- Updated version as of May/2026
PRIVACY NOTICE
Thank you for visiting the Colansa website!
Here you will find detailed information regarding the data we collect, the data processing operations we carry out, and the reasons for processing your personal data.
This is the Privacy Notice of the Latin America and the Caribbean Community of Practice on Nutrition and Health (“Colansa”). We have developed this document to inform you about how we process your personal data in a transparent manner and in compliance with the Brazilian General Data Protection Law (Law No. 13,709/2018 – “LGPD”).
Colansa (CNPJ No. 63.293.431/0001-03) is a community of professionals, civil society organizations, and research groups working collaboratively to contribute to the development of healthy, sustainable, equitable, and inclusive food systems and to promote improvements in nutrition and health for populations in Latin America and the Caribbean.
By accessing and browsing our website, you accept, without limitations or reservations, this Privacy Notice.
As a data subject, you have specific rights that will be explained later in this document. If you have any questions or wish to exercise these rights, please contact dpo@colansa.org.
Summary
Important concepts to understand this document
In Brazil, the protection of personal data is regulated by the General Data Protection Law (LGPD). Let us understand some concepts from this law, which will help you understand this document:
- Personal data: information related to an identified or identifiable natural person (“individual”). In other words, data is considered personal even if it does not identify you at first, but allows such identification when combined with other information;
- Sensitive personal data: information concerning racial or ethnic origin, religious belief, political opinion, membership in a labor union or religious, philosophical, or political organization, data concerning health or sex life, genetic or biometric data, when linked to a natural person;
- Data subject: you, the natural person (“individual”) to whom the personal data being processed refers. This may include children, adolescents, or adults;
- Consent: a free, informed, and unequivocal expression by which the data subject agrees to the processing of their personal data for a specific purpose;
- Processing: any operation carried out with personal data, such as collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination, or extraction;
- Data controller: the natural or legal person who makes decisions regarding the processing of personal data within a given relationship.In most cases, we act as the controller. However, in some cases our partners may also act as controllers if they use personal data for purposes different from ours;
- Data processor: the natural or legal person who processes personal data on behalf of the controller, in accordance with the controller’s instructions. Processors include all partners who provide services to us and carry out some form of personal data processing. Processors strictly follow the purposes we define for the use of data and never process it for their own purposes.
What personal data do we collect, and how?
The data we collect varies according to your interaction with Colansa and our activities:
When you register as an individual member of our Community | Personal data: first name, last name, country, city, educational background, profession, current occupation (activity, position, or role), telephone number, e-mail address, affiliation with a company/institution/organization/collective/group/movement, and other information voluntarily provided by you. Sensitive personal data: race/color/ethnicity, gender identity. |
When you register your organization/institution in our Community as a legal entity: your personal data as a representative. | Personal data: first name, last name, country, city, current occupation (activity, position, or role), telephone number, e-mail address, and other information voluntarily provided by you. Sensitive personal data: race/color/ethnicity, gender identity. |
When you complete our contact form | Name, e-mail address, and other information voluntarily provided by you. |
When you subscribe to receive our newsletter | First name, last name, e-mail address. |
Browsing data, which may be automatically collected when you browse our website (as will be explained later in this Notice) | IP address, browser type, operating system, pages visited, time spent on our website, access source, and browsing patterns. |
When you participate in recruitment processes | Personal data: name, e-mail address, telephone number, profession, education, academic background, current position/workplace, and other information voluntarily provided by you. Sensitive personal data: race/color/ethnicity, gender identity, and sexual orientation. *If you are hired, we will also collect additional data necessary for hiring, such as ID number, CPF, marital status, address, place of birth, age/date of birth. |
When you participate in our public calls | Personal data: first name, last name, country, city, educational background, profession, current occupation (activity, position, or role), telephone number, e-mail address, affiliation with a company/institution/organization/collective/group/movement, and other information voluntarily provided by you. Sensitive personal data: race/color/ethnicity, gender identity. |
When you participate in our research activities: we conduct various surveys and studies to better understand our Community, the profile of the individuals and organizations that compose it, and their relationship with us and with the cause. | Personal data: first name, last name, country, city, educational background, profession, current occupation (activity, position, or role), telephone number, e-mail address, and other information voluntarily provided by you. Sensitive personal data: race/color/ethnicity, gender identity, and sexual orientation. |
In audiovisual records: when you appear in photographs and/or videos in our activities, events, testimonials, etc | Image and voice |
When you participate in our online events | Personal data: first name, last name, e-mail address, country, city, identification document, affiliation with a company/institution/organization/collective/group/movement, and other information voluntarily provided by you. |
When you participate in our in-person events | Personal data: first name, last name, e-mail address, country, affiliation with a company/institution/organization/collective/group/movement, and other information voluntarily provided by you. Sensitive personal data: race/color/ethnicity, gender identity, sexual orientation, and accessibility needs. |
Notes:
- Whenever we collect sensitive data, we will inform you of the purpose for using such data and, whenever possible, give you the option to refuse providing it, informing you of the consequences of refusal.
- We will also collect your authorization to use your image and voice in audiovisual records.
