Controller Identification
The controller of the personal data processed through this Site, under the terms of the LGPD (Law No. 13.709/2018) and the GDPR (Regulation EU 2016/679), is:
Name / Corporate Name: Leandro Neves
Address: Balneário Camboriú/SC / Brazil
Privacy e-mail: leandro.nve@gmail.com
Website: https://leandronve.com/
Scope and Jurisdictions
This Privacy Policy applies to all users accessing the Site, regardless of their geographical location. The Site is accessible globally; the primary jurisdictions covered are Brazil and the Member States of the European Union, due to the commercial focus of Leandro Neves© .
For users located in Brazil, the General Personal Data Protection Law (LGPD — Law No. 13.709/2018) and the regulations of the National Data Protection Authority (ANPD) apply. For users located in the European Economic Area (EEA), the General Data Protection Regulation (GDPR — Regulation EU 2016/679) applies. When both legislations are applicable, both will be observed, prevailing the most protective for the data subject.
Personal Data Collected
Leandro Neves© collects personal data in the following categories and moments:
3.1 Data Provided Voluntarily
- Contact / briefing form: name, e-mail address, company name (optional), country, phone number (optional), and message.
- Hiring process: CPF/CNPJ (Tax ID), billing address, bank or payment data (processed by a third-party gateway — not stored by Leandro Neves© ).
- Direct e-mail: any data spontaneously provided by the user in communications sent to Leandro Neves© .
3.2 Data Collected Automatically
- Navigation data: IP address (anonymized where required), browser type and version, operating system, language, screen resolution, visited pages, time spent on the site, referring URL (referrer), and clicked links.
- Device data: device identifiers, hardware information relevant to page rendering.
- Cookies and similar technologies: as detailed in Section 7.
- Performance data: loading times and page errors, for technical optimization.
3.3 Data We Do Not Collect
Leandro Neves© does not collect special categories or sensitive data (racial origin, religious beliefs, health data, sexual orientation, biometric data), nor data from children under 18 intentionally.
Google Analytics and Google Ads Pixel
📊 Active Tracking — Google
This Site uses Google Analytics 4 and may use the Google Ads Conversion Pixel, services provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). These services collect and process data regarding users' browsing behavior.
4.1 What Google collects
- Site interaction data (visited pages, session time, clicks, conversions);
- Device IP address (anonymized via the IP anonymization setting enabled by Leandro Neves© );
- Cookie identifiers (_ga, _gid, _gat, and similar);
- Demographic and interest data inferred by Google (when enabled);
- Device and browser data.
4.2 Purpose
The data collected by Google Analytics is used for: statistical traffic analysis, understanding user behavior on the Site, measuring content performance, and optimizing the user experience. The Google Ads Pixel allows measuring the effectiveness of potential advertising campaigns and performing remarketing.
4.3 How to opt-out of Google tracking
- Install the Google Analytics opt-out browser add-on for your browser;
- Adjust your cookie settings through the Site's consent banner;
- Access Google Ad Settings to customize your preferences;
- Use private browsing mode or tracker blocking extensions.
Google's Privacy Policy is available at policies.google.com/privacy. Google is a data processor operating under the instructions of Leandro Neves© , under the terms of the Google Data Protection Addendum.
Meta Pixel (Facebook/Instagram)
📊 Active Tracking — Meta
This Site uses the Meta Pixel (formerly Facebook Pixel), a service provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) for users in the EEA, and by Meta Platforms Inc. (1 Hacker Way, Menlo Park, CA 94025, USA) for other regions.
5.1 What the Meta Pixel collects
- Navigation event data (page views, clicks, session time);
- IP address and cookie identifiers (fbp, fbc, and similar);
- Device, browser, and screen resolution data;
- Visited page URL and referring URL;
- Conversion data (when the user performs specific actions on the Site);
- When applicable, hashed data (such as e-mail) provided by the user in forms, for the purpose of matching Custom Audiences.
5.2 Purpose
The Meta Pixel is used to: measure the effectiveness of potential advertising campaigns on Facebook and Instagram, create custom audiences for remarketing, and analyze user behavior for ad optimization. Leandro Neves© and Meta act as joint controllers for the data collected by the Pixel, under the terms of the Meta Joint Controller Addendum.
