Privacy Policy

Alves & Mattos Advogados Associados adopts high standards of governance, information security, and regulatory compliance in the processing of personal data, strictly observing applicable Brazilian legislation and the fundamental rights to privacy, freedom, and the free development of personality.

This Privacy Policy clearly and transparently describes how personal data is collected, used, stored, protected, and disposed of within the scope of the firm's institutional website, in accordance with the General Data Protection Law (Law No. 13.709/2018 – LGPD), the Federal Constitution, the Brazilian Civil Rights Framework for the Internet (Law No. 12.965/2014), the Consumer Protection Code (Law No. 8.078/1990), and best practices in compliance and risk management.

1. Principles and legal basis of treatment

The processing of personal data carried out by Alves & Mattos Advogados Associados strictly observes the principles set forth in Article 6 of the LGPD (Brazilian General Data Protection Law), especially those of purpose, adequacy, necessity, transparency, security, prevention, accountability, and reporting.

The legal bases that justify the processing include, as applicable:

  • the data subject's consent;
  • Compliance with a legal or regulatory obligation;
  • The regular exercise of rights in judicial, administrative, or arbitration proceedings;
  • legitimate interest, observing legal limits and the rights of the holder.

 

2. Scope and collection of personal data

Personal data is collected exclusively when voluntarily provided by the data subject through the channels available on the website, including contact forms and electronic communications. The data collected may include:

  • Identification and contact information;
  • Data required for initial processing of the request;
  • Technical browsing data, collected automatically, for security, stability and website improvement purposes.

The firm does not collect sensitive data, as defined in Article 5, II, of the LGPD (Brazilian General Data Protection Law), through its institutional website, except when strictly necessary and in compliance with applicable legal bases.
3. Legitimate purposes and limitation of processing

Personal data is processed exclusively for legitimate, specific, and previously informed purposes, including:

  • Responding to requests submitted by the data subject;
  • Providing institutional information;
  • Initial contact for preliminary assessment of needs;
  • security and integrity of the digital environment;
  • Compliance with legal and regulatory obligations.

The use of personal data for purposes other than or incompatible with those described in this Policy is expressly prohibited.

4. Professional secrecy and confidentiality

Alves & Mattos Advogados Associados strictly observes the duty of professional secrecy inherent to the legal profession, adopting internal controls that ensure that access to personal data is restricted to authorized professionals and limited to strict operational and legal needs.

5. Data sharing and transfer

Personal data is not sold, rented, or shared with third parties, except: 

  • when required by law or court order;
  • to fulfill requests from competent authorities;
  • for the regular exercise of rights, observing legal limits.

No international transfer of personal data is carried out through the institutional website, unless expressly informed to the data subject and in accordance with the LGPD (Brazilian General Data Protection Law).
6. Storage, retention and disposal

Personal data is stored in a secure environment, with access control and traceability, for the period strictly necessary to fulfill the purposes of the processing, respecting:

  • legal and regulatory deadlines;
  • applicable limitation periods;
  • obligations arising from the regular exercise of rights.

Once the purpose has been fulfilled or the legal deadline has been reached, the data will be deleted, anonymized, or blocked, according to appropriate technical and legal criteria.

7. Information security and incident prevention

Technical and administrative measures compatible with the risk are adopted, aiming to prevent security incidents, unauthorized access, leaks, destruction, loss, or improper alteration of personal data.

The firm maintains a proactive approach and focuses on continuously improving its controls, in line with governance and information security standards.

8. Data subject rights and support channels

The data subject may exercise, at any time, the rights provided for in the LGPD (Brazilian General Data Protection Law), including confirmation of the existence of processing, access, correction, deletion, restriction, and information about the use of their data.

Requests should be submitted through the contact channels provided on this website and will be processed within the legal timeframes.

9. Cookies and access logs

The website may use cookies that are strictly necessary for its operation, security, and performance. Access logs are maintained in accordance with the Brazilian Civil Rights Framework for the Internet (Marco Civil da Internet), for the sole purpose of security and auditing.

10. Accountability and reporting

Alves & Mattos Advogados Associados adopts governance measures to demonstrate compliance with data protection legislation, pursuant to Article 6, X, of the LGPD (Brazilian General Data Protection Law), maintaining a diligent and responsible approach to the processing of personal data.

11. Updates to this Policy

This Policy may be revised and updated at any time, especially to adapt to legislative or regulatory changes or internal improvements in compliance and governance.

12. Contact

For questions, requests, or clarifications related to this Privacy Policy, the data subject may contact Alves & Mattos Advogados Associados through the channels indicated on this website.