Sharing and International Transfer Data

We will not disclose your Personal Data to third parties, except in the following cases:

• To our processor Mitsui Knowledge Industry Co., Ltd. (“MKI”) in Japan, which may access our system for maintenance purposes. We have a data processing agreement in place with MKI to ensure an adequate level of data protection.
• Among affiliates (“Companies”) located on all continents (countries where each one is located), only if necessary and to the extent necessary to fulfill the purpose for which your Personal Data was collected. We have a data processing agreement in place to ensure an adequate level of data protection.
In the event that we undergo a reorganization or are acquired by third parties, any Personal Data we have about you may be transferred to that company or third parties in compliance with applicable law.
• Personal Data transferred to MKI or to the Companies may subsequently be transferred to other recipients, also only if necessary and to the extent necessary to fulfill the purpose for which your Personal Data was collected and, furthermore, provided that (i) the same data protection standards in Data Protection Laws are observed and (ii) the necessary measures are taken so that such transfer occurs in accordance with the requirements of applicable laws.
• We may disclose your Personal Data if legally authorized or required (for example, if required by law or court order) according to the Data Protection Laws.

Security Measures

We take reasonable measures to protect your Personal Data against unauthorized use and disclosure and accidental or unlawful situations of destruction, loss, alteration, communication, or diffusion, such as the use of reasonable physical, administrative, and technical measures designed to protect and maintain the confidentiality of your Personal Data, including the possibility of anonymizing such Personal Data. Standard security measures are used, as required by applicable laws, which may include login and passwords, encryption, security controls, penetration testing, confidentiality agreements, and constant monitoring to ensure the secrecy, integrity, and inviolability of your Personal Data.

Additionally, our security and privacy policies are reviewed and improved periodically as necessary. Despite all security protocols, we cannot guarantee that problems caused by third parties, such as hacker cyberattacks, will not occur. Although we cannot assure and guarantee that losses, misuse, and alteration of information will never occur, we strive to prevent them as much as possible.

You should bear in mind that sending information over the internet is never completely secure. We cannot guarantee the security of information you send via our website while you are accessing the internet, and such transmission is at your own risk.

Data Retention 

We seek to keep our Processing activities related to your Personal Data as limited as possible. In the absence of specific retention periods established in this Notice and in our policies, your Personal Data will be retained only for as long as necessary to fulfill the purpose for which it was collected and, if applicable, for the period required by applicable laws.

After the end of the applicable retention period, we will securely destroy your Personal Data in accordance with applicable laws.

Your Rights 

Under and within the limits of the applicable Data Protection Laws, you have the right to exercise some or all of the following rights:

1. request (i) information about the retention of your Personal Data and (ii) access to and/or a copy of your Personal Data, including the purposes of Processing, the categories of Personal Data in question, and the recipients of the Personal Data, as well as potential retention periods;
2. request rectification, removal, or restriction of your Personal Data, for example, because (i) it is incomplete or inaccurate, (ii) it is no longer needed for the purposes for which it was collected, or (iii) the consent on which the Processing was based has been revoked;
3. refuse to provide and, without impact on the data processing activities that occurred before such revocation, revoke consent for the Processing of your Personal Data at any time;
4. be informed about the option not to provide consent and the consequences of that decision;
5. object to the Processing of Personal Data for reasons related to a particular situation in which you believe there is a violation of applicable data protection laws. In this case, please provide information about your specific situation. After evaluating the facts presented by you, we will stop Processing your Personal Data or present our legitimate and compelling grounds for continued Processing;
6. take legal action regarding any potential violation of your rights in relation to the Processing of your Personal Data, as well as file complaints with the competent data protection regulatory agencies; and/or
7. request (i) to receive the Personal Data concerning you that you have provided to us in a structured, commonly used, and machine-readable format and (ii) to transmit your Personal Data to another controller without hindrance from us; where technically feasible, you have the right to transmit the Personal Data directly from us to another controller;
8. Know which public or private entities your data has been shared with;
9. Request a free copy of the data processing contract entered into between Mitsui Brazil and entities abroad for the international transfer of your Personal Data, subject to trade and industrial secrets (portions may be redacted when necessary).

You may (i) exercise your rights mentioned above or (ii) send any questions or (iii) file any complaints about our data processing by contacting us as detailed below.

Contacting us

Please send any questions, concerns, or comments you have about this Notice or any requests related to Personal Data to us:

Mitsui & Co. (Brazil) S.A.                                  
 Av. Paulista, 1842, 23rd floor, Cetenco Plaza Building          
“Northern Tower”, São Paulo - SP, Brazil - ZIP Code 01310-923        
 Telephone: 08000000088    
 Email: BRprivacidade@mitsui.com            
 
Av. Paulista, 1842, 23rd floor, Cetenco Plaza Building          
“Northern Tower”, São Paulo - SP, Brazil - ZIP Code 01310-923        
Telephone: 08000000088     
Email: BRprivacidade@mitsui.com
Data Protection Officer: Masahiro Mizuhashi

The Personal Data you provide when contacting us will be processed to fulfill your request and as described above regarding Personal Data Collected, Purpose of Use, and Processing Period.

Responsibility of Processing Agents  

Mitsui Brazil is the exporter of your Personal Data, and, like the  Companies that also act as controllers of your Personal Data, is responsible for complying with legal obligations, including security, transparency, and respect for your rights as a data subject.

Changes to this Notice

We reserve the right to update this Notice periodically. The current version will always be published on our website. Last updated: August 25, 2025. Please visit the website regularly and check our current Notice accordingly.

For more information, questions, or requests, use our contact details indicated above in Designated Contact Parties.