Doris
Privacy policy - doris
Last update: 06/06/2025 V7
privacy policy
1. Introduction

1.1 In this Policy You will find the description of the processing activities of Your Personal Data that are essential for the operation of DORIS.MOBI’s Virtual Fitting Room called “Doris Mirror” and for the provision of our services.

1.2 To operate, the Doris Mirror of DORIS.MOBI requires Personal Data to be provided by You, which are processed and used to enable and improve the provision of services by DORIS.MOBI and/or Doris.MOBI Licensees.

1.3 When You use our services and products, You provide DORIS.MOBI and/or Doris.MOBI Licensees with information and Personal Data through the submission of Image.

1.4 It is very important that You read, at each use of the Virtual Fitting Room, the provisions of this Policy, to understand how we collect and Process Your Personal Data. We emphasize that DORIS.MOBI and the Doris.MOBI Licensees do not sell Your Personal Data to Third Parties.

2. Meaning of the Expressions Used in this Policy

2.1 The expressions below, whenever used or initiated in capital letters, shall have the following meanings:

Anonymized Data: means any data relating to the data subject that cannot be identified, considering the use of reasonable and available technical means at the time of its Processing. Anonymized Data will not be considered Personal Data for the purposes of this Policy.

Applicable Law: means any law, code, decree, regulation, regulatory requirement, rule, ordinance, instruction, statement, resolution, judicial, arbitral, or administrative decision, of any Government Authority, including but not limited to LGPD and GDPR.

Clothing Item: means the image of a specific clothing item, Wearable, that allows its virtual projection, in order to enable the simulation of wearing such clothing item by a person.

Consent: means the free, informed, unequivocal, and specific manifestation of the data subject, expressed by means of a clear affirmative action, through which they agree with the processing of their Personal Data. Consent may be revoked at any time, without affecting the lawfulness of the processing carried out while Consent was valid.

Content: means any and all content sent, made available, and/or in any way transmitted by You.

Controller: means the natural or legal person, public or private, to whom the decisions regarding the Processing of Personal Data pertain. Doris.MOBI and/or Doris.MOBI Licensees are the Controllers and, therefore, responsible for making decisions regarding the Processing of Users’ Personal Data.

Database: means the structured set of Personal Data, established in one or several locations, in physical and/or electronic support, generated as a result of the activities carried out by Users through the use of Doris Mirror DORIS.MOBI.

Deletion: means the exclusion of Personal Data or sets of Personal Data stored in a Database, regardless of the procedure used.

DORIS.MOBI: means DORIS.MOBI TECNOLOGIA S.L., headquartered in the city of Barcelona, Spain, at Calle Beethoven, 15, 5th Floor, CP 08021, holder of tax identification document no. B-55484471 and registered with the Commercial Registry of Barcelona under no. B-617736, owner and/or holder of the right to use the Virtual Fitting Room.

Doris.MOBI Licensees: means the entity that has received a license for use and exploitation of Doris, granted by Doris.MOBI, including DORIS.MOBI TECNOLOGIA S.A., headquartered in the City of São Paulo, State of São Paulo, at Avenida Brigadeiro Faria Lima, no. 2.092, 10th floor, units E102 and E104, room 02, Jardim Paulistano, ZIP 01451-905, registered under CNPJ no. 19.782.186/0001-06.

GDPR: means the General Data Protection Regulation, which regulates the processing of data within the European Union and the European Economic Area.

Government Authority: means any government, authority, governmental entity, regulatory agency, public prosecutor’s office, tax authority (including, without limitation, the Brazilian Federal Revenue Service and state and municipal tax offices), commission, board, council, stock exchange, agencies, and any court, arbitral tribunal, judge, arbitrator, foreign or domestic, with jurisdiction, as the case may be, over DORIS.MOBI and/or Doris.MOBI Licensees and/or Users. Includes, but is not limited to, the National Data Protection Authority (ANPD) in Brazil, and the data protection supervisory authorities established by the GDPR in the European Economic Area (EEA), such as the European Data Protection Board (EDPB).

