Política de Privacidade - Proteção de Dados

This document is being updated. Some data is still being finalized. For urgent questions regarding your personal data, please contact us through the channels listed in the portal footer.

Introduction

PFM Medical ("PFM Medical", "we" or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy describes how we collect, use, store, share, and protect your data when you access this portal or interact with us through forms, email, and other channels.

By continuing to use this portal, you acknowledge that you have read and understood this Policy. If you disagree with any point, we recommend that you do not use our online services.

1. Data controller

Company name: PFM Medical

CNPJ: [To be defined]

Legal representative: [To be defined] ([To be defined])

Address: [To be defined]

Contact email: [To be defined]

2. Data Protection Officer (DPO)

In accordance with Article 41 of the LGPD (Brazilian General Data Protection Law), the Data Protection Officer is:

Name: [To be defined]

Email: [To be defined]

You can contact the Data Protection Officer to clarify any doubts, exercise your rights, or file complaints regarding the processing of your data.

3. What data do we collect?

Data that you provide

Contact and registration forms: name, email, phone number, message, and other fields filled in voluntarily.
Newsletter: name and email, with explicit consent.
Registration and applications: relevant information for the form (e.g., organization, position, area of interest).

Data collected automatically

IP address and device identifiers, when cookie consent is granted.
Anonymized browsing data (pages visited, session time) via Google Analytics 4 with anonymized IP, only after consent.
Cookies are essential for the basic functioning of the portal (session, language preference).

4. Purposes of treatment

Respond to inquiries, questions, and requests submitted through the forms.
Send requested communications (newsletter, updates), with the option to unsubscribe at any time.
To fulfill legal, regulatory, and contractual obligations.
Improve the portal, measure content performance, and optimize the user experience (only with consent).
Preventing fraud and ensuring information security.

5. Legal basis (LGPD Art. 7º)

Consent (Art. 7, I): for newsletters, marketing communications and non-essential cookies.
Contract execution or preliminary procedures (Art. 7, V): to respond to registrations, applications, and partnerships.
Compliance with legal obligation (Art. 7, II): preservation of records required by law.
Legitimate interest (Art. 7, IX): portal security, fraud prevention, and aggregated performance analysis.

6. Who we share your data with

We do not sell, rent, or trade your personal data. We may share it with:

Operators and service providers: transactional email providers, hosting, analytics, and support, all bound by data processing agreements in accordance with the LGPD (Brazilian General Data Protection Law).
Public authorities: when required by law, court order, or valid administrative request.
Legal successors: in the event of a merger, acquisition or corporate reorganization, with prior notification to the shareholders.

7. International Transfer

Some operators (e.g., email and analytics providers) may store data on servers outside of Brazil. These partners adhere to standard clauses and mechanisms recognized by the ANPD (Brazilian National Data Protection Authority), ensuring an adequate level of protection.

8. Retention and disposal

Contact information: retained for the duration of the relationship and for up to 5 years after the last contact, unless there is a legal obligation to retain it for a longer period.
Newsletter: Retained while subscription is active; deleted within 30 days of cancellation.
Access logs: kept for 6 months, in accordance with the Brazilian Internet Civil Framework.
Backups: overwritten on the standard 90-day cycle.

9. Rights of the data subject (LGPD Art. 18)

You can request this at any time, free of charge:

Confirmation that your data is being processed.
Access to the personal data we hold about you.
Correction of incomplete, inaccurate, or outdated data.
Anonymization, blocking, or deletion of unnecessary data or data processed in violation of the LGPD (Brazilian General Data Protection Law).
Data portability to another provider, upon express request.
Deletion of data processed based on your consent.
Information about public and private entities with which we share data.
Revocation of consent , at any time, without prejudice to processing based on other legal grounds.
Objection to treatment carried out on the basis of legitimate interest.

To exercise any right, please send an email to [To be defined]. We will respond within 15 business days. If the response is not satisfactory, you may file a complaint with the National Data Protection Authority (ANPD) at www.gov.br/anpd .

10. Security

We have adopted reasonable technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These include: HTTPS/TLS, role-based access control, encryption at rest for sensitive data, regular backups, and security monitoring.

Despite our efforts, no system is absolutely secure. In the event of an incident that could pose a significant risk or cause significant harm, we will notify the data subjects and the ANPD (Brazilian National Data Protection Authority) within the legal timeframes.

11. Cookies and similar technologies

We use essential cookies for the portal's operation and analytical/marketing cookies only after explicit consent, as shown in the banner displayed on your first visit. You can review your choice at any time via the "Cookie Preferences" link in the footer.

12. Children and adolescents

This portal is not intended for users under 18 years of age. We do not intentionally collect data from minors. If you identify a minor's registration, please contact the DPO for immediate removal.

13. Changes to this Policy

This Policy may be updated periodically. Significant changes will be communicated through the portal or by email, when applicable. The "Last updated" date below indicates the current version. Continued use of the portal after the change implies agreement with the new version.

14. Jurisdiction and applicable law

This Policy is governed by Brazilian law, in particular Law No. 13.709/2018 (LGPD), the Consumer Protection Code (Law No. 8.078/1990) and the Brazilian Civil Rights Framework for the Internet (Law No. 12.965/2014). Any disputes will be settled in the court of [To be defined]/[To be defined], Brazil.

15. Contact

Data Protection Officer (DPO): [To be defined] — [To be defined]

Institutional email: [To be defined]