This website is maintained and operated by GP&D CONSULTORIA, PROJETOS E ENSAIOS TECNOLOGICOS LTDA, CNPJ: 28.683.427/0001-50.
We collect and use certain personal data belonging to individuals who use our website. In doing so, we act as the data controller and are subject to the provisions of Federal Law No. 13,709/2018 (General Data Protection Law - LGPD).
We are committed to protecting your personal data and, therefore, we provide this privacy policy, which contains important information about:

- Who should use our website;
- What data we collect and what we do with it;
- Your rights regarding your personal data;
- How to contact us.

1. Data We Collect and Reasons for Collection

Our website collects and uses certain personal data from our users, in accordance with the provisions of this section.

1. Personal Data Expressly Provided by the User

We collect the following personal data that our users expressly provide when using our website:

Full Name;
CPF (Brazilian Individual Taxpayer Registration Number);
Email Address;
Telephone Number;
Contact Messages;
Date of Birth.

This data is collected at the following moments:

When the user uses the contact / registration form.

The data provided by our users is collected for the following purposes:
To enable the user to purchase our products and services;
To enable the user to contact our Customer Service Department;
To enable us to send products and offers to registered users.

2. Sensitive Data

Sensitive data will not be collected from our users, as defined in Articles 11 and following of the General Data Protection Law. Therefore, there will be no collection of data regarding racial or ethnic origin, religious beliefs, political opinions, membership in a trade union or religious, philosophical, or political organization, health-related data or data concerning sexual life, genetic data, or biometric data when linked to a natural person.

3. Cookies

Cookies are small text files that are automatically downloaded to your device when you access and browse a website. They basically serve to identify users' devices, activities, and preferences.
Cookies do not allow any file or information to be extracted from the user's hard drive. They also do not provide access to personal information that has not been voluntarily provided by the user or that cannot be obtained from the way the user uses the website's resources.

    a. Website Cookies
Website cookies are those sent to the user's computer or device exclusively by the website and its administrator.
The information collected through these cookies is used to improve and personalize the user experience. Some cookies may, for example, be used to remember the user's preferences and choices, as well as to provide personalized content.

    b. Cookie Management
The user may object to the registration of cookies by the website by simply disabling this option in their browser. More information on how to do this in some of the main browsers currently in use can be accessed through the following links:

Internet Explorer:
https://support.microsoft.com/pt-br/help/17442/windows-internet-explorer-delete-manage-cookies

Safari:
https://support.apple.com/pt-br/guide/safari/sfri11471/mac

Google Chrome:
https://support.google.com/chrome/answer/95647?hl=pt-BR&hlrm=pt

Mozilla Firefox:
https://support.mozilla.org/pt-BR/kb/ative-e-desative-os-cookies-que-os-sites-usam

Opera:
https://www.opera.com/help/tutorials/security/privacy/

2. Sharing of Personal Data with Third Parties

We do not share your personal data with third parties. However, we may do so to comply with any legal or regulatory requirement or to comply with an order issued by a public authority.

3. How Long Personal Data Will Be Stored

Personal data collected by the website is stored and used for the period necessary to achieve the purposes set forth in this document, taking into account the rights of its data subjects, the rights of the website controller, and the applicable legal or regulatory provisions.
Once the personal data storage periods have expired, the data will be removed from our databases or anonymized, except in cases where storage may be required or necessary due to a legal or regulatory provision.

4. Legal Bases for the Processing of Personal Data

A legal basis for the processing of personal data is nothing more than a legal foundation provided by law that justifies such processing. Therefore, each personal data processing operation must have a corresponding legal basis.
We process our users' personal data under the following circumstances:

- for the regular exercise of rights in judicial, administrative, or arbitration proceedings
- for the performance of a contract or preliminary procedures related to a contract to which the data subject is a party, at the request of the data subject
- when necessary to meet the legitimate interests of the controller or a third party
- for credit protection

1. Contract Performance

For the performance of a purchase and sale agreement or service agreement entered into between the website and the user, other data related or necessary for its execution may be collected and stored, including the content of any communications with the user.

2. Legitimate Interest

For certain personal data processing operations, we rely exclusively on our legitimate interest. To learn more about the specific cases in which we rely on this legal basis, or to obtain more information about the assessments we conduct to ensure that we may use it, please contact our Data Protection Officer through any of the channels provided in this Privacy Policy, in the section "How to Contact Us".

5. User Rights

Website users have the following rights granted by the General Data Protection Law:

- confirmation of the existence of processing;
- access to data;
- correction of incomplete, inaccurate, or outdated data;
- anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;
- data portability to another service or product provider, upon express request, in accordance with the regulations established by the national authority and subject to commercial and industrial secrets;
- deletion of personal data processed based on the data subject's consent, except in cases provided for by law;
- information about the public and private entities with which the controller has shared data;
- information about the possibility of not providing consent and the consequences of refusing to provide it;
- withdrawal of consent.

It is important to note that, under the General Data Protection Law, there is no right to delete data processed on legal bases other than consent, unless the data is unnecessary, excessive, or processed in violation of the provisions of the law.

1. How the Data Subject Can Exercise Their Rights

To ensure that the user seeking to exercise their rights is indeed the data subject whose personal data is the subject of the request, we may request documents or other information that may assist in properly identifying the individual, in order to safeguard our rights and the rights of third parties. However, this will only be done when absolutely necessary, and the requesting party will receive all relevant information.

6. Security Measures for the Processing of Personal Data

We employ appropriate technical and organizational measures to protect personal data against unauthorized access and situations involving destruction, loss, misplacement, or alteration of such data.
The measures we use take into account the nature of the data, the context and purpose of the processing, the risks that a potential breach could pose to the user's rights and freedoms, and the standards currently adopted in the market by companies similar to ours.
Among the security measures we have adopted, we highlight the following:

- Our users' data is stored in a secure environment;
- We limit access to our users' data so that unauthorized third parties cannot access it;
- We use an SSL (Secure Socket Layer) certificate so that data transmission between users' devices and our servers takes place in encrypted form;
- We maintain records of everyone who, in any way, has contact with our data.

Although we take all reasonable measures within our capabilities to prevent security incidents, a problem may occur due exclusively to a third party, such as in the event of hacker or cracker attacks, or due to the user's sole fault, such as when the user personally transfers their data to a third party. Therefore, although we are generally responsible for the personal data we process, we disclaim responsibility in the event of exceptional situations such as these, over which we have no control.
In any case, if any type of security incident occurs that could pose a significant risk or cause relevant harm to any of our users, we will notify the affected parties and the National Data Protection Authority (ANPD) of the incident, in accordance with the provisions of the General Data Protection Law.

7. Complaint to a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, data subjects who feel that they have been harmed in any way may file a complaint with the National Data Protection Authority.

8. Changes to This Privacy Policy

This version of this Privacy Policy was last updated on: October 14, 2020.
We reserve the right to modify these rules at any time, particularly to adapt them to any changes made to our website, whether through the introduction of new features or the removal or modification of existing ones.
Whenever a modification is made, our users will be notified of the change.

9. How to Contact Us

To clarify any questions regarding this Privacy Policy or the personal data we process, please contact our Data Protection Officer through any of the channels mentioned below:

Mailing address: Rua Emboabas, 456
ZIP Code: 04623-011 - SP