Corporate Personal Data Protection Policy

BELPORT Tourism and Construction Industry Trade Inc.

1. Purpose

The protection of personal data is a fundamental right. As BELPORT Tourism and Construction Industry Trade Inc., we recognize our responsibility to process and protect personal data in accordance with applicable laws and regulations. This Corporate Personal Data Protection Policy has been prepared to define the principles, procedures, and practices applied by our company regarding the processing and safeguarding of personal data.

2. Scope

This Policy covers all personal data processed by BELPORT Tourism and Construction Industry Trade Inc., whether collected through automated systems or non-automated means forming part of a data recording system.

It applies to personal data belonging to shareholders, executives, employees, customers, suppliers, business partners, and third parties.

3. Definitions

Term	Definition
Personal Data	Any information relating to an identified or identifiable natural person.
Data Subject	The natural person whose personal data is processed.
Explicit Consent	Consent given freely, informed, and related to a specific subject.
Data Controller	The natural or legal person determining the purposes and means of processing personal data.
Data Processor	The natural or legal person processing personal data on behalf of the Data Controller.
Anonymization	The process of making personal data impossible to associate with an identifiable individual.

4. General Principles

Processing personal data lawfully and fairly.
Ensuring personal data is accurate and up to date.
Collecting data for specified, explicit, and legitimate purposes.
Processing data relevant, limited, and proportionate to its purpose.
Retaining personal data only for the period required by law or business necessity.

5. Technical Security Measures

Network and application security controls.
Regular monitoring and maintenance of information systems.
Access log management and auditing.
Use of up-to-date antivirus software.
Firewall protection.
Physical security controls for areas containing personal data.
Backup and recovery systems.
Encryption technologies.
User account and authorization management.

6. Administrative Security Measures

Employee awareness and training programs.
Confidentiality agreements.
Access control and authorization procedures.
Periodic internal audits.
Personal data security policies and procedures.
Risk and threat management activities.
Monitoring compliance with data protection requirements.
Special security measures for sensitive personal data.

7. Rights of Data Subjects

Individuals may submit requests to BELPORT Tourism and Construction Industry Trade Inc. regarding:

Whether their personal data is being processed.
Information concerning processed personal data.
The purpose of processing and whether data is used accordingly.
Third parties to whom data has been transferred.
Correction of inaccurate or incomplete data.
Deletion, destruction, or anonymization of personal data where legal grounds exist.
Objection to decisions based solely on automated processing.
Compensation for damages arising from unlawful processing.

8. Data Breach Notifications

Employees must immediately report any suspected violation of this Policy or applicable data protection legislation. Where a personal data breach occurs, the company will take necessary actions and notify the relevant authorities and affected individuals within the legally required timeframe.