Update: 09/09/2026
HST CARD TECHNOLOGY – DESENVOLVIMENTO DE SISTEMAS LTDA., a private legal entity, enrolled in the National Registry of Legal Entities (CNPJ) under No. 10.613.683/0001-06, with headquarters at Rua Lions Club, No. 44, Vila Nova, Campinas/SP, Zip Code 13073-030 (“HST” or “We”).
This Notice aims to demonstrate our commitment to safeguarding your privacy and protecting your Personal Data, establishing the rules for Processing, as well as explaining your rights and how to exercise them.
Read this Notice carefully and, if you still have questions, please feel free to contact us through the Customer Service Channels provided here.
In the event of interactions by minors in Our Environments, these must always be supervised and/or assisted by the minor’s parents and/or legal guardians.
1. DEFINITIONS
For a better understanding of this Notice, the following definitions should be considered:
Anonymization: use of reasonable technical means available at the time of Processing, through which Personal Data loses the possibility of being associated, directly or indirectly, with an individual;
ANPD: National Data Protection Authority, the public administration body responsible for overseeing, implementing, and enforcing compliance with the LGPD throughout Brazil;
Notice: this Privacy Notice;
Cookies: small files sent to your browser or devices that store your preferences and other information about how and when Our Environments are visited, as well as the number of people accessing them;
Personal Data: data related to a natural person, which can identify them or make them identifiable. For example: name, e-mail, ID number, personal preferences, IP address, geolocation;
Sensitive Personal Data: any Data on racial or ethnic origin, religious conviction, political opinion, membership in a union or religious, philosophical, or political organization, data referring to health or sexual life, genetic or biometric data, when linked to a natural person;
Data Protection Officer (DPO): the person appointed by HST to act as a communication channel between Us, the Personal Data Subjects, and the ANPD;
Applicable Legislation: the General Personal Data Protection Law (Law No. 13.709/2018 – “LGPD”) and subsequent amendments, as well as the Brazilian Civil Rights Framework for the Internet (Law No. 12.965/2014), Decree No. 8.771/2016, the Federal Constitution, the Brazilian Civil Code, the Penal Code, the Consumer Protection Code, Decree No. 7.963/2013, guidelines from the National Data Protection Authority, as well as any other laws and regulations regarding the Processing of Personal Data and privacy;
Our Environments: designates the electronic address “https://www.hst.com.br” and its subdomains, in addition to physical environments;
Data Subject or Subject: is You, the natural person to whom the Personal Data refers;
International Data Transfer: transfer of Personal Data to a foreign country or international organization of which Brazil is a member;
Processing: every operation carried out with Personal Data, such as collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, elimination, evaluation or control of information, modification, communication, transfer, diffusion, or extraction.
2. HOW DO WE COLLECT YOUR PERSONAL DATA?
HST may collect all or some of the Personal Data listed below (i) directly from you, the Data Subject; or (ii) through third parties who have the legitimacy to share your Data with us, including HST internal departments, suppliers, and companies that provide services to us.
3. ABOUT THE PERSONAL DATA WE PROCESS
The following Personal Data may be processed when you interact with Our Environments:
| What Data do we process? | For what purpose do we process it? |
| Registration Data | |
| Full Name | Contact – when You share your data through our contact form. |
| Job Title | |
| Company | |
| Registration Data | |
| Full Name | Job Vacancies – when You share your data to apply for a job vacancy and participate in HST’s selection process. Other data contained in the resume may be processed as shared with HST. *optional data, provided at the discretion of the interested party |
| Cellphone | |
| LinkedIn Profile | |
| Gender* | |
| Registration Data | |
| Full Name | Our materials – when You share your data to receive our materials and/or corporate e-books. |
Data update and veracity: You are solely responsible for the accuracy, veracity, or updating of the Data you provide to us. We are not obligated to process your Data if there are reasons to believe that such Processing may impute us an infringement of any applicable law, or if you are using Our Environments for any illegal or unlawful purposes.
Database: The database formed through Data collection is our property and under our responsibility, and its use, access, and sharing, when necessary, will be made within the limits and purposes described in this Notice.
We do not use any kind of solely automated decision-making that affects your interests.
