Introduction
VENTURUS CENTRO DE INOVACAO TECNOLOGICA ("Venturus", "we", "our", or "us") is a technology innovation center committed to transparent, responsible data practices. This Privacy Policy explains how we collect, process, store, share, and protect personal information when you visit our website, use our services, or interact with us through any digital or physical channel.
This Policy is written in compliance with Brazil's Lei Geral de Proteção de Dados Pessoais — Lei nº 13.709/2018 (LGPD) — and, where applicable, the European Union's General Data Protection Regulation (GDPR). By accessing this website or engaging with our services, you acknowledge that you have read and understood the practices described here.
We do not sell, rent, or trade your personal information to any third party for marketing purposes. Our relationship with your data is built on the principle that privacy is a fundamental right — not a commodity.
If you have questions about any aspect of this Policy, please reach out to us using the contact details provided in the final section of this document. We are happy to clarify anything before you decide whether to share information with us.
Information We Collect
We collect information in two ways: (a) directly from you when you actively provide it, and (b) automatically as you interact with our website. The types and volume of data collected are strictly limited to what is necessary for the stated purpose.
Information You Provide Directly
When you fill out a contact form, request a proposal, subscribe to our newsletter, or reach out to us by email, we collect the personal data you submit. This typically includes:
- Full name and professional title
- Business or personal email address
- Phone number (when voluntarily provided)
- Company name and industry sector
- The content of your message, inquiry, or project brief
- Any attachments you choose to share with us
Providing this information is entirely voluntary. However, failing to supply certain details — such as a valid email address — may mean we are unable to respond to your inquiry or deliver a requested service.
Information Collected Automatically
When you visit our website, our servers and third-party analytics tools collect technical data about your session. This data is aggregated and, in most cases, does not directly identify you as an individual. It includes:
- IP address and approximate geographic location (country/city level)
- Browser type, version, and language preferences
- Operating system and device type
- Pages visited, time spent on each page, and navigation path through the site
- Referring URL — the address of the page or search result that brought you here
- Date and time of each page request
- Crash reports or error events (where applicable)
Information From Third-Party Sources
If you engage with us through a professional network (such as LinkedIn), attend an event where we participate as exhibitors, or are referred to us by a partner organization, we may receive limited profile or contact information from that source. In such cases, we will always inform you of the origin of your data at the earliest practical opportunity and obtain your consent before entering you into any ongoing marketing communication.
How We Use Your Information
We process personal data only for lawful, specific, and explicit purposes. We will never repurpose your data in a manner that is incompatible with the reason it was originally collected. Our processing activities and their legal bases under the LGPD and GDPR are as follows:
To Respond to Inquiries and Deliver Services
When you contact us, we use the information you provide to understand your request, assign it to the appropriate member of our team, and respond promptly and accurately. Legal basis: Performance of a contract or pre-contractual measures taken at your request; and our legitimate interest in providing excellent client service.
To Improve Our Website and Services
Aggregated, anonymized analytics data helps us identify which content is most useful, where visitors encounter friction, and how to optimize the site experience over time. Legal basis: Legitimate interest — we have a genuine interest in making our digital presence as clear and effective as possible, and this interest does not override your rights.
To Send Relevant Communications
If you have expressly opted in to receive our newsletter, event invitations, or technology insights, we will send you periodic email communications. You may withdraw your consent and unsubscribe at any time, at zero cost, using the unsubscribe link included in every message or by contacting us directly. Legal basis: Consent.
To Comply With Legal Obligations
We may process and retain certain data where required by applicable law, court order, or governmental authority — for example, for tax, accounting, or anti-fraud compliance. Legal basis: Compliance with a legal obligation.
To Protect Rights and Prevent Fraud
We may use information to detect, investigate, and prevent fraudulent transactions, unauthorized access to our systems, and other illegal or harmful activities. Legal basis: Legitimate interest and, where applicable, legal obligation.
