Privacy policy
How we handle the data of anyone who gets in touch.
What data we collect
Only the data you give us voluntarily when you get in touch: name, email or phone, and a description of what you need. There is no tracking cookie, no behavioural advertising and no login on this site, and we do not buy contact lists. The audience measurement we use writes no cookie at all, and is described further down. The only cookie on the site belongs to the anti-bot check on the form, also described further down.
What happens to your message
The message sent through the form is delivered by email to our contact inbox. Your contact details are then recorded in our customer relationship management system (CRM), used to handle the enquiry and follow the conversation through to the end.
That CRM runs on infrastructure owned by Innotec, in Brazil. Your message and your contact record are not handed to a third-party platform, nor transferred out of the country. The anti-bot check described below is the only part of this site that involves an external service, and it does not receive the content of your message. The hosting and email providers behind this operation act as processors, handling the data only to deliver the service and under a duty of confidentiality. If you want to know exactly which suppliers are involved, just ask through the channels at the end of this page.
If the email delivery fails, the message is written to a file on our server so your contact is not lost — a record that is read, answered and deleted as soon as the enquiry has been handled.
Anti-bot check on the form
The contact form uses Google reCAPTCHA v2 — the “I am not a robot” box — to stop automated programs from firing bulk messages through the channel.
When you open the contact page, your browser communicates with Google servers, which receive your IP address, browser and device information and page interaction signals (mouse movement, taps, time until submission), and also write and read a cookie of their own, used only for that check. Innotec neither receives nor stores those signals: all that reaches us is the result — check passed or check refused. The content of your message is not sent to Google.
The legal basis is legitimate interest (Art. 7, IX of Brazilian Law 13.709/2018) in protecting the contact channel against automated abuse. Because Google processes this data outside Brazil, including in the United States, there is an international transfer of data here (Art. 33), covered by the data protection clauses of the service agreement. Google processing follows the company privacy policy and terms of service.
If you would rather not go through that check, contact us by WhatsApp, phone or email — the channels are on the contact page and at the end of this policy. The service you get is exactly the same.
Audience measurement
We count how many people visit the site, which pages they pass through and where they came from. That is what tells us whether what we write here is useful.
This measurement runs on infrastructure owned by Innotec, in Brazil — the same principle as the CRM. We do not use Google Analytics or any third-party service for it, and none of this counting leaves the country.
No cookie is written and you are given no identifier: the count is aggregated and cannot recognise the same person across different visits or reconstruct your path through the site. That is why there is nothing to consent to, and why this site has no cookie banner.
The legal basis is legitimate interest (Art. 7, IX of Brazilian Law 13.709/2018) in understanding how the site is used and improving it. Since nobody is identified and nothing is shared, the processing ends there.
On what legal basis
To answer your enquiry, prepare a proposal and carry the negotiation forward, we process the data on the basis of preliminary procedures related to a contract, at your own request (Art. 7, V of Brazilian Law 13.709/2018), and on the legitimate interest of serving those who approach us (Art. 7, IX). For that we do not ask for — and do not need — consent: without this data there is no way to reply.
To send content and news by email, the basis is your consent (Art. 7, I), collected separately on the form, never pre-ticked and always optional. Leaving it unticked changes nothing about the reply to your enquiry, and you can withdraw consent at any time — through the unsubscribe link present in every message, or through the channels at the end of this page. Withdrawal does not affect processing carried out before it.
How long we keep it
An enquiry that did not move on to a contract: up to 24 months without interaction, after which the record is discarded. Clients: for the duration of the contractual relationship and, once it ends, for the retention periods that Brazilian tax and civil law require. Marketing consent: for as long as it is not withdrawn.
Who we share it with
Nobody, for commercial purposes. We do not sell, rent or transfer data. Sharing is limited to the infrastructure providers named above, to Google — exclusively for the anti-bot check described above, and without the content of your message — and to any legal obligation or order from a competent authority.
Client data in our environments
When we host or administer environments, the data stored there belongs to the client — in that case Innotec acts as the processor and the client as the controller. Technical access happens only for operation, maintenance, support and recovery, as set out in the signed contract.
Your rights
The Brazilian General Data Protection Law (Law 13.709/2018, Art. 18) gives you the right, at any time and free of charge, to:
- confirm that we process your data and access that data;
- correct incomplete, inaccurate or outdated data;
- request anonymisation, blocking or deletion of unnecessary data, or data processed outside the law;
- request portability to another supplier;
- know who we share your data with;
- withdraw marketing consent and ask for the deletion of data processed on that basis;
- be informed that you may decline consent and what that entails.
Just ask through one of the channels below. We reply within 15 days.
Contact and data protection officer
Requests concerning personal data and questions about this policy can be sent to contato@innotec.com.br or by WhatsApp on +55 19 99255-1659. That is the channel to the data protection officer of Innotec Desenvolvimento de Sistemas (company ID / CNPJ 39.933.265/0001-88), the controller of the data described here.