3.1 USE OF COOKIES
In order to improve your navigability and experience on the HST website, we use Cookies.
Purposes of Processing: The use of Cookies in Our online Environments aims to enhance your experience, both in terms of performance and usability, remembering your preferences and repeated visits.
In this sense, we highlight the main purposes, according to the categories of Cookies presented to you:
▪ Functionality: we use functional Cookies to remember your preferences, customize your browsing experience, and provide features requested by you, making the use of Our Environments more efficient and convenient.
▪ Performance: we use performance Cookies to understand how users interact with Our Environments, allowing the identification of failures, the measurement of page and functionality performance, and the implementation of continuous improvements.
▪ Analytics/Performance: we use analytical Cookies to collect statistical information about user navigation, assisting in understanding usage trends, improving content, and optimizing the digital experience.
▪ Advertising: we use advertising Cookies to present ads and content that are more relevant to your interests, in addition to measuring the effectiveness of advertising campaigns and limiting the frequency of displaying certain communications.
How long do we process Cookies?
From a temporal perspective, we clarify that there are two types of Cookies that can be used in Our Environments: “Session Cookies” and “Persistent Cookies”.
- Session Cookies are temporary, meaning they will remain on your device until you finish browsing or using Our Environments.
- Persistent Cookies remain on your device until deleted (the time the Cookie will remain on the device depends on the duration of the “lifetime” of the specific Cookie and the settings of the browser used).
How to manage Cookies in your own browser
You can also configure your Cookie preferences directly in your browser. To disable or delete Cookies, in a simple and intuitive way, we list below the necessary procedure to be followed according to each browser:
(i) Firefox: https://www.firefox.com/pt-BR/privacy/websites/cookie-settings/;
(ii) Chrome: https://support.google.com/chrome/answer/95647?hl=en&co=GENIE.Platform%3DDesktop;
(iii) Microsoft Edge: https://support.microsoft.com/en-us/edge/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use;
(iv) Safari: https://support.apple.com/en-us/guide/deployment/depf7d5714d4/web;
(v) Opera: https://help.opera.com/en/latest/web-preferences/.
4. HOW WE SHARE DATA
The processed Data and recorded activities (logs) may be shared:
(i) With competent judicial, administrative, or governmental authorities, whenever there is a legal determination, request, requisition, or order in this regard;
(ii) With the companies comprising the Economic Group to which HST belongs, always in compliance with the guidelines of this Notice;
(iii) With suppliers, service providers, or partner companies, to facilitate, provide, or execute activities related to Our Environments; and
(iv) Automatically, in case of corporate movements, such as a merger, acquisition, or incorporation of HST.
If you have any questions about who we share your Data with, please contact us through the Customer Service Channels provided at the end of this Notice.
5. HOW WE PROTECT YOUR DATA AND HOW YOU CAN ALSO PROTECT IT
Security and Governance Practices. To safeguard your privacy and protect your Data, We have a governance program that contains rules of good practices, policies, and internal procedures, which establish conditions for organization, training, educational actions, and mechanisms for supervision and mitigation of risks related to the Processing of Personal Data.
Data Access, proportionality, and relevance. Internally, the processed Data are accessed only by duly authorized professionals, respecting the principles of proportionality, necessity, and relevance to our business objectives, in addition to the commitment to confidentiality and preservation of your privacy under the terms of this Notice. In the event of individual leaks or unauthorized access relating to your Personal Data, we may promote, provided these represent significant damage or risk to you and you agree, direct conciliation pursuant to Art. 52, Paragraph 7, of the LGPD.
Adoption of good practices. You are also responsible for the confidentiality of your Data and must always be aware that sharing passwords and access data violates this Notice and can compromise the security of your Data and Our Environments. If you identify or become aware of the compromise of the security of your Data, please contact our Data Protection Officer through the Customer Service Channels provided at the end of this Notice.
External links. When you use Our Environments, you may be led, via link, to other sites, portals, or platforms, which may collect your Data and have their own privacy notice. It is up to you to read the referred notices and decide to use these environments. We are not responsible for third-party privacy notices or the content of any sites or services linked to environments other than ours.
