Home / Privacy Policy
Privacy Policy
Last updated: 3 October 2026
1. Who we are (controller)
Arquitetura Sustentável Defferrari is the controller of personal data processed through this website under Brazilian Law No. 13,709/2018 (LGPD). Company name: [to be added]; CNPJ: [to be added]. Offices: Rua Mariante, 239, sala 201, Porto Alegre/RS, Brazil, and Via Moretto da Brescia, 27, 20133 Milan (MI), Italy. Contact: info@defferrari.arq.br.
2. Data we collect
We collect only what is necessary:
- Data you provide through the contact form: name, email and message content, plus a record of your consent. If you write or call us, we process the data you give.
- Technical browsing data recorded automatically by the server: IP address, date and time of access, pages visited, browser and operating system (access logs).
We do not request sensitive personal data. Please do not include it in your messages.
3. Purposes and legal bases
- Replying to enquiries and quote requests — preliminary procedures related to a contract and legitimate interest (Art. 7, V and IX, LGPD) and, for the form, your consent (Art. 7, I).
- Website security and abuse prevention (such as rate limiting) — legitimate interest (Art. 7, IX).
- Keeping access logs — legal obligation (Art. 7, II; Law No. 12,965/2014 – Brazilian Internet Civil Framework).
- Regular exercise of rights in proceedings — Art. 7, VI.
We do not use your data for automated decision-making or advertising.
4. Cookies and similar technologies
This website does not use tracking, analytics or advertising cookies. To display typefaces, the site loads files from Google Fonts, which involves sending your IP address and browser data to Google. See Google’s privacy policy for details.
5. Sharing
We do not sell or transfer your data. We may share it only with: hosting and email providers that operate the website, as processors; public authorities when required by law or court order; and professional advisers, under confidentiality duties, when needed to defend rights.
6. International transfers
Because the Studio also has an office in Italy and uses third-party services, your data may be processed outside Brazil. In that case we rely on the safeguards in Art. 33 of the LGPD, such as adequate-protection countries, contractual clauses or specific consent.
7. Retention
Contact messages are kept as long as needed to handle your request and then for up to 5 years to establish and defend rights, unless a contract is concluded, in which case the applicable legal periods apply. Access logs are kept for 6 months as required by the Brazilian Internet Civil Framework. After that, data is deleted or anonymised.
8. Your rights
Under Art. 18 of the LGPD you may at any time request: confirmation that we process your data; access; correction of incomplete, inaccurate or outdated data; anonymisation, blocking or deletion of unnecessary or unlawfully processed data; portability; deletion of data processed with consent; information about sharing; information on the possibility of refusing consent and its consequences; and withdrawal of consent. You may also lodge a complaint with Brazil’s National Data Protection Authority (ANPD). Visitors in the European Economic Area may have equivalent rights under Regulation (EU) 2016/679 (GDPR), to the extent applicable, including the right to complain to their local supervisory authority.
9. Security
We apply reasonable technical and organisational measures to protect data against unauthorised access, loss or alteration, including access control and rate limiting on the form. No system is fully secure; in the event of an incident posing relevant risk, we will notify you and the ANPD as required by law.
10. Children and teenagers
The website is not directed to persons under 18. If we learn that data of a child or teenager was collected without a legal guardian’s consent, it will be deleted.
11. Data Protection Officer
Person in charge of personal data processing: [to be added]. Contact channel: info@defferrari.arq.br.
12. Changes to this policy
We may update this Policy from time to time. The version published on this page, with its last-updated date, is the one in force. Material changes will be highlighted on the website.
13. Governing law and jurisdiction
This Policy is governed by Brazilian law. The courts of Porto Alegre/RS have jurisdiction, without prejudice to the data subject’s home forum where mandatory law so provides.