Privacy Policy

Who controls your data

This site is operated by VICTOR KAVALERSKI, registered in CNPJ No 24.576.362/0001-93, based in Rua Floresta, 30 — Centro, Baron of Cotegipe/RS, CEP 99740-000. In this document, OneRank designates that company, which is the controller personal data processed here, in accordance with Article 5, VI, of Law No 13.709/2018 (LGPD).

O responsible for processing personal data Yeah. Walter Paulo Kolassa, which you can contact directly by email dpo@onerank.com.br.

What data we collect and why

We only collect what we need to answer you or to keep the site running. We did not ask for sensitive data, we did not collect data from children and adolescents intentionally, and we did not buy contact lists.

• Contact and proposal forms — name, company, e-mail and WhatsApp. We use it to answer, understand your case and elaborate the proposal you asked for.
• Newsletter — e-mail and, when you inform, name and WhatsApp. The application uses double confirmation: you only start receiving after clicking the link we send, which prevents someone from registering your address without you knowing.
• Registration of your consent — when you accept or refuse cookies, we save the date and time, IP address, browser used, categories you authorized and version of this policy. This record is proof that his choice existed, and it is he who allows us to demonstrate it if questioned.
• Technical navigation data — IP address, browser type and pages accessed, registered by the server. They serve to keep the site on the air, investigate failures and detect abuse.

On what legal basis do we treat each data

LGPD requires every treatment to have a declared legal basis. Here are ours:

When the basis is consent, you can withdraw it at any time, and this does not invalidate what was treated before withdrawal.

Cookies and similar technologies

No measurement cookie is loaded before you accept it. While you do not decide, the site only works with what is indispensable. The details of each cookie, the time frame of each cookie and how to change your choice are in Cookies Policy.

With whom we share

We don't sell your data and we don't do behavioral advertising with them. We share only with whom it is necessary for the site to exist, always limited to the minimum and under contract:

• providers of hosting and infrastructure, who store the data and keep the site in the air;
• provider of content distribution network, which processes the IP address to deliver the pages safely and quickly;
• provider of e-mail sending, which delivers confirmation and response messages;
• provider of audience measurement, and only if you have consented;
• public authorities, when there is legal obligation or court order.

International data transfer

The infrastructure of this platform is outside Brazil. The server that hosts it, and with it the database where your data is stored, operates in the United States. This means that practically every treatment described in this policy involves an international transfer — not just optional cases. Below is who processes what, where, and under what hypothesis of LGPD.

• Hosting and database — the server that keeps the platform in the air is in the United States. This is where the data you send us is: the contacts and requests for proposals, the subscriptions to the newsletter and the registration of your cookie choices.
• Storage and delivery of files (Cloudflare) — the images and documents published here are stored in the Cloudflare infrastructure, in the region covering the east of the United States, and are delivered from the point of the network closest to you. To make this delivery and stop attacks, Cloudflare processes your IP address. The archives themselves are our content — texts, images, and institutional documents — not data you trusted us with.
• Email sending — the confirmation messages and responses to their contacts are delivered by email providers who also operate outside Brazil, and the content of the message passes through them along this path.
• Hearing measurement — processes data on servers outside Brazil and It only happens if you consent with measurement cookies. Refusing this category, none of your data leaves the country that way.

Under what circumstances. For audience measurement, the hypothesis is your specific and prominent consent — Article 33, VIII, LGPD. For infrastructure, which is not optional, we hire suppliers who assume by contract the data protection obligations required by Brazilian law, in the form of contractual data protection clauses: it is the hypothesis of Article 33, II. When the data itself sends us, asking for contact or proposal, the transfer is also required to meet this request — Article 33, IX.

You can request, through the owner's channel, confirmation of which suppliers process your data and in which country. And you can at any time request the deletion of the data you sent us.

How long do we keep it?

We keep each data only for the time that the purpose of collection requires. Once the deadline has expired, the data you identify is automatically anonymized: name, email, phone and the content of the message is replaced, and what remains is no longer connected to you. You can also request deletion before, at any time, via the owner's channel.

• Contacts and requests for proposals — up to 24 months after the last interaction with you. As long as the service is in progress, or as long as there is a request from you about your data still open, this deadline does not run.
• Newsletter — while you are enrolled. After deregistration, your data is anonymized in up to 30 days. An application that is never confirmed is dismissed within the same time limit.
• Requests made by the holder's channel — kept as evidence that their right has been served, which is our obligation.
• Registration of consent — preserved even after we deleted your other data, because it is precisely proof that your choice existed. Without that exception, erasing everything would also erase the evidence that protects you.
• Server technical logs — kept for a short period, for safety only.

Your rights, and how to exercise them

Article 18 of LGPD guarantees you the right to:

• confirm that we process your data and access them;
• fix incomplete, inaccurate or outdated data;
• ask anonymisation, blocking or elimination unnecessary or processed data in non-conformity;
• request portability to another supplier;
• delete the data processed on the basis of their consent;
• know with whom we share;
• be informed about the possibility of do not consent and the consequences of this;
• revoke consent at any time;
• oppose the treatment done on another legal basis.

To exercise any of them, use the holder's channel in onerank.com.br/lgpd/solicitation or write to dpo@onerank.com.br. We respond in up to 15 days. We may ask for information to confirm your identity — not to make it difficult, but not to deliver your data to someone else.

You may also submit a complaint to the National Data Protection Authority (ANPD).

Security

The site runs entirely by encrypted connection (HTTPS). Administrative access is restricted, password protected with modern hash algorithm and by limit of attempts. We keep backups and log administrative actions. No system is immune to incidents; if there is one that may pose a relevant risk to you, we will communicate you and the ANPD, as Article 48 states.

Changes to this policy

The version and date of this policy appear at the top of this page. When the change affects the way we process your data, we update the version and re-ask your consent for what depends on it — rather than assuming that the previous accept would be valid for a text you did not read.