Privacy Policy | Studio Sub

This website is maintained and operated by Studio Sub.

We collect and use some personal data belonging to the people who use our website. In doing so, we act as the controller of that data and are subject to the provisions of Brazilian Federal Law no. 13,709/2018 (General Personal Data Protection Law – LGPD).

We take care of the protection of your personal data and, for that reason, we provide this privacy policy, which contains important information about:

Who should use our website
Which data we collect and what we do with it
Your rights regarding your personal data
How to contact us

Data we collect and why we collect it

Our website collects and uses some personal data of our users, as described in this section.

Personal data expressly provided by the user

We collect the following personal data that our users expressly provide when using our website:

Full name
Email address
WhatsApp number

When data is collected

This data is collected at the following moments:

When the user submits the contact form
When the user signs up to receive the newsletter
When the user requests assistance through the website channels

Purposes

The data provided by our users is collected for the following purposes:

To reply to requests for contact, quotations and support
To send communications when the user signs up for the newsletter

Personal data obtained in other ways

We collect the following personal data from our users:

IP address
Location

Automatic collection — moments and purposes

This data is collected at the following moments:

When the user fills in a form on the website.

This data is collected for the following purposes:

To protect the security and privacy of users' data.

Sensitive data

We do not collect sensitive data from our users, meaning the data defined in articles 11 and following of the General Personal Data Protection Law. There will be no collection of data about racial or ethnic origin, religious belief, political opinion, membership of a trade union or of a religious, philosophical or political organization, data concerning health or sex life, or genetic or biometric data, when linked to a natural person.

Cookies

Cookies are small text files downloaded automatically to your device when you access and browse a website. They are used, basically, so that devices, activities and user preferences can be identified.

Cookies do not allow any file or information to be extracted from the user's hard drive, and it is also not possible, through them, to access personal information that did not come from the user or from the way the user uses the website.

Website cookies

Website cookies are those sent to the user's computer or device and managed exclusively by the website.

The information collected through these cookies is used to improve and personalize the user experience. Some cookies may, for example, be used to remember the user's preferences and choices, as well as to offer personalized content.

Cookie management

The user may object to the recording of cookies by the website by disabling this option in their own browser. More information on how to do this in some of the main browsers used today can be accessed from the following links:

Disabling cookies, however, may affect the availability of some tools and features of the website, compromising its correct and expected operation. Another possible consequence is the removal of user preferences that may have been saved, harming the experience.

Collection of data not expressly foreseen

Occasionally, other types of data not expressly foreseen in this Privacy Policy may be collected, provided they are supplied with the user's consent, or the collection is permitted on another legal basis provided by law.

In any case, the collection of data and the processing activities resulting from it will be informed to the users of the website.

Sharing personal data with third parties

We do not share your personal data with third parties. Nevertheless, we may do so to comply with a legal or regulatory requirement, or to comply with an order issued by a public authority.

How long your personal data will be stored

The personal data collected by the website is stored and used for a period of time that corresponds to what is necessary to achieve the purposes listed in this document and that takes into account the rights of the data subjects, the rights of the website controller and the applicable legal or regulatory provisions.

Once the storage periods for personal data have expired, the data is removed from our databases or anonymized, except in cases where storage is possible or necessary because of a legal or regulatory provision.

Legal bases for the processing of personal data

Each personal data processing operation needs a legal ground, that is, a legal basis, which is simply a justification that authorizes it, provided for in the General Personal Data Protection Law.

All of our personal data processing activities have a legal basis, among those permitted by the legislation. More information about the legal bases we use for specific personal data processing operations can be obtained through our contact channels, listed at the end of this Policy.

User rights

The user of the website has the following rights, granted by the Personal Data Protection Law:

Confirmation of the existence of processing
Access to the data
Correction of incomplete, inaccurate or outdated data
Anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed data
Portability of the data to another service or product provider, upon express request, in accordance with the regulations of the national authority, subject to commercial and industrial secrecy
Deletion of personal data processed with the data subject's consent, except in the cases provided by law
Information about the public and private entities with which the controller has shared data
Information about the possibility of refusing consent and about the consequences of refusal
Withdrawal of consent

How the data subject can exercise their rights

It is important to note that, under the LGPD, there is no right to delete data processed on legal bases other than consent, unless the data is unnecessary, excessive or processed in breach of the law.

To make sure that the user who intends to exercise their rights is in fact the subject of the personal data concerned, we may request documents or other information that can help with correct identification, in order to protect our rights and the rights of third parties. This will only be done if it is absolutely necessary, and the requester will receive all related information.

Security measures in the processing of personal data

We use technical and organizational measures capable of protecting personal data from unauthorized access and from situations of destruction, loss, misplacement or alteration of that data.

The measures we use take into account the nature of the data, the context and purpose of the processing, the risks that a possible breach would create for the rights and freedoms of the user, and the standards currently used in the market by companies similar to ours.

Among the security measures we have adopted, we highlight the following:

Access monitoring
Encryption of databases
Security of the data provided to us

Security incidents

Even if we do everything within our reach to avoid security incidents, a problem caused exclusively by a third party may occur — such as attacks by hackers or crackers or, also, in the case of exclusive responsibility of the user, which happens, for example, when the user transfers their own data to a third party. Thus, although we are, in general, responsible for the personal data we process, we disclaim liability if an exceptional situation like these occurs, over which we have no control.

In any case, if any type of security incident occurs that may create a relevant risk or damage for any of our users, we will notify the affected users and the National Data Protection Authority about what happened, in accordance with the General Data Protection Law.

Complaint to a supervisory authority

Without prejudice to any other administrative or judicial remedy, personal data subjects who feel harmed in any way may file a complaint with the National Data Protection Authority.

Changes to this policy

We reserve the right to modify these rules at any time, especially to adapt them to any changes made to our website, whether by making new features available or by removing or changing existing ones.

Whenever there is a change, our users will be notified of it.

How to contact us

To clarify any questions about this Privacy Policy or about the personal data we process, contact our Data Protection Officer through one of the channels listed below:

E-mail: contato@studio-sub.com