Forno de Minas, a McCain Foods company (“We”), considers privacy and data protection as non-negotiable values. To fulfill our mission of providing convenient and innovative foods with the flavor and quality of homemade food, we use personal data from certain groups of people, as described below in a clear and transparent manner.

This Privacy Notice supplements McCain’s Global Privacy Policy.

If you have any questions about how your data is processed or wish to exercise your rights, please contact us through the channels provided at the end of this notice.

We use your personal information to improve your experience on our website, making it more productive and enjoyable. All personal information of employees, customers, or other visitors who use our Forno de Minas website is processed in accordance with applicable data protection laws.

By using the Forno de Minas website, you are aware of this Privacy Notice.

Forno de Minas Mission Regarding Privacy and Data Protection

As part of McCain Foods’ global operations, Forno de Minas globalizes cheese bread and provides convenient and tasty foods for people’s daily lives. We incorporate Privacy by Design principles in our projects and Privacy by Default when handling all company information.

Forno de Minas is institutionally committed to investing in periodic training and audits, fostering a culture of privacy and data protection, ensuring that personal information is processed with the highest standards of security and confidentiality.

We implement robust measures to protect data against unauthorized access, loss, or misuse. Our mission is to be transparent about how we collect, use, and store personal data, always obtaining appropriate consent.

We value the trust of our customers, employees, and stakeholders, and strictly comply with data protection laws and regulations. We constantly seek to improve our practices and invest in technologies that strengthen data security. At Forno de Minas, privacy and data protection are essential pillars for building lasting and successful relationships.

Concepts

Personal data refers to any information relating to an individual that can be used to identify them, either individually or through an analysis involving various types of information.

Data Subject is any person to whom the personal data refers.

Processing is any operation performed on personal data, including collection, storage, reproduction, modification, communication, and deletion of data.

Consent refers to the free and unequivocal manifestation by which the data subject agrees to the processing of their personal data for a specific purpose.

Rights of the Data Subject

Data protection laws grant you a series of rights related to your personal data:

• Confirmation of personal data processing: your right to confirm the existence of processing activities of your personal data;
• Access to your personal information: through a request sent to our Data Protection Officer (DPO), we will verify if there is any personal information of the data subject in our database and provide the necessary clarifications within 30 days. In particularly complex or numerous cases, responses to requests may take up to 60 days. In the latter case, the data subject will be notified and kept updated on the progress of the request;
• Correction of incomplete, inaccurate, or outdated data: the right to rectify inaccurate personal data, as well as have incomplete or inaccurate personal data rectified and updated;
• Deletion or anonymization of unnecessary and/or excessive data: it is the user’s right to have certain personal information about them deleted or anonymized, when possible; and
• Opt-out: the user may, at any time, request the cancellation of their subscription to newsletters and services they no longer wish to receive, as well as request the termination of their registration.

If you wish to request attention to any of your rights provided by law, it may be necessary to provide some data to verify your identity, expedite the response to your request, and/or ensure the necessary security for the procedure.

The purpose of this data processing activity is to verify if the data of the requesting person corresponds to that of the data subject to whom the request for information or data deletion relates. We do this to prevent third parties from accessing your personal data, as well as to prevent the autonomy of these unauthorized third parties over data processing activities that do not concern them.

Purposes of Personal Data Processing

We process only the information strictly necessary to meet user requests and solicitations, to improve your experience in our media, promote improvements in the offering of our products and services, to ensure the operability of our website and social networks (Instagram, Facebook, and LinkedIn), in addition to the data strictly necessary for the fulfillment of our institutional purpose.

The purposes for which your data may be processed by McCain-Forno de Minas are:

• Enable the processing of product orders;
• Enable the use of website and social media functionalities;
• Provide offers, services, conditions, and personalized content;
• Fix problems and promote improvements to the website;
• Maintain and improve the security of our website;
• Understand and analyze the user’s profile, habits, and behavior on the website through navigation cookies;
• For the user’s participation in our selection processes;
• So that we can provide customer service, in order to resolve consumer demands for information, doubts, complaints, suspension or cancellation of contracts and services, under the terms of applicable law;
• For the purpose of making sales by telephone;
• To convey information and news;
• To receive questions and information regarding our products, the website, and the company;
• At the user’s request for the purposes of meeting their specific requests;
• To enable increased user satisfaction with our products;
• Personalize the customer experience and interaction with our brand;
• For compliance with legal, regulatory, and/or contractual obligations;
• To meet the requests and decisions of administrative and/or judicial authorities.

User Precautions

To ensure your security and privacy, it is important to emphasize that financial information, such as bank account and credit card numbers or any other financial or sensitive data, should not be provided when using our website. Forno de Minas does not have e-commerce, nor do we sell our products through our website.

All our corporate emails have specific official domains associated with McCain Foods or Forno de Minas. Always check for possible domain name imitations and confirm the authenticity of the email. We are not responsible for data and information sent to emails that do not have our official corporate domain.

Suppliers and Service Providers

If you are a service provider for Forno de Minas, we may need some personal data to hire you, to contact you, or even to pay you. In order to generate a relationship of trust, we guarantee that your data will not be shared or used for purposes other than the original ones.

