Privacy policy - Gaiofato e Galvão Advogados

Gaiofato e Galvão (“GG”) is a law firm formed by a specialized legal team with professional excellence, always aiming to provide services based on our principles of effectiveness, ethics, agility and diversity.
In this sense, privacy and security are priorities and we are committed to transparency in the treatment of personal data of our clients. The present Privacy Policy therefore intends to describe how the information and personal data of our clients and/or users of the site will be collected, used, shared and stored from your access and/or registration on our site, as well as to help you understand how you can access this information.
By using our services, you understand that we will collect and use your personal information in the ways described in this Policy, under the norms of the Federal Constitution of 1988 (art. 5, LXXIX; and art. 22, XXX – included by EC 115/2022), the Data Protection rules (LGPD, Federal Law 13.709/2018), the consumer provisions of Federal Law 8078/1990 and the other applicable rules of the Brazilian legal system.
In this way, GG, as a Data Controller, is bound by the provisions of this Privacy Policy.

How we collect data

Data collected by GG can be collected in two ways:

Through the provision by you of the information necessary for the performance of the contracted services and through the use of Cookies and other mechanisms that store information regarding access to and use of our site.

Data collected and purpose

GG collects data to enable it to respond to customer requests, provide contracted services and send communications. In addition, the data can be used for:

To provide relevant content published by GG, such as newsletters, invitations to events, reminders, thank-you notes, communications;
To compose a database of suppliers and service providers of GG;
To form a database of candidates for vacancies in our service partners, internship and other service providers;
To comply with applicable legislation;
To protect the interests of the GG.

We may request the client’s full name, social security number, address, e-mail address, telephone number, nationality, income information for the client, their spouses, family members and anything else that may be necessary for the correct conduct of the work.
If necessary, sensitive personal data will be requested, such as health information, union affiliation and racial or ethnic origin. These and all other data will always be treated and stored securely, in accordance with the General Data Protection Law.
In addition, when a user accesses our site or social networks, data such as IP address, geographical location, device, version, date and time stamp of actions and screens accessed are collected to identify the user and improve the user experience.
GG undertakes to request only the data that is strictly necessary for the provision of services.

Data base and security

The data base is the exclusive property and use of GG, being under our responsibility. Its use, access and sharing, when necessary, will be done within the limits and purposes of the business described in this Policy.
To keep your personal information safe, we use physical, electronic and management tools aimed at protecting your privacy.
We apply these tools taking into account the nature of the personal data collected, the context and purpose of the processing and the risks that possible violations would generate for the rights and freedoms of the data subject collected and processed.
Among the measures we have adopted, we highlight the following:

Only authorized persons have access to your personal data;
Your personal data will only be accessed after you have given an undertaking of confidentiality;
Your personal data is stored in a secure and reliable environment.

GG is committed to adopting the best practices to prevent security incidents. However, it should be noted that no virtual platform is entirely safe and risk-free. It is possible that, despite all our security protocols, problems may occur through the sole fault of third parties, such as cyber attacks by hackers, or as a result of the negligence or imprudence of the client/user himself.
In the event of security incidents that may generate a relevant risk or damage to you or any of our clients, we will notify those affected and the National Data Protection Authority of what has occurred, in accordance with the provisions of the General Data Protection Law.

Data retention period

Your personal data collected by GG will be used and stored for as long as necessary for the provision of the service or for the purposes listed in this Privacy Policy to be achieved, considering the rights of the data subjects and controllers.
In general, your data will be kept for as long as the contractual relationship between you and GG continues. At the end of the storage period, personal data will be deleted from our databases or anonymized, except in the cases legally provided for in Article 16 of the General Data Protection Law:

Compliance with a legal or regulatory obligation by the controlling shareholder;
Study by a research organization, guaranteeing, whenever possible, the anonymization of personal data;
Transfer to a third party, provided that the data processing requirements set forth in this Law are respected;
For the exclusive use of the Controller, with no access by third parties, provided that the data is anonymized.

That is, personal information about you that is essential for compliance with legal, judicial and administrative orders and/or for the exercise of the right of defense in judicial and administrative proceedings will be kept, despite the deletion of other data.
In addition, we also have security measures appropriate to the risks and with access control to the stored information. We employ technical protection measures and solutions to guarantee the confidentiality, integrity and inviolability of your data. We also have security measures appropriate to the risks and control access to stored information.

What are the rights of data subjects?

The data subject may choose not to disclose their data to GG, but should be aware that some of this data may be necessary for the provision of services.
In any case, GG guarantees its Clients and Users the rights of the holder provided for in article 18 of the General Data Protection Law. This way, you can do it for free and at any time:

Confirm the existence of data processing, in a simplified or clear and complete format;
Access your data, being able to request them in a legible copy in printed form or electronically, safe and reliable;
Correct your data, requesting the editing, correction or updating of them;
Limit your data when it is unnecessary, excessive or processed in breach of the law by anonymizing, blocking or deleting it;
Request the portability of your data, through a report of your registration data processed by GG;
Delete your data processed after consent, except in cases where processing is required by law;
Revoke your consent, deauthorizing the processing of your data;
Be informed about the possibility of not providing your consent and about the consequences of the negative.

External links

GG may offer links to redirect you to third-party websites for the purpose of providing services or improving your experience with our office.
However, we clarify that GG does not hold any responsibility for browsing external websites, even when referenced by us, whose content and privacy policies are not our responsibility.
Therefore, we recommend that, when redirected to external sites, users always consult the respective privacy policies before providing their data or information.

How can you contact us?

In case of any questions regarding this Policy or requests to fulfill your rights, you or your legal representative may contact our DPO directly through the channels below:
Carolina Albim
direitodigital@gaiofatoegalvao.com.br.br

Privacy Policy Changes

The current version of the Privacy Policy was formulated and updated for the last time in June 2023.
We reserve the right to modify this Privacy Policy at any time, especially in order to adapt to any changes made to our website or in the legislative field. We recommend that you review it frequently.
Any changes will come into effect from the date of their publication on our website and we will always notify you of the changes that have occurred. By using our services and providing your personal data after such modifications, you consent to them.