5.3 How to opt-out of Meta tracking
- Adjust the privacy settings in your Facebook/Instagram account;
- Use the Off-Facebook Activity tool to clear and restrict data;
- Adjust the settings in the Site's consent banner;
- Install tracker blocking extensions (uBlock Origin, Privacy Badger, etc.).
Meta's Privacy Policy is available at facebook.com/privacy/policy.
Purpose and Legal Basis of Processing
Leandro Neves© processes personal data exclusively for the purposes described below, supported by the corresponding legal bases provided for in the LGPD and the GDPR:
| Purpose | LGPD Legal Basis | GDPR Legal Basis |
|---|---|---|
| Respond to contacts and quote requests | Legitimate interest (Art. 7, IX) / Performance of a contract | Performance of a contract / Legitimate interest (Art. 6(1)(b)(f)) |
| Provision of contracted engineering Services | Performance of a contract (Art. 7, V) | Performance of a contract (Art. 6(1)(b)) |
| Issuance of tax documents and compliance with legal obligations | Compliance with a legal obligation (Art. 7, II) | Legal obligation (Art. 6(1)(c)) |
| Traffic analytics (Google Analytics) | Consent (Art. 7, I) / Legitimate interest | Consent (Art. 6(1)(a)) |
| Advertising measurement and remarketing (Meta Pixel, Google Ads) | Consent (Art. 7, I) | Consent (Art. 6(1)(a)) |
| Continuous Site improvement and security | Legitimate interest (Art. 7, IX) | Legitimate interest (Art. 6(1)(f)) |
| Defense in legal or administrative proceedings | Regular exercise of rights (Art. 7, VI) | Legitimate interest / Legal obligation (Art. 6(1)(c)(f)) |
Legitimate Interest (GDPR Art. 6(1)(f)): By invoking legitimate interest as a legal basis, Leandro Neves© previously conducted the balancing test between its interest and the fundamental rights of the data subjects, concluding that there are no overriding contrary interests or rights. The data subject may request information about this test at any time (see Section 16).
Cookies and Tracking Technologies
The Site uses cookies and similar technologies (pixels, web beacons, local storage) to ensure its functioning, analyze usage, and, with consent, display relevant advertising.
7.1 Cookie Categories
- Essential / Strictly Necessary: indispensable for the basic functioning of the Site. They do not require consent. Examples: theme preference (light/dark), security session.
- Analytical / Performance: collect anonymous information about the use of the Site to improve its performance. Examples: _ga, _gid (Google Analytics). Require consent.
- Functionality: remember user preferences. Require consent.
- Marketing / Advertising: used for cross-site tracking and displaying relevant ads. Examples: _fbp, fbc (Meta Pixel), Google Ads cookies. Require consent.
7.2 Consent Management
Upon the first visit to the Site, the User will be presented with a cookie management banner that will allow accepting or rejecting specific categories. Consent can be revoked at any time by accessing the Site's privacy settings.
For users located in the EEA, consent for non-essential cookies is collected in accordance with the ePrivacy Directive (2002/58/EC, updated by 2009/136/EC) and the GDPR. No tracking cookie is activated before obtaining valid, free, informed, specific, and unambiguous consent.
7.3 How to Manage Cookies in the Browser
Attention: disabling essential cookies may compromise the functioning of the Site.
Data Sharing
Leandro Neves© does not sell, rent, or trade users' personal data. Data sharing occurs only in the cases below:
8.1 Service Providers (Processors)
- Google LLC — Analytics and advertising (Section 4). Acts as a data processor according to the Google Data Protection Addendum.
- Meta Platforms Inc. / Ireland Ltd. — Tracking pixel and advertising (Section 5). Acts as a joint controller for Pixel data.
- Site hosting platform — [Ex.: Vercel, Netlify, GitHub Pages — state the provider used]. Processes access logs for security and availability purposes.
- Payment gateway — [Ex.: Stripe, PayPal, Mercado Pago — state the provider used]. Processes payment data directly; Leandro Neves© does not store credit card data.
- E-mail platform — [Ex.: Gmail Workspace, Brevo — state the provider]. Used for replying to contacts and service communications.