Purposes of data processing
We use your personal data exclusively for the following legitimate purposes:
- Managing your registration and participation as a member of our Community;
- Managing our Community in order to enable collaborative and plural engagement;
- Operationalizing and carrying out our projects, activities, and overall work;
- Evaluating applications and applying selection criteria;
- Understanding our Community and the general public interested in our work;
- Maintaining communication with you and recording the history of your relationship with us;
- Organizing and carrying out events, including in-person events, which require data for logistics, security, and operational purposes;
- Producing institutional content and materials to promote our work and publishing them on our website and social media;
- Sending newsletters and information to subscribers;
- Monitoring and evaluating the impact of our work;
- Analyzing statistics regarding the use of our digital channels and improving user experience on the website;
- Producing institutional and accountability reports;
- Hiring services and consultants;
- Executing or enforcing contracts entered into by us;
- Complying with legal obligations, court orders, or administrative requests;
- Exercising rights in administrative or judicial proceedings;
- Complying with accounting, tax, and accountability obligations.
We use the sensitive personal data collected to implement diversity and inclusion policies in our processes, to better understand our audience and Community, to work from an intersectional perspective, and to generate internal diversity metrics. Under no circumstances will we use this information in a harmful and/or discriminatory manner.
Use of Cookies
We use cookies to improve your experience on our website. Cookies are files sent by the browser that store information about your browsing activity. We may use four types of cookies:
Type | Purpose | Consent |
|---|---|---|
Necessary | These are essential for websites to load properly and allow you to use available functionalities. | Not required |
Functional | These allow websites to remember your preferences (for example, your language) in order to provide a personalized experience. | Requested |
Analytical | These collect data on how users interact with websites, helping us understand visitor behavior, browsing patterns, and improve your experience. | Requested |
Marketing | These collect information to enable the display of personalized advertisements according to each user’s interests. They also allow the measurement of advertising campaign effectiveness. | Requested |
Now that you are familiar with the types of cookies available, we can explain how we use these tools on our website.
When you access our website, we collect some information through cookies (such as IP address, browser, computer operating system, and preferences) and store it on our servers so that we can provide the various functionalities of our platform with quality.
In addition, we use cookies to personalize content and advertisements, provide social media features, and analyze our traffic. We may eventually share this information with media and advertising partners, who may combine it with other data provided by you in order to perform analyses.
The law establishes that we may collect cookies if they are strictly necessary for the operation of the website. For all other types of cookies, we request your permission through the banner displayed when accessing the page.
You may use our website without cookies if you prefer.
|
Some cookies may be placed by third-party services that appear on our pages, and we cannot be held responsible for them. Therefore, we recommend that you consult the cookie policies of these third parties.
Your rights as a data subject and how to exercise them
As a data subject, you have the following rights (expressly provided for in Articles 18 and following of the LGPD). You may:
- Request information about which of your personal data we process and how we do so;
- Request confirmation regarding all personal data we maintain about you;
- Withdraw the consent you have given, except where there is another legal basis for processing your data (for example, our legitimate interest);
- Understand the consequences if you choose not to provide consent for the processing of your data;
- Request the correction or updating of incomplete, inaccurate, or outdated data about you;
- Request the anonymization, blocking, or deletion of data that you consider unnecessary for the purpose for which it is being used, or excessive in light of the information provided to you;
- Request the deletion of your data from our files and systems when there is no reason to retain it (such as compliance with legal or regulatory obligations);
- Ask whether we share your data with other public or private organizations;
- Obtain clear and complete information about the public and private entities with which we share your personal data.
To exercise these rights, please send an e-mail to dpo@colansa.org.
Your request will be reviewed and answered within a reasonable period. To ensure your security, we may request additional information to confirm your identity before processing requests related to your personal data.
In certain cases, your request may be denied based on a legitimate reason (for example, if we cannot disclose information due to legal obligations or contracts with third parties). In all cases, the appropriate justification will be provided to you. If you disagree with our response, you may submit a request directly to the Brazilian National Data Protection Authority (ANPD).
Storage and security of your data
We apply technical and organizational measures to protect and ensure the security of the personal data we store, such as:
- Strict control over the processing of personal data, including access limitation;
- Access authentication mechanisms that ensure individualized records;
- Detailed inventory of connection logs;
- Firewalls, antivirus software, and intrusion detection systems;
- Internal training on personal data protection.
Your personal data will be stored only for as long as necessary to fulfill the purposes for which it was collected and may be retained after this period in the situations provided for in Article 16 of the LGPD.
In the event of a security incident that may entail risk or relevant damage to data subjects, we will notify the Brazilian National Data Protection Authority (ANPD) within a reasonable period as determined by law, and affected data subjects when applicable.
Sharing with third parties and international data transfers
Your data may be shared with third parties necessary for the operationalization of our activities, such as partners, suppliers, and service providers. Such sharing will occur within legal limits, and we enter into contracts with third parties to ensure that they always process your data in compliance with the law and this Privacy Notice.
Considering the international nature of our Community, we frequently carry out international data transfers, always implementing appropriate security measures for such transfers.
Personal data of minors
We recognize that children and adolescents are holders of special rights and deserve enhanced protection in the digital environment, in accordance with the LGPD and the Brazilian Child and Adolescent Statute (Law No. 8,069/90).
Accordingly, Colansa does not intentionally collect personal data from individuals under 18 years of age. If you belong to this group, please ensure that your parents and/or legal guardians authorize you to access our website and provide your personal data.
In addition, parents or legal guardians may request the exercise of the rights of children or adolescents described in item 6 of this Notice.
Updates to this Notice
This Notice may be amended by us at any time. We will always publish the dates of such updates; therefore, by using the website after the mentioned date, you indicate your agreement with the changes made. If you do not agree with these terms, we kindly ask that you stop accessing our website.
In addition, if we need your consent to collect personal data beyond those informed herein or for new purposes, we will request it again.
How to contact us regarding your personal data
For matters related to this Privacy Notice or the processing of personal data, you may contact us via e-mail at dpo@colansa.org.