PRIVACY POLICY AND TRANSPARENCY

Ergo Platform – CCSA/UFPB
Last updated: June 2026

Presentation

Welcome to the Ergo Platform.

This Privacy Policy aims to clearly and transparently inform how personal data is collected, used, stored, and protected by the Ergo Platform, developed within the Federal University of Paraíba (UFPB), in compliance with Brazil's General Data Protection Law (Law No. 13,709/2018 - LGPD).

By using the platform to evaluate environmental, cognitive, and behavioral factors related to the work context, the user provides only the information necessary for system operation, generation of individual reports, and the conduct of institutional studies and research.

1. What data do we collect and for what purposes?

To enable the platform's operation, we collect the following categories of data:

Identification and Registration Data

Username;
Nome completo;
Data de nascimento;
Organização;
Country;
Email address.

Purpose: authenticate the user, ensure access security, manage the account, and provide customized functionalities on the platform.

Ergonomic Diagnostic Data

Information provided by the user through the platform's forms, including aspects related to:

Physical work environment (temperature, noise, lighting, among others);
Cognitive aspects (attention, focus, technical knowledge, and execution capacity);
Behavioral aspects (breaks, activity organization, and work-related habits).

Purpose: calculate effectiveness indicators, produce individual reports, and generate statistical analyses for academic, scientific, and institutional activities developed within UFPB.

2. Use of cookies

The Ergo Platform does not use advertising, marketing, behavioral tracking cookies, or share data with third parties for commercial purposes.

Only strictly necessary cookies and technical mechanisms are used for the application's operation, including:

Session Cookies

Used to maintain user authentication during navigation and ensure the continuity of platform functionalities.

Security Cookies (CSRF)

Used to protect forms and requests against fraud attempts, data tampering, and cyberattacks.

Base legal: these mechanisms are essential for the execution of the services offered and for the security of the platform, being used in accordance with the legal hypotheses provided for in the LGPD, without the need for specific user consent.

3. Legal basis for data processing

The processing of personal data carried out by the Ergo Platform is based on the following hypotheses provided for in the LGPD:

Performance of a Contract or Preliminary Procedures Related to a Contract (Art. 7, V)

Necessary to enable access to the platform, the use of its functionalities, and the availability of individual reports to the user.

Conduct of Studies by a Research Body (Art. 7, IV)

Applicable to research activities, scientific production, and statistical studies developed by the Federal University of Paraíba, with the adoption of data aggregation or anonymization techniques whenever possible.

4. Data sharing

The Ergo Platform does not commercialize personal data and does not share information for advertising or commercial purposes.

Access to collected data is restricted to platform administrators and authorized researchers linked to the project, observing the principles of necessity, purpose, and security provided for in the LGPD.

When possible and compatible with research objectives, results will be disclosed in an aggregated or anonymized form, without individual identification of participants.

5. Information security

The Ergo Platform adopts technical and administrative measures aimed at protecting personal data against unauthorized access, loss, alteration, destruction, or any form of inappropriate processing.

Among the implemented measures, the following stand out:

Use of HTTPS/TLS encryption in all communications between user and server;
Hosting in a protected computing environment with restricted access control;
Monitoring of security records and operational events;
Application of authentication mechanisms and permission controls compatible with the roles performed by users.

6. Data subject rights

Under the terms of the LGPD, the data subject can exercise the following rights:

Confirm the existence of processing of their personal data;
Request access to the data processed by the platform;
Request correction of incomplete, inaccurate, or outdated data;
Request information about the processing carried out;
Request deletion of the account and personal data, when applicable and subject to legal mandatory retention hypotheses.

Requests will be analyzed in accordance with the requirements and limitations provided for in current legislation.

7. Contact

In case of doubts about this Privacy Policy or about the processing of personal data carried out by the Ergo Platform, please contact the responsible team:

Leonardo Américo Bezerra Viana
leonardo@sti.ufpb.br

Prof. Dr. Carlo Gabriel Porto Bellini
cgpbellini@ccsa.ufpb.br

By using the Ergo Platform, the user declares to be aware of the information described in this Privacy Policy and Transparency.