Privacy Policy: Processing Personal Data in Brazil under LGPD
Introduction
Welcome to [Your Website Name] (“we”, “our”, or “us”). We are committed to safeguarding your privacy and ensuring the protection of your personal data. This Privacy Policy explains how we collect, use, share, and protect your personal information in accordance with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados – LGPD).
1. Lawful Basis for Processing
We only process your personal data when there is a valid legal basis and legitimate interest for doing so. This may include situations where processing is necessary for the performance of a contract, compliance with legal obligations, protection of vital interests, or consent that you have provided.
2. Consent
In some cases, we may require your explicit and informed consent to process your personal data. Your consent will be requested in a clear and understandable manner, and you have the right to withdraw your consent at any time.
3. Data Subject Rights
Under LGPD, you have a range of rights relating to your personal data. These include:
- Right to Access: You can request access to the personal data we hold about you and receive a copy of that data.
- Right to Rectification: If any of the information we hold about you is inaccurate or incomplete, you have the right to have it corrected.
- Right to Erasure: You can request the deletion of your personal data under certain circumstances.
- Right to Restriction: You have the right to restrict the processing of your personal data under certain conditions.
- Right to Portability: You can request that we provide you with your personal data in a structured, commonly used, and machine-readable format.
4. Data Security and Protection
We take data security seriously and have implemented appropriate measures to protect your personal data from unauthorized access, loss, or theft. These measures include encryption, access controls, and regular security assessments.
5. Data Transfers
If your personal data needs to be transferred to third parties or international entities, we will ensure that appropriate safeguards are in place to protect your data, as required by the LGPD.
6. Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will promptly notify you and relevant authorities, taking all necessary steps to mitigate the impact.
Contact Us
If you have any questions, concerns, or requests related to the processing of your personal data, or if you wish to exercise your rights under LGPD, please contact our Data Protection Officer at [DPO Email Address].
Updates to this Privacy Policy
This Privacy Policy may be updated to reflect changes in our data processing practices or legal requirements. Please review this page periodically for any updates.