Privacy Policy

1. Who we are

Hit Digital is responsible for processing personal data collected through this website and its digital forms, acting as the controller of this information in contacts received through its own channels.

Channel for privacy matters and the exercise of rights: hit@hitdigital.com.br.

Institutional address: Av. Therezinha Pauletti Sanvitto, 208 - Room 913, Villaggio Iguatemi, ZIP 95110-195, Caxias do Sul - RS, Brazil.

2. What data we may collect

We may collect personal data provided directly by the user or generated while browsing the website.

Candidates should avoid including sensitive information in resumes or open fields when it is not necessary for professional analysis, such as health data, religion, political opinion, union membership, racial or ethnic origin, biometric data or other information unrelated to the purpose of the registration.

This website is not directed to children or adolescents. If we identify improper collection of data from minors without applicable authorization, we may delete the information or request additional data to validate the responsible party.

3. Purposes and legal bases

We process personal data only when there is a legitimate purpose related to our relationship with users, candidates, clients, partners, suppliers or website visitors.

4. Talent database

By registering on the Careers page, the user authorizes Hit Digital to store and use their professional data for profile analysis and contact about future opportunities.

Data submitted through the Careers form, including resume, LinkedIn, experience, stack, languages, compensation expectation and availability, may be used to organize Hit Digital's talent database and evaluate fit for future opportunities.

This information may be organized in Hit Digital's internal systems and, in the future, integrated into the company's operational management system, especially in the talent area.

Registration in the talent database does not guarantee participation in selection processes, hiring or an immediate individual response.

Hit Digital does not use exclusively automated decisions to approve, reject or definitively classify candidates. Profile evaluations may rely on organization and support tools, but the decision depends on human analysis when there is a compatible opportunity.

Talent database data and resumes may be kept for up to 36 months after the last registration, update, consent or relevant interaction, unless the data subject requests deletion or retention is necessary due to a legal obligation, regular exercise of rights or another condition permitted by applicable law.

The data subject may request the update or deletion of their data at any time by email at hit@hitdigital.com.br.

5. Email delivery and suppliers

Hit Digital may use suppliers necessary to operate the website and its forms, including hosting services, email delivery, security, analytics, marketing tools and internal tools.

Data submitted through forms may be forwarded by email to the Hit Digital team and may also be used to send confirmations to the user.

When external suppliers are used, Hit Digital will seek to use services compatible with adequate security and data protection standards, limiting sharing to what is necessary for each purpose.

• Resend, for email delivery
• Google Analytics, for audience measurement
• Meta Pixel, for campaign and marketing measurement
• LinkedIn Insight Tag, for campaign and marketing measurement
• Hit Digital internal tools, including the future operational management system

6. Cookies and similar technologies

The Hit Digital website may use cookies and similar technologies for technical operation, security, audience measurement, analysis of access origin and communication campaigns.

Necessary cookies are used to allow the basic operation of the website.

Analytics and marketing cookies, such as Google Analytics, Meta Pixel and LinkedIn Insight Tag, should only be activated according to the user's consent preferences, when applicable.

The user may accept, reject non-necessary cookies or configure preferences through the cookie banner, consent layer or preferences link available in the footer.

7. Data sharing

Hit Digital does not sell personal data.

We may share data only when necessary for the purposes below, always limited to what is necessary for each purpose.

The website may contain links to third-party pages, platforms or services. Use of those environments is governed by each third party's own policies.

• operate the website
• respond to requests
• send emails
• store or organize internal information
• analyze candidates and opportunities
• measure audience and performance
• evaluate digital campaigns
• comply with legal obligations
• protect the rights of Hit Digital, users or third parties
• use technical suppliers necessary for the operation

8. Data retention

Data will be kept for the time necessary to fulfill the purposes described in this policy, respecting legal and regulatory obligations and Hit Digital's legitimate interests.

Hit Digital may review its internal retention periods as systems, processes and applicable obligations evolve.

• business contacts may be kept for the period necessary for the relationship, business history and compliance with applicable obligations
• talent database data and resumes may be kept for up to 36 months after the last registration, update, consent or relevant interaction
• after this period, data may be deleted, anonymized or have consent renewed, according to the internal process
• technical logs and security records may be kept for the time necessary for security, auditing and compliance with applicable obligations

9. Data security

Hit Digital adopts reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, improper disclosure or misuse.

No system is completely immune to risk. For this reason, Hit Digital seeks to apply security best practices, access control and protection proportional to the nature of the data processed.

In the event of a security incident with relevant risk to data subjects, we will adopt appropriate containment, assessment and communication measures, according to applicable law.

10. Data subject rights

Under applicable law, the data subject may request the rights below by email at hit@hitdigital.com.br.

• confirmation of the existence of processing
• access to the data
• correction of incomplete, inaccurate or outdated data
• anonymization, blocking or deletion of unnecessary, excessive or non-compliant data
• portability, when applicable
• information about sharing
• withdrawal of consent
• deletion of data processed based on consent, when applicable
• objection to processing, when appropriate
• review of automated decisions, when applicable

11. International data transfer

Some suppliers used by Hit Digital may store or process data on servers located outside Brazil.

When this occurs, Hit Digital will seek to use suppliers that adopt adequate security and data protection measures, according to applicable law.

12. Changes to this policy

This Privacy Policy may be updated periodically to reflect legal, technical, operational or business changes.

The most recent version will always be available on this page.

13. Contact about privacy

For questions, requests or the exercise of rights related to personal data, contact us by email at hit@hitdigital.com.br.