instructions. In these cases, some of the individuals’ data featured in documents, such as social security numbers, civil or professional identity numbers, telephone numbers and e-mails, are obliterated in the documents before they are sent to the Control Bodies.
• For the ordinary exercise of rights in lawsuit, administrative, or arbitration proceedings.

Petrobras may share personal data with other Petrobras Equity Holdings and/or third party service providers, in compliance with corporate governance rules and contractual clauses related to information privacy and security.

The Company may also share personal data with government and control bodies that are subject to the same domestic legislation regarding the privacy of the holders’ personal data.

Petrobras has operations outside of the Brazilian territory and may transfer personal data internationally to its units, and agencies, or to government entities in the jurisdictions where it operates.

In these cases, the necessary technical, organizational, contractual, and legal measures are observed to ensure that personal data is processed in accordance with the legislation of the countries involved.

All personal data collected will be incorporated into the Petrobras database for the time necessary to comply with the existing legal deadlines, including to protect the rights of Petrobras and/or its holders.

At the request of the holder, personal data may be deleted if there is no longer a legitimate purpose to keep it.

The holder of personal data or his or her legal representative may request his or her personal data at any time, subject to trade and industrial secrets, based on the General Personal Data Protection Law.

Additionally, Petrobras allows full access to the holders’ personal data, allowing updates, when applicable, upon proof. The holder or his or her legal representative is responsible for updating the personal data.

Petrobras reserves the right to deny requests that (I) do not adequately fill in the fields on the forms; (II) do not reasonably allow it, at its discretion, to confirm the applicant’s identification; (III) generic requests; (IV) similar or duplicate requests within a period of 30 consecutive days.

If Petrobras deems that the request made by the holder of the Personal Data may be more adequately answered by another company in the Petrobras Group, he or she will be advised to contact the relevant company.

Click here to request your personal data and in the “PROFILE” field of the form, choose the desired audience, as the request will be reviewed based on this information. If necessary, you can fill in more than one form, generating more than one request.

It will soon also be possible to make requests in person, at Petrobras' service counters. In such case, you will need your taxpayer’s ID (CPF) and identification document numbers and your contact e-mail.

Petrobras has security policies in place that aim at protecting your personal data against unauthorized access and misuse, as well as at preserving the integrity of the data. Protective measures include access, authentication, and encryption controls, and other technologies, as needed.

The party responsible for processing personal data is Petróleo Brasileiro S/A - Petrobras, a Brazilian company, Corporate Taxpayer’s ID (CNPJ) 33.000.167/0001-01, with a registered office at Avenida República do Chile, 65, Centro, Rio de Janeiro/RJ, CEP 20031-912.

The person in charge of monitoring Law 13,709/2018 (General Personal Data Protection Law - LGPD) is Petrobras’ Privacy General Manager, Viviane do Nascimento Pereira Sá, whose contact for this topic is privacidade@petrobras.com.br.

This e-mail is not the dedicated channel Petrobras created to meet possible requests based on the LGPD. The guidelines featured in section 7 are to be used for this purpose.

We review the privacy rules frequently, and, if a change is made, the revision date at the top of this page will be changed and the effects will apply from that date. Therefore, we encourage you to periodically read these rules.