Privacy Policy
Transparency on the processing of personal data, in accordance with the Brazilian General Data Protection Law (LGPD) and the professional secrecy owed by lawyers.
1. Who we are and to whom this Policy applies
This Privacy Policy describes how Paulo Henrique Gonçalves Monteiro, a lawyer admitted to the São Paulo Bar (OAB/SP No. 386.449), with offices in São Paulo, Brazil (the “Firm”), as data controller, processes the personal data of visitors to www.goncalvesmonteiro.adv.br, of persons who contact the Firm and of newsletter subscribers, under Law No. 13,709/2018 — the Brazilian General Data Protection Law (“LGPD”).
The processing of client data under engagement agreements for legal services is also governed by the respective agreement and by the duty of professional secrecy.
2. Personal data processed
Data you provide: name, company, email address, telephone number, subject and content of messages sent through the contact form, by email or via WhatsApp; email address provided to subscribe to the newsletter.
Data collected automatically: IP address, date and time of access, browser and device type and pages visited, through access logs and cookies, as described in section 7.
We ask that you do not send sensitive personal data or confidential information about your matter in your initial contact.
3. Purposes and legal bases
Responding to inquiries and scheduling meetings — pre-contractual steps taken at the data subject's request (LGPD, art. 7, V).
Sending the Firm's newsletter and publications — consent (art. 7, I), which may be withdrawn at any time.
Retaining internet application access logs for six months — compliance with a legal obligation (LGPD, art. 7, II, and art. 15 of Law No. 12,965/2014, the Brazilian Internet Civil Framework).
Exercising rights in judicial, administrative or arbitral proceedings — regular exercise of rights (art. 7, VI).
Ensuring the security and operation of the website — legitimate interest (art. 7, IX), with due regard for the data subject's rights and expectations.
4. Professional secrecy
Information shared with the Firm in connection with the practice of law is protected by professional secrecy under Law No. 8,906/1994 (Brazilian Bar Statute) and the OAB Code of Ethics and Discipline, whether or not an engagement agreement is executed.
5. Data sharing
Personal data are not sold or transferred for commercial purposes. They may be shared only with: (i) hosting, email and technology service providers acting as processors, under contractual confidentiality and security obligations; (ii) public authorities, where required by law or court order; and (iii) specialist partners involved in the matter, with the data subject's authorization.
6. International transfers
Some technology providers may store data on servers located outside Brazil. In such cases, the transfer complies with the grounds set out in art. 33 of the LGPD and the regulations of the Brazilian National Data Protection Authority (ANPD).
8. Retention period
Data are retained for as long as necessary for the purposes described: contact messages not followed by an engagement, for up to 24 months; subscriber data, until the subscription is cancelled; access logs, for six months. After these periods, data are deleted or anonymized, except as permitted under art. 16 of the LGPD.
9. Data subject rights
Under art. 18 of the LGPD, you may request: confirmation that processing takes place; access to your data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary or excessive data; portability; deletion of data processed on the basis of consent; information on data sharing; and withdrawal of consent. You may also lodge a complaint with the ANPD.
10. Security
The Firm adopts technical and administrative measures designed to protect personal data against unauthorized access and accidental or unlawful events, in accordance with art. 46 of the LGPD, including encrypted connections (HTTPS), access controls and providers with recognized security standards.
11. Data Protection Officer and contact channel
Data Protection Officer (LGPD, art. 41): Paulo Henrique Gonçalves Monteiro. Requests concerning this Policy or your personal data may be sent to monteiro@goncalvesmonteiro.adv.br, with the subject line “Privacy”.
12. Amendments and effective date
This Policy may be updated to reflect legal or operational changes; the current version will always be available on this page. This version is effective as of its publication on this website.