LGPD

1. Concepts

For the purposes of this page: the "data subject" is the person the personal data refers to; the "controller" is who decides about the processing; the "processor" handles data on behalf of the controller.

2. Legal bases

The processing of personal data may rely on different legal bases under the LGPD, depending on the context, such as performance of a contract, compliance with a legal/regulatory obligation, legitimate interest and, where applicable, consent.

3. Data subject rights

The LGPD provides rights that may be exercised, where applicable, including:

• Confirmation that processing exists and access to the data.
• Correction of incomplete, inaccurate or outdated data.
• Anonymization, blocking or deletion of unnecessary or excessive data.
• Portability, subject to trade and industrial secrets.
• Information about sharing and about the possibility of not giving consent.
• Withdrawal of consent, when the processing is based on consent.

4. How to request

For requests related to personal data, use the contact channel on the site. For your safety, we may ask for additional information to confirm your identity and/or your link to the account before responding.

5. Security

We keep technical and organizational controls to reduce risk, including authentication measures, security event logging and operational monitoring. In the event of an incident, we follow response and mitigation processes.

6. Documents and compliance

Contrasync may process documents and compliance evidence uploaded by users and companies. You must only upload documents that you are authorized to share and that are necessary for the purposes of the service.

7. Contact

Questions about the LGPD and privacy can be sent through the contact channel on the site.