PRIVACY POLICY

Campos Vieira Advogados (“CVA”) respects the privacy and protection of the personal data of individuals who access its website, contact the firm or otherwise interact with its digital channels.

This Privacy Policy provides information on how CVA processes personal data in connection with the use of this website, in accordance with Brazilian Law No. 13,709/2018, the Brazilian General Data Protection Law (“LGPD”), and other applicable laws and regulations.

1. Data Controller

For personal data processing activities carried out in connection with this website, the controller is:

Campos Vieira Advogados
Alameda Santos, 2335, suite 82
São Paulo, SP
Brazil
contato@camposvieira.com.br

Requests relating to privacy or the protection of personal data may be submitted to the email address above.

2. Personal Data We Process

Depending on how you interact with this website, CVA may process personal data that you provide directly, including:

• name;
• company or organization;
• email address;
• telephone number;
• subject of the enquiry;
• content of messages submitted through the contact form; and
• other information that you voluntarily provide.

The website may also process technical information relating to access to and use of the website, depending on the technologies effectively employed, including data required for the operation, security and integrity of the digital environment.

The contact form is not intended for the submission of sensitive personal data, confidential information, documents relating to specific matters or information subject to attorney-client privilege or professional secrecy.

3. Purposes of Processing

Depending on the circumstances, personal data may be processed to:

• receive, identify, review and respond to enquiries submitted through the website;
• understand the nature of an enquiry;
• communicate with the person who submitted the enquiry;
• consider requests relating to the potential provision of legal services;
• operate and protect the website and its technology infrastructure;
• prevent fraud, abuse and security incidents;
• comply with legal, regulatory, ethical or professional obligations applicable to CVA;
• establish, exercise or defend legal rights in judicial, administrative or arbitral proceedings; and
• pursue other purposes compatible with the nature of the interaction and permitted by applicable law.

Submitting a message through this website does not establish an attorney-client relationship, does not constitute CVA’s acceptance of any engagement or mandate, and does not automatically make the information submitted subject to attorney-client privilege or professional secrecy.

4. Legal Bases for Processing

Personal data will be processed on the basis of one or more legal grounds provided for under the LGPD, depending on the purpose and specific circumstances of each processing activity.

Such legal grounds may include, where applicable:

• procedures preliminary to entering into a contract;
• compliance with a legal or regulatory obligation;
• the regular exercise of rights;
• the legitimate interests of CVA or third parties, subject to applicable requirements and data-subject rights; and
• consent, where consent is the appropriate legal basis for the relevant processing activity.

The use of legitimate interest will be assessed in light of the circumstances of the relevant processing activity, taking into account, among other factors, necessity, transparency, the legitimate expectations of data subjects and their fundamental rights and freedoms.

Simply accessing this website or submitting the contact form will not be treated as general consent to any and all processing activities.

5. Sharing of Personal Data

CVA may share personal data only where necessary for the purposes described in this Privacy Policy, including with service providers used to operate the website and its technology infrastructure.

These service providers may include providers of:

• hosting and cloud infrastructure;
• data storage;
• information security;
• electronic communications; and
• technical services required for the operation of the website.

Personal data may also be shared where necessary to:

• comply with legal or regulatory obligations;
• respond to orders or requests from competent authorities;
• establish, exercise or defend legal rights; or
• protect the rights, systems or security of CVA or third parties.

CVA does not sell personal data collected through this website.

6. International Transfers of Personal Data

The use of certain technology service providers may involve the processing or storage of personal data outside Brazil.

Where an international transfer of personal data occurs, CVA will adopt the applicable mechanisms and safeguards provided for under the LGPD and the regulations issued by the Brazilian National Data Protection Authority (ANPD).

7. Data Security

CVA adopts technical and administrative measures designed to protect personal data against unauthorized access and accidental or unlawful destruction, loss, alteration, disclosure or other inappropriate processing.

Such measures will be appropriate to the nature of the personal data processed, the risks involved and the technological resources reasonably available.

No digital environment, however, can be considered entirely immune from security incidents.

8. Retention and Deletion

Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected and processed.

Data may be retained for additional periods where necessary to:

• comply with legal or regulatory obligations;
• establish, exercise or defend legal rights;
• maintain records required under applicable professional or regulatory rules; or
• comply with other circumstances permitted under the LGPD.

When there is no longer a lawful basis or purpose for retaining personal data, it may be deleted or anonymized, as applicable.

9. Data Subject Rights

Subject to the terms and limitations provided under the LGPD, data subjects may exercise the rights applicable to their personal data.

Depending on the circumstances, requests may relate to confirmation of processing, access, correction, anonymization, blocking, deletion, information on data sharing and other rights provided for under applicable law.

Requests may be submitted to:

contato@camposvieira.com.br

To protect the security of data subjects, CVA may request information reasonably necessary to verify the identity of the person making the request before responding to certain requests.

10. Cookies and Similar Technologies

The website may use cookies and similar technologies that are necessary for its operation, security and performance.

If technologies are subsequently introduced for analytics, measurement, personalization or other purposes involving additional processing of personal data, the information provided to users and, where applicable, preference-management mechanisms will be adjusted to reflect the technologies actually in use.

11. Third-Party Websites and Services

This website may contain links to websites or services maintained by third parties, including professional networks.

CVA does not control the privacy practices of those third-party environments. Processing carried out by third parties is subject to their respective privacy policies and terms.

12. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to the website, the technologies used, processing activities or applicable laws and regulations.

The current version will remain available on this page together with its last-updated date.

13. Contact

Questions and requests concerning this Privacy Policy or the processing of personal data may be submitted to:

Campos Vieira Advogados
Alameda Santos, 2335, suite 82
São Paulo, SP
Brazil
contato@camposvieira.com.br