8.2 Legal Requirements
Leandro Neves© may disclose personal data when required by law, court order, determination of a competent authority (including the ANPD and European data protection authorities), or to protect its own rights in administrative or judicial proceedings.
8.3 Business Transfer
In the event of a merger, acquisition, restructuring, or sale of Leandro Neves© 's assets, users' data may be transferred to the acquirer, who will be subject to this Privacy Policy. Leandro Neves© will notify affected users reasonably in advance.
International Data Transfer
Leandro Neves© is established in Brazil. The use of services like Google and Meta implies the transfer of personal data to servers located in the United States and other countries.
9.1 For Brazilian Users (LGPD)
International data transfers are carried out based on the hypotheses provided for in Art. 33 of the LGPD, especially: (i) when the destination country provides an adequate level of protection to the LGPD, as assessed by the ANPD; or (ii) through specific contractual clauses, binding corporate rules, or other instruments recognized by the ANPD. Leandro Neves© contractually adopts the applicable safeguards with each provider.
9.2 For EEA Users (GDPR)
Transfers of personal data of EEA users to third countries without an adequacy decision from the European Commission are carried out based on the Standard Contractual Clauses (SCCs) adopted by the European Commission (Implementing Decision (EU) 2021/914), included in the data processing terms of Google and Meta with Leandro Neves© . Users may request a copy of the applicable safeguards through the contact indicated in Section 16.
Data Retention and Deletion
Leandro Neves© retains personal data only for the time necessary for the purposes for which they were collected, observing the applicable legal and regulatory periods:
- Contact data and messages: up to 5 years after the last contact or termination of the contractual relationship, for defense in potential litigation.
- Contract data and tax documents: minimum of 5 years, per the requirements of Brazilian tax legislation (Decree No. 70.235/1972 and equivalents).
- Analytics data (Google): according to Google Analytics settings — standard 14 months for user and event data; server logs up to 90 days.
- Marketing cookie data: according to the timeframe of each cookie (see Section 7); consent is stored for up to 12 months.
- Payment data: not stored by Leandro Neves© ; retained by the gateway according to their policies.
At the end of the retention period, the data is securely deleted or anonymized, so that the data subject cannot be identified.
Data Subject Rights
Leandro Neves© guarantees the full exercise of the rights provided for in the LGPD and the GDPR to all data subjects. Below is a summary of the applicable rights:
| Right | LGPD (Art. 18) | GDPR (Arts. 15–22) |
|---|---|---|
| Confirmation and access to data | ✓ Art. 18, I and II | ✓ Art. 15 |
| Correction of incomplete or inaccurate data | ✓ Art. 18, III | ✓ Art. 16 |
| Anonymization, blocking, or deletion | ✓ Art. 18, IV | ✓ Art. 17 (Right to erasure) |
| Data portability | ✓ Art. 18, V | ✓ Art. 20 |
| Deletion of data processed by consent | ✓ Art. 18, VI | ✓ Art. 17(1)(b) |
| Information on data sharing | ✓ Art. 18, VII | ✓ Art. 15(1)(c) |
| Revocation of consent | ✓ Art. 18, IX | ✓ Art. 7(3) |
| Objection to processing (opt-out) | ✓ Art. 18, II | ✓ Art. 21 |
| Non-subjection to automated decisions | ✓ Art. 20 | ✓ Art. 22 |
| Restriction of processing | — | ✓ Art. 18 |
11.1 How to Exercise Your Rights
To exercise any of the rights above, send a written request to the privacy e-mail indicated in Section 16, properly identifying yourself (full name and, when applicable, CPF or other identification document). Leandro Neves© will respond within up to 15 calendar days (LGPD) or 1 month (GDPR, extendable for another 2 months in complex cases).
Requests are free of charge for the data subject. In the case of manifestly unfounded or excessive requests, Leandro Neves© may charge a reasonable fee or refuse to act, with proper justification.
Data Security
Leandro Neves© adopts appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or improper destruction, including:
- Data transmission via HTTPS protocol with a valid SSL/TLS certificate;
- Restricted access control to user data, with multi-factor authentication in internal systems;
- Storage of contact data in systems with encryption at rest;
- No storage of credit card data or payment credentials;
- Periