Privacy Policy

1. Application of this Policy

This Policy applies to the GCRH Engenharia LTDA website, including institutional pages, service pages, contact forms, quote-request forms, technical-content pages, course pages, email or messaging-app contact buttons and other digital resources made available on this domain.

By browsing the website or submitting information through the available forms and channels, the user declares awareness of the personal-data processing conditions described in this Policy.

This Policy does not apply to websites, platforms, payment systems, social networks, maps, messaging applications or third-party services that may be accessed through external links. In those cases, data processing will be governed by each third party’s own policies.

2. Controller of personal data

For the purposes of the Brazilian General Personal Data Protection Law, the controller of personal data processed through this website is:

• Corporate name:GCRH Engenharia LTDA
• CNPJ: 65.422.760/0001-32
• Address:Rua José Bonfim Campelo, 10, Vale-Quem-Tem neighborhood, Teresina/PI
• Email: gcrhengenharia@gmail.com
• Phone/WhatsApp: +55 86 99901-7362

The controller is responsible for defining the purposes and means of processing personal data collected through this website.

3. Contact channel regarding personal data

Requests, questions, complaints or applications related to personal-data processing may be sent by the data subject to the following channel:

• Person responsible for LGPD-related requests:Dr. Guilherme C. R. Neto
• Email: gcrhengenharia@gmail.com
• Estimated response time:up to 5 business days, except in situations requiring complementary analysis.

4. Personal data processed

GCRH Engenharia may process personal data provided directly by the user or generated while browsing the website, according to the functionality used.

5. How data are collected

Personal data may be collected in the following ways:

• Direct provision by the user: when the user completes forms, sends messages, requests a quote, schedules service or contacts us by email, phone, WhatsApp or another channel indicated on the website.
• Website browsing: when technical records required for website operation, security and maintenance are generated.
• Cookies and similar technologies: when used to enable functionalities, record preferences or produce access statistics.
• Third-party services: when the user interacts with links, form tools, hosting services, payment systems, scheduling platforms, social networks, maps or external applications integrated into or referenced by the website.

6. Purposes of processing

Personal data will be processed for specific, legitimate purposes compatible with GCRH Engenharia’s institutional and commercial activities, including:

• responding to requests submitted by the user;
• preparing pre-quotes, technical proposals and commercial proposals;
• performing preliminary screening of demands in engineering, environment, water resources, sanitation, geoprocessing, technical documentation and related areas;
• scheduling meetings, technical visits or remote services;
• maintaining a minimum communication history with clients, potential clients, partners and suppliers;
• sending information requested by the user;
• disclosing technical content, courses, informational materials or institutional communications when there is an applicable legal basis;
• improving website structure, performance, usability and security;
• preventing fraud, unauthorized access, security incidents and uses incompatible with the website’s purpose;
• complying with legal, regulatory, tax, accounting or contractual obligations;
• protecting GCRH Engenharia’s rights in administrative, judicial or extrajudicial proceedings.

7. Legal bases

Personal-data processing may occur based on the following legal bases provided by the LGPD, according to the specific case:

• Consent: when the user authorizes the use of their data for a specific purpose, such as receiving communications or using non-essential cookies.
• Contract performance or preliminary procedures: when the data are necessary to meet a quote request, proposal, contracting or service execution.
• Compliance with legal or regulatory obligation: when GCRH Engenharia needs to keep or process data to meet legal, tax, accounting, technical or regulatory requirements.
• Legitimate interest: when processing is necessary for communication with users, website security, fraud prevention, service improvement or maintenance of the institutional and commercial relationship, always respecting the rights and freedoms of the data subject.
• Regular exercise of rights: when data are necessary in administrative, judicial, arbitration or extrajudicial proceedings.

8. Data sharing

GCRH Engenharia does not sell personal data. Data sharing may occur only when necessary and compatible with the purposes of this Policy, including the following situations:

• hosting, infrastructure, security, email, forms, scheduling, communication, statistical analysis or technical-support providers;
• payment, enrollment or course-management platforms, when the user chooses to contract or access those services;
• consultants, technical partners, service providers or suppliers involved in analyzing or executing the demand requested by the user;
• public authorities, oversight agencies, professional councils or third parties when there is a legal or regulatory obligation or an order from a competent authority;
• lawyers, accountants, auditors or advisors when necessary to comply with obligations or exercise rights regularly.

Sharing will be limited to the minimum necessary to fulfill the corresponding purpose.

9. International data transfer

GCRH Engenharia may use digital tools, infrastructure providers, hosting services, email, forms, traffic analysis, storage or communication services that maintain servers or operations outside Brazil.

When international transfer of personal data occurs, reasonable measures will be adopted so that processing observes adequate standards of security, confidentiality and data protection under applicable law.

10. Data security

GCRH Engenharia adopts reasonable technical and administrative measures to protect personal data against unauthorized access, loss, alteration, improper disclosure, destruction or any form of improper processing.

These measures may include, depending on the tool used:

• use of secure connections when available;
• restriction of access to personal data only to authorized persons;
• adoption of passwords, access controls and information-security best practices;
• technical monitoring of failures, outages and security events;
• storage of data only for the period necessary for the stated purposes;
• guidance of collaborators and service providers regarding information confidentiality.

Despite the measures adopted, no digital environment is entirely free from risks. If a security incident is identified that may result in relevant risk or harm to data subjects, GCRH Engenharia will take appropriate measures, including communication to data subjects and the competent authority when required by applicable law.

11. Cookies and similar technologies

Cookies are small files stored on the user’s device during browsing. They may be used to enable website operation, remember preferences, produce access statistics or improve the user experience.

The user may configure their browser to block, delete or warn about cookies. Disabling essential cookies may compromise operation of some areas of the website.

If this website uses a consent-management tool, the user may change their cookie preferences at any time through the banner or preferences panel provided.

12. Rights of data subjects

Under the LGPD, the personal-data subject may request, as applicable:

• confirmation of the existence of processing of their personal data;
• access to processed personal data;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary, excessive data or data processed in non-compliance with the LGPD;
• data portability, subject to applicable regulation;
• information on data sharing;
• information on the possibility of not providing consent and the consequences of refusal;
• withdrawal of consent when processing is based on that hypothesis;
• objection to processing when there is legal basis for doing so;
• review of decisions made solely based on automated processing of personal data, if any.

To exercise their rights, the data subject must send a request to the channel indicated in the “Contact channel regarding personal data” section. GCRH Engenharia may request additional information to confirm the requester’s identity and protect personal-data security.

13. Data retention and deletion

Personal data will be kept for the period necessary to fulfill the purposes described in this Policy, including user service, proposal preparation, contract performance, compliance with legal or regulatory obligations and regular exercise of rights.

When data are no longer necessary, they may be deleted, anonymized or kept only in the cases authorized by applicable law.

14. Data of children and adolescents

This website is not directed at children and adolescents and is not intended to intentionally collect personal data from minors.

If GCRH Engenharia identifies accidental processing of data from children or adolescents without an adequate legal basis, it will adopt measures to delete or regularize the processing, as applicable.

15. Automated decisions

As a rule, the GCRH Engenharia website does not make decisions exclusively based on automated processing of personal data that produce legal effects or significantly affect the user’s interests.

If such functionality is implemented, this Policy will be updated to inform the logic used, processing purposes and the rights of the data subject.

16. Changes to this Policy

This Privacy Policy may be periodically updated to reflect legal, regulatory, technical, operational or institutional changes.

The current version will always be available on this page. Users are advised to consult this Policy regularly.

Relevant changes may be communicated by notice on the website itself or through other available contact means, when appropriate.

17. Contact

For general questions about this Policy or personal-data processing, please contact:

• Corporate name:GCRH Engenharia LTDA
• CNPJ: 65.422.760/0001-32
• Address:Rua José Bonfim Campelo, 10, Vale-Quem-Tem neighborhood, Teresina/PI
• Email: gcrhengenharia@gmail.com
• Phone/WhatsApp: +55 86 99901-7362