Privacy

Your privacy and the protection of your personal data are in our DNA.

For us it is of the utmost importance to be transparent about the information that have been entrusted to us: to make sure that you have clarity of the data we collect, for what it is used, what are our retention and deletion policies and your rights as a data subject. In order to make it easier to you, we summarized the most relevant information above.

You can also check the full version of our Privacy Policy clicking here or at the link that it is on the footer of every page.

We collect and process personal data of our Clients, Potential Clients and Potential Employees.

 

Clients are those that currently have active cases or projects under our professional care such as ongoing lawsuits, projects related to implementing privacy programs or anticorruption compliance programs, consultations, contract reviews or any other legal services provided by the Firm.

 

Potential Clients are those that, on their own volition, get in touch with the Firm, its partners or associates, by any means or form, in order to obtain information or hire the services provided by the Firm

 

Potential Employees are all individuals who, on their own volition, get in touch with the Firm, its partners or associates, by any means or form, in order to make their CVs available or provide their professional information to participate in any recruitment process conducted by the Firm to hire employees.

 

If you are a not a Client, Potential Client or Potential Employee, we will refer to you as a User.

Clients

What data we collect and for what purposes

We collect personal data such as your name, profession, marital status, affiliation, address, telephone, e-mail address, national ID, social security number, language, the company your work for or the companies which you are a shareholder/partner, as well as other data necessary for the provision of the legal services we were hired for.

This data is collected for the specific purposes of allowing us to get in touch with the Clients and to defend their interests in lawsuits, extrajudicial or administrative procedures, consultancy projects, projects related to implementing compliance programs with national and international laws.

We also might use this personal data to the purpose of making available relevant content such as memoranda, bulletins, institutional announcements, invitations to events promoted by the Firm, feedback surveys on services provided and papers or articles written by partners or associates of the Firm.

Your personal data is stored and kept in a controlled and safe environment and are not accessible to unauthorized third parties.

 

What is the legal basis for this processing?

The processing of personal data of Clients is carried out based on its need for the execution of the legal services agreement entered into by and between the Client and the Firm, at the request of the data subject.

Your personal data might also be processed based on the compliance with legal and regulatory obligations by the Firm when there is a need to share this data with federal, state or municipal public administration bodies, pursuant to laws or regulations that determine the obligation to share or make such data available.

Your personal data might also be processed, as applicable, in the event of the need to file any judicial or extrajudicial claims by the Firm to the detriment of the Client, in order to collect any amounts due and not paid or to comply with the terms and conditions agreed between the parties in contracts or other legal instruments.

 

When we collect your data?

Every time the Client contacts us and provides us with this kind of information, either through the telephone, personally or through any other physical or digital means.

 

How long do we keep your data?

For at least 6 (six) years, due to the legal, regulatory and fiscal requirements the Firm has to comply with unless a longer withholding is required by national laws or regulations.

This period is counted from the conclusion of the contracted legal services, which in the case of legal proceedings is deemed as the date of its final completion when a binding decision has been rendered, res judicata acknowledged and all amounts due paid or received, and, in cases of advisory projects, this is deemed as the date of its completion, when the Client expressly indicates that it does not need any further services related to such project.

Potential Clients

What data we collect and for what purposes

We collect personal data such as your name, address, telephone, e-mail address, language and the company your work for or the companies which you are a shareholder/partner.

This data is collected for the specific purposes of allowing us to get in touch with Former Clients. Your personal data is stored and kept in a controlled and safe environment and are not accessible to unauthorized third parties.

 

What is the legal basis for this processing?

The processing of personal data of Potential Clients is carried out based on its necessity for the accomplishment of preliminary procedures related to future contracts, always at the request of the data subject.

This personal data will also be processed based on the need of the Firm to comply with legal and regulatory obligations when it is mandatory to keep records of persons who have contacted the Firm, by virtue of laws or regulations that set forth such obligation.

 

When we collect your data?

Every time a Potential Client contacts us and provides us with this kind of information, either through the telephone, personally or through any other physical or digital means, in order to request services or a proposal.

 

How long do we keep your data?

For no longer than 6 (six) months, counted as of the date of the last contact of the Potential Client with the Firm, unless a longer retention period is required by Brazilian national laws or regulations.

In the event the Potential Client becomes a Client, the processing of his personal data will occur as set forth in the Client specific clauses above.

Potential Employees

What data we collect and for what purposes

We collect personal data such as your name, profession, marital status, affiliation, address, telephone, email, language, academic history, professional history, professional references, companies for which you work or for which you are a member, among others necessary data to evaluate if your profile fits the vacancies that we have open in the Firm.

