Instituto de Ciência e Tecnologia Inventta (Inventta ICT), a private legal entity registered with the CNPJ under number 58.430.828/0001-60 and headquartered in Brazil, acts as the Data Controller for the personal data processed in connection with the Inventta ICT website and activities, and reaffirms its commitment to transparency and security in the processing of personal data. This document describes how we collect, use, and protect your information.

1. Scope of This Policy
This Privacy Policy applies to all users, visitors, institutional partners, researchers, suppliers, applicants, company representatives, and other individuals who interact with the Inventta ICT website or participate in initiatives, projects, events, or technical or institutional contacts related to its activities.

2. Science
You will be made aware of this Privacy and Personal Data Protection Policy when you browse and/or register on the Inventta ICT website to access any of our content or services. This means you will be aware of how we handle your information and your Personal Data.
You may request additional information at any time regarding the processing of personal data by Inventta ICT – see “Data Protection Officer (DPO).”
If you do not agree with the provisions contained in this Policy, we suggest that you exercise your right to object (see “Data Subjects’ Rights”) or refrain from continuing to browse or register on our Website.

3. Personal Data That May Be Processed
In accordance with Inventta ICT’s institutional objectives, the following may be processed, as applicable:
• Identification and contact information: name, email, phone number, job title, company/institution;
• Professional information: academic background, field of work, degree, professional resume;
• Data provided voluntarily through contact forms, events, open innovation initiatives, or institutional communications;
• Browsing data: IP address, date and time of access, device type, cookies, and electronic records;
• Data required for regulatory, scientific, or contractual compliance, where applicable.

Inventta ICT does not intentionally collect sensitive personal data, except when strictly necessary, legally authorized, and subject to appropriate safeguards, particularly in the context of scientific research, in compliance with applicable ethical and regulatory standards.
Attention! Inventta ICT does not knowingly collect or request personal data from individuals under the age of 18, as the Website is not intended for this audience; therefore, they should not attempt to register to access the services or send us any information.

4. Purposes of the Processing
Personal data may be processed for the following purposes, among other compatible purposes:
• Institutional communication and responding to requests;
• Management of technical, scientific, and institutional contacts;
• Promotion of initiatives, events, and technical or scientific content;
• Management of innovation, partnerships, and research and development projects;
• Compliance with legal, regulatory, and contractual obligations;
• Information security and fraud prevention;
• Improving the user experience on the website;
• Recruitment and selection of new employees;
• New product development;
• Conduct studies and prepare reports on the consumer market;
• To conduct internal audits and determine the adequacy of the
• proceedings;
• To maintain and update the institute’s customer records;
• To meet customer needs and resolve problems.\

5. Legal Basis for Data Processing
The processing of personal data is carried out in accordance with the applicable legal bases:
• Consent of the data subject;
• Performance of a contract or preliminary procedures;
• Compliance with a legal or regulatory obligation;
• Regular exercise of rights;
• Legitimate interest, subject to the Data Subject’s fundamental rights and freedoms.

Inventta ICT will always process personal data in accordance with the legal grounds set forth in applicable law. Consent may be requested by Inventta ICT; however, it will not be required when the processing of personal data is based on other legal grounds, such as compliance with legal and regulatory obligations; the regular exercise of rights in legal proceedings; the performance of a contract; or to serve the legitimate interests of Inventta ICT and third parties, such as our customers and partners.

Unless Inventta ICT receives a legal or judicial order, your personal data and information will not be transferred to third parties or used for purposes other than those for which they were collected.

6. Data Sharing
Personal Data may be shared, in a limited and secure manner:
• With service providers and partners strictly necessary for Inventta PD&I’s activities;
• With public authorities, when required by law or regulatory order;
• With research institutions or international partners, where applicable, in compliance with legal safeguards;
• Individuals expressly authorized by you;
• Auditing firms.

When sharing personal data, Inventta ICT will require that organizations contracted to provide support services meet privacy, security, and personal data protection standards and comply with all applicable legal, regulatory, contractual, and/or other requirements.

7. International Data Transfer
In light of international scientific and collaborative activities, personal data may be transferred to other countries, subject to the following:
• Standard contract terms;
• Decisions regarding compliance;
• Other safeguards provided for in the GDPR and the LGPD.

8. Data Retention and Disposal
Personal Data will be retained only for as long as necessary to fulfill the purposes described in this policy or as required by applicable laws, regulations, or contracts. After this period, the data will be deleted or anonymized.

9. Data Subjects’ Rights
Under the LGPD and the GDPR, you may exercise, among others, the following rights:
• Confirmation that processing is taking place;
• Access to data;
• Correction of incomplete or outdated data;
• Anonymization, blocking, or deletion;
• Portability, where applicable;
• Withdrawal of consent;
• Objection to treatment, where applicable;
• Information on sharing and international transfer.

10. Information Security
Inventta ICT implements appropriate technical and administrative measures, in line with industry best practices, to protect personal data against unauthorized access, loss, alteration, or improper disclosure.

11. Data Protection Officer (DPO)
To exercise your rights or ask questions about this Privacy Policy, please contact Inventta ICT’s Data Protection Officer:
Name: Elaine Stoicow
Email: dpo@inventtaict.com

12. Updates
This Privacy Notice may be updated at any time to reflect improvements or legal or regulatory changes; the most recent version will always be posted on the website.

Last updated: May 15, 2026 – V.1