ISA ENERGIA BRASIL | Privacy policy

Privacy policy

Important

It is important that you periodically review this information, as this Privacy Notice may be subject to changes.

ISA ENERGIA BRASIL seeks to maintain a relationship of trust and transparency with all those with whom it interacts. Our goal is to ensure transparent communication and the continuous improvement of relationships between ISA ENERGIA BRASIL and Personal Data Holders.

We respect, maintain, and adequately protect the privacy of our shareholders, investors, associates, suppliers, customers, and others with whom we have commercial or cooperative relationships, as well as the personal information that ISA ENERGIA BRASIL and its subsidiaries may process.

For this reason, we have developed this Privacy Notice to help you understand what information we collect about you, why we collect it, and with whom we share it. Additionally, this Notice informs you of your rights regarding this information and how to exercise them with ISA ENERGIA BRASIL.

We recommend that you read this Privacy Notice from beginning to end, as it explains how we handle your personal information throughout the entire cycle of your relationship with us.

All Personal Data is processed according to strict standards of security and confidentiality.
The personal information you provide will be processed through ethical and legal means, and may have one or more purposes, of which the Holders will be informed.
Except as required by law or judicial order, your Personal Data will not be transferred to third parties or used for purposes other than those for which it was collected.
Access to the processed Personal Data is restricted to authorized employees for the appropriate use of this information.
We require that other organizations processing Personal Data on our behalf align their systems with the minimum privacy and Personal Data protection standards adopted by ISA ENERGIA BRASIL.

What do you need to know before reading this?

Personal Data refers to any information that allows for your identification, either directly or indirectly, such as your name, CPF, email, profession, among others.
The Data Protection Officer is the person on our team responsible for reviewing and approving this document at any time, as well as for ensuring your privacy here at ISA ENERGIA BRASIL.
If you have any questions about how your Personal Data is handled by us, he is the one who will assist you.
The Processing of Personal Data means any operation performed with Personal Data, such as collection, use, access, reproduction, sharing, storage, and deletion

Whenever we mention the terms “ISA ENERGIA BRASIL,” “we,” or “our,” we are referring to ISA ENERGIA BRASIL; likewise, whenever we mention the terms “you,” “your,” or “yours,” we are referring to you, the Data Subject.

What personal data do we process and for what purposes?

When you engage with us, we may process some of your Personal Data to fulfill certain purposes that we have previously informed you about in our daily activities.

Below, grouped by usage categories, we present the main Personal Data we process about you and the reasons for doing so:

Talent Acquisition

When you express interest in joining the ISA ENERGIA BRASIL team, we will process your Personal Data as part of the talent acquisition process, analyzing your characteristics and fit for the position. To do this, we request that you fill out an online form, in addition to undergoing behavioral assessments, technical tests, and psychological evaluations, depending on the role.
For this purpose, we need to process the following Personal Data: Name, ID, CPF (Brazilian tax ID), date of birth, parentage, address, phone number, email, social media profiles, driver's license, information about disabilities, compensation, and behavioral profile. Does this include dependents?
Commercial Relations – Suppliers, Service Providers, and Partners
We process your Personal Data to enable the commercial relationship arising from the contract established with you, your company, or the company you represent.
To do this, we may collect the following Personal Data: full name, CPF (Tax ID), RG (Identity Document), address, email (personal and/or corporate), phone (personal and/or corporate), job title, professional registration number (such as CREA), training records, occupational health certificates, banking information for payments (bank, agency, and account number), and images collected through security cameras in public places.
This Personal Data is used for the following purposes:
- To control access to our facilities (regional offices, subsidiaries, substations, and headquarters);
- To conduct thorough evaluations of our partners and suppliers;
- To establish contracts and execute them in their entirety, as well as other contractual addenda, such as NDAs, assignment agreements, amendments, and termination agreements;
- To prospect, renew, or assign contracts with partners;
- To register partners in our management systems and their main points of contact;
- To process payments for services rendered and products purchased;
- To monitor the contracted service during the valid contract period, including preparing meeting minutes for later follow-up and performance monitoring;
- To manage active contracts;
- To maintain an active contact channel with suppliers, service providers, and partners, including for the purpose of inviting them to ISA ENERGIA BRASIL events; and
- To allow internal audits.
Commercial Relations – Procedures Involving Real Estate
Part of our activities involves the need to acquire real estate, establish easement agreements, enter into loan agreements, carry out amicable expropriations, and obtain land use consents.
To do this, we need to process the following Personal Data: full name, CPF (Tax ID), RG (Identity Document), address and proof of address, phone number, profession, marital status, date of birth, banking information (bank, agency, and account number), real estate registration/transcription data (SNCR code and coordinates), amounts in local currency (purchase price of the property), and professional registration number (such as CREA, for the engineers responsible for the analysis).
This Personal Data is used for:
- Negotiating the amicable purchase of a property located on land where an electrical substation will be implemented and processing the payment;
- Contacting property owners to negotiate and formalize real estate easement agreements in a notary office;
- Signing loan agreements for the authorization of garden use;
- Formalizing amicable expropriation through the execution of the deed at a notary office; and
- Conducting land analyses of the properties in question.
Investor Relations