Image: means, with respect to a natural person, any forms of representation, including photographic, of the human figure, visual appearance, countenance, gestures, distinct body parts, externalizations of personality, name, surname, nicknames, codenames, and pseudonyms, as well as the audiovisual process that results in the fixation of images with or without sound, intended to create, through their reproduction, the impression of movement, regardless of the processes of their capture, the medium initially or subsequently used to fix them, as well as the means used for their dissemination, including but not limited to (i) newspapers, magazines, brochures, marketing materials, catalogs and/or any other printed media; (ii) fashion art, painting, sculpture, drawing, photography, reprography, caricature or decorative representation; (iii) sound image from phonography and broadcasting; and/or (iv) cinematography, television and the Internet. Your Image will be captured by the Virtual Fitting Room, following certain position and distance conditions mentioned in the equipment, and will be used so that You can virtually try on selected clothing items without the need for a physical fitting room.

International Transfer of Personal Data: means the transfer of Personal Data from the Controller’s territory to a foreign country or international organization of which the country is a member.

LGPD: means Law no. 13.709/2018 and its respective regulations that may be created, as amended from time to time.

Personal Data: means, with respect to a natural person, any and all data related to an identified or identifiable natural person, directly or indirectly, including but not limited to identifying numbers, images, location data, and/or electronic identifiers and IP addresses, or any data that, alone or together, allow the formation of the behavioral profile of an identified or identifiable natural person. When referring to You, Personal Data shall be understood as any Personal Data sent and/or transmitted by You through the DORIS.MOBI Virtual Fitting Room.

Policy: means this document entitled “Privacy and Personal Data Protection Policy,” which contains provisions regarding the Processing of Users’ Personal Data when using the Virtual Fitting Room, whose terms must be fully accepted by You as a condition for use.

Processing: means any operations carried out with Personal Data, including but not limited to collection, production, reception, classification, use, access, reproduction, transmission, sharing, distribution, processing, filing, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination, or extraction.

Processor: means the natural or legal person, public or private, residing or headquartered within or outside the national territory, who carries out the Processing of Personal Data on behalf of the Controller.

Sensitive Personal Data: means any Personal Data regarding racial or ethnic origin, religious belief, political opinion, union membership or membership in a religious, philosophical or political organization, Personal Data concerning health or sexual life, genetic or biometric Personal Data, when linked to a natural person.

Shared Use of Personal Data: means the communication, dissemination, international transfer, interconnection of Personal Data, or shared Processing of Databases by public bodies and entities in the exercise of their legal competencies, or between these and private entities, reciprocally, with specific authorization, for one or more Processing modalities permitted by such public entities, or between private entities.

Support: means the communication channel contained in our privacy portal, available at https://portallgpd.doris.mobi.

Terms of Use: means the document entitled “Terms of Use,” which, together with this Policy, contains the general terms and conditions of DORIS.MOBI solutions for Users.

User: means, indistinctly, any natural person who uses the Virtual Fitting Room.

Virtual Fitting Room: means the interactive digital totem, used in physical establishments, allowing the client to virtually try on selected clothing items from their Image, captured by the equipment, without the need to use a physical clothing fitting room.

Wearable: means, with respect to a clothing item, that said clothing item meets the technical requirements to enable, successfully, its virtual projection, in order to allow the simulation of wearing such clothing item by a person.

You (and, when referring to You, the pronouns “Your” and “Yours”): means the natural person who is, at this moment, agreeing to the Terms of Use and this Policy. You must: (i) have legal capacity or, if You are under 18 (eighteen) years of age or do not have legal capacity, You must be assisted or represented by Your parents or legal representatives, in accordance with the Applicable Law; and (ii) comply with all Applicable Laws, as a User.

