1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:
MSBC CONTABILIDADE LTDA
Rua Quinze de Novembro 6901, Andar Primeiro Sala 09 10 e 11
Vila Nova, Joinville/SC
CEP 89.237-003
Brazil
CNPJ: 00.821.937/0001-28
Managing Director: Amilton Correa
Email: [email protected]
2. Data Protection Officer
Under Art. 37 GDPR, appointing a data protection officer is not required, as our company does not, as a rule, have at least 20 people permanently engaged in the automated processing of personal data. For data protection questions, you may contact us at any time at the email address above.
3. Collection and Storage of Personal Data
When you visit our website, the browser on your device automatically sends the following information to our website's server, where it is temporarily stored in so-called server log files:
- IP address of the requesting computer
- Browser type and browser version
- Operating system used
- Referrer URL (the previously visited page)
- Date and time of access
- Host name of the accessing computer
The data listed is processed for the following purposes: ensuring a smooth connection to the website, ensuring convenient use of our website, evaluating system security and stability, and for other administrative purposes.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest arises from the data collection purposes listed above, in particular the security and stability of our website.
Storage period: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Where data is collected to provide the website, this is the case when the respective session has ended. Server log files are automatically deleted after 7 days at the latest.
4. Contact Form
If you send us inquiries via the contact form, the details you provide in the form, including the contact information you enter there, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. The following data is collected:
- Name
- Email address
- Phone number (if provided)
- Message content
We do not share this data without your consent.
Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures taken at the request of the data subject). Where your inquiry does not relate to the conclusion of a contract, the legal basis is Art. 6(1)(f) GDPR (legitimate interest in the effective handling of inquiries addressed to us).
Storage period: The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions — in particular retention periods — remain unaffected.
5. Cookies
Our website uses only technically necessary cookies. These are small text files that your browser creates automatically and that are stored on your device when you visit our website.
Under § 25(2) TTDSG (German Telecommunications and Digital Services Data Protection Act), technically necessary cookies are exempt from the consent requirement, as they are strictly necessary for operating the website. These cookies cannot be disabled.
We do not use tracking cookies, analytics cookies, or advertising cookies without your prior express consent. Where applicable, such consent is obtained through our cookie consent banner.
Legal basis for technically necessary cookies: § 25(2) TTDSG in conjunction with Art. 6(1)(f) GDPR.
Legal basis for optional cookies: Art. 6(1)(a) GDPR (consent).
6. Google Ads Conversion Tracking
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
Purpose: We use Google Ads Conversion Tracking to measure the effectiveness of our advertising campaigns. When you click on an ad served by Google, a conversion tracking cookie is stored on your device. These cookies expire after 30 days and are not used to identify you personally.
If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. The information obtained through conversion cookies is used to create conversion statistics for Ads customers who have opted in to conversion tracking.
Legal basis: Art. 6(1)(a) GDPR (consent). The conversion tracking cookie is only set if you have given your consent via our cookie consent banner. You can revoke your consent at any time with effect for the future.
Data transfer to third countries: Google may transfer collected data to the USA. The transfer is based on the EU-U.S. Data Privacy Framework (DPF). You can find more information in Google’s privacy policy: https://policies.google.com/privacy.
7. Payment Processing
Where a payment obligation exists after a contract is concluded, we use an external payment service provider to process payments. Your payment data (e.g. credit card number, bank details) is transmitted directly to the payment service provider and processed there.
We ourselves never store complete credit card or bank data on our servers. We only receive confirmation from the payment service provider of the success or failure of the payment and, where applicable, a transaction ID for matching purposes.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Processing of payment data is necessary to perform the contract concluded between you and us.
8. Data Transfer to Third Countries
Since our company is headquartered in the Federative Republic of Brazil, personal data is transferred to a third country. Brazil currently does not have an adequacy decision from the European Commission. Data transfers are therefore based on appropriate safeguards pursuant to Art. 46 GDPR.
Safeguards: Where personal data is transferred to recipients in third countries not covered by the DPF adequacy decision, we ensure through appropriate safeguards that the rights of data subjects are adequately protected. For this purpose, we conclude EU Standard Contractual Clauses in accordance with Art. 46(2)(c) GDPR.
In exceptional cases, the transfer may be based on your express consent in accordance with Art. 49(1)(a) GDPR. In this case, you will be informed of the possible risks before the transfer.
9. Your Rights (Art. 15–21 GDPR)
You have the following rights with respect to the controller with regard to your personal data:
- Right of access (Art. 15 GDPR) — You have the right to request information on whether and which personal data we process about you, and to receive copies of that data.
- Right to rectification (Art. 16 GDPR) — You have the right to request the prompt correction of inaccurate personal data.
- Right to erasure (Art. 17 GDPR) — You have the right to request the deletion of your personal data, provided there is no legitimate reason for further processing.
- Right to restriction (Art. 18 GDPR) — You have the right to request the restriction of the processing of your personal data.
- Right to data portability (Art. 20 GDPR) — You have the right to receive the data concerning you in a structured, commonly used, and machine-readable format.
- Right to object (Art. 21 GDPR) — You have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR.
To exercise your rights, please contact us by email at: [email protected]. We will process your request without undue delay, but no later than within one month.
10. Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.
You may exercise this right with a supervisory authority in the member state of your residence, your place of work, or the place of the alleged violation. A list of data protection supervisory authorities in Germany can be found at: https://www.bfdi.bund.de.
11. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy to reflect changes in the legal situation or changes to the service or data processing. However, this applies only to statements regarding data processing. Where consent is required or parts of the Privacy Policy contain provisions governing the contractual relationship with users, changes will only be made with the users’ consent.
The current version is always available on this page. Please review the content of our Privacy Policy regularly.
Last updated: July 2026