Privacy Policy

Introduction

SPE SANTA RITA III LTDA ("we," "our," or "us") is committed to protecting your privacy and maintaining the confidentiality of information related to our electric power generation operations. This Privacy Policy explains how we collect, use, disclose, and safeguard information.

By engaging with our company, you agree to the collection and use of information in accordance with this policy.

Information We Collect

As an electric power generation company, we may collect the following types of information:

• Business Partner Information: Company details, CNPJ, and contact information of energy market participants.
• Contact Information: Names, titles, phone numbers, and email addresses of representatives.
• Commercial Information: Energy contracts, trading agreements, and transaction records.
• Regulatory Information: Documentation required for energy sector compliance.
• Operational Data: Generation data and grid connection information.
• Investor Information: Shareholder and investor details as applicable.

How We Use Your Information

We use the collected information for the following purposes:

• To execute energy supply contracts
• To participate in energy trading markets
• To communicate with business partners
• To comply with energy sector regulations
• To report to regulatory authorities (ANEEL, ONS, CCEE)
• To manage investor relations
• To process payments and billing
• To fulfill legal and contractual obligations

Energy Sector Regulatory Compliance

As a power generation company, we are subject to regulation by ANEEL (National Electric Energy Agency), ONS (National System Operator), and CCEE (Electric Energy Trading Chamber). We share information with these authorities as required by law, including generation data, commercial transactions, and operational reports.

Energy Trading Information

Participation in Brazil's electric energy market requires sharing of commercial and operational information with market institutions. Energy contracts and trading data are processed through CCEE systems. This information is used for market settlement and regulatory compliance.

Operational & Generation Data

Power generation operational data is collected and reported to grid operators and regulatory authorities. This includes generation volumes, availability data, and grid connection parameters. Such data is essential for grid management and market operations.

Business Partner Confidentiality

Commercial agreements, contract terms, and pricing information shared with business partners are treated as confidential. We do not disclose commercial terms to competitors. Business partner information is protected with appropriate security measures.

Investor & Shareholder Information

As an SPE (Special Purpose Entity), we maintain records of ownership and investor relationships. Shareholder information is kept confidential and shared only as required for corporate governance, regulatory compliance, or with explicit consent.

Data Security

We implement appropriate security measures to protect information against unauthorized access, alteration, disclosure, or destruction. Commercial and operational data is stored securely. Access to sensitive information is limited to authorized personnel.

Data Retention

Energy sector records are retained for the periods required by ANEEL regulations and Brazilian corporate law. Commercial contracts and transaction records are retained as required by tax and commercial regulations. Operational data may be retained for regulatory compliance and performance analysis.

Information Sharing

We do not sell, trade, or rent your information to third parties. We share information only in the following circumstances:

• With ANEEL, ONS, and CCEE for regulatory compliance
• With grid operators for system coordination
• With energy market participants for transactions
• With professional advisors under confidentiality agreements
• With tax authorities for fiscal compliance
• When required by law or legal process

Your Rights

In accordance with Brazilian data protection laws (LGPD - Lei Geral de Proteção de Dados), you have the right to:

• Access your personal data held by us
• Request copies of relevant documentation
• Request correction of inaccurate information
• Request deletion of data (subject to legal requirements)
• Request information about how your data is processed
• Withdraw consent for non-essential processing
• File a complaint with the National Data Protection Authority (ANPD)

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or regulatory requirements. Significant changes will be communicated to business partners. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your information, please contact us: