1. Who we are
Infomek Soluções em Tecnologia, a private legal entity registered under CNPJ [CNPJ], headquartered at Av. Mal. Floriano Peixoto, 5303, Suite 06, Hauer, Curitiba/PR, Brazil, ZIP 81610-000, is the data controller of the personal data processed through this website and in the course of its IT services.
This Privacy Policy describes how Infomek collects, uses, stores, shares and protects the personal data of website visitors, clients, suppliers and other data subjects, in compliance with the Brazilian General Data Protection Law (LGPD — Law No. 13.709/2018).
2. Data we collect
Infomek may collect the following categories of personal data:
2.1 Voluntarily provided data
- Identification: full name, job title, company
- Contact: corporate email, phone number, WhatsApp
- Communications: content of messages sent via contact form or email
2.2 Automatically collected data
- Browsing: IP address, browser type and version, operating system, pages visited, time spent, referral source
- Cookies and similar technologies: session identifiers, language preferences, analytics data (Google Analytics 4)
2.3 Client and supplier data
- Identification and contact: name, tax ID (CPF/CNPJ), email, phone, address
- Financial: bank details for payments (processed by certified partners)
- Contractual: data required to perform contracted services
3. How we collect data
- Contact form — when you fill in and submit the form on this website
- WhatsApp — when you initiate contact via the website button
- Email — when you send us a message directly
- Cookies and analytics — automatically during website browsing, with your consent
- Contracts — when you or your company sign a service agreement
- Public sources — when required for contractual performance (e.g. tax authority for CNPJ validation)
4. How we use your data
| Purpose | Data used | Legal basis |
|---|---|---|
| Responding to contact requests and proposals | Name, email, phone, message | Legitimate interest / Consent |
| Performing service contracts | Identification and contact data | Contract performance |
| Invoicing and tax obligations | Name/Company, tax ID, address | Legal obligation |
| Sending commercial proposals | Name, email, company | Legitimate interest |
| Website traffic analysis and improvement | IP, cookies, browsing data | Consent |
| Fraud prevention and security | IP, access logs | Legitimate interest |
| Compliance with court orders | As determined | Legal obligation |
5. Legal basis for processing
All personal data processing carried out by Infomek has a legal basis under the LGPD:
- Consent (Art. 7, I): analytics cookies, informational materials. Consent may be withdrawn at any time.
- Contract performance (Art. 7, V): data required to provide contracted services.
- Legal obligation (Art. 7, II): tax, labour and regulatory data required by law.
- Legitimate interest (Art. 7, IX): responding to commercial contacts, fraud prevention, system security.
6. Data sharing
Infomek does not sell personal data. Sharing only occurs in the situations below:
6.1 Service partners and processors
| Partner | Purpose | Country |
|---|---|---|
| Google LLC (Analytics, Tag Manager, reCAPTCHA) | Analytics, conversion tracking, bot protection | USA |
| Microsoft (Office 365 / Exchange) | Corporate email service | USA / Global |
| Meklabs | Website development and maintenance | Brazil |
6.2 Public authorities
When required by law, court order or competent authority (including the ANPD), data may be shared to the extent necessary.
6.3 International transfers
Some partners (Google, Microsoft) process data outside Brazil. These transfers are made with appropriate safeguards, including standard contractual clauses recognised by the ANPD.
7. Data retention
| Category | Retention period | Legal basis |
|---|---|---|
| Contact data (leads) | 2 years after last contact or refusal | Legitimate interest |
| Contractual data | 5 years after contract termination | Civil Code (Art. 206) |
| Tax and accounting data | 5 to 10 years | Tax legislation |
| Website access logs | 6 months | Internet Civil Framework (Art. 15) |
| Analytics cookies | Up to 2 years or consent withdrawal | Consent |
8. Security measures
- Encrypted transmission: the entire website operates exclusively via HTTPS (TLS 1.2+)
- Access control: access restricted to authorised staff with multi-factor authentication (MFA)
- Monitoring: anomaly detection systems and access logs
- Backup: regular backups with controlled retention
- Training: team trained in information security best practices and LGPD
In the event of a significant security incident, Infomek will notify the ANPD and affected data subjects within the timeframe set by law.
9. Your rights as a data subject
Under the LGPD (Art. 18), you have the following rights:
Confirm whether we process your data and obtain a copy.
Request correction of incomplete, inaccurate or outdated data.
Request deletion of data processed based on consent.
Object to processing in case of LGPD non-compliance.
Receive your data in a structured format for transfer.
Obtain information about entities with whom we share your data.
Withdraw consent given at any time.
Request review of decisions made solely by automated means.
Send your request to [email protected]. We will respond within 15 days.
11. Minors
Infomek's services are intended exclusively for legal entities and professionals. We do not intentionally collect personal data from individuals under 18 years of age.
12. Changes to this Policy
This Policy may be updated periodically. The most recent version will always be available on this page. Material changes will be communicated with at least 15 days' notice.
- v1.0 — June 2025 — Initial version
13. Contact and Data Protection Officer (DPO)
Infomek Soluções em Tecnologia
📧 [email protected]
📞 +55 (41) 3278-2975
🏢 Av. Mal. Floriano Peixoto, 5303, Suite 06
Hauer · Curitiba/PR · Brazil · ZIP 81610-000
If your request is not satisfactorily resolved:
🌐 www.gov.br/anpd