Privacy Policy

We at Lefosse Advogados (“Lefosse” or “we”) are committed to respecting and protecting the personal data of our clients, individuals and representatives of legal entities, partners, professionals, users of our website, and any other natural persons related to our activities (“Data Subject,” “Data Subject Holder,” or “you”), in accordance with applicable legislation and best practices related to personal data protection.

Accordingly, we have prepared this Privacy Policy (“Policy”) to explain, in a simple, transparent, and objective manner, how we process the personal data to which we have access in the course of our activities.

This document is also available in PDF format. Click here to access it.

1. Definitions

Controller

Means the natural person or legal entity, under public or private law, responsible for decisions regarding the processing of personal data. For the purposes of this Policy, Lefosse is the Controller of the personal data processed.

Personal Data

Means any and all information related to an identified or identifiable natural person, such as name, contact details, electronic identifiers, among others.

Lefosse

Means Lefosse Advogados.

Processor

Means the natural person or legal entity, under public or private law, that processes personal data on behalf of the Controller. Lefosse may engage certain Processors to process personal data, as indicated in this Policy.

Policy

Means this Privacy Policy, intended to ensure transparency to the Data Subject regarding how Lefosse processes Personal Data.

Data Subject

Means the natural person to whom the personal data subject to processing operations relates.

2. Which Personal Data We Process

We process the following types of personal data of Data Subjects, collected directly by us or, eventually, by third parties on our behalf:

(i) Data provided by the Data Subject or by Third Parties: In the course of our activities, we may process the following Personal Data: (a) identification, qualification, and contact data, including but not limited to: full name, position, company, professional and academic information, physical and electronic addresses, telephone number; (b) financial data for payment purposes; and (c) other information provided by Data Subjects and/or our clients that is necessary for the provision of legal services by the firm. Such Personal Data may be collected when: (i) we provide legal services to our clients, to you, and/or to your company; (ii) we seek information from public sources for the provision of our services; (iii) you voluntarily register on our website or on other platforms; (iv) you send us an email; (v) you engage in networking activities with our partners and lawyers; (vi) you voluntarily register to participate in an event organized and/or sponsored by Lefosse; (vii) you submit your résumé when applying for a position; and (viii) you otherwise interact with our professionals.

(ii) Data collected automatically: We may also automatically collect certain information through our website or other platforms made available by the firm, such as: IP address (including date and time), IP origin, clickstream information, or any search term entered on the website, among others.

For such collection, we may use certain standard technologies, such as cookies.

In the case of minors, we request that no Personal Data be submitted without the prior authorization of the respective parents or legal representatives. To the maximum extent permitted by applicable law and without limitation to any other provision of this Policy, we disclaim any liability regarding Personal Data submitted in violation of this Policy.

3. Purposes for Which Personal Data Is Processed

We process the following types of personal data of Data Subjects, collected directly by us or, eventually, by third parties on our behalf:

For such collection, we may use certain standard technologies, such as cookies.

4. Sharing of Personal Data

We may share the Personal Data we collect with service providers, subcontractors, or other essential suppliers, legal experts, specialists, auditors, accountants, and partner firms, acting as Controllers or Processors, as applicable, always in accordance with applicable Brazilian legislation and with the adoption of best information security practices to ensure the security and confidentiality of Personal Data.

Furthermore, if any police, administrative, or judicial authority, such as the Civil Police, Public Prosecutor’s Office, Federal Revenue Service, among others, requests access to Personal Data, and provided that such request is supported by applicable Brazilian legislation, we may share Personal Data in order to comply with such request.

In addition, we may provide your Personal Data to national or international legal publications so that they may contact you to evaluate and reference our services in such publications.

Finally, we may share Personal Data to protect our interests in any type of dispute, including judicial proceedings.

5. How Long We Retain Your Personal Data

The Personal Data collected for the purposes described in this Policy will be stored by Lefosse for the period necessary to fulfill the purposes described herein, unless the Data Subject objects to such processing, whenever possible, in accordance with applicable legislation. If you no longer wish to receive communications from Lefosse, or only communications on specific topics, you may request such deletion and/or modification at any time by sending an email to dpo@lefosse.com.

6. How We Keep Personal Data Secure

To protect your Personal Data, we adopt the best security and confidentiality standards, such as storing such data in a secure operational environment that is not accessible to the public, previously encrypted, or, in some cases, in physical files whose access is granted only to authorized employees and/or service providers.

Nevertheless, we cannot guarantee the total security of your Personal Data, since electronic means, by their very nature, are subject to security failures arising, for example, from unauthorized account access, hardware or software failures, among other factors.

7. Your Rights

In compliance with applicable regulations regarding the processing of Personal Data, we respect and guarantee your right to submit requests based on the rights provided for in the LGPD, namely:

(i) Confirmation of the existence of personal data processing by Lefosse;

(ii) Access to personal data processed by Lefosse;

(iii) Correction of incomplete, inaccurate, or outdated data in Lefosse’s database;

(iv) Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data by Lefosse;

(v) Portability of data processed by Lefosse to another service or product provider;

(vi) Deletion of personal data processed based on consent, except in the cases provided for by applicable legislation;

(vii) Information about the public and private entities with which Lefosse shares the Data Subject’s personal data;

(viii) Information about the possibility of not providing consent and the consequences of refusal; and

(ix) Withdrawal of your consent.

If you need to exercise any of the rights described above or believe that your Personal Data has been and/or is being used in a manner incompatible with this Policy, you may contact us by email at dpo@lefosse.com, indicating at least your full name, CPF number, and a detailed description of your request.

Upon receiving the Data Subject’s request, we will use our best efforts to comply with the request within the shortest possible timeframe. In this regard, we clarify that:

(i) requests will be analyzed on a case-by-case basis and may, in some situations, not be fully complied with due to limitations authorized or established by applicable legislation; and

(ii) even if the Data Subject requests the deletion of all Personal Data from Lefosse’s databases, we may retain certain Personal Data to comply with legal or regulatory obligations or to enable the performance of obligations undertaken contractually, as applicable.

8. International Transfer

We may transfer Personal Data to service providers and partner firms located abroad, always within the limits of the purposes set forth in this Policy. In any event, we adopt appropriate measures to ensure adequate protection of Personal Data transferred abroad, in compliance with the requirements established by applicable data protection legislation.

9. Third Parties

The Lefosse website may contain links to other websites on the internet. However, we are not responsible for your access to any third-party websites, and their respective privacy policies are not our responsibility.

10. Governing Law and Jurisdiction

This Policy shall be governed, interpreted, and enforced in accordance with the laws of the Federative Republic of Brazil, especially Law No. 13,709/2018 (Brazilian General Data Protection Law – LGPD).

11. Questions

If you have any questions, comments, or suggestions related to this Policy or the manner in which we process your Personal Data, you may contact Lefosse’s Data Protection Officer by email at dpo@lefosse.com.

Updates to this Policy

This Policy may be updated periodically by Lefosse. The updated version of this Policy will be duly made available on the Lefosse Portal and on the firm’s website.