3. Legal basis for data processing

3.1 BY USING THE VIRTUAL FITTING ROOM, YOU ACKNOWLEDGE THAT, ON OUR OWN OR THROUGH THE OPERATOR, WE CARRY OUT OPERATIONS OF COLLECTION, PRODUCTION, RECEIPT, CLASSIFICATION, USE, ACCESS, REPRODUCTION, TRANSMISSION, SHARING, DISTRIBUTION, PROCESSING, FILING, STORAGE, DELETION, EVALUATION OR CONTROL OF INFORMATION, MODIFICATION, COMMUNICATION, TRANSFER, DISSEMINATION OR EXTRACTION, IN SHORT, ANY AND ALL PROCESSING OF YOUR PERSONAL DATA AND INFORMATION, IN ACCORDANCE WITH THIS POLICY AND APPLICABLE LAW, FOR THE PURPOSES OF (A) ALLOWING YOU TO USE THE SERVICES OFFERED BY DORIS.MOBI AND/OR BY THE DORIS.MOBI LICENSEES THROUGH THE VIRTUAL FITTING ROOM; (B) FULFILLING THE LEGAL OBLIGATIONS AND THE OBLIGATIONS UNDERTAKEN BY DORIS.MOBI AND/OR BY THE DORIS.MOBI LICENSEES IN THE TERMS OF USE AND REQUIRING YOU TO FULFILL YOUR OBLIGATIONS UNDERTAKEN IN THE TERMS OF USE; (C) ENHANCING YOUR EXPERIENCE; AND (D) MAINTAINING, PROTECTING, AND IMPROVING THE SERVICES PROVIDED.

3.2 IF YOU ARE UNDER 18 YEARS OF AGE AND/OR DO NOT HAVE LEGAL CAPACITY, YOU MUST BE ASSISTED OR REPRESENTED BY YOUR PARENTS OR LEGAL REPRESENTATIVES WHO, BY AGREEING TO THIS POLICY, CONFIRM THE PROVISIONS SET FORTH IN ITEM 3.1.

3.3 DORIS.MOBI AND/OR THE DORIS.MOBI LICENSEES, ON THEIR OWN OR THROUGH OPERATORS, WILL CARRY OUT INTERNATIONAL TRANSFERS OF YOUR PERSONAL DATA AND INFORMATION, IN ACCORDANCE WITH THIS POLICY AND APPLICABLE LAW, FOR THE PURPOSES OF (A) ALLOWING YOU TO USE THE SERVICES OFFERED BY DORIS.MOBI AND/OR BY THE DORIS.MOBI LICENSEES; (B) FULFILLING THE OBLIGATIONS UNDERTAKEN BY DORIS.MOBI AND/OR BY THE DORIS.MOBI LICENSEES IN THE TERMS OF USE; AND (C) MAINTAINING, PROTECTING, AND IMPROVING THE SERVICES PROVIDED.

3.4 THE PROCESSING OF YOUR PERSONAL DATA BY DORIS.MOBI AND/OR BY THE DORIS.MOBI LICENSEES, IN ACCORDANCE WITH THIS POLICY AND APPLICABLE LAW, IS AN ESSENTIAL CONDITION FOR YOU TO USE THE VIRTUAL FITTING ROOM.

3.5 TO EXERCISE ANY OF YOUR RIGHTS PROVIDED IN THIS POLICY AND/OR IN APPLICABLE LAW, REGARDING YOUR PERSONAL DATA, YOU MUST CONTACT US THROUGH THE PORTAL AVAILABLE AT
HTTPS://PORTALLGPD.DORIS.MOBI/.

3.6 After capturing your Image in the Virtual Fitting Room and generating the Image with the Wearable Item, you may, via QR Code, access an internet page where you will be able to download your Images with the Wearable Item to your device, so that they can be used and shared if you wish. By accessing the internet page, your Consent for Processing will be requested. If you give your Consent, you will be authorizing the Processing of your Image by DORIS.MOBI AND/OR THE DORIS.MOBI LICENSEES, freely, informedly, and unequivocally, with the purpose of ensuring that the Image(s) generated by the use of the Virtual Fitting Room are Processed and made available to you. Without your express Consent, access to the internet page where the Images could be obtained will not be allowed. In some situations, your email may also be requested for you to access the internet page. In such cases, your email will be shared with the partner where you used the Virtual Fitting Room so that we can understand your purchasing behavior. In any case, the Processing of your Image will end 30 minutes after using the Virtual Fitting Room, and your email within up to 30 days after using the Virtual Fitting Room.

4. Processing of user’s personal data
‍‍
4.1 Collection of personal data.
For the purposes of using the Virtual Fitting Room, you provide DORIS.MOBI with certain Personal Data, such as height, Image, and in some cases, email.