Cookies and Personalized Advertisements

Like many other websites, we collect and use information from advertisements displayed on our website. This information may include your Internet Protocol (IP) address, internet provider, the browser you used when visiting our website (such as Microsoft Edge, Google Chrome, or Firefox), the time of your visit, and which pages you accessed on our website.

“Cookies” are identifiers transferred to the browser or device that inform the system administrator how and when pages and resources are accessed, including how many people accessed them and from which device they accessed them.

“Tag” is a generic term for code snippets that allow the collection of data from website users, enable the implementation of functionalities such as videos and images, including the use of cookies.

Our website uses navigation cookies with the aim of improving its functioning and allowing more efficient navigation.

When a user browses the system, cookies are inserted into the browser, which automatically collect certain personal data to enable:

• The operationalization of the system (strictly necessary cookies);
• Cookies related to the performance and functionalities of the system;
• Obtaining aggregate information about visitors.

You have control to deactivate cookies in your browser options or through changes in antivirus program settings. However, it is important to note that deactivating cookies may affect how you interact with our website and other websites.

It is important to emphasize that we use this information to improve your experience and personalize the content displayed for you. However, we want to ensure your security and privacy, following the best practices and guidelines established by applicable data protection laws.

DoubleClick Dart Cookie

Google also uses cookies to display advertisements on our website. With the DoubleClick Dart cookie, Google can display advertisements based on your visits to other websites on the Internet.

We understand that your privacy is important, so we want to inform you that it is possible to deactivate the DoubleClick Dart Cookie by visiting Google’s content network and ad privacy policy.

Retention Time

Personal data processed by Forno de Minas will be stored only for the time necessary to fulfill the purposes for which they were collected, including compliance with legal, judicial, contractual obligations, accountability, or requests by competent authorities.

All collected data will be deleted from the relevant servers when they are no longer necessary or relevant for the provision of services, except in case of any reason for their maintenance, such as compliance with a legal obligation to retain data or the need to preserve them to safeguard our rights.

In order to determine the appropriate retention period for personal data, we take into account the quantity, nature, and sensitivity of the personal data, the potential risk of harm resulting from unauthorized use or disclosure of your personal data, the purpose of processing your personal data and whether we can achieve such purposes through other means, and the applicable legal requirements.

Information Security

As part of the McCain Foods group, we adopt all technical and organizational measures to ensure the security of data subjects’ personal data against loss, unauthorized access, or other incidents. The data is stored in a secure environment that is not accessible to the public.

We use security protocols, such as data encryption, firewalls, and access control, in addition to training our employees on the importance of privacy and data protection. We strive to protect the privacy of data subjects and ensure the protection of their data.

International Transfer

As a McCain Foods company operating internationally, we may store and process data outside the United States/Canada, including in countries such as Brazil, where we have operational bases. To ensure that your data is always protected, we adopt rigorous security measures and follow internationally recognized standards of privacy and data protection. All suppliers and service providers that handle your data undergo a careful evaluation, ensuring that they maintain adequate security practices. It is worth noting that any international data transfer is done securely and in compliance with the protection requirements provided for in U.S. legislation, ensuring the necessary care with personal information.

Data Protection Officer (DPO)

Forno de Minas is an integral part of the McCain Foods group. McCain maintains a brazilian regional privacy and data protection governance program that is subject to McCain’s global program. The regional Data Protection Officer (DPO) is responsible for monitoring the organization’s compliance with national privacy and personal data protection provisions, as well as internally disseminating the culture of data protection. Additionally, the DPO acts as a point of contact with data subjects and relevant data protection authorities.

McCain Brazil has designated the law firm Camargo & Vieira Advogados as its regional Data Protection Officer (DPO). The person responsible for the law firm Camargo & Vieira Advogados, acting as regional Data Protection Officer, is Rafhael Camargo de Carvalho.

To contact our regional DPO, please use the email privacy.brazil@mccain.com.br.

McCain Foods also has a global privacy team that acts as a global DPO. For questions related to McCain’s global privacy program, you can contact them through the email mccainprivacy@mccain.com.

Sharing Data with Third Parties

Our website may contain links to other websites that may offer useful information or tools for our visitors. It is important to highlight that this privacy notice applies only to our website. When visiting other websites through our links, we recommend that you read their privacy policy. We are not responsible for the privacy policy or content of these external websites.

We do not share our customers’ personal information with third parties, except when necessary to comply with legal obligations, process transactions, or provide services related to our business. We ensure that any third parties with whom we share personal information comply with appropriate standards of privacy and data security.

Sharing Financial Data with Credit Protection Agencies

We may share financial information of our customers, including those who are individuals or individual entrepreneurs, with credit protection agencies. This occurs in situations such as credit analyses or accounts receivable management, a common practice in commercial transactions to mitigate risks. This sharing is carried out based on the legitimate expectations of customers, that is, it is understood that, when making a purchase or transaction that involves credit, it is reasonable to expect that their data will be used to ensure the security and reliability of this operation.

In addition, this information may be shared with our partners to promote research and technical development in the area of credit protection, always focusing on security and appropriate financial control. It is important to highlight that this data is used responsibly, only for necessary purposes, and with all care to protect the privacy of our customers.

Updates

In order to improve our services, Forno de Minas may update this Privacy Notice, aiming to provide you with more security, convenience, and continuously improve your experience. That is why we recommend that users access this Privacy Notice periodically, to be aware of any modifications.