Back to Site
🧬 Recife · PELegal & Privacy · LGPD · Biotecnologia · ANVISA · CTNBio

Privacy Policy.

Ltda Symbio Plus Biotecnologia Ltda · CNPJ 48.278.946/0001-40

Company

Symbio Plus Biotecnologia Ltda

CNPJ

48.278.946/0001-40

Last updated

January 2025

Legislation

LGPD — Lei 13.709/2018 · ANVISA · CTNBio

This Privacy Policy describes how Symbio Plus Biotecnologia Ltda ("we," "our" or "the Company") collects, uses, stores and protects the personal data of our research partners, clients, collaborators, website visitors and all others whose data is processed in connection with our biotechnology research and experimental development activities in Torrões, Recife, Pernambuco.

As a registered limited company (Ltda) conducting biotechnology research, we comply with the LGPD (Lei nº 13.709/2018), the CDC (Lei nº 8.078/1990), applicable ANVISA regulations for biological products, CTNBio frameworks for genetically modified organisms, MAPA regulations for agricultural biotechnology, and applicable tax legislation in Pernambuco. Biotechnology research involves biological data, proprietary strains, genetic information and potentially human participant data — each with distinct governance requirements described below.

01

Introduction and Scope

This Policy applies to all personal data processed in connection with our biotechnology R&D activities — including industry partners and clients who commission research, academic and institutional collaborators, individual researchers who collaborate with us, website visitors who submit partnership enquiries, and research participants in human-involving studies. Biotechnology research involves specialised data governance considerations — including biological materials, genetic data and proprietary scientific information — that this Policy addresses in addition to standard LGPD requirements.

02

Identity of the Controller

Legal entity: Symbio Plus Biotecnologia Ltda
Entity type: Sociedade Limitada (Ltda)
CNPJ: 48.278.946/0001-40
Activity (CNAE): Pesquisa e Desenvolvimento Experimental em Ciências Físicas e Naturais
Address: Rua Prof. Artur Coutinho, 585, Torrões, Recife — PE, CEP 50650-000, Brasil
Email: privacidade@symbioplus.com.br
03

Personal Data We Collect

A. Partner organisations and clients:

  • Company name, CNPJ, address and the name, role, phone and email of the responsible scientific or commercial contact — collected when organisations engage our biotechnology R&D services.
  • Billing data (CNPJ or CPF) for NFS-e issuance.

B. Research data — biological and scientific:

  • Biological sample data: Where research involves biological samples provided by partners — sample origin, collection metadata, species identification and any associated geographic data. This is scientific data rather than personal data in most cases, but may become personal data where samples are traceable to identified individuals.
  • Genetic and genomic data (where applicable): Sequence data, genomic analysis outputs and genetic characterisation data generated in molecular biology research. Where such data is associated with identified human individuals, it constitutes sensitive personal data under LGPD Art. 5º, II.
  • Research participant data (where applicable): In studies involving human participants — identification, consent records, health or biological data collected under a specific CEP/CONEP-approved protocol and its associated data governance framework.

C. Research collaboration and website:

  • Names, institutional affiliations and contact data of collaborating researchers and academics.
  • Name, organisation and message when submitting partnership enquiries via our website or email.
  • IP address, browser type, pages visited and access times.
04

Purpose and Legal Basis

PurposeLegal Basis (LGPD)
Biotechnology R&D and experimental development servicesPerformance of contract (Art. 7º, V)
Research involving human participantsConsent (Art. 7º, I); CEP/CONEP approved research (Art. 7º, IV)
Genetic / biological data from identified individualsConsent — Art. 11, I (sensitive data)
CTNBio registration of biological materials (GMOs)Legal obligation (Art. 7º, II)
ANVISA compliance for biological productsLegal obligation (Art. 7º, II)
MAPA compliance for agricultural biotechLegal obligation (Art. 7º, II)
Issuing NFS-e; SEFAZ-PE tax complianceLegal obligation (Art. 7º, II)
ISS — Prefeitura de RecifeLegal obligation (Art. 7º, II)
Scientific publication (anonymised data only)Legitimate interest; Consent where required
Website analysis and improvementLegitimate interest; Consent (cookies)
05