4.2
When you use the Virtual Fitting Room, DORIS.MOBI and/or the Doris.MOBI Licensees collect your information and Personal Data to provide our services and enable the experience of viewing the product without the need to try it on physically.

4.3
When you use the Virtual Fitting Room, your Image will be retained for 30 (thirty) minutes. During this period, you may access, through a QR Code available in the Virtual Fitting Room, an internet page where the photos of your experience will be available and can be shared by you on your social networks. This option may not be available in all Virtual Fitting Rooms and, when available, it will only be enabled after your express Consent for the Processing of your Personal Data. On some pages, your email may also be requested to access the page.

4.4 Processing of personal data.
Once your Personal Data has been received and/or collected, DORIS.MOBI and/or the Doris.MOBI Licensees will begin Processing said Personal Data, especially, but not limited to, classification, use, access, reproduction, transmission, sharing, processing, filing, storage, deletion, evaluation or control, and communication operations.

4.5 Purpose of processing. DORIS.MOBI
and/or the Doris.MOBI Licensees process your Data for the purpose of (a) allowing you to use the services offered by DORIS.MOBI and/or by the Doris.MOBI Licensees through the Virtual Fitting Room; (b) fulfilling the legal obligations and those undertaken by DORIS.MOBI and/or by the Doris.MOBI Licensees in the Terms of Use and requiring you to fulfill your obligations undertaken in the Terms of Use; (c) enhancing your experience in the Virtual Fitting Room; and (d) maintaining, protecting, and improving the services provided.

4.6 DORIS.MOBI
and/or the Doris.MOBI Licensees will not carry out Processing of your Personal Data for purposes other than those set forth in this Policy, and such Processing will be limited to the minimum necessary for the achievement of said purposes.

4.7 Grounds for processing personal data.
You acknowledge and agree that the Processing of your Personal Data by Doris.MOBI and/or the Doris.MOBI Licensees for the use of the Virtual Fitting Room is based on the necessity for the performance of the contract entered into between Doris.MOBI and/or the Doris.MOBI Licensees and you, represented by the Terms of Use, and also to meet the legitimate interests of Doris.MOBI and/or the Doris.MOBI Licensees, provided that your rights and fundamental freedoms requiring the protection of your Personal Data are safeguarded. In turn, the Processing carried out when making your Image available on an internet page accessed via QR Code will be based on your express Consent, which is freely given and only necessary for you to access the internet page where your Image may be accessed and downloaded to your device.

4.8
You further acknowledge and agree that the Processing of your Personal Data may, as the case may be, be based on the need to comply with a legal or regulatory obligation by DORIS.MOBI and/or by the Doris.MOBI Licensees, as applicable.

4.9 Controller. DORIS.MOBI
and/or a Doris.MOBI Licensee is the Controller of the Processing of your Personal Data and, therefore, is responsible for making decisions regarding the Processing of your Personal Data. DORIS.MOBI and/or the Doris.MOBI Licensees will keep a record of all Processing operations of your Personal Data that they carry out.

4.10 Controller’s contact information.
You may contact DORIS.MOBI and/or the Doris.MOBI Licensees (Controller of the Processing of your Personal Data) through the Privacy Portal, which can be accessed at: https://portallgpd.doris.mobi.

4.11 Operators.
The identification of the Operators, i.e., those responsible for carrying out the Processing of Personal Data on behalf of DORIS.MOBI and/or the Doris.MOBI Licensees, and in accordance with the guidelines, instructions, and decisions of DORIS.MOBI and/or the Doris.MOBI Licensees, in line with this Policy and in compliance with the security and confidentiality measures established by DORIS.MOBI and/or the Doris.MOBI Licensees, is protected by trade and/or industrial secrets, under Applicable Law.

4.12 Responsibilities of the operators.
To the extent legally applicable, the Operators shall, regarding the protection of your Personal Data: (a) keep a record of the Processing operations of your Personal Data that they carry out; (b) comply with all Applicable Law; (c) detect, prevent, and halt any fraud, technical violations, and security breaches; and (d) protect DORIS.MOBI, the Doris.MOBI Licensees, you, and the general public, as requested and permitted by Applicable Law, against damage to rights, property, and safety.