Sharing With Third Parties
We do not sell or rent your personal information. We share data with third parties only in the limited circumstances described below, and we take contractual and technical steps to ensure those parties protect your information with the same rigor we apply internally.
Service Providers and Technology Partners
We engage carefully vetted service providers to support our operations. These include cloud hosting providers, email delivery platforms, CRM systems, and website analytics tools. These companies act as data processors on our behalf; they may only process your data according to our documented instructions and are prohibited from using it for their own independent purposes. All processors with whom we work have signed a data processing agreement (DPA) consistent with LGPD and GDPR requirements.
Google LLC
As a user of Google Analytics and Google Ads, we share behavioral and technical data with Google LLC. Google may process this data on servers located outside Brazil, including within the United States. This transfer is covered by Google's standard contractual clauses and its participation in applicable cross-border transfer frameworks. For more information, see Google's Privacy Policy at policies.google.com/privacy.
Legal Requirements and Authorities
We may disclose personal data to law enforcement agencies, regulators, courts, or other public authorities where required by law or where such disclosure is necessary to protect our legal rights, prevent fraud, or respond to a valid legal process. In such cases, we will notify you unless prohibited by law from doing so.
Corporate Transactions
In the event of a merger, acquisition, restructuring, or sale of all or part of our assets, personal data held by us may be transferred to the acquiring entity. We will ensure that any such transfer is subject to binding confidentiality and data protection obligations, and we will notify affected individuals before their data is transferred to a new controller under a materially different privacy policy.
What We Will Never Do
We will never share, sell, or otherwise disclose your personal data to data brokers, advertising networks (other than as described in the cookies section above with your consent), or any third party for their own direct marketing purposes without your explicit, freely given consent.
Data Retention
We retain personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. Our retention guidelines are as follows:
- Contact form submissions and email inquiries: Retained for up to 3 years from the date of last contact, unless a longer retention period is required to manage an ongoing contractual relationship or legal matter.
- Newsletter subscriber data: Retained for the duration of the subscription. Upon unsubscription, contact details are suppressed from mailing lists within 10 business days. A suppression record (email address only) may be kept indefinitely to prevent accidental re-addition.
- Analytics and website log data: Automatically aggregated and anonymized within 14 months of collection. Raw server logs are retained for up to 12 months for security and fraud-prevention purposes.
- Contractual and billing records: Retained for a minimum of 5 years following contract termination, in accordance with Brazilian fiscal and corporate law requirements.
- Consent records: Retained for the full period of the consent's validity plus 5 years, to enable us to demonstrate compliance.
When personal data is no longer required, we securely delete or irreversibly anonymize it so that it can no longer be attributed to any individual. You may request early deletion of your data subject to the conditions described in the "Your Rights" section below.
Data Security
Protecting your data is a core operational responsibility at Venturus. As a technology company, we understand the threat landscape and invest accordingly in robust, layered security controls. Our measures include:
- TLS/HTTPS encryption for all data transmitted between your browser and our servers
- Encryption at rest for all databases storing personal information
- Access controls based on the principle of least privilege — only personnel who genuinely need access to personal data for their role are authorized to view it
- Multi-factor authentication (MFA) required for all internal systems that process personal data
- Regular vulnerability assessments and security testing of our infrastructure
- Staff training on data protection, phishing awareness, and secure handling of personal information
- An incident response plan that includes procedures for notifying the relevant data protection authority and affected individuals within the timeframes prescribed by law in the event of a confirmed data breach
While we work hard to protect your personal information, no method of electronic transmission or storage is completely secure. We encourage you to use strong, unique passwords for any account credentials and to contact us immediately if you suspect any unauthorized access to your information.
In the unlikely event of a security incident that affects your personal data, we will notify you and the appropriate authorities within the timeframes required by the LGPD (72 hours for the ANPD, where the breach poses a risk to data subjects) and the GDPR (72 hours for supervisory authorities, without undue delay for individuals where risk is high).
