Privacy Center
Privacy policy – Bravonix
We at Bravonix, a brand of LGPDNOW Tratamento e Hospedagem de Dados LTDA, registered under CNPJ No. 35.101.516/0001-07, headquartered at Avenida Engenheiro Luiz Carlos Berrini, No. 1140, Conjunto 72, Cidade Monções, São Paulo/SP, ZIP 04571-930, respect your privacy and protect your personal data with responsibility and transparency.
This Privacy Policy clearly explains:
Terms you need to know
To make things easier to understand, here are the main concepts used in this Policy:
Personal data: information that identifies you, such as your name, CPF (Brazilian taxpayer ID), email, among others.
Sensitive personal data: data that requires special protection because it involves intimate aspects of a person and may lead to discrimination or greater risks, such as:
- racial or ethnic origin;
- religious belief;
- political opinion;
- membership of a trade union or religious, philosophical or political organization;
- data concerning health or sex life;
- genetic or biometric data.
Data subject: an identified or identifiable natural person to whom the data refers
Data processing: any operation carried out with personal data, such as collection, use, access, storage, sharing, analysis or deletion.
Data Protection Officer: the person appointed by the company to take care of data protection. Acts as a bridge between the data subject, the company and the National Authority.
Anonymized data: data modified with techniques that make it impossible to identify the person later.
Pseudonymization: a technique that makes identification harder, but does not fully prevent it.
Controller: the natural or legal person who decides how data will be processed.
Processor: the natural or legal person who processes data according to the controller's instructions.
Consent: the data subject's clear and free authorization for the use of data.
Information security: a set of practices, policies and technical measures aimed at protecting the integrity, confidentiality and availability of data and systems.
LGPD: Brazil's General Personal Data Protection Law (Law No. 13,709/2018), which sets the rules for processing personal data in Brazil.
ANPD: National Data Protection Authority, the public body that regulates the LGPD and oversees compliance with it.
Who this Policy applies to
This Privacy Policy applies to everyone whose data we process in any way, including:
What data we collect and what we use it for
We collect personal data only when necessary and in accordance with the LGPD. If we change the way we use your data, we will notify you clearly and transparently.
See below the main data processing activities:
How we use and protect this data
Use of cookies
Cookies are small files that store your preferences to improve your experience. We use three types:
- necessary: ensure the website works (e.g. access to secure areas);
- statistical: analyze website usage anonymously (e.g. Google Analytics); and
- marketing: help display relevant ads (e.g. RD Station).
You can choose which cookies to allow when visiting the website. Just click this icon in the lower-left corner of the screen:
You can also delete cookies in your browser settings. See the links with instructions:
Use of Artificial Intelligence
Bravonix uses, and makes available to its clients, solutions based on artificial intelligence (AI) to support its activities and to continuously refine, develop and improve its products and services.
To ensure responsible, ethical use in compliance with applicable law, the use of AI resources, solutions and tools will follow these guidelines:
- in all cases and at all process stages, they will be guided by the principles of purpose, necessity, transparency, security and non-discrimination
- it will be disclosed in advance to the contracting party, who will have clear and adequate knowledge of its features, characteristics and potential impacts, and who must expressly choose to contract and use it, where applicable.
- it will be subject to periodic risk assessments, as well as governance and human oversight mechanisms involving internal governance, ethics and information security bodies, and privacy by design and by default; and
- it will be assessed and approved in advance by the Data and Artificial Intelligence Committee, in accordance with our Artificial Intelligence Use Policy.
Who your data may be shared with
Your data may be shared with third parties, always with control and security. Data may be shared with:
- service providers and technology partners: such as technology, security and support companies;
- organizations that contract our platforms and products: when you use our services on behalf of a company;
- public authorities: when required by law or court order.
We ensure that all third parties follow strict rules to protect your data.
How long we keep your data
We keep your data for as long as necessary. This may vary according to the purpose or legal requirements. It will be deleted when:
- the purpose has been achieved;
- you revoke your consent (where applicable);
- there is a legal requirement, court decision or order from a competent authority.
We ensure that all third parties follow strict rules to protect your data.
Your rights as a data subject
At any time, you may:
- confirm whether your data is being processed;
- access your personal data;
- correct inaccurate data;
- request anonymization, blocking or deletion of excessive data;
- request the portability of your data;
- find out which public or private entities your data has been shared with;
- refuse to give consent and understand the consequences;
- revoke your consent; and
- request deletion of data processed based on your consent.
These requests can be made free of charge through our Data Subject Portal.
To ensure your security, we adopt authentication methods and technical measures that protect the integrity and confidentiality of data, preventing unauthorized access, leaks or theft.
Updates to this Policy
This Policy is reviewed annually and may be updated at any time. If there are relevant changes, you will be clearly informed. The most recent version will always be available on our website.
Data Protection Officer
For questions, complaints or incidents, please contact our Data Protection Officer:
Name: Sidnei Yokoyama
Email: dpo@lgpdnow.com.br
To exercise your rights, go to the Data Subject Portal.
Incident Reporting Channel
Harassment, fraud, corruption and other violations.
Frequently asked questions
about the LGPD
Frequently asked questions about the LGPD
-
The General Data Protection Law (LGPD – Law No. 13,709/2018) is the Brazilian legislation that sets rules for the collection, use, storage, sharing and deletion of personal data, ensuring more transparency, security and privacy for citizens.
-
It is information that identifies or can identify a person, such as name, CPF, ID card (RG), address, phone, email, location, financial data and online information.
-
Data that requires special protection because it poses a greater risk of discrimination or rights violations. Examples: racial or ethnic origin, religion, political opinion, health data, biometrics, sexual orientation and union membership.
-
Every public or private organization that processes personal data in Brazil, regardless of size or sector, must comply with the requirements of the law.
-
Processing is any operation performed with personal data, such as collection, storage, consultation, sharing, alteration, transfer, deletion or analysis of that information.
-
The LGPD guarantees several rights, including:
- Confirm whether their data is being processed;
- Access their data;
- Correct inaccurate information;
- Request deletion of data where applicable;
- Revoke consents given;
- Request information about data sharing.
-
The organization may face sanctions from the National Data Protection Authority (ANPD), including warnings, fines, blocking or deletion of data, as well as reputational damage and loss of customer trust.
-
No. Consent is only one of the legal bases provided for in the LGPD. Other grounds allow data processing, such as compliance with a legal obligation, performance of a contract, protection of life, regular exercise of rights and legitimate interest, among others.
-
The organization must assess the impact of the incident, take measures to contain and mitigate the risks, record the actions taken and, when necessary, notify the ANPD and the affected data subjects.
-
Compliance involves actions such as:
- Map the personal data processed;
- Review processes and contracts;
- Define legal bases for processing;
- Implement information security controls;
- Create privacy policies;
- Train employees;
- Establish an ongoing privacy and data protection governance program.