As a publicly traded company, ISA ENERGIA BRASIL has shares listed on the stock exchange and, consequently, maintains relationships with the purchasers of these shares—investors. As a result, part of our activities involves interacting with these stakeholders and processing their Personal Data.
To do this, we need to process the following Personal Data: full name, CPF (Tax ID), address, type of person (legal/individual), date of birth, professional activity, banking information (bank, agency, and account number), and the number of shares held.
This Personal Data is used for managing the shareholder composition of ISA ENERGIA BRASIL, as well as maintaining a history of transactions to enable the definition of strategies for the Investor Relations department.
Communication – Contact us

To receive communications, feedback, and general comments, ISA ENERGIA BRASIL has the "Contact us" channel.
To process your contact, address your request, and respond to you, we need to use the following Personal Data: name, email, phone number, address (in cases where there is a complaint about land cleanliness or encroachment), and company.
Investigation of Complaints Related to Ethics and Compliance

Acting ethically in our daily operations is essential for us. Therefore, to investigate and address situations of misconduct, individuals should report to the Ethics Line or the Compliance officer, and if necessary, an analysis by the Ethics Committee will be requested.
Both the Personal Data of the whistleblower and the information provided will be treated with strict confidentiality. If deemed necessary, the report can be made anonymously.
Internal Procedures
To carry out our regular activities, we need to process some of your Personal Data, such as: full name, RG (Identity Document), CPF (Tax ID), address, signature, email, phone number, job title, company, date of birth, parentage, and records of active and inactive employees, when applicable.
This Personal Data is used for:
- Conducting reputation research for ISA ENERGIA BRASIL;
- Informing and inviting partners to the Conexão Jaguar Project;
- Obtaining authorization for the use of images captured at events and within ISA ENERGIA BRASIL facilities;
- Building and maintaining a historical database of purchases and payments to suppliers;
- Analyzing purchase categories to evaluate the composition of our purchasing activities;
- Providing access to the internet and our internal network via VPN;
- Offering support for systems;
- Providing access to our legal system;
- Registering and managing legal processes, as well as issuing guarantee policies for use in these processes;
- Preparing general reports;
- Sending mailings with information about our events and activities, and managing registrations for them;
- Analyzing land accidents involving vehicles or employees of ISA ENERGIA BRASIL, as well as assessing and paying due compensation, when applicable;
- Responding to internal legal inquiries from ISA ENERGIA BRASIL departments;
- Conducting elections for employee representatives on the Board of Directors of ISA ENERGIA BRASIL;
- Conducting elections for employee, affiliate, and self-sponsored representatives of ISA ENERGIA BRASIL on the Investment and Pension Management Committee of PSAP/CTEEP, managed by VIVEST; and
- Conducting elections for representatives of beneficiaries (retirees) and pensioners on the Investment and Pension Management Committee.
Legal or Regulatory Obligations
We may also process your Personal Data to fulfill our specific legal or regulatory obligations in the electricity sector.
This Personal Data may include: name, CPF (or passport), RG (Identity Document), address, phone number, email, nationality, job title, company, professional education, qualifications, monthly salary, Lattes curriculum, and contact phone number.
These obligations may include:
- Establishing Operational Agreements among agents in the Brazilian electricity sector;
- Strategic Operations Planning in conjunction with the National Operator, Brazilian electricity agents, the Infrastructure and Environment Secretariat of the State of São Paulo, and ARSESP;
- Registering Research and Technological Development projects in the Electricity Sector;
- Formalizing contracts for the costly sharing of infrastructure;
- Maintaining real-time documentation exchange with National Electric Sector Agents, Distribution, Generation, and Transmission Agents, as well as with the National System Operator;
- Maintaining a voice communication recording system at the Operations Center; and
- Circulating lawyers for auditing financial statements by independent auditors.
Additionally, we may process your Personal Data such as full name, CPF, and annual income to comply with legal obligations for submitting DIRF (Withholding Income Tax Declaration) and ECF (Tax Accounting Bookkeeping) for ISA ENERGIA BRASIL investors.
Involvement in Judicial, Administrative, or Arbitration Processes
In addition to the above scenarios, we may process your Personal Data to exercise our rights in judicial, administrative, or arbitration processes, particularly related to:
- Adverse possession, easement rights, repossession, delivery of possession, property appraisals, environmental matters, labor relations, among others;
- Labor complaints and civil lawsuits in general; and
- Judicial requests for information.
The Personal Data involved in this processing may include: name, RG (Identity Document), CPF (Tax ID), phone number, email, addresses, property registration information, banking details (bank, agency, and account number), purchase price of the property, payment statements, and other documents related to the case.

