Last updated: July 2026
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:
FABIO PEIXOTO
Jardim Camburi — Vitoria/ES
Postal Code: 29092-130
Brazil
CNPJ: 23.453.928/0001-27
Managing Director: Fabio Peixoto
Email: [email protected]
Appointing a Data Protection Officer is not required under Art. 37 GDPR, since our company does not typically have at least 20 people permanently engaged in the automated processing of personal data. For any data protection questions, you can reach out to the email address listed above at any time.
When you visit our website, the browser used on your device automatically sends the following information to our website's server, which is temporarily stored in what are known as server log files:
The data listed is processed for the following purposes: ensuring a smooth connection to the website, ensuring the website is comfortable to use, evaluating system security and stability, and other administrative purposes.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest arises from the purposes of data collection listed above, in particular the security and stability of our website.
Retention period: The data is deleted as soon as it is no longer needed for the purpose for which it was collected. In the case of data collected to provide the website, this is the case once the respective session has ended. Server log files are automatically deleted after 7 days at the latest.
If you send us inquiries via the contact form, we store the information you provide in the inquiry form, including the contact details you give there, in order to process the inquiry and in case of follow-up questions. The following data is collected in the process:
We do not pass on this data without your consent.
Legal basis: Art. 6(1)(b) GDPR (carrying out pre-contractual measures taken at the request of the data subject). To the extent your inquiry is not related to entering into a contract, the legal basis is Art. 6(1)(f) GDPR (legitimate interest in effectively handling inquiries addressed to us).
Retention period: The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing it no longer applies. Mandatory statutory provisions — in particular retention periods — remain unaffected.
Our website uses exclusively technically necessary cookies. These are small text files that your browser automatically creates and stores on your device when you visit our website.
Technically necessary cookies are exempt from the consent requirement under applicable law, as they are essential for operating the website. These cookies cannot be disabled.
We do not use tracking cookies, analytics cookies, or advertising cookies without your prior, explicit consent. Such consent, where applicable, is obtained through our cookie consent banner.
Legal basis for technically necessary cookies: Applicable law in conjunction with Art. 6(1)(f) GDPR.
Legal basis for optional cookies: Art. 6(1)(a) GDPR (consent).
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google").
Purpose: We use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. When you click an ad served by Google, a cookie for conversion tracking is stored on your device. These cookies expire after 30 days and are not used for personal identification.
If you visit certain pages on our website and the cookie hasn't expired yet, Google and we can recognize that you clicked the ad and were redirected to that page. Each Google Ads customer receives a different cookie. Information gained through conversion cookies is used to generate conversion statistics for Ads customers who have opted into conversion tracking.
Legal basis: Art. 6(1)(a) GDPR (consent). The conversion tracking cookie is only set if you have given consent through our cookie consent banner. You can withdraw your consent at any time with effect for the future.
Data transfer to third countries: Google may transfer collected data to the United States. This transfer takes place on the basis of the EU-U.S. Data Privacy Framework (DPF). For more information, see Google's privacy policy: https://policies.google.com/privacy.
If a payment obligation arises after the contract is concluded, we use an external payment service provider to process payment. Your payment details (e.g., credit card number, bank details) are transmitted directly to the payment service provider and processed there.
We never store complete credit card or bank details on our own servers. We receive only a confirmation from the payment service provider as to whether the payment succeeded or failed, along with a transaction ID for matching purposes where applicable.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Processing payment data is necessary to fulfill the contract concluded between you and us.
Because our company is based in Brazil, personal data is transferred to a third country. Brazil is a country outside the European Union. The transfer of personal data to Brazil takes place on the basis of Art. 49(1)(a) GDPR (explicit consent) or Art. 49(1)(b) GDPR (performance of a contract). Brazil has its own data protection law, the Lei Geral de Proteção de Dados (LGPD).
Safeguards: To the extent personal data is transferred to recipients in third countries not covered by a DPF adequacy decision, we ensure appropriate safeguards are in place to protect the rights of data subjects. For this purpose, we enter into EU Standard Contractual Clauses under Art. 46(2)(c) GDPR.
In exceptional cases, the transfer may be based on your explicit consent under Art. 49(1)(a) GDPR. In such cases, you will be informed of the possible risks before the transfer takes place.
You have the following rights regarding your personal data against the controller:
To exercise your rights, please contact us by email at: [email protected]. We will address your request promptly, and no later than within one month.
Without prejudice to any other administrative or judicial remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority if you believe the processing of your personal data violates the GDPR.
You can exercise this right with a supervisory authority in the member state of your habitual residence, your place of work, or the place of the alleged violation. A list of the competent data protection supervisory authorities can be found at: https://www.bfdi.bund.de.
We reserve the right to update this Privacy Policy to reflect changes in the legal situation or to the service or data processing. This applies only to statements about data processing, however. Where consent is required, or where parts of this Privacy Policy contain provisions of the contractual relationship with users, changes will only be made with the users' consent.
The current version is always available on this page. Please check the content of our Privacy Policy periodically.
Last updated: July 2026