top of page
Design sem nome.png
privacidade Brapis_edited.jpg

POLICY OF
PRIVACY

This privacy policy became effective on January 1, 2026 for this new website. Please note that this policy will be updated regularly to reflect any changes in how we handle your personal data or changes in applicable law.

​

This privacy policy contains everything you need to know about how Brapis Tecnologia protects the personal data we process and control in relation to you (“your personal data”; “your data”) and about your rights regarding the processing of your personal data.

  • Please read our privacy policy and if you still have any questions, we are available to assist you.

    This privacy policy contains everything you need to know about how Brapis Tecnologia protects the personal data we process and control in relation to you.

  • Brapis places great importance on your right to privacy and the protection of your personal data. We want you to feel confident that, when dealing with Brapis, your personal data is in good hands.

    ​

    Brapis protects your personal data in accordance with applicable legislation and our data privacy policies. In addition, Brapis adopts appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing and against accidental loss, alteration, disclosure, access, destruction, or accidental or unlawful damage.

    ​

    We collect personal data from our “Partner and Supplier Representatives,” “General Users who have shown prior interest in Brapis,” “Representatives of Potential Clients,” and “Employees of Our Clients.” If the data collected is not listed in this privacy policy, we will, when required by law, provide appropriate notice regarding what other data will be collected and how it will be used.

    ​

    Please note that Brapis always seeks to collect the minimum amount of personal data necessary, and when required, such collection is carried out only for specific purposes.

    ​

    Except in cases where certain information is required by law or by Brapis policies, your decision to provide any personal data to us is voluntary. Therefore, you will not suffer any negative consequences if you choose not to provide your personal data.

    ​

    However, please keep in mind that if you choose not to provide certain information, Brapis may not be able to achieve some or all of the purposes described in this privacy notice, and you may not be able to use certain tools and systems that require the use of such personal data.

    ​

    If you provide Brapis with personal data relating to another individual, for example, a potential employee or referral, or a potential client or supplier, you are responsible for ensuring that this individual is aware of the information contained in this privacy notice and for obtaining their consent to share the information with Brapis.

    ​

    The personal data collected by Brapis is always obtained either directly from you, for example, when you complete a form on our website requesting contact or when you send a message via WhatsApp requesting support or commercial information, or indirectly from third parties, for example, through our website technology and our agent installed on your computer, when applicable. Such third parties include public authorities, associations, public websites, social media platforms, clients, and suppliers.

    ​

    With regard to the use of the legal basis of “Legitimate Interest” for a specific purpose, we believe that our legitimate interests are not overridden by your interests, rights, or freedoms, given (i) the transparency we provide regarding processing activities, (ii) our privacy by design approach, (iii) our periodic privacy reviews, and (iv) your rights in relation to data processing activities. If you would like more information about this balancing of interests approach, please contact us.

    ​

    In cases where we ask you to click “I accept,” “I agree,” or similar buttons, checkboxes, or features, or to proceed after being notified that your data will be collected and processed for a specific purpose or of a similar nature in relation to a privacy notice, please be aware that by doing so, we will consider that permission has been granted to process your personal data and that we are therefore in compliance with the Brazilian General Data Protection Law (LGPD) where such consent is required by law.

    ​

    We will not use your personal data for any purposes that are incompatible with those disclosed to you, unless required or permitted by law, or when it is in your vital interest to do so, for example, in the event of a medical emergency.

    ​

    Below you will find a list of all personal data processing activities carried out by Brapis. This allows you to easily identify which process or processes involve the processing of your data, understand the purpose of collection and storage, identify exactly which data is involved, determine the legal basis that allows Brapis to process your personal data, and understand how long we will retain your data.

Do you represent one of our business partners or one of our suppliers? If so, your data may be being processed in one of the two processes below:

  • The technology department manages relationships with our partners and suppliers, seeking new technical and commercial solutions.

    • What data is processed? Name, Phone number, Email, Company where you work, and Job title/Function.

    • What is the legal basis? It is justified based on our legitimate interests in ensuring that we can conduct and improve our business.

    • For how long? 1 year.

    • How do we collect it? Directly from the data subject, through public information, or from third parties.