Your Rights
Depending on your jurisdiction, you hold a number of rights in relation to the personal data we process about you. Under Brazil's LGPD (Article 18) and the EU's GDPR (Articles 15–22), these rights include:
Right of Access
You may request confirmation of whether we process personal data about you, and if so, obtain a copy of that data and information about how it is used.
Right of Correction
If any personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct or update it promptly.
Right of Deletion (Right to be Forgotten)
You may request the erasure of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to Object
You may object to the processing of your personal data where we rely on legitimate interests as our legal basis, or where we are using it for direct marketing. We will cease processing unless we can demonstrate compelling legitimate grounds.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format to transfer to another controller.
Right to Restrict Processing
In certain circumstances — such as where you contest data accuracy or have objected to processing — you may request that we limit how we use your data while the matter is resolved.
Right to Withdraw Consent
Where we rely on consent as the legal basis, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
Right to Lodge a Complaint
If you believe we have not handled your personal data properly, you have the right to file a complaint with Brazil's Autoridade Nacional de Proteção de Dados (ANPD) or, for EU residents, your local data protection supervisory authority.
How to Exercise Your Rights
To exercise any of the rights described above, please send a written request to contato@venturus.site with the subject line "Data Rights Request." Please include your full name, the email address associated with your interaction with us, and a clear description of the right you wish to exercise.
We will acknowledge receipt of your request within 5 business days and respond substantively within 15 business days (extendable to 30 days in complex cases, with prior notice to you). Requests are processed free of charge for a reasonable volume; where requests are manifestly unfounded or excessive, we may charge a small administrative fee or decline, with written justification.
We may need to verify your identity before processing a request, to prevent unauthorized access to another person's data. We will ask only for the minimum information necessary to confirm your identity.
Children's Privacy
Our website and services are directed exclusively at businesses and professionals. We do not knowingly collect, solicit, or process personal data from individuals under the age of 18. If you are a parent or guardian and believe that your child has provided us with personal information without your knowledge, please contact us immediately at contato@venturus.site and we will take prompt steps to delete that data from our systems.
In accordance with Article 14 of the LGPD, any processing of data belonging to children requires specific parental or legal guardian consent. Should any of our future services be designed to serve minors in a professional or educational context, we will implement the appropriate additional protections and consent mechanisms before launch.
Changes to This Policy
Technology, regulation, and our business evolve. We may update this Privacy Policy from time to time to reflect changes in our practices, our service offerings, or applicable legal requirements. When we make material changes, we will:
- Update the "Last Updated" date prominently at the top of this page
- Post a notice on our homepage or send a notification to registered subscribers at least 15 days before the changes take effect, giving you adequate time to review them
- Where the changes affect the legal basis on which we process your data, request fresh consent where required by law
Minor changes — such as grammatical corrections, updated contact details, or clarifications that do not alter our actual data practices — may be made without advance notice beyond the updated date. We encourage you to review this Policy periodically so that you remain informed about how we are protecting your information.
Your continued use of our website and services after the effective date of any changes constitutes your acknowledgment of the updated Policy. If you disagree with a material change, you have the right to request deletion of your data and cease using our services; we will honor such requests in accordance with the timelines set out in the "Your Rights" section above.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way Venturus handles your personal data, please do not hesitate to get in touch. Our team is committed to responding clearly and promptly.
Data Controller — Registered Details
For formal data rights requests, please use the email address above and include your full name, the nature of your request, and any relevant reference information so we can assist you as efficiently as possible. For urgent security concerns — such as a suspected data breach — please mark your email as urgent and we will prioritize it accordingly.
You also have the right to contact Brazil's Autoridade Nacional de Proteção de Dados (ANPD) directly if you believe your data protection rights have not been respected. More information about the ANPD and how to file a complaint is available at gov.br/anpd.