# Cookie Policy (LGPD — Brazil)

**Last updated:** {{LAST_UPDATED_DATE}}

This Cookie Policy describes how **{{COMPANY_NAME}}** ("we") uses cookies and similar technologies on this website, in compliance with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais — LGPD, Lei nº 13.709/2018) and the Marco Civil da Internet (Lei nº 12.965/2014).

## Controller

- **Data controller:** {{COMPANY_NAME}}
- **Address:** {{COMPANY_ADDRESS}}
- **Privacy contact:** {{COMPANY_EMAIL}}
- **CNPJ:** {{COMPANY_REGISTRY}}
- **Encarregado de Dados (DPO) — mandatory under Art. 41 LGPD:** {{DPO_NAME}} — {{DPO_EMAIL}}

## Legal bases (Art. 7 LGPD)

For **strictly necessary** cookies: legitimate interest (Art. 7, IX) and contractual/technical obligation (Art. 7, V).

For **all other** categories: **explicit consent** of the data subject (Art. 7, I), collected via the cookie banner before any non-essential cookie is set.

You may withdraw consent at any time (Art. 8, § 5) via the "Cookie settings" link.

## Categories of personal data processed (Art. 5, I)

- **Online identifiers** — IP (hashed with monthly salt), device IDs, session IDs
- **Browsing data** — pages visited, dwell time, interactions
- **Approximate location** — country/region from IP (not precise GPS)
- **Preferences** — consent categories, language

We do **not** process sensitive personal data (Art. 5, II) via cookies without specific and highlighted consent (Art. 11 LGPD).

## Cookies used

{{COOKIE_CATEGORIES}}

## Third-party recipients

{{THIRD_PARTY_SERVICES}}

International transfers (Art. 33-36 LGPD) are subject to adequate-protection countries / standard contractual clauses / specific consent.

## Retention (Art. 15-16 LGPD)

{{RETENTION_PERIOD}} from collection.

## Data subject rights (Art. 18 LGPD)

I — confirmation, II — access, III — correction, IV — anonymization/blocking/deletion, V — portability, VI — deletion, VII — info on sharing, VIII — info on non-consent consequences, IX — withdraw consent.

Exercise these rights with the **DPO** at **{{DPO_EMAIL}}** or controller at **{{COMPANY_EMAIL}}**.

## Supervisory authority

ANPD — Autoridade Nacional de Proteção de Dados: {{ANPD_CONTACT}}, [{{OFFICIAL_RESOURCES_URL}}]({{OFFICIAL_RESOURCES_URL}})

## Contact

**{{COMPANY_EMAIL}}** or **{{DPO_EMAIL}}**.
