Frasle Mobility's New Positioning and Randoncorp Investments
Information security & privacy
GRI 3-3
At Randoncorp, we build lasting relationships
with our stakeholders based on transparency
and trust.
Therefore, we take special care with the security of personal data and the privacy of our
employees, customers and suppliers.
This concern becomes even more important with the digitalization of our business and of
the market itself, as well as the General Data Protection Law (LGPD) in Brazil. To regulate
our performance in this theme, our Privacy Policy establishes the guidelines for the
collection, use, storage, treatment and protection of data on our websites, platforms and
internet applications.
In addition to this document, we have a series of procedures and policies that establish
standards and guidelines to be followed by all employees and partners:
> Information Security Policy;
> Personal Data Privacy Policy;
> Ethical Conduct Code;
> Incident Management Control Procedure;
> Change Management Control Procedure;
> Access Management Control Procedure;
> Backup Procedure;
> Remote Work Control Procedure;
> Cloud Services Contracting Control Procedure;
> Mobile Device Standard Procedure;
> Server Standard Procedure; and
This topic is reported regularly to the Executive Committee and to the Company's Board
of Directors.
In addition, we have an entire structure dedicated to privacy governance and
data protection, consisting of:
> Information Security area;
> Information Security and Privacy Committee, made up of representatives from
the Compliance, Legal, Information Security, Financial Services, and Digital
Business Management departments;
> Risk Management and Compliance area.
In 2022, we recorded one information security incident, which impacted an
isolated system of only one unit of the Company over a 24-hour period and
resulted in no material impact.
Data Subject Portal
Users of our platforms can access the Data Subject Portal, where we
explain how we collect, protect and handle their personal data. In this
space, they may request the updating of their data, the deletion and
withdrawal of consent, among other data subject rights.
EXCELLENCE AND SAFETY AS A VALUE
83View entire presentation