Privacy Policy

We collect and use certain personal data belonging to individuals who use our website. In doing so, we act as the controller of this data and are subject to the provisions of Brazilian Federal Law No. 13,709/2018, known as the Brazilian General Data Protection Law (LGPD).

We are committed to protecting your personal data. For this reason, we provide this Privacy Policy, which contains important information about:

  • Who should use our website;
  • What data we collect and how we use it;
  • Your rights regarding your personal data.

1. Data We Collect and the Reasons for Collection

Our website collects and uses certain personal data from its users, as described in this section.

1.1. Personal Data Collected

We collect the following personal data from our users:

  • IP address.

This data is collected when:

  • The user accesses the website.

This data is collected for the following purpose:

  • To ensure the security and authenticity of access to the website.

1.2. Sensitive Personal Data

We do not collect sensitive personal data from our users, as defined under Articles 11 and following of the Brazilian General Data Protection Law.

Therefore, we do not collect data concerning racial or ethnic origin, religious beliefs, political opinions, membership in a trade union or an organization of a religious, philosophical, or political nature, health or sexual life data, or genetic or biometric data when linked to an individual.

1.3. Cookies

Cookies are small text files that are automatically downloaded to your device when you access and browse a website. They are primarily used to identify devices, activities, and user preferences.

Cookies do not allow files or information to be extracted from a user's hard drive. They also do not provide access to personal information that was not supplied by the user or generated through the user's interaction with the website.

a. Website Cookies

Website cookies are cookies sent directly by our website to the user's computer or device.

The information collected through these cookies is used to improve and personalize the user experience. Some cookies may be used to remember user preferences and choices or to provide personalized content.

b. Third-Party Cookies

Some of our partners may place cookies on the devices of users who access our website.

These cookies generally allow our partners to provide personalized content and services to users based on browsing data obtained through their interaction with the website.

Users may obtain additional information about third-party cookies, how the collected data is processed, and the characteristics of the cookies used by visiting the following links:

Google:
https://policies.google.com/privacy?hl=en

Meta:
https://www.facebook.com/privacy/policy

The organizations responsible for collecting these cookies may share the information obtained with third parties.

c. Cookie Management

Users may object to the storage of cookies by disabling this option in their browser settings.

More information about how to manage cookies in some of the most commonly used browsers is available through the following links:

Disabling cookies may affect the availability of certain tools and website features, which may prevent the website from functioning correctly or as expected.

Disabling cookies may also remove previously saved user preferences and negatively affect the browsing experience.

1.4. Collection of Data Not Expressly Listed

Other types of data not expressly listed in this Privacy Policy may occasionally be collected, provided that the user has given consent or that the collection is permitted under another legal basis established by law.

In all cases, users will be informed about the collection of such data and the related processing activities.

2. Sharing Personal Data With Third Parties

We do not share your personal data with third parties.

However, we may be required to share personal data in order to comply with a legal or regulatory obligation or with an order issued by a public authority.

3. How Long Personal Data Is Stored

Personal data collected through the website is stored and used only for the period necessary to fulfill the purposes described in this Privacy Policy, taking into account the rights of the data subjects, the rights of the website controller, and applicable legal or regulatory requirements.

Once the applicable storage periods have expired, personal data will be deleted from our databases or anonymized, except where continued storage is permitted or required by a legal or regulatory obligation.

4. Legal Bases for Processing Personal Data

Each personal data processing activity must have a lawful basis. A lawful basis is a legal justification that authorizes the processing of personal data under the Brazilian General Data Protection Law.

All of our personal data processing activities are supported by one or more lawful bases permitted by applicable legislation.

Additional information about the legal bases used for specific personal data processing activities may be requested through the contact channels provided at the end of this Privacy Policy.

5. User Rights

Website users have the following rights under the Brazilian General Data Protection Law:

  • Confirmation of whether personal data is being processed;
  • Access to personal data;
  • Correction of incomplete, inaccurate, or outdated data;
  • Anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in violation of applicable law;
  • Portability of data to another service or product provider upon express request, in accordance with regulations issued by the national authority and subject to commercial and industrial confidentiality;
  • Deletion of personal data processed on the basis of consent, except in the circumstances permitted by law;
  • Information about the public and private organizations with which the controller has shared personal data;
  • Information about the possibility of refusing consent and the consequences of such refusal;
  • Withdrawal of consent.

Under the Brazilian General Data Protection Law, there is no general right to delete data processed under legal bases other than consent, unless the data is unnecessary, excessive, or processed in violation of applicable law.

5.1. How Data Subjects May Exercise Their Rights

To ensure that the person requesting the exercise of these rights is the actual data subject, we may request documents or other information necessary to verify the requester's identity.

This verification is intended to protect our rights and the rights of third parties. Such information will only be requested when strictly necessary, and the requester will be informed about the verification process.

6. Security Measures for Personal Data Processing

We use appropriate technical and organizational measures to protect personal data against unauthorized access and against accidental or unlawful destruction, loss, misuse, or alteration.

The measures we use take into account the nature of the data, the context and purpose of the processing, the risks that a possible security incident could create for users' rights and freedoms, and the security standards commonly adopted by organizations similar to ours.

Our security measures include:

  • Storing user data in a secure environment;
  • Restricting access to user data so that unauthorized third parties cannot access it;
  • Using an SSL certificate so that data transmitted between users' devices and our servers is encrypted;
  • Maintaining records of individuals who have access to or interact with personal data under our control.

Although we take reasonable measures to prevent security incidents, a problem may occur because of circumstances caused exclusively by a third party, such as a hacker attack, or because of the user's own actions, such as when the user voluntarily transfers personal data to another person.

Although we are generally responsible for the personal data we process, we cannot be held responsible for exceptional circumstances that are entirely outside our reasonable control, to the extent permitted by applicable law.

If a security incident occurs that may create a relevant risk or harm to any of our users, we will notify the affected individuals and the Brazilian National Data Protection Authority, when required by the Brazilian General Data Protection Law.

7. Complaints to a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, personal data subjects who believe their rights have been violated may submit a complaint to the Brazilian National Data Protection Authority.

8. Changes to This Privacy Policy

This version of the Privacy Policy was last updated on April 19, 2024.

We reserve the right to modify this Privacy Policy at any time, especially to reflect changes made to our website, including the introduction of new features or the modification or removal of existing features.