1. Introduction

Virtú Ambiental is committed to protecting the privacy and personal data of its website visitors, clients, and partners. This Privacy Policy outlines how we collect, use, store, share, and protect your personal data in compliance with the Brazilian General Data Protection Law (LGPD – Lei Geral de Proteção de Dados, Law No. 13,709/2018). We believe in transparency and want you to understand how your information is handled when you interact with our services and website.

2. Who We Are

Virtú Ambiental is an environmental consulting company specializing in integral environmental solutions, combining technical expertise, innovation, and a commitment to sustainability. Our website address is: https://virtuambiental.com.

3. Data Collection

We collect various types of personal data to provide our services and improve user experience. The data collected depends on your interaction with us:

3.1. Through Website Forms

When you use our “Contact Us” (Fale Conosco) or “Work With Us” (Trabalhe Conosco) forms on our website, we collect the data you provide, such as your name, email, and message. This data is sent to us via email and is not stored in our website’s database.

3.2. Direct Contact

We may engage in direct contact with potential clients through email marketing and phone calls, but this is not initiated directly through website interactions.

3.3. Environmental Licensing Process

During the environmental licensing process for our clients, we necessarily collect various types of data. All such data is maintained under strict confidentiality agreements.

3.4. Restricted Client Area (Power BI)

Clients accessing our restricted area, powered by Power BI, are required to provide an email and password for login. Within this area, we store updates related to projects and contract numbers.

3.5. Comments

When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

3.6. Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

3.7. Cookies

Our website uses cookies to enhance user experience and functionality. For a detailed explanation, please refer to the “Cookies Policy” section below.

3.8. Embedded Content from Other Websites

Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

4. Legal Basis for Data Processing

The legal basis for collecting and processing your personal data is primarily your consent. By submitting a contact form or leaving a comment, you explicitly consent to the collection and processing of your data as described in this policy. For data related to service provision (e.g., environmental licensing, client area), the processing is based on the execution of a contract or pre-contractual procedures at your request, as well as our legitimate interest in providing and improving our services.

5. Purposes of Data Usage

The personal data collected by Virtú Ambiental is used for the following purposes:

1. To respond to inquiries: To address questions and requests submitted via our “Contact Us” form.
2. To evaluate job applications: To process applications submitted via our “Work With Us” form.
3. To provide and manage services: To deliver environmental consulting services, manage projects, and provide access to the restricted client area.
4. To improve website functionality: To enhance user experience, save preferences, and understand website usage patterns.
5. To prevent spam: To filter and detect unsolicited comments.
6. For administrative and contractual purposes: To manage client contracts and project updates.

6. Data Sharing

Virtú Ambiental does not share your personal data with third parties for marketing or commercial purposes. Data is shared only in the following limited circumstances:

• Essential for work execution: Only essential data required for the execution of our services (e.g., for environmental licensing processes where data must be submitted to regulatory bodies) may be shared, always under strict confidentiality and purpose limitation.
• Power BI: Data within the restricted client area is managed through Power BI, which is configured to comply with LGPD data processing terms.
• No other third-party sharing: We do not engage other suppliers or partners who access client data, nor do we transfer data to external consultants or environmental agencies beyond what is strictly necessary for project execution as per contractual obligations.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

• Contact Form Submissions: Maintained in email format and not stored in a database, ensuring no indefinite retention on the website.
• Comments: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
• Restricted Client Area Data: Project updates and contract numbers stored in the client area are retained for up to 1 year after the project completion.
• Project and Licensing Data: Data collected during the environmental licensing process is stored in a separate, secure environment for up to 1 year after project completion, under confidentiality agreements.
• Cookies: Retention periods vary as detailed in the “Cookies Policy” section below.

8. Cookies Policy

Our website uses cookies to enhance your experience. You can manage your cookie preferences through your browser settings.

• Comment Cookies: If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies last for one year.
• Login Cookies: If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me,” your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
• Post Editing Cookies: If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

9. Data Security

Virtú Ambiental is committed to protecting your personal data. We implement appropriate technical and organizational measures to ensure the security of your data against unauthorized access, alteration, disclosure, or destruction.

• Hosting Provider: Our website’s hosting provider is responsible for implementing backup and disaster recovery policies, ensuring the availability and integrity of our online services.
• Secure Deletion: Data can be securely deleted via the administrative interface of WordPress where applicable.
• Confidentiality Agreements: Data collected during the environmental licensing process is protected by contractual confidentiality agreements.

10. User Rights (Data Subject Rights)

Under the LGPD, you have the following rights regarding your personal data:

1. Right to Confirmation and Access: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data.
2. Right to Correction: You have the right to request the correction of incomplete, inaccurate, or outdated data.
3. Right to Anonymization, Blocking, or Deletion: You can request the anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data.
4. Right to Data Portability: You have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format.
5. Right to Deletion (Right to be Forgotten): You have the right to request the deletion of personal data processed based on your consent.
6. Right to Information about Sharing: You have the right to be informed about public and private entities with which we have shared your data.
7. Right to Information about Non-Consent: You have the right to be informed about the possibility of not providing consent and the consequences of such refusal.
8. Right to Revoke Consent: You have the right to withdraw your consent at any time.
9. Right to Lodge a Complaint: You have the right to lodge a complaint with the National Data Protection Authority (ANPD) if you believe your rights have been violated.

11. Exercising Your Rights

To exercise any of your rights listed above, you may contact us:

• By email through our “Contact Us” form on the website.
• Directly by sending an email to contato@virtuambiental.com.

We will respond to your request within the legally required timeframe.

12. Contact Information / Data Protection Contact

For any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us at:

Email: contato@virtuambiental.com

While Virtú Ambiental does not have a formally designated Data Protection Officer (DPO), this email address serves as our primary contact point for all data protection matters and will handle inquiries related to your LGPD rights.