Processing by third parties under our guideline. We strive to carefully evaluate our partners and service providers and enter into contractual obligations of confidentiality, information security, and Data protection with them, with the aim of protecting you.
6. HOW WE STORE YOUR DATA AND THE ACTIVITY LOGS
We store your Personal Data and activity records (logs) on our own servers or on the servers of carefully selected partners. To protect your privacy, we adopt strict technical and administrative security measures to ensure that your data is safe, accessible only to authorized persons, and protected against undue alterations. Our commitment is to preserve the confidentiality, integrity, and availability of your data throughout the period they are under our responsibility.
If the storage of your Personal Data occurs on servers located outside of Brazil, we may be facing an international data transfer; in this hypothesis, the provisions of the INTERNATIONAL DATA TRANSFER topic will apply.
Storage period. We store the Data only for the time necessary to fulfill the purposes for which they were processed or to comply with any legal, regulatory obligations, or for the preservation of HST’s rights.
Data disposal. Once the maintenance period and legal need are over, the Data will be deleted using secure disposal methods or used anonymously for statistical purposes.
7. INTERNATIONAL DATA TRANSFER
To enable and improve the execution of our activities, some of our resources and servers, as well as our partners and service providers, are located outside Brazil, thus characterizing an international transfer of your personal data for the following purposes:
| Purpose | Destination Country |
| Cloud storage | United States |
We take the necessary precautions to ensure that transfers meet the guidelines established by current legislation and only transfer your Personal Data to partners that demonstrate compliance with applicable laws, maintaining a similar or stricter level of compliance than that provided for in Brazilian legislation.
We maintain contracts with these partners that require rigor in the protection of your Personal Data and information security. These contracts ensure that your Personal Data is kept confidential and processed only to perform the purposes indicated above.
8. WHAT ARE YOUR RIGHTS AND HOW TO EXERCISE THEM
Personal Data belongs to you, and the Applicable Legislation brings a series of rights related to them, which can be exercised through a request to our Data Protection Officer through the Customer Service Channel provided at the end of this Notice, such as:
(i) Confirmation and access: you may request confirmation of the existence of Processing and access to your Data, including through copies of records we hold about you;
(ii) Correction: you may request the correction of your Data that is incomplete, inaccurate, or outdated;
(iii) Anonymization, blocking, or elimination: you may request the Anonymization of your Data so that they can no longer be related to you; the blocking of your Data, temporarily suspending the possibility of Processing for certain purposes; or the elimination of your Data;
(iv) Information on sharing: you may request information about third parties with whom we share your Data, limiting this disclosure to information that does not violate our intellectual property or trade secrets;
(v) Consent – information: you may request information about the possibility of not providing your consent and the consequences of refusal;
(vi) Revocation or elimination of consent: you may revoke the consent provided to Us or request the elimination of Data processed with your consent. Revocation or elimination will not affect the legality of any Processing previously carried out. Revocation of consent for purposes essential to the regular functioning of Our Environments and services may result in their unavailability to you;
(vii) Opposition: you may object to the Processing of your Data if you do not agree with a particular purpose; and
(viii) Access to contractual clauses – International Transfer: if your personal data is transferred internationally, based on standard or specific contractual clauses, you can request access to these clauses, observing confidentiality regarding our trade and industrial secrets.
Channel to exercise your rights: to exercise any of your rights or clarify questions about this Notice, please contact us by email at privacidade@hst.com.br. To process your request securely and prevent fraud, we will ask You for proof of identity and, possibly, more information about your request.
Exceptions: We may not fulfill a request if doing so violates our intellectual property or trade secrets, as well as when there is a legal and/or regulatory obligation to retain Data or when we need this information for our defense or that of third parties in disputes of any nature.
Petition to the ANPD: If you believe your rights have been violated or that we have not responded to your request adequately, You have the right to petition the ANPD directly regarding the processing of your Personal Data.
9. DATA PROTECTION OFFICER AND CUSTOMER SERVICE CHANNEL
In case of any doubt regarding this Notice or to exercise your rights, you can contact our Data Protection Officer, Marcelo Rodrigues, via the email privacidade@hst.com.br.