  • Name, Phone Number, Email, Company you work for, and Job Title/Function.

  • This is justified based on our legitimate interests in ensuring that we can conduct and improve our business.

  • 1 year.

  • Directly with the data subject, public information, or with third parties.

  • The sales department is responsible for analyzing and collecting signatures for contracts, and therefore requires the personal data of the legal representatives.

  • Name, Address, CPF (Brazilian individual taxpayer registration number) and RG (Brazilian national identity card number).

  • Required to fulfill a contract in which our Partner or Supplier is a party.

  • Until the contract expires

  • Directly with the account holder or a person authorized by you.

Have you shown any prior interest in Brapis Tecnologia, whether by accessing our website, social media, or calling us? If so, your data may be being processed in one of the 3 processes below:

  • The sales team handles digital marketing through email advertising, WhatsApp, Google Ads, and social media, with the goal of promoting our services.

  • Name, phone number and email, age, gender, field of work, profession, common interests.

  • This is justified based on our legitimate interests in ensuring that we can conduct and improve our business.

  • 1 year.

  • Through our cookie tool.

  • The technology department manages the functions of our website, including the cookie tray.

  • IP Address, Browser Type.

  • This is justified based on the consent given by the owner when using our website.

  • 1 year.

  • Through our cookie tool.

  • Contacting you for various information, based on requests made by the account holder through the contact form on our website.

  • Name, Phone Number, and Email Address.

  • This is justified based on the consent provided by the data subject when using the contact form on our website.

  • 1 year.

  • Through the form on our website.

Are you a representative of a potential Brapis client? If so, your data may be processed in one of the two processes below:

  • The commercial/legal area is responsible for analyzing and collecting signatures on contracts, therefore requiring the personal data of the legal representatives.

  • Name, Address, and CPF (Brazilian tax identification number).

  • Necessary to fulfill a contract in which our Client is one of the parties.

  • For the duration of the contract.

  • Directly with the Account Holder

Are you an employee/collaborator of one of our clients? If so, your data may be being processed in one of the two processes below, see below:

  • The operational area offers our clients and their respective employees call handling and IT project implementation.

  • Name, Phone, Email and Job Title/Function, Company where you work, department, work location, phone number, mobile phone number (WhatsApp), session duration, connections made, hardware, equipment and devices used, IP addresses, location, language settings, operating system, unique device identifiers and other diagnostic data.

  • Necessary to fulfill a contract in which our Client is one of the parties.

  • The contract lasts for the duration of the contract; afterwards, the information is anonymized.

    How do we anonymize your data? When we don't receive notification from our clients that you are no longer an employee or, for some other reason, no longer need us to process your data, we periodically conduct a validation with all our clients, asking them to inform us which data subjects still require our services. If you are not on this list, we anonymize your registration by changing your personal information to an anonymous value. Therefore, your data will not be available in our processes from this point forward.

    Please remember that information you provide during a conversation or email cannot be anonymized, as this information is not indexed by the systems we use. However, remember that you are not obligated to provide us with any personal information, and we strongly advise against doing so.

  • Through our clients, directly with the account holder.

Have you ever been our customer? Then your data may be processed in one of these processes.

  • The sales department maintains post-sales relationships with employees designated by the client.

  • Name, Phone Number, Email, and Job Title/Function.

  • This is justified based on our legitimate interests in ensuring that we can conduct and improve our business.

  • For the duration of the contract.

  • Directly with the account holder.

  • We may transfer personal data to service providers, professional advisors, public and governmental authorities, or third parties related to a (potential) corporate or commercial operation. Such third parties may be located in other countries. Before doing so, we will take the necessary precautions to ensure that your personal data will have adequate protection as required by relevant data privacy laws and Brapis' internal policies.

    ​

    For example, we may share personal data with third parties for other business purposes, such as:

    ​

    • Sharing your information with third-party service providers who provide services to us, such as billing, payment processing, customer service, email delivery, advertising and marketing, security and performance monitoring, repair and maintenance services, order and transaction processing and fulfillment, verification of customer registration information, research, data storage, auditing, and data processing;

    • To protect and defend legal rights, security, and the protection of Brapis, its users, or the public, including to protect against fraud and malicious activities; and

    • For other business purposes described in this privacy policy or for any other purpose disclosed to you at the time we collect the information or resulting from your express consent.