Who We Share Your Personal Data With

We share your Personal Data with companies within the same economic group as ISA ENERGIA BRASIL, such as ISA Colombia, contracted service providers, actors in the Brazilian electricity sector (including representatives from the National Operator, representatives from Brazilian electricity agents, the Infrastructure and Environment Secretariat of the State of São Paulo, and ARSESP), the National Electric Energy Agency (ANEEL), consulting firms, external law offices, companies supporting ISA ENERGIA BRASIL's systems, public agencies (such as the Federal Revenue of Brazil), the Judiciary, brokerage firms and insurers, business partners, and some financial institutions.

To protect your privacy, we use contractual instruments and audits to ensure that third parties receiving your Personal Data on our behalf provide the same level of protection that we do.

There may be instances where your Personal Data is transferred outside of Brazil. In such cases, we will ensure that this transfer occurs only to countries that have a level of security comparable to that required by Brazilian law, or when authorized by the National Data Protection Authority.

You can obtain more information about the third parties with whom we share your Personal Data through a specific request, as detailed below.

What Are Your Rights?

As a Data Subject, you have the following rights regarding your personal information:

To know if we have processed any of your Personal Data and what data is being processed;
To correct or request the correction of incomplete, inaccurate, or outdated Personal Data;
To request the anonymization, blocking, or deletion of unnecessary or excessive Personal Data;
To request the portability of your Personal Data to another provider of similar products or services;
To request the deletion of Personal Data collected and used based on your consent;
To obtain information about the public or private entities with which we share your Personal Data;
When the processing activity requires your consent, you may refuse to consent. In this case, we will inform you of the consequences of not engaging in such activity;
When the processing activity requires your consent, you can revoke it at any time.

To exercise your rights, please contact our Data Protection Officer, Ronaldo Rotondo, through the "Contact Us" channel.

Cookies, Frames and Links

A cookie is a small file added to your device or computer to provide a personalized access experience. Cookies help analyze internet traffic and allow us to know when you visit a specific website. Rest assured, a cookie does not give access to your computer or reveal information beyond what you choose to share.

ISA ENERGIA BRASIL uses cookies for various purposes, such as generating access statistics, enabling smooth and agile navigation, and remembering your language preferences. Below, we have grouped and listed all these purposes..

Types of Cookies

Necessary Cookies
These are essential cookies that enable the proper functioning of our website and allow you to use all available features.
Performance Cookies
These cookies help us understand how visitors interact with our website by providing information about areas visited, time spent on the site, and any issues encountered.
Functional Cookies
These cookies allow our website to remember your previous choices, such as your preferred language. They are responsible for providing a personalized experience.
Marketing Cookies
These cookies are used to deliver more relevant and specific content tailored to your interests. They can also be used to present targeted advertising or limit the number of times an ad is shown. Additionally, they allow us to measure the effectiveness of a launched campaign.

You can disable cookies in your browser settings. However, please remember that necessary cookies are essential for the normal functioning of our website, so refusing to use them may lead to a diminished experience or suspension of your access.

In addition to cookies, our website may also contain links or frames from third parties, solely to provide additional benefits for our visitors. However, we emphasize that the inclusion of these links and frames does not imply that we are aware of, agree with, or are responsible for them or their respective content.

How Long Do We Process Your Personal Data?

We will retain your Personal Data for as long as necessary to fulfill the purpose for which it was collected, unless a longer retention period is required to comply with legal obligations, protect our rights, or fulfill judicial or extrajudicial agreements.

To determine the retention period of your Personal Data, we base it on the following criteria:

If we have a legal, contractual, or other obligation to retain Personal Data, or if it is necessary for investigation or litigation purposes;
If it is necessary to maintain accurate business and financial records.

How Do We Keep Your Data Secure?

We have implemented strict policies and procedures that dictate how Personal Data should be handled at ISA ENERGIA BRASIL. These standards aim to ensure the proper and lawful processing of Personal Data.

We also adopt technical measures designed to keep your Personal Data secure and protected from unauthorized access, as well as accidental or unlawful destruction, loss, alteration, disclosure, or any other form of inappropriate or unlawful processing, always in accordance with applicable data protection and information security regulations.

Our security measures are continuously monitored and reviewed in line with technological advancements and organizational resources.

Do you still have questions?

If you have any questions, you can contact us through our support channel at [email protected]. Our Data Protection Officer, Ronaldo Rotondo, will be able to clarify any inquiries you may have about how we process your Personal Data.