Privacy, transparency and responsible data handling.

For the processing activities described in this Privacy Policy in which it determines the purposes and essential means of processing, AUTHENTIC SERVICOS MARITIMOS LTDA - ME, trading as Authentic Marine, CNPJ 29.481.095/0001-94, acts as the controller of the applicable personal data.

The company is located at Rua Manoel Pereira, 1976, Bockmann, CEP 83206-282, Paranaguá, Paraná, Brazil.

This Policy covers personal data processed through the website, website contact forms and communications initiated through Authentic Marine's digital channels.

The categories of personal data processed depend on how the visitor, customer, supplier or other professional contact interacts with Authentic Marine.

• Identification data: such as name and company or organization associated with the contact.
• Contact data: such as e-mail address and telephone or WhatsApp number.
• Technical request information: information voluntarily entered into the website form or sent through other company communication channels.
• Marine operational information: such as vessel name, port, equipment or system, technical requirement and other information relevant to a requested marine service.
• Communication records: the content of e-mails, form submissions and messages exchanged with Authentic Marine.
• Technical navigation information: technical data that may be generated by the website or hosting infrastructure, such as IP address, browser/device information, date and time of access and technical logs.

Personal data may be processed for purposes directly related to Authentic Marine's activities and the interaction initiated by the data subject.

• Respond to contact requests, inquiries and communications.
• Receive and evaluate technical marine service requests.
• Prepare or evaluate commercial proposals and quotation requests.
• Communicate with customers, prospective customers, suppliers and professional contacts.
• Take steps requested before entering into a contractual relationship.
• Perform contractual, administrative and operational activities.
• Maintain records necessary for business, security and evidentiary purposes.
• Comply with legal or regulatory obligations.
• Exercise or defend rights in judicial, administrative or arbitral proceedings.
• Protect Authentic Marine's website, systems, operations and communications.

Authentic Marine processes personal data only when an appropriate legal basis is applicable to the relevant processing activity.

Depending on the circumstances, the applicable legal basis may include the performance of a contract or preliminary procedures related to a contract, compliance with legal or regulatory obligations, the regular exercise of rights, legitimate interests, consent or another basis permitted under the LGPD.

The legal basis is determined according to the specific purpose, nature of the information, relationship with the data subject and circumstances of the processing.

Authentic Marine provides website forms through which visitors may submit contact, commercial or technical requests.

The forms are implemented using functionality provided through the website's WordPress and Elementor environment. Information submitted through a form may include name, company, telephone or WhatsApp number, e-mail address, vessel, port, equipment or system and the description of the relevant technical requirement, depending on the fields available in the applicable form.

The information is processed for the purpose of receiving, evaluating and responding to the request submitted by the visitor and, where appropriate, continuing the related technical or commercial interaction.

According to the current website configuration informed by Authentic Marine, the website does not intentionally use Google Analytics, Google Tag Manager, Google reCAPTCHA, Google Maps, Meta Pixel or Google Ads for analytics or advertising purposes.

The website may nevertheless use technical cookies, local storage or similar technologies generated by WordPress, Elementor, hosting infrastructure or other components that are necessary for security, session management, technical operation or delivery of website functionality.

Because technical infrastructure can change over time, this Policy should be reviewed whenever new analytics, advertising, embedded content, tracking or other third-party technologies are introduced.

Authentic Marine provides links that allow visitors to initiate communication through WhatsApp.

When the visitor chooses to access WhatsApp, the visitor leaves the Authentic Marine website and interacts with an external service operated under the terms, technologies and privacy practices applicable to that service.

Information voluntarily sent to Authentic Marine through WhatsApp may be processed by Authentic Marine for the purpose of responding to the communication, evaluating a technical or commercial request and maintaining records related to the interaction where appropriate.

Authentic Marine does not make personal data publicly available merely because information has been submitted through its website.