4.13 Support.
The privacy portal (available at https://portallgpd.doris.mobi) is a channel for handling data subject requests, serving as the support responsible for receiving requests from data subjects, as well as providing clarifications and taking actions regarding the Processing of your Personal Data, in accordance with rights guaranteed by law.

4.14 Shared use of personal data. DORIS.MOBI
and the Doris.MOBI Licensees may carry out Shared Use of Personal Data, specifically email, with partners where you used the Virtual Fitting Room. Partners who receive your Personal Data commit, via agreement, to use your Personal Data only for the purposes and timeframes described herein.

4.15
Start of personal data processing. The Processing of your Personal Data will begin from the moment you express your intention to use the Virtual Fitting Room, by signaling the act of raising your hand, standing in front of and making eye contact with the equipment.

4.16
The Processing of your Personal Data will end, in any case, 30 (thirty) minutes after using the Virtual Fitting Room and 30 (thirty) days in cases where you provided your email.

4.17 Anonymized data. DORIS.MOBI
may anonymize your Personal Data through a process by which such Personal Data becomes Anonymized Data. You acknowledge and agree that Anonymized Data is not considered Personal Data, except if the anonymization process to which it was subjected is reversed, using exclusively proprietary means, or when, with reasonable efforts (under Applicable Law), it may be reversed. For the purposes of this Policy, DORIS.MOBI and/or the Doris.MOBI Licensees will not carry out any reversal of data anonymization.

4.18
In this regard, you further acknowledge and agree that Anonymized Data will not be subject to the protections established in this Policy, and that DORIS.MOBI and/or the Doris.MOBI Licensees may publicly disclose Anonymized Data, including, but not limited to, for the purpose of displaying trends regarding the use of DORIS.MOBI’s and/or the Doris.MOBI Licensees’ services.

5. Seus Direitos com Relação aos Seus Dados Pessoais


5.1 A DORIS.MOBI e/ou as Licenciadas Doris.MOBI garante a Você o direito de consultá-la, facilitada e gratuitamente, por meio de um dos canais de comunicação que fazem parte do nosso portal de privacidade disponível no Link: https://portallgpd.doris.mobi/ , sobre (a) a forma e a duração do Tratamento dos Seus Dados Pessoais; e (b) a DORIS.MOBI, as Licenciadas Doris.MOBI e os Operadores, ressalvados os segredos comerciais e industriais.

5.2 Você poderá, a qualquer tempo, obter da DORIS.MOBI e/ou das Licenciadas Doris.MOBI a confirmação da existência do Tratamento de Seus Dados Pessoais, bem como o acesso aos Seus Dados Pessoais que estiverem em poder da DORIS.MOBI e/ou das Licenciadas Doris.MOBI.

5.3 Referidos confirmação e/ou acesso serão providenciados mediante Sua requisição, (a) em formato simplificado, imediatamente; ou (b) por meio de declaração clara e completa, que indique a origem dos Dados Pessoais, a inexistência de registro, os critérios utilizados e a finalidade do Tratamento, observados os segredos comerciais e industriais da DORIS.MOBI e/ou das Licenciadas Doris.MOBI, fornecida no prazo de até 15 (quinze) dias úteis contado da data do requerimento apresentado por Você.

5.4 As informações serão fornecidas (a) por meio eletrônico, seguro e idôneo para esse fim; ou (b) sob forma impressa, de acordo com a Sua preferência.

5.5A DORIS.MOBI e/ou as Licenciadas Doris.MOBI armazenará os Seus Dados Pessoais em formato que favoreça o exercício do Seu direito de acesso. Você poderá solicitar cópia eletrônica integral de Seus Dados Pessoais armazenados, observados os segredos comercial e industrial da DORIS.MOBI e/ou das Licenciadas Doris.MOBI e os termos da Lei Aplicável, em formato que permita a sua utilização subsequente, inclusive em outras operações de Tratamento.

