CCAB PROJETOS E SOLUÇÕES FINANCEIRAS LTDA, a private legal entity registered with CNPJ No. 09.521.193/0001-09, headquartered in Atibaia/SP (“CCAB PROJETOS”), with the purpose of demonstrating absolute transparency, has prepared this document in accordance with the Brazilian General Data Protection Law (Law No. 13,709/18), the Brazilian Internet Civil Framework (Law No. 12,965/14), and other applicable regulations. CCAB PROJETOS acts as the Controller of Personal Data processed through its institutional website. The company considers the electronic records and personal data provided by you (“User”) when using the website (“Pages”) to be sensitive and relevant, and this Privacy Policy (“Policy”) is intended to regulate, in a simple, transparent, and objective manner, which data and information will be collected, when they may be used, and how users may manage their personal information.
This Policy applies to the Pages related to any of CCAB PROJETOS’ brands at
https://www.ccab-projetos.com.br and covers all of its products.
SUMMARY
| Data Processing Agent: |
CCAB Projetos e Soluções Financeiras LTDA CNPJ: 09.521.193/0001-09 |
| Role in Processing: | Controller |
| Nature of Data Processed: | Data provided by the user and data collected automatically (cookies) |
| Purposes: | Responding to requests, institutional contact, commercial relationship, website security, and compliance with legal obligations |
| Legal Bases: | Consent, legitimate interest, preliminary procedures related to contracting, regular exercise of rights, and compliance with legal or regulatory obligations |
| Sharing: | Processors and contracted technology providers, when necessary, as well as legally competent authorities |
| Data Protection: | Appropriate technical and administrative security measures |
| Data Subject Rights (Your Rights): | Rights provided for under Article 18 of the LGPD |
| Contact: | E-mail: contato@ccab-projetos.com.br |
I. WHAT DATA WE USE
CCAB PROJETOS may collect information actively entered by the User in the contact form and may also automatically collect information, such as the IP (Internet Protocol) address, including the date and time of the connection, among other information.
It should be clarified that two types of personal data will be processed, as listed below:
(i) Information provided by the User: We will collect data on the Contact Page (full name, e-mail, telephone number, company, position, and message content). The User acknowledges that this information may be used by CCAB PROJETOS to respond to requests submitted by the User, clarify questions, provide institutional information, and establish a potential commercial relationship related to the company’s activities.
(ii) Automatically collected data: Characteristics of the device used, browser type, IP address, date and time of access, operating system, pages accessed, and data related to the security and operation of the website.
This information may be obtained through cookies and similar technologies.
II. HOW WE USE THE DATA
The data provided in the “Contact” menu is intended to identify the User for follow-up, provision of institutional information, maintenance of commercial relationships, and sending of advertising campaigns.
Processing will be carried out based on the legal grounds provided for under the LGPD, especially: Data subject consent, preliminary procedures related to contracting, CCAB PROJETOS’ legitimate interest, compliance with a legal or regulatory obligation, and regular exercise of rights. The User is responsible for the accuracy and truthfulness of the information provided.
III. HOW WE USE COOKIES
Cookies are small files stored on the user’s device that allow the website to function properly and improve the browsing experience. They are strictly necessary for: website operation; browsing security; fraud prevention; and session maintenance.
Performance and functionality cookies (when used) are intended to improve the user experience, analyze website performance, and identify technical failures.
The use of analytical tools or additional monitoring technologies may be implemented in the future, in which case this Policy will be updated to reflect the respective purposes, legal bases, and data processing methods.
Users may manage or disable cookies directly through their browsers, noting that certain functionalities may no longer function properly.
IV. WITH WHOM WE WILL SHARE THE DATA
CCAB PROJETOS does not sell personal data.
Data may be shared only when necessary with: hosting providers, e-mail services, information technology service providers, information security providers, technical support providers, as well as administrative or judicial authorities legally competent to protect interests in disputes or comply with orders.
All contracted third parties must comply with appropriate confidentiality and data protection requirements.
V. HOW WE KEEP DATA SECURE
CCAB Projetos adopts appropriate technical and administrative measures to protect personal data, including: use of encrypted connections (SSL/HTTPS), role-based access control, protection against unauthorized access, security monitoring, access credential management, limitation of access to information to authorized persons, and confidentiality commitments by employees and service providers.
We are committed to absolute confidentiality and advise users to keep their own systems protected. However, despite the efforts employed, we warn that no digital environment is completely immune to security incidents.
VI. RETENTION OF COLLECTED INFORMATION
Personal data will be retained only for the period necessary for: fulfillment of the purposes described in this Policy, compliance with legal or regulatory obligations, regular exercise of rights, fraud prevention, and preservation of records. After the applicable purposes have ended, the data may be deleted or anonymized, except where legally required to retain it.
VII. YOUR RIGHTS (DATA SUBJECT RIGHTS)
Under Article 18 of Law No. 13,709/2018 (LGPD), CCAB PROJETOS guarantees the data subject the right to request confirmation of the existence of processing; access to personal data; correction of incomplete, inaccurate, or outdated data; anonymization, blocking, or deletion of data; data portability; information about data sharing; deletion of data processed based on consent and withdrawal of such consent; or objection to processing in legally applicable cases.
Requests must be submitted through our privacy channel.
VIII. PRIVACY AND DATA PROTECTION CHANNEL
CCAB PROJETOS has chosen to maintain a centralized institutional channel for handling privacy-related requests, without the designation by name of a third-party DPO. The direct communication channel is the e-mail address: contato@ccab-projetos.com.br. This e-mail is exclusively intended to answer questions and exercise the rights provided for under the LGPD.
The channel may be used to clarify questions; exercise the rights provided for under the LGPD; report incidents involving personal data; request access, correction, updating, or deletion of data, when applicable; as well as address other matters related to personal data protection.
Data subject requests will be received, analyzed, and answered by the company, observing the deadlines and requirements provided for under applicable legislation.
When applicable, CCAB PROJETOS may appoint an internal person responsible or a specialized third party to assist in handling requests related to personal data protection.
IX. SECURITY INCIDENTS
In the event of a security incident that may result in relevant risk or harm to personal data subjects, CCAB PROJETOS will adopt the measures provided for under applicable legislation, including assessment of the incident and, when necessary, notification to the Brazilian Data Protection Authority (ANPD) and the affected data subjects.
X. GOVERNING LAW AND JURISDICTION
This Policy shall be governed by and construed in accordance with the laws of the Federative Republic of Brazil, particularly Law No. 13,709/2018 (LGPD) and the Brazilian Internet Civil Framework, with the court of the User’s domicile having jurisdiction to resolve any questions.
The court of the User’s domicile is hereby elected, where legally applicable, to resolve any disputes arising from this Policy.
Last updated: June 2026.