1 · Applicable legal framework
Rota do Sol operates in Brazil and is subject to Law 13.709/2018 (LGPD) and to the rules of the Brazilian Data Protection Authority (ANPD). When processing involves data subjects in the European Union or the United Kingdom, GDPR (EU 2016/679) and UK GDPR also apply, as relevant.
2 · Controller
Controller: Rota do Sol, international cultural project led by Neta Honorata Maíta, operating in Brazil. Institutional contact: rotadosolestacaobr@gmail.com · +55 61 98457-1037.
3 · Data Protection Officer
DPO duties are handled through the institutional channel, in line with art. 41 LGPD. Requests: rotadosolestacaobr@gmail.com, subject line: "LGPD, data subject request".
4 · Legal bases used
Legal bases are listed in art. 7 LGPD and selected according to the purpose:
- Consent, for email communications and non-essential cookies.
- Performance of contracts and pre-contractual steps, for donations, partnerships and investor relations.
- Compliance with legal obligations, for tax and accounting retention and responses to authorities.
- Legitimate interest, for security, fraud prevention and aggregated analytics.
5 · Data subject rights (art. 18)
You are entitled to:
- Confirmation that processing exists.
- Access to the data.
- Correction of incomplete, inaccurate or outdated data.
- Anonymisation, blocking or deletion of unnecessary, excessive or non-compliant data.
- Portability to another provider.
- Deletion of data processed on the basis of consent.
- Information about data sharing.
- Information about the possibility of not granting consent and its consequences.
- Withdrawal of consent.
- Review of decisions taken solely on automated processing.
6 · How to exercise your rights
Send an email to rotadosolestacaobr@gmail.com with (1) your full name, (2) confirmation of the right you wish to exercise and (3) any document that may help establish your identity. We will reply within 15 business days. Manifestly excessive or repetitive requests may be partially or fully refused with justification.
7 · Complaints to ANPD
You may file a complaint with the National Data Protection Authority (ANPD), based in Brasília · DF, through the official channels at www.gov.br/anpd.
8 · International transfers
Given the Brazil · UK operation, data may be transferred to countries offering an adequate level of protection or under safeguards set out in art. 33 LGPD (standard clauses, global corporate rules or specific consent).
9 · Security incidents
If an incident can cause relevant risk or harm, we will notify affected data subjects and ANPD within a reasonable period, as per art. 48 LGPD, with a description of the data, measures adopted and risks involved.