Privacy Policy — Autimit

1. Who is responsible for the data

Autimit is responsible for decisions about the processing of personal data described in this Policy.

For privacy questions or requests about your data, contact [email protected].

2. Which data we process

When you contact us, we receive your email address and the information you choose to share, such as name, company, phone number, the content of the message, and attachments.

Send only the information needed for the conversation. Avoid including passwords, financial data, sensitive information, or other people’s data unless it is necessary.

While the site is accessed, infrastructure services may process technical information, such as IP address, date and time of the request, page accessed, browser, and operating system. This data may be needed to deliver the content, identify failures, and protect the site against abusive access.

[CONFIRM WHICH TECHNICAL RECORDS ARE ACTUALLY COLLECTED AND ADJUST THIS PASSAGE.]

3. What we use the data for

We process personal data to:

• Reply to messages, questions, and requests.
• Talk about projects, proposals, and possible engagements.
• Keep the site working and secure.
• Handle requests related to privacy.
• Meet legal obligations and exercise rights when necessary.

The legal basis depends on the purpose. Conversations you start about an engagement may involve steps prior to a contract. Handling professional contacts and protecting the site may rely on legitimate interest, after weighing the need and the impact on your rights.

We may also process data to meet legal obligations or to exercise rights in proceedings. When an activity depends on consent, it will be requested specifically and may be withdrawn.

Simply accessing the site is not consent to any use of your data.

4. Cookies and similar technologies

Cookies are small files stored in the browser. Similar technologies may also be used to remember preferences, protect pages, or measure visits.

[INSERT THE SITE’S ACTUAL SETUP: state whether it uses cookies or analytics tools; identify vendors, purposes, duration, and means of control. If it does not use these technologies, say so after a technical check.]

When use of a technology depends on consent, it will be activated only after your choice, with the option to refuse and later withdraw. You can also manage cookies in your browser settings.

5. Who the data may be shared with

Running the site and contact by email may involve providers of hosting, content distribution, security, and email.

Those providers’ access should be limited to the information needed to perform their services, subject to their responsibilities and the applicable contract terms.

Data may also be provided to authorities when there is a legal obligation or a valid order, or when it is necessary to exercise rights.

[IDENTIFY THE VENDORS USED AND THEIR PURPOSES. CONFIRM WHETHER THERE IS PROCESSING ABROAD.]

If there is an international transfer of data, it must follow the mechanisms set out in the LGPD and in ANPD regulation. Information about recipients, destination countries, purposes, and applicable safeguards will be made available in this Policy or in a supplementary document.

6. How long we keep the data

We keep the data for as long as needed for the purposes described.

Contact messages are kept during the conversation and for as long as the professional relationship needs to be followed. Technical records follow the periods needed to operate and secure the site, subject to any legal obligations.

Some information may be kept for an additional period to meet legal obligations or to exercise rights. Once there is no longer a need to keep it, the data will be deleted or anonymized, as applicable.

[DEFINE AND STATE THE SPECIFIC PERIODS OR CRITERIA USED FOR MESSAGES AND TECHNICAL RECORDS.]

7. How we protect the data

We use technical and administrative measures proportionate to the data processed and the risks involved, seeking to prevent unauthorized access, loss, alteration, or disclosure.

Access to the information should be limited to the people and providers who need it to carry out their work.

If an incident occurs that requires notice, we will inform the affected data subjects and the ANPD as applicable law requires.

8. Your rights

Under the LGPD, you may request:

• Confirmation of processing and access to your data.
• Correction of incomplete, inaccurate, or outdated information.
• Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data.
• Portability, as applicable regulation allows.
• Deletion of data processed with consent, except where the law allows it to be kept.
• Information about the sharing of data.
• Information about the possibility of refusing consent and the consequences, and withdrawal of consent.
• Objection to processing carried out without consent, when the LGPD has not been followed.
• Review of decisions made solely by automated processing that affect your interests, where applicable.

Send your request to [email protected]. Exercising these rights is free of charge. We may ask for information strictly needed to confirm your identity and to avoid handing data to someone else.

We will respond within the time limits and on the conditions the law sets. If we cannot meet a request, we will explain why.

You may also file a petition with the ANPD or contact the competent consumer-protection agencies.

9. Links to other sites

Our site may link to external platforms, including social networks. When you open them, the processing of data by those platforms is governed by their own privacy policies.

10. Updates to this Policy

This Policy may be updated to reflect changes to the site, to our practices, or to the law.

The current version will be available on this page, together with the date of the update. Material changes will be communicated in an appropriate way. When a new purpose requires consent, it will be requested before the corresponding processing.

Privacy contact

[email protected]