How we process the personal data of visitors to this website, under Brazil's General Data Protection Law (LGPD).
Personal data processed through this website is controlled by REIS SIMAS & HEIDRICH ADVOGADOS E CONSULTORES, a law firm registered with the Santa Catarina Bar (OAB/SC) under no. 1.933/12, Brazilian corporate taxpayer ID (CNPJ) 16.576.962/0001-23, located at Rua General Osório, 1155, térreo, sala 01, Velha, Blumenau/SC, Brazil, ZIP 89041-001 ("RSH").
This policy covers only data collected by www.rsh.adv.br and the contact channels listed on it. Data processed while providing legal services is governed by the corresponding engagement agreement and by the attorney's duty of confidentiality under Brazilian Law no. 8.906/1994, not by this document.
| Context | Data | Purpose | Legal basis (Brazilian LGPD, Law no. 13.709/2018) |
|---|---|---|---|
| Browsing the website | IP address, date and time, page visited, browser and operating system | Security, fraud prevention, operating the website and keeping access logs | Legitimate interest (art. 7, IX) and legal obligation (art. 7, II, together with art. 15 of Law no. 12.965/2014) |
| Usage statistics (Google Analytics) | Browser identifier, pages visited, time on page, traffic source, approximate region and device type | Understanding which content interests visitors and improving the website | Legitimate interest (art. 7, IX) |
| Contact form | First and last name, e-mail, phone, practice area and message | Replying to you and, where applicable, preparing a service proposal | Pre-contractual steps at the data subject's request (art. 7, V) |
| Careers form | First and last name, e-mail, phone, city, state, education, area of interest, cover note and résumé | Recruitment, including future opportunities | Consent (art. 7, I), recorded upon submission |
| WhatsApp, phone and e-mail | Whatever data you choose to share | Handling your communication | Pre-contractual steps (art. 7, V) or legitimate interest (art. 7, IX) |
Messages and applications submitted through the website forms are forwarded by e-mail to [email protected] and are not stored on the website. Résumés are sent as an attachment to that e-mail.
To curb automated submissions, the website keeps, for up to one hour, an irreversible code (hash) derived from the sender's IP address, solely to count how many submissions came from it in that period. The code cannot be turned back into the IP address and is deleted automatically.
The website does not use advertising or social media cookies. The cookies in use are:
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishing visitors for statistical purposes | 2 years |
| _ga_359SJDS502 | Google Analytics | Keeping the browsing session state | 2 years |
| __cf_bm | Cloudflare | Bot protection, when triggered | 30 minutes |
You can block or delete cookies in your browser settings, or prevent Google Analytics collection with Google's official browser add-on. Blocking cookies does not prevent you from browsing the website.
The website relies on providers that receive technical browsing data, such as your IP address:
Each provider also processes this data under its own privacy policy.
Google, Cloudflare and Meta may process data on servers outside Brazil, particularly in the United States. Such transfers rely on the mechanisms set out in article 33 of the LGPD, adopted by the providers in their data processing terms.
We do not sell or rent personal data. Besides the providers listed in section 6, data is shared only when required by law or by a competent authority, or for the regular exercise of rights in judicial, administrative or arbitration proceedings (art. 7, VI).
We adopt technical and organizational measures suited to the nature of the data, including encrypted connections (HTTPS) on every page, a static website architecture with no database exposed to the internet, individual and restricted access to the administrative area, and security headers that limit the execution of third-party content. No system is impregnable. Should a security incident create a relevant risk or damage, we will notify the affected data subjects and the Brazilian Data Protection Authority (ANPD), as required by art. 48 of the LGPD.
Under art. 18 of the LGPD, you may at any time request:
You may also file a petition with the ANPD (art. 18, § 1).
Requests about personal data can be sent to [email protected] with the subject "Personal data". We will reply within 15 days (art. 19, II). To protect you, we may ask for information confirming your identity before fulfilling the request.
The website is not intended for anyone under 18 and does not knowingly collect their personal data.
This policy may be revised to reflect changes to the website or to the law. The date of the latest revision appears at the top of this page.