Privacy Policy

EREA CONSULTORIA E PARTICIPAÇÕES LTDA., a limited liability company headquartered in the City of São Paulo, State of São Paulo, at Avenida Magalhães de Castro, 4,800, suite 506, Continental Tower, ZIP code: 05676-120, registered with CNPJ/ME under number 28,291,924/0001-03.

GENERAL INFORMATION

1.1. EREA provides to users in general the website https://ereadvisory.com/ and its software platforms (platforms), to provide corporate, product, and market information to the public.

1.2. For browsing and general use of the SITE and platforms, it is not necessary for the User to identify themselves. However, to enable the provision of some services through the SITE and platforms, such as initial contact and download, it is necessary for the User to provide some data to EREA.

1.3. All collected information will be stored in EREA's database, which has security systems compatible with Brazilian and international market standards.

1.4. For the purposes of this Privacy Statement, capitalized terms not defined herein shall have the meanings set forth in the General Data Protection Law (LGPD) - Law 13,709/2018.

HOW EREA HANDLES YOUR PERSONAL DATA

2.1. As indicated in clause 1.2. of this Policy, some functionalities and services of the SITE and platforms require the provision of personal data by the User for their implementation, as explained below:

Contact: In order to contact you online and/or register users on the platforms, EREA collects your full name, (CPF or CNPJ), and email. This information is intended to identify you, as well as to enable EREA to contact you to fulfill your request, in addition to identifying the most suitable area to assist you and is stored indefinitely. The User may, at any time, request deregistration by sending an email to: [email protected] with the request.

Download of content: EREA, always with the aim of informing and contributing to the professional development and updating of its clients and partners, makes available on its SITE the download of some informative materials, such as catalogs, articles, brochures, guides, manuals, and tables related to its products and services. Occasionally, to access the SITE and platforms and/or download the content, we may request that Users provide some data, which in some cases may be considered personal data, such as email, state, area of operation, and field of operation. Such data is necessary for us to identify the preferences of our Users and, thus, produce content of interest to them, in addition to enabling communication between EREA and the User regarding news that may be of interest to them, and is stored indefinitely, or at any time, if you do not wish to receive future contacts via email to request deregistration, simply send an email to: [email protected] with the request.

2.2. Considering EREA's concern with the privacy and protection of its clients' and partners' data, we also inform about the processing of personal data carried out by the company in activities not necessarily related to the SITE or its Portals, as set forth below:

Customer Service: In order to be able to respond to requests related to Customer Service, EREA may request and process personal data from the requester, such as name, telephone, email, and CPF/CNPJ, depending on the treatment, for communication and sending replacement material, gifts, among other activities.

TREATMENT AGENTS AND SHARING OF PERSONAL DATA

3.1. The personal data collected, stored, or processed, in any way, due to the use of the SITE and platforms are controlled by EREA. Thus, EREA must be consulted by the Holder of personal data for any exercise of the rights provided for in the General Law on Protection of Personal Data - LGPD.

3.2. Personal data will not be commercialized, transferred, or shared with Controlling companies outside the EREA corporate group without prior authorization, being used, when not for compliance with Gerdau's legal and regulatory obligations, in the same ways described in item 2 of this Declaration.

3.3. To meet the purposes listed in item 2 of this Declaration, the User's personal data may be shared with (1) EREA employees, independent contractors, subsidiaries, affiliates, consultants, service providers, and suppliers, if disclosure enables the entity to perform a business, professional, or technical support function for EREA; (2) EREA employees, independent contractors, service providers, and suppliers to fulfill a service or product request. In these cases, third parties who have access to personal data, whenever possible, will be considered Operators in the processing of personal data, being subject to specific contractual clauses regarding data processing, as well as EREA's internal Policies and practices regarding privacy and data protection.

3.4. Personal data may occasionally be shared with third-party Controllers other than those indicated herein, which will only occur after User authorization.

ACCURACY OF INFORMATION

4.1. The User guarantees the truthfulness and accuracy of the information and data provided to EREA, assuming corresponding responsibility in the event of its inaccuracy, as well as undertaking to keep it updated. EREA assumes no responsibility in case of inaccuracy of the data provided.

4.2. EREA may, at its sole discretion, suspend and/or cancel the User's registration at any time if any inaccuracy is detected in the information provided by the User until the inaccuracy is rectified. This procedure aims to protect the User and optimize the service provision.

EXTERNAL LINKS

5.1. The SITE and platforms may contain access links to other sites with their own content and Privacy Policy. Whenever this occurs, the user will be informed.

USER RIGHTS REGARDING THEIR PERSONAL DATA

6.1. Users have the right, upon request to the Data Protection Officer:

Confirmation of treatment's existence;

Access to personal data;

Correction of incomplete, inaccurate, or outdated data;

Anonymization, blocking, or deletion of unnecessary, excessive, or data processed in violation of this Law;

Portability of data to another service or product provider, upon express request, in accordance with ANPD regulations;

Revocation of consent and consequent deletion of personal data processed, except in cases provided for in art. 16 of the LGPD;

Information about public and private entities with which the controller has shared data;

Information about the possibility of not providing consent and about the consequences of refusal.

6.2. EREA reserves the right to maintain data processing if it has a legal basis for treatment applicable to the specific case, such as, but not limited to, compliance with legal obligations, contract execution, legitimate interest, etc.

DATA OF THE PERSONAL DATA TREATMENT OFFICER

7.1. For matters related to the processing of personal data, the interested party should contact the responsible person, as follows:

Email: [email protected]

RESPONSIBILITY

8.1. As there are no infallible or inviolable security systems, EREA is not responsible for any damage, loss, or loss of user information caused by third-party conduct, as well as in cases of fortuitous event or force majeure beyond its control.

9.1. Seeking continuous improvement, EREA may alter this Statement at any time, and such changes will be disclosed on the SITE for consultation at any time.

9.2. By using EREA's SITE and platforms services, the User acknowledges the terms of this Statement in effect at the time of use, and it is the User's responsibility to check it beforehand each time they visit the SITE and use the platforms.

March 2024.