Template — review with legal counsel before publishing in production.
These terms describe how Astratelco processes personal data in accordance with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados — Law 13,709/2018, "LGPD"), when applicable.
1. Controller and Data Protection Officer
Controller: Astratelco, . Data Protection Officer (Encarregado): .
2. Personal data processed
Identification and contact data (name, e-mail, phone), professional data, access and security records (IP address, date and time of access, actions performed) and data related to the contracted services.
3. Purposes and legal bases (art. 7)
- Performance of a contract and preliminary procedures (art. 7, V);
- Compliance with legal or regulatory obligations (art. 7, II) — including keeping access records (Marco Civil da Internet, art. 15);
- Legitimate interests, such as security and fraud prevention (art. 7, IX);
- Consent, where required, which you can withdraw at any time (art. 7, I).
4. Sharing and international transfer
Data may be shared with processors that support the platform (hosting, e-mail, SMS). Some providers may be located outside Brazil; transfers follow art. 33 of the LGPD with appropriate safeguards.
5. Retention
Data is kept for the duration of the relationship and as required by law, then deleted or anonymised.
6. Data subject rights (art. 18)
- Confirmation of processing and access;
- Correction of incomplete, inaccurate or outdated data;
- Anonymisation, blocking or deletion of unnecessary or excessive data;
- Portability;
- Deletion of data processed with consent;
- Information about sharing and about the possibility of not consenting;
- Withdrawal of consent.
Requests may be made through the "Privacy request" page, from "My profile", or by e-mail to .
7. Security
We adopt technical and administrative measures to protect personal data against unauthorised access and accidental or unlawful destruction, loss or alteration (art. 46).