     

    We may also share your information in connection with a significant corporate transaction, such as the sale of a website, a merger, consolidation, asset sale, IPO, or in the unlikely event of bankruptcy.

    ​

    Unless otherwise notified, any transfers of your personal data from within Brazilian territory or to third parties outside Brazilian territory will be based on an adequacy decision or governed by standard contractual clauses (a copy of which can be obtained through the contact information below). Any other transfers will occur in accordance with appropriate international data transfer mechanisms and standards.

  • In general, we seek not to collect sensitive data (also known as special categories) through this website or otherwise. In the few cases where we do collect such data, we do so in accordance with the requirements of data privacy laws and/or request your consent.

    ​

    The term “sensitive data” refers to various categories of personal data identified by data privacy laws as data that require special handling, including in some circumstances the need to obtain your explicit consent. Such categories include racial or ethnic origin, political opinions, religious, philosophical or similar beliefs, trade union membership, physical or mental health, biometric or genetic data, sex life or sexual orientation, or criminal convictions and offences (including information about suspected criminal activity).

  • We take organizational, physical, and technical security precautions for all personal data we hold. We have related protocols, controls, policies, procedures, and guidelines in place to maintain these measures, taking into account the risks associated with the categories of personal data and the processing we carry out.

    ​

    We adopt industry-leading security measures to protect your personal data. This includes (but is not limited to):

    ​

    • We base our work on the principles of ISO 27701. This is a security framework that establishes the highest and most stringent standards for information security and privacy.

    • We have regular penetration tests conducted by our security team, which continue to demonstrate the strength of our technical defenses.

    • All of our data center, software, and application providers with whom we will process your data are certified according to the highest and most rigorous information security standards.

  • As a technology organization that adopts work-from-home practices and regimes, the personal data we collect may be transferred to or accessible internationally and between employees and third parties.

    ​

    All data transfers and processing carried out internationally by Brapis are conducted in accordance with applicable data privacy laws.

  • You are entitled (under the circumstances and conditions, and subject to the exceptions, established in applicable legislation) to:

    ​

    • Request access to your personal data processed by us: this right allows you to know if we hold your personal data and, if so, to obtain information about this data and a copy of it.

    • Request correction of your personal data: this right allows you to request the correction of your personal data if it is inaccurate or incomplete.

    • Objecting to the processing of your personal data: this right allows you to request that Brapis stop processing your personal data.

    • Requesting the removal of your personal data: this right allows you to request the removal of your personal data, including when such personal data is no longer necessary for the intended purposes.

    • Requesting the restriction of the processing of your personal data: this right allows you to request that Brapis process your personal data only under certain circumstances, including with your consent.

    • Request the portability of your personal data: this right allows you to receive a copy (in a structured, commonly used and machine-readable format) of the personal data you have provided to Brapis, or to request that Brapis transmit such personal data to another data controller.

     

    Since the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time by contacting Brapis' data protection officer at dataprivacyofficer@brapis.com.br . Please note that this will not affect Brapis' right to process personal data obtained before the withdrawal of your consent, or Brapis' right to continue with parts of the processing based on other legal bases different from your consent.

    ​

    If, despite our commitment and efforts to protect your data, you believe that your data protection rights have been violated, we encourage you to first contact Brapis to seek a resolution to any complaint. You have the right, at any time, to lodge a complaint directly with the relevant supervisory authority or to file a claim against Brapis in a competent court (either in the country where you live, the country where you work, or the country where you believe data privacy law has been violated).

    Contact us to exercise your rights.

Contact us

Please click HERE if:

  • You have a general question about how Brapis protects your personal data.

  • You wish to exercise your rights regarding your personal data.

  • Would you like a copy of the full version of our privacy policy?

  • Do you wish to file a complaint regarding Brapis's use of your data?

 

You can also contact Brapis as the controller of your personal data through our Data Privacy Officer via this email.

bottom of page