Personal data may, however, be accessed or shared to the extent necessary for legitimate business activities and when permitted by applicable law, including with:

• Website, hosting, e-mail, infrastructure and information technology providers.
• Communication service providers used to exchange messages with the data subject.
• Professional advisers and service providers where access is necessary for their activities.
• Operational or business partners when sharing is necessary to evaluate or perform a request and there is an appropriate legal basis.
• Courts, public authorities or competent regulatory bodies when disclosure is required by law or necessary for the exercise of rights.
• Other parties when authorized by the data subject or otherwise permitted by applicable law.

Some digital, hosting, e-mail, infrastructure or communication providers may operate systems or infrastructure located outside Brazil.

Where a processing activity involves an international transfer of personal data, Authentic Marine will seek to observe the requirements and mechanisms applicable under Brazilian data protection legislation according to the circumstances of the transfer.

Personal data is retained for the period reasonably necessary to fulfil the purposes for which it was processed, considering the nature of the relationship and applicable legal, contractual, regulatory, security and evidentiary requirements.

When personal data is no longer necessary for an applicable purpose, it may be deleted, anonymized or otherwise handled in accordance with applicable legislation and legitimate retention requirements.

Authentic Marine seeks to adopt administrative, technical and organizational measures appropriate to the nature of the information and risks associated with its processing.

These measures are intended to help protect personal data against unauthorized access and accidental or unlawful situations involving destruction, loss, alteration, communication or improper disclosure.

No digital environment is completely free from risk. Security practices may therefore be reviewed and improved as technologies, risks and business processes evolve.

The Authentic Marine website may contain links that direct visitors to websites, applications or services operated by third parties.

Once the visitor accesses an external environment, the processing of personal data may be governed by the terms and privacy practices of the relevant third party.

Visitors are encouraged to review the applicable privacy information before providing personal data through external services.

Authentic Marine's website and marine services are primarily directed to professional and business audiences and are not designed for the intentional collection of personal data from children.

If Authentic Marine becomes aware that a particular processing activity involves personal data of a child or adolescent, the circumstances should be evaluated in accordance with applicable Brazilian legislation and the protections applicable to such data subjects.

Subject to the circumstances and conditions established by applicable law, data subjects may exercise the rights provided by the LGPD.

• Confirmation of whether personal data is being processed.
• Access to applicable personal data.
• Correction of incomplete, inaccurate or outdated data.
• Anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed data, where applicable.
• Portability in accordance with applicable regulation and legal conditions.
• Deletion of data processed on the basis of consent, subject to lawful retention situations.
• Information regarding public and private entities with which applicable personal data has been shared.
• Information about the possibility of refusing consent and the consequences of refusal where consent is requested.
• Revocation of consent where processing is based on consent.
• Opposition to processing in the circumstances established by law.
• Rights relating to decisions made solely on automated processing, where applicable.
• Petition before the competent authority in accordance with applicable law.

Authentic Marine may request information reasonably necessary to verify the identity or authority of the person making a request in order to protect personal data against unauthorized access or disclosure.

Authentic Marine currently has no formally designated Data Protection Officer / Encarregado.

Requests concerning privacy, personal data or the exercise of data subject rights may be submitted through the company's designated privacy communication channel:

authentic@authenticmarine.com.br

The person submitting the request should provide sufficient information to allow Authentic Marine to understand the request and, where necessary, verify the identity or authority of the requester.

Authentic Marine may update this Privacy Policy when necessary to reflect changes in legislation, regulatory guidance, business processes, website functionality, technologies or personal data processing practices.

The current version will be made available through this page.

Last update: September 2026.

This Privacy Policy is intended to operate consistently with applicable Brazilian legislation, particularly Law No. 13,709/2018 — Lei Geral de Proteção de Dados Pessoais (LGPD), as amended, as well as other laws and regulations applicable to privacy, personal data and digital interactions.

The application of this Policy to a particular processing activity should be considered according to the circumstances of that activity and the legislation and regulation in force at the relevant time.