As of: July 2026
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data-protection provisions is:
Contabilidade Lazaro LTDA
Rua Sao Paulo, 409, Sala 907
Centro — Belo Horizonte/MG
ZIP: 30170-902
Brazil
CNPJ: 17.446.956/0001-14
Managing director: Jose Tadeu Nunes De Araujo
Email: [email protected]
The appointment of a data protection officer is not required under Art. 37 GDPR, as our company does not, as a rule, permanently employ at least 20 people in the automated processing of personal data. For any data-protection questions, you may contact the email address stated above at any time.
When you access our website, the browser used on your device automatically sends the following information to our website's server and temporarily stores it in what are known as server log files:
The data mentioned is processed for the following purposes: ensuring a smooth connection to the website, ensuring comfortable use of our website, evaluating system security and stability, and for further administrative purposes.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest arises from the purposes of data collection listed above, in particular the security and stability of our website.
Storage period: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected to provide the website, this is when the respective session has ended. The server log files are automatically deleted after 7 days at the latest.
If you send us inquiries via the contact form, the details you provide in the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. The following data is collected:
We do not share this data without your consent.
Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures taken at the request of the data subject). Insofar as your inquiry is not aimed at concluding a contract, Art. 6(1)(f) GDPR (legitimate interest in the effective handling of the inquiries addressed to us) is the legal basis.
Storage period: The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions — in particular retention periods — remain unaffected.
Our website uses only technically necessary cookies. These are small text files that your browser automatically creates and that are stored on your device when you visit our website.
Technically necessary cookies are exempt from the consent requirement, as they are strictly necessary for the operation of the website. These cookies cannot be deactivated.
We do not use tracking cookies, analytics cookies or advertising cookies without your prior express consent. Any such consent is obtained via our cookie-consent banner where applicable.
Legal basis for technically necessary cookies: Art. 6(1)(f) GDPR.
Legal basis for optional cookies: Art. 6(1)(a) GDPR (consent).
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
Purpose: We use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. When you click on an ad served by Google, a cookie for conversion tracking is stored on your device. These cookies expire after 30 days and are not used for personal identification.
If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. The information obtained via conversion cookies is used to create conversion statistics for Ads customers who have opted in to conversion tracking.
Legal basis: Art. 6(1)(a) GDPR (consent). The conversion-tracking cookie is only set if you have given your consent via our cookie-consent banner. You can withdraw your consent at any time with effect for the future.
Data transfer to third countries: Google may transfer collected data to the USA. The transfer takes place on the basis of the EU-US Data Privacy Framework (DPF). Further information can be found in Google's privacy policy: https://policies.google.com/privacy.
Insofar as a payment obligation exists after conclusion of a contract, we use an external payment service provider for payment processing. Your payment data (e.g. credit card number, bank details) is transmitted directly to the payment service provider and processed there.
We ourselves never store complete credit card or bank details on our servers. From the payment service provider we receive only a confirmation of the success or failure of the payment and, where applicable, a transaction ID for allocation.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract). The processing of payment data is necessary to fulfill the contract concluded between you and us.
Since our company is based in Brazil, personal data is transferred to a third country. Brazil is a third country outside the European Union. The transfer of personal data to Brazil takes place on the basis of Art. 49(1)(a) GDPR (explicit consent) or Art. 49(1)(b) GDPR (performance of a contract). With the Lei Geral de Proteção de Dados (LGPD), Brazil has its own data-protection law.
Safeguards: Insofar as personal data is transferred to recipients in third countries not covered by the DPF adequacy decision, we ensure through appropriate safeguards that the rights of data subjects are adequately protected. To this end, we conclude EU Standard Contractual Clauses in accordance with Art. 46(2)(c) GDPR.
In exceptional cases, the transfer may be based on your explicit consent in accordance with Art. 49(1)(a) GDPR. In this case, you will be informed of the possible risks before the transfer.
You have the following rights vis-à-vis the controller regarding your personal data:
To exercise your rights, please contact us by email at: [email protected]. We will process your request without delay, and no later than within one month.
Without prejudice to any other administrative or judicial remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data-protection supervisory authority if you consider that the processing of your personal data infringes the GDPR.
You may exercise this right with a supervisory authority in the member state of your residence, place of work or the place of the alleged infringement. A list of data-protection supervisory authorities is available online.
We reserve the right to adapt this privacy policy in order to bring it into line with changed legal situations or in the event of changes to the service or data processing. However, this applies only with regard to statements on data processing. Insofar as consent is required or components of the privacy policy contain provisions of the contractual relationship with users, the changes are made only with the users' consent.
The current version is always available on this page. Please check the content of our privacy policy regularly.
As of: July 2026