Privacy Notice – GDPR & LGPD

Last updated: April 26, 2026

1. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent (Art. 7(I) – LGPD / Art. 6(1)(a) – GDPR): for analytics and advertising cookies, with your explicit authorization via the consent banner;
• Legitimate interests (Art. 7(IX) – LGPD / Art. 6(1)(f) – GDPR): for site security analysis and basic functionality;
• Legal obligation (Art. 7(II) – LGPD / Art. 6(1)(c) – GDPR): when required by law.

2. International Data Transfers

Some of our service providers (such as Google) may transfer and process data in countries outside Brazil or the European Union. These transfers are made on the basis of standard contractual clauses or other protection mechanisms recognized by competent authorities.

3. Your Rights – LGPD (Brazilian users)

Under Law No. 13,709/2018 (LGPD), you have the right to:

• Confirm whether we process your personal data;
• Access the data we hold about you;
• Correct incomplete, inaccurate, or outdated data;
• Request anonymization, blocking, or deletion of unnecessary data;
• Request data portability to another provider;
• Request deletion of data processed with your consent;
• Be informed about shared data use;
• Withdraw consent at any time.

4. Your Rights – GDPR (EU/EEA users)

Under Regulation (EU) 2016/679 (GDPR), you have the right to:

• Access (Art. 15): obtain a copy of the data we hold about you;
• Rectification (Art. 16): correct inaccurate or incomplete data;
• Erasure / “Right to be forgotten” (Art. 17): request deletion of your data;
• Restriction of processing (Art. 18): request a limitation on how we use your data;
• Data portability (Art. 20): receive your data in a structured format;
• Objection (Art. 21): object to processing, including for direct marketing purposes;
• Not be subject to automated decision-making (Art. 22).

5. How to Exercise Your Rights

To exercise any of the rights above, please contact us via the form at: woetter.com/contact.

We will respond to your request within 15 business days (LGPD) or 30 calendar days (GDPR).

6. Complaints

If you believe your rights have been violated:

• Brazil: you may file a complaint with the National Data Protection Authority (ANPD) at www.gov.br/anpd.
• European Union: you may contact the data protection authority in your member state.

7. Data Protection Officer (DPO)

For this small-scale site, the operator — Eduardo Wöetter — acts as the data controller. For contact, please use the form at: woetter.com/contact.