6. Privacidade, Proteção e Segurança de Dados Pessoais  


6.1 A DORIS.MOBI e/ou as Licenciadas Doris.MOBI consideram valiosos os Seus Dados Pessoais e entendem que eles devem ser protegidos de acessos não autorizados, de situações acidentais ou ilícitas de destruição, perda, alteração, comunicação ou qualquer forma de Tratamento inadequado ou ilícito, em conformidade com a Lei Aplicável.

6.2 Nesse sentido, a DORIS.MOBI e/ou as Licenciadas Doris.MOBI adotarão medidas de segurança, técnicas e administrativas aptas (a) a proteger os Seus Dados Pessoais, na máxima medida possível e de acordo com os padrões aceitos no mercado, de acessos não autorizados e de situações acidentais ou ilícitas de destruição, perda, alteração, comunicação ou qualquer forma de Tratamento inadequado ou ilícito; e(b) prevenir a ocorrência de danos em virtude do Tratamento de Dados Pessoais realizado.

6.3 A DORIS.MOBI e/ou as Licenciadas Doris.MOBI deverão, quando do Tratamento dos Seus Dados Pessoais, assegurar o cumprimento dos padrões de segurança e sigilo dos registros, Dados Pessoais e comunicações privadas, em conformidade com a Lei Aplicável, devendo observar, no mínimo, as seguintes diretrizes de segurança: a) o estabelecimento de controle estrito sobre o acesso aos Dados Pessoais, mediante a definição de responsabilidades das Pessoas que terão possibilidade de acesso e de privilégios de acesso exclusivo para determinadas Pessoas; b) a previsão de mecanismos de autenticação de acesso aos registros, usando, por exemplo, sistemas de autenticação dupla para assegurar a individualização do responsável pelo Tratamento dos registros; e c) a criação de inventário detalhado dos acessos aos registros de conexão e de acesso a aplicações, contendo o momento, a identidade do responsável pelo acesso designado pela DORIS.MOBI.

6.4 A DORIS.MOBI e/ou as Licenciadas Doris.MOBI manterão os respectivos registros de acesso a aplicações de Internet, sob sigilo, em ambiente controlado e de segurança, pelo prazo mínimo de 15 (quinze) dias contados da respectiva coleta.

6.5 Considerando que a Internet não é um ambiente completamente seguro, não é possível assegurar ou garantir que os Seus Dados Pessoais não serão acessados, divulgados, alterados ou destruídos por violação de qualquer uma das proteções de segurança, técnicas ou administrativas empregadas, ainda que tais proteções estejam adequadas aos padrões aceitos no mercado. Não obstante, a DORIS.MOBI e as Licenciadas Doris.MOBI envidarão seus melhores esforços para preservar a confidencialidade e a segurança dos Dados Pessoais fornecidas por Você. Nesse sentido, a DORIS.MOBI e as Licenciadas Doris.MOBI não compartilharão, venderão, ou de qualquer outra forma fornecerão a terceiros, de nenhuma forma, os Seus Dados Pessoais, sem a sua prévia autorização, exceto: a) nos casos autorizados por esta Política, como, por exemplo, no caso de compartilhamento de Dados Pessoais com o Operador; b) se a DORIS.MOBI e/ou as Licenciadas Doris.MOBI forem solicitadas a revelar tais informações em virtude da Lei Aplicável ou de ordem de Autoridade Governamental competente; c) para fazer valer as disposições constantes dos Termos de Uso aplicáveis a Você, desta Política, e/ou de qualquer outro documento que Você tiver pactuado com a DORIS.MOBI e/ou com as Licenciadas Doris.MOBI;  d) para a investigação sobre eventuais violações Suas; e) para detectar, impedir ou lidar com questões técnicas, de fraude ou segurança; f) para proteger os direitos, a propriedade e/ou a segurança do Provador Virtual, da DORIS.MOBI, das Licenciadas Doris.MOBI e/ou de Você.

6.6 A DORIS.MOBI e/ou as Licenciadas Doris.MOBI não serão responsáveis por eventuais prejuízos incorridos por Você decorrentes da violação por parte de terceiros que subvertam os sistemas de segurança da DORIS.MOBI e/ou das Licenciadas Doris.MOBI para acessar essas informações.

