1. Controller and contact channel
The controller is Vinicius Faria da Silva Silveira — OAB/RJ 189.329. Data-protection requests may be sent to viniciusfariass.adv@gmail.com. This policy does not identify a data-protection officer because no formal appointment has been publicly designated for that role.
2. Categories of data
Data may include information voluntarily submitted in communications, such as name, telephone number, e-mail address, message content and documents; information related to possible legal services; consent preferences; authorized analytics data; and technical records such as IP address, access time, requested page, browser, operating system and security identifiers.
3. Purposes and legal bases
Data may be used to answer contacts, assess a possible engagement, take pre-contractual or contractual steps, comply with legal, regulatory and professional duties, exercise legal rights, prevent fraud, maintain site security and operation and, with consent, produce Google Analytics statistics.
Depending on the context, the legal bases include consent, performance of a contract or preliminary procedures, compliance with legal or regulatory duties, regular exercise of rights and legitimate interests, subject to the data subject’s rights and reasonable expectations.
4. Technical logs and providers
Cloudflare provides hosting, delivery and security and may process necessary technical logs. Google Analytics 4 is activated only after consent. Communications initiated by the visitor may use external services such as WhatsApp, e-mail, Instagram and Facebook, subject to their providers’ policies.
5. Cookies
| Cookie | Provider | Purpose | Classification | Approximate duration |
|---|---|---|---|---|
__cf_bm | Cloudflare | Protection against automated traffic and support for security mechanisms. | Necessary | 30 minutes of inactivity |
_ga | Google Analytics | Distinguish users for navigation statistics. | Analytics — consent required | Up to 2 years, subject to browser limits |
_ga_<container-id> | Google Analytics | Persist session state for statistical measurement. | Analytics — consent required | Up to 2 years, subject to browser limits |
Declining analytics cookies does not prevent access. The choice may be reviewed at any time using the button below.
6. Sharing and international transfers
Infrastructure, security, analytics and communication providers may process data strictly for their functions. Because some providers operate globally, international transfers may occur with the applicable contractual and organizational safeguards.
7. Retention
Data is retained for the period needed for the stated purposes, site security and applicable legal, regulatory, professional and limitation periods. Analytics data follows service settings and the visitor’s preference. Even after a deletion or withdrawal request, some information may be kept to comply with duties or exercise legal rights.
8. Data-subject rights
Under article 18 of Brazil’s LGPD, the data subject may request, when applicable: confirmation and access; correction; information about sharing; anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed data; portability under applicable rules; deletion of consent-based data; information about refusing consent and its consequences; objection; and withdrawal of consent.
Requests must use the stated channel and provide enough information to verify identity and locate the processing. Responses follow legal deadlines and exceptions.
9. Security incidents
Relevant incidents will be contained, documented and assessed, with corrective and preventive measures. When required, Brazil’s Data Protection Authority and affected data subjects will be notified under applicable law and regulation.