Last updated: June 18, 2026
This Privacy Policy describes how the law firm De Paula Souza Advocacia Empresarial collects, uses, stores, and protects the personal data of visitors to this website and of individuals who contact us through our digital channels, in compliance with the Brazilian General Data Protection Law (LGPD — Law 13,709/2018, Brazil’s data protection statute, similar in spirit to the GDPR but with its own regulatory framework).
1. Who we are
Data Controller: De Paula Souza Advocacia Empresarial Data Protection Officer (Encarregada de Dados / DPO): Alessandra De Paula Souza — OAB/PR 31,133 (registration number with the Bar Association of the State of Paraná) Privacy contact e-mail: privacidade@depaulasouza.adv.br
2. What data we collect and why
| Personal data | Purpose | Legal basis (LGPD) |
|---|---|---|
| Name and e-mail (contact form) | Responding to your message and providing information about our services | Contract performance / Legitimate interest (art. 7, V and IX) |
| WhatsApp number (if provided) | Direct communication when requested | Consent (art. 7, I) |
| Browsing data — IP address, pages visited, session duration (via analytics cookies) | Measuring website performance and improving user experience | Legitimate interest with documented LIA (“Legitimate Interest Assessment,” art. 7, IX) |
| E-mail for newsletter (upon sign-up) | Sending legal content and firm updates | Consent with double opt-in confirmation (art. 7, I) |
We do not collect sensitive data (art. 11 of the LGPD) through this website.
3. How we store and protect your data
The data collected is stored on servers with encryption in transit (TLS 1.2+) and at rest. Access is restricted to authorized firm personnel and to vendors bound by a current Data Processing Agreement (DPA).
Main subprocessors:
- Hostinger International Ltd. — website hosting (servers with a data center option in Brazil)
- Automattic Inc. — WordPress platform (website software)
- Google LLC — performance analytics (pseudonymized data; IP address anonymized before transmission)
All subprocessors listed above process data based on standard contractual clauses compatible with the LGPD.
4. How long we retain your data
| Data | Retention period |
|---|---|
| Contact messages | 5 years after the last contact (Brazilian civil statute-of-limitations period) |
| Newsletter data | Until subscription cancellation, plus 12 months |
| Analytics data | 14 months (Google Analytics 4 default) |
| Website access logs | 6 months (art. 15 of the “Marco Civil da Internet” — Law 12,965/2014, Brazil’s Internet governance framework law) |
5. Your rights as a data subject
You have the following rights under art. 18 of the LGPD, exercisable by request to privacidade@depaulasouza.adv.br:
- Confirmation and access — to know whether we process data about you and to obtain a copy
- Correction — to request correction of incomplete, inaccurate, or outdated data
- Anonymization, blocking, or deletion — for data that is unnecessary or processed in non-compliance with the law
- Portability — to receive your data in a structured format
- Withdrawal of consent — at any time, without affecting the lawfulness of processing carried out prior to withdrawal
- Objection — when processing is based on legitimate interest and you have a legitimate reason to object
- Information about sharing — to know with whom we share your data
- Complaint to the ANPD — the right to file a complaint with Brazil’s National Data Protection Authority
We respond to requests within 15 business days.
6. International data transfers
Some subprocessors (Google, Automattic) process data outside Brazil. These transfers are carried out based on standard contractual clauses or recognized adequacy standards, pursuant to art. 33 of the LGPD.
7. Cookies
This website uses cookies. For detailed information about the types of cookies used and how to manage them, please see our Cookie Policy.
8. Changes to this Policy
This Policy may be updated periodically. Material changes will be indicated by the “last updated” date at the top of this page. We recommend checking back periodically.
9. Contact
To exercise your rights or ask questions about privacy: E-mail: privacidade@depaulasouza.adv.br Data Protection Officer: Alessandra De Paula Souza — OAB/PR 31,133