7. International Data Transfer

7.1 The Personal Data we collect may be stored and processed on servers located in Brazil and the United States. Although the countries in which we operate may not offer the same level of data protection as some jurisdictions, we adopt appropriate technical and organizational measures to ensure the security and protection of your Personal Data, as required by Applicable Law.

7.2 By providing your Personal Data to Doris.MOBI, you expressly consent to the transfer, storage, and processing of your Personal Data in countries such as Brazil and the United States. Doris.MOBI ensures that any international data transfer will be carried out in compliance with Applicable Law. Such transfer will be backed by appropriate protection mechanisms and legal instruments to guarantee an adequate level of data security and privacy.

8. Other Provisions

8.1 Requests from Government Authorities. DORIS.MOBI
and the Doris.MOBI Licensees cooperate with Government Authorities to ensure compliance with Applicable Laws, protect the integrity and security of the Virtual Fitting Room and its Users, prevent illegal activities, safeguard industrial and intellectual property rights, and prevent fraud. Whenever requested by Government Authorities, DORIS.MOBI and/or the Doris.MOBI Licensees will provide the Personal Data they hold about you.

8.2 Compliance with Legal or Regulatory Obligations by DORIS.MOBI.
Without prejudice to, and in addition to, the above, DORIS.MOBI and/or the Doris.MOBI Licensees may perform any Processing of Personal Data necessary to comply with legal or regulatory obligations to which they are subject, without limiting other Processing scenarios provided by Applicable Law and this Policy.

8.3
Severability and Governing Law. The nullity or invalidity of any provision of this Policy shall not imply the nullity or invalidity of the remaining provisions. This Policy shall be governed by and interpreted in accordance with the laws of the Federative Republic of Brazil, and to resolve any disputes arising directly or indirectly herefrom, the Forum of the District of São Paulo, State of São Paulo, is hereby elected, with the express waiver of any other forum, however privileged it may be or become. In case of doubts, please contact us through our privacy portal at the link: https://portallgpd.doris.mobi/.

Appointment Term of the Data Protection Officer (DPO)

DORIS.MOBI TECNOLOGIA S.L., headquartered in the city of Barcelona, Spain, at Calle Beethoven, 15, 5th Floor, ZIP Code 08021, holder of tax identification number B-55484471 and registered with the Barcelona Commercial Registry under number B-617736, and DORIS.MOBI TECNOLOGIAS.A., headquartered in the city of São Paulo, State of São Paulo, at Avenida Brigadeiro Faria Lima, No. 2,092, 10th floor, units E102 and E104, room 02, Jardim Paulistano, ZIP Code 01451-905, registered with CNPJ under number 19.782.186/0001-06, data controllers hereinafter designated as the “Controller,” hereby formalize the appointment of Ricardo Lima Ferla, hereinafter “Appointee,” “Officer,” or “DPO,” as the “Data Protection Officer (DPO)” under the terms of Article 41 of Law No. 13,709/2018 (Brazilian General Data Protection Law – LGPD) and Article 37 of the General Data Protection Regulation – GDPR.

The appointment was made on June 13, 2024, taking effect from this date and for the duration of the relationship between the Appointee and the Controller. The Controller informs that both the data subject and the National Data Protection Authority (ANPD) may contact the Officer directly via the email address dpo@doris.ia or through the privacy portal available at: https://portallgpd.doris.mobi.

Furthermore, the Officer will be responsible for providing necessary assistance and guidance regarding internal procedures that enable the collection, storage, and any type of Processing of Personal Data. Additionally, the Officer will be responsible for activities provided for in paragraph 2 of Article 41 of the Brazilian General Data Protection Law.

The Officer’s responsibilities, under the law, include:
I - Receiving complaints and communications from data subjects, providing clarifications, and taking appropriate actions;
II - Receiving communications from the national authority and taking appropriate actions;
III - Guiding employees and contractors of the entity regarding practices to be adopted concerning the protection of personal data; and
IV - Executing other duties determined by the Controller or established in complementary regulations.

During absences, impediments, or vacancies of the Officer, the role will be performed by a previously designated substitute, according to the company’s organizational structure. The substitute, Leonardo Frisso Mattedi, will be appointed to ensure the continuity of operations and compliance with the responsibilities of the position.