Data Sharing

Research and biological material confidentiality: Partner proprietary strains, cell lines, biological materials, unpublished research findings and proprietary methodologies are treated as strictly confidential under research or NDA agreements. We do not share, reference or disclose partner biological IP without explicit written authorisation.
  • CTNBio — Comissão Técnica Nacional de Biossegurança: Where research involves genetically modified organisms, registration and disclosure to CTNBio as required by Lei 11.105/2005 (Lei de Biossegurança) — including project description, organisms involved and researcher identification.
  • ANVISA: Where research generates biological products subject to ANVISA regulation — minimum necessary regulatory documentation.
  • MAPA — Ministério da Agricultura: For agricultural biotechnology research involving plant or animal biological agents subject to MAPA oversight.
  • CEP/CONEP: Ethics committees receive research protocols and progress reports for human-involving studies as required by Resolução CNS 466/2012 — participant data is de-identified in all committee submissions except where identification is essential for ethics oversight.
  • Research collaborators (under agreement): Scientific collaborators and co-investigators receive only the minimum data necessary for their specific role in the research, under appropriate data governance agreements.
  • FAPERPE / CNPq / FINEP (where applicable): Minimum necessary reporting for funded research grants, including anonymised data summaries where open data requirements apply.
  • SEFAZ-PE / Receita Federal: NFS-e data for research service contracts.
  • Prefeitura de Recife (ISS): For ISS obligations on research and development service activities.
  • Legal authorities: When required by a competent judicial or administrative order.
06

International Transfers

Our research activities are based in Recife, PE. Where biotechnology research involves international collaborations or publications in international journals, partner and researcher identification data may be transmitted internationally as required by the collaboration — always under the guarantees of Art. 33 of the LGPD. Biological materials transferred internationally are subject to Brazilian biosafety and export regulations independently of LGPD. Human participant data is never transmitted internationally without specific consent and a distinct data governance framework.

07

Retention Periods

  • NFS-e and fiscal records: Minimum 5 years under Receita Federal and SEFAZ-PE requirements.
  • Research contracts and partner data: Duration of the research relationship plus 5 years.
  • Scientific research data and records: Minimum 5 years from project completion in accordance with Brazilian scientific research standards and any applicable funding body requirements — longer where required by CTNBio, ANVISA, MAPA or CEP/CONEP regulatory obligations.
  • CTNBio registration records: For the duration of any registered biological material's use plus applicable regulatory retention period under Lei 11.105/2005.
  • CEP/CONEP human research records: Minimum 5 years from project completion per Resolução CNS 466/2012 — or longer as specified in the approved research protocol.
  • Genetic and biological data from identified individuals: Defined in the specific study consent and governance framework — participants are informed of retention periods before enrolment.
  • Partnership enquiry data (no engagement): Up to 1 year from last contact.
08

Security Measures

  • Partner biological materials and research data accessible only to researchers directly working on that specific project;
  • Genetic and biological data from identifiable individuals stored in access-controlled systems with encryption at rest;
  • Physical biological samples stored in compliant biosafety conditions per applicable ANVISA and MAPA requirements;
  • CTNBio-registered organisms maintained in designated, controlled areas with access logging;
  • Website and digital communications encrypted in transit (HTTPS/TLS);
  • As a Ltda, formal internal data handling protocols maintained;
  • Incident response procedures and breach notification per LGPD Art. 48.
09

Your Rights under the LGPD

  • Confirmation and Access (Art. 18, I–II): Confirm whether we hold your personal data and receive a copy.
  • Correction (Art. 18, III): Request correction of inaccurate data.
  • Anonymisation / Blocking / Deletion (Art. 18, IV): Request deletion — subject to scientific, regulatory and fiscal retention obligations.
  • Portability (Art. 18, V): Receive your data in a structured format.
  • Withdrawal of Consent (Art. 8º, §5º): Withdraw consent at any time — for research participants, withdrawal rights are also described in the specific study consent form and follow Resolução CNS 466/2012 procedures.
  • Complaint to the ANPD (Art. 18, §1º): Lodge a complaint at www.gov.br/anpd.

We respond within 15 business days.

10

Cookies and Tracking

Our website uses cookies for essential functionality and aggregated performance analysis only. We do not use behavioural tracking or advertising cookies. Preferences can be managed through browser settings.

11

Protection of Minors

Research partnerships are engaged by organisations and adult professionals. Where any research study involves minor participants, a specific ethical review under Resolução CNS 466/2012, parental consent framework and additional data governance measures are implemented before any data collection — in compliance with LGPD Art. 14. We do not collect personal data from children under 13 via our website.

12

Biotechnology Data Governance

Biotechnology research involves data governance considerations beyond standard LGPD requirements. We apply the following frameworks to our specific research activities:

CTNBio — Lei de Biossegurança (Lei 11.105/2005): Research involving genetically modified organisms (GMOs) is conducted under CTNBio registration and oversight. CTNBio registration includes disclosure of organism identity, research purpose and researcher credentials. Partners whose projects involve GMO development or use are informed of CTNBio reporting obligations before the research commences. CTNBio registration is a matter of public record in the Brazilian biosafety system.
ANVISA — Biological products: Where research generates biological products intended for commercial development — including biopharmaceuticals, diagnostics, vaccines or bioinputs — ANVISA regulatory requirements apply. Minimum necessary data is submitted to ANVISA as part of any regulatory filing process. Partners are informed of applicable ANVISA pathways before research commences, as ANVISA compliance affects product development timelines and IP strategy.
CEP / CONEP — Human research ethics: All research involving human participants is conducted under the approval of a CEP (Comitê de Ética em Pesquisa) and, where required, CONEP (Comissão Nacional de Ética em Pesquisa), per Resolução CNS 466/2012. This requires: (a) full informed consent in plain language; (b) approval of the study protocol and consent forms before any data collection; (c) the right to withdraw at any time without consequence; (d) data minimisation and anonymisation; (e) defined retention and destruction commitments. Research participants receive a specific participant information sheet and consent form for their study, supplementing this Policy. Genetic data from human participants is classified as sensitive data under LGPD Art. 5º, II and processed only under LGPD Art. 11, I (consent).
MAPA — Agricultural biotechnology: Bioinput and agricultural biotech research involving plant growth promoting organisms, biopesticides or biological control agents is conducted under applicable MAPA regulatory frameworks. MAPA registration processes for biological agents require biological characterisation data — this data is submitted to MAPA as a legal obligation where applicable, and partners are informed in advance of any MAPA filing requirements that affect their research programme.
13

Updates to this Policy

This Policy may be updated to reflect changes in our research activities, the LGPD, ANPD guidance, ANVISA regulations, CTNBio requirements, MAPA or CEP/CONEP frameworks, or applicable Pernambuco tax legislation. Material changes will be communicated to active research partners by email and via our website.

14

Contact & Data Protection Officer

All privacy requests — including from research participants — should be directed to our Data Protection Officer (Encarregado — LGPD Art. 41):

🧬

Privacy Contact — Symbio Plus Biotecnologia Ltda

EntitySymbio Plus Biotecnologia Ltda
CNPJ48.278.946/0001-40
AddressR. Prof. Artur Coutinho, 585, Torrões, Recife — PE, CEP 50650-000
Phone+55 (81) 9 0000-0000
HoursMon–Fri: 08:00–18:00 · Sat: on request · Sun: Closed
ResponseWithin 15 business days of receipt.
You have the right to lodge complaints with:
ANPD — Autoridade Nacional de Proteção de Dados · www.gov.br/anpd

For human research ethics concerns:
CONEP — Comissão Nacional de Ética em Pesquisa · conselho.saude.gov.br/web/conep