This data is collected for the specific purposes of ensuring your participation in any hiring processes for open positions in the Firm, allowing us to identify the candidates that best fit the position, conduct interviews, group dynamics and other stages of the selection process.

Your personal data is stored and maintained in a controlled and secure environment and is not accessible to unauthorized third parties.

 

What is the legal basis for this processing?

The processing of personal data of Potential Employees is carried out based on its necessity for the accomplishment of preliminary procedures related to future employment contracts, always at the request of the data subject.

This personal data will also be processed based on the need of the Firm to comply with legal and regulatory obligations when it is mandatory to keep records of persons who have contacted the Firm, by virtue of laws or regulations that set forth such obligation.

 

When we collect your data?

Every time a Potential Employee contacts us and provides us with this kind of information, either through the telephone, personally or through any other physical or digital means, in order to request services or a proposal.

 

How long do we keep your data?

For no longer than 2 (two) months, counted as of the date the Potential Employee is informed by the Firm that he was not selected to participate in the hiring process or that he was not approved in the hiring process stages, unless a longer retention period is required by Brazilian national laws or regulations.

With Whom We Share Your Data

Except if the sharing or making the data available to any federal, state or municipal public bodies is mandatory by rules of law or regulations, we do not share your data with any third parties.

Your data have been confided to us so we can provide you with certain legal services. Unless you expressly request us, or if there is any legal obligation stating otherwise, it will never be shared with third parties.

Who is the Controller?

The controller of your data is Palhares – Sociedade Individual de Advocacia, a Brazilian law firm, enrolled with the Brazilian Bar Association – Section of the State of São Paulo under nº 25.250 and enrolled with the Corporate Taxpayers’ National Registry under nº 30.228.455/0001-20, with headquarters in the City of São Paulo, State of São Paulo, at Rua Professor Atílio Innocenti, 165, 5th floor, room 129, Vila Nova Conceição, postal code 04538-000.

Who is the Data Protection Officer?

In case you need to reach out to us regarding the processing of your personal data, feel free to contact our Data Protection Officer:

Felipe Palhares

dpo@palharesadvogados.com

Rua Professor Atílio Innocenti, 165, 5th floor, room 129, Vila Nova Conceição, São Paulo/SP – Brazil

What rights do I have as a data subject?

Whether you are a Client, Potential Client, Potential Employee or a User, your rights are all the same and are always available to you. Afterall, we are a law firm – there is nothing we do better than upholding your rights.

You have, and always will have, the following rights:

  • Right to confirm if your data is being processed: if you don’t know if we are processing your personal data just make a request to find it out;
  • Right of access: you have the right to receive a copy of the personal data we hold on you. After requesting access you will receive a complete statement indicating the origin of the data, the criteria used and the purpose of the processing within 15 days as of the date we receive your request;
  • Right of rectification: if any of your personal data we process is incomplete, inaccurate or out of date, you have the right the request its rectification;
  • Right of restriction, erasure or anonymization: if any of your personal data is being processed in disagreement with the Brazilian Law nº 13,709/2018, you can request the restriction of the processing, erasure of the data or its anonymization. In case the Firm agrees with the basis presented by you, your personal data will be immediately erased or anonymized or its processing will be restricted;
  • Right of portability: in case you decide to change the law firm that assists you, you have the right to request the portability of your personal data, which will be forwarded by the Firm to your new legal services provider, respected the commercial and industrial secret, and according to the form stipulated by the Brazilian Data Protection Authority;
  • Right of erasure of data processed without consent: generally, the Firm does not process personal data based on the consent of the data subject, but only on another legal basis as explained above. However, if any of your personal data is eventually processed based on your consent, and you decide to later revoke your consent, you can request the erasure of such data, except in the situations where the controller is permitted to retain your personal data such as when it is need to comply with a legal or regulatory obligation or when the use is exclusive of the controller, prohibited its access by third parties and provided that the data is anonymized;
  • Right to know with whom your data was shared: you have the right to request information about which public or private entities your personal data was shared with;
  • Right to revoke consent: If any of your personal data is processed having consent as the legal basis for processing, you can at any time revoke your consent by simply informing the controller of its revocation in writing and this statement might be sent by letter or email, to the attention of the Data Protection Officer;
  • Right to lodge a complaint: at any time, you have the right to lodge a complaint in relation to the processing of your personal data against the Firm before the Brazilian Data Protection Authority, the consumer protection bodies or before the Courts.

Learn more about our Privacy Policy

Privacy Policy