This Policy explains which personal data Codeplin processes when you visit codeplin.com or contact us through the forms, for which purposes, on which legal basis and how you can exercise your rights. It follows Brazilian Law No. 13,709/2018, the General Data Protection Law (LGPD), and Law No. 12,965/2014, the Brazilian Internet Civil Framework (Marco Civil da Internet).
This is a translation of the original Portuguese version. If there is any discrepancy, the Portuguese version prevails.
1. Who we are
The controller of the personal data processed on this website is Codeplin Tecnologia Ltda., registered under CNPJ No. 53.181.502/0001-22, headquartered at Centro, Nova Iguaçu, RJ, operating under the name Codeplin.
As the controller, Codeplin is responsible for decisions about the processing of your personal data, under article 5, VI, of the LGPD.
2. Data we process
We only collect what is needed to reply to you and keep the website secure.
Contact form
- Name and email, to identify you and reply.
- Company, when provided, to understand the context of your request. This field is optional.
- Subject and message, with whatever content you choose to send.
- Date and time of submission and the record that you acknowledged this Policy.
Data subject request form
- Name, email, request type and description, used to verify your identity and handle the request.
Support assistant (WhatsApp)
- The name and subject entered in the assistant on the home page are not sent to or stored by the website. They are only used to prepare the message that opens in WhatsApp, and are only shared if you choose to send it. From then on, the conversation follows the rules of WhatsApp, a Meta service with its own privacy policy.
Browsing data
- IP address, date and time of access, page accessed and technical browser information, recorded automatically by the hosting infrastructure.
We do not use advertising, cross-site tracking or profiling tools. Please do not send sensitive personal data through the forms, such as health information, religion, political opinion or biometrics, nor third-party data without authorization.
3. Purposes and legal bases
Each processing activity has a defined purpose and a legal basis set out in article 7 of the LGPD.
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to messages and quote requests | Contact form data | Preliminary procedures related to a contract, at the data subject's request (art. 7, V) and legitimate interest in responding to those who contact us (art. 7, IX) |
| Handling data subject requests | Request form data | Compliance with a legal obligation (art. 7, II, together with articles 18 and 19) |
| Keeping the website secure and preventing fraud and attacks | Browsing data | Compliance with a legal obligation (art. 15 of the Marco Civil da Internet) and legitimate interest (art. 7, IX) |
| Defense in judicial, administrative or arbitration proceedings | Strictly necessary data | Regular exercise of rights (art. 7, VI) |
When we rely on legitimate interest, we only process strictly necessary data and respect your legitimate expectations, under article 10 of the LGPD. We do not send marketing communications based on form data.
4. Sharing
Codeplin does not sell or rent personal data. Data may only be shared with:
- Service providers that operate the website infrastructure, such as hosting, content delivery network and email, acting as processors and following our instructions.
- Public authorities, when there is a legal or regulatory obligation or a court order.
You can request the current list of these providers through the channels in Your rights.
5. International transfer
Some infrastructure providers may store or process data on servers located outside Brazil. In these cases, transfers only take place under the conditions of article 33 of the LGPD, with providers that adopt adequate protection safeguards, such as contractual clauses and recognized security standards.
6. How long we keep data
- Contact messages: for up to 2 years after the last contact, unless a contractual relationship begins, in which case the data follows the contract.
- Data subject requests: for as long as needed to prove the request was handled and LGPD compliance.
- Access logs: for 6 months, under article 15 of the Marco Civil da Internet, or longer if requested by an authority.
At the end of these periods, data is deleted or anonymized, except where retention is allowed by article 16 of the LGPD.
8. Security
We adopt technical and administrative measures to protect personal data, under article 46 of the LGPD. These include an encrypted connection (HTTPS) across the whole website, content security policies in the browser, access restricted to the people who need the data to reply to you and continuous infrastructure updates.
No system is completely immune to incidents. If a security incident occurs that may cause relevant risk or damage to data subjects, we will notify the Brazilian National Data Protection Authority (ANPD) and the people affected, under article 48 of the LGPD.
9. Your rights
Article 18 of the LGPD gives you the right, at any time and upon request, to:
- confirm whether we process personal data about you;
- access your data;
- correct incomplete, inaccurate or outdated data;
- request the anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the LGPD;
- request the portability of your data to another provider;
- request the deletion of data processed based on your consent;
- know which public and private entities we share your data with;
- be informed about the possibility of not giving consent and the consequences of refusing;
- withdraw consent, when consent is the basis for processing;
- object to processing carried out on another legal basis, in case of non-compliance with the LGPD.
We reply to confirmation and access requests in a simplified format immediately or, in full, within 15 days, under article 19 of the LGPD. We may ask for additional information to confirm your identity and protect your data. You may also file a petition with the ANPD at gov.br/anpd.
Make a request
Fill in the form below and we will reply to the email provided.
10. Data Protection Officer (DPO)
The Data Protection Officer is the communication channel between Codeplin, data subjects and the ANPD, under article 41 of the LGPD.
- Name: Pablo Almeida
- Email: [email protected]
11. Changes to this Policy
This Policy may be updated to reflect changes to the website, our services or the law. The date of the last update is always shown at the top of the page. Relevant changes will be highlighted on the website.
This website is not directed at children or teenagers. If we identify data from minors sent without their guardians' authorization, it will be deleted, under article 14 of the LGPD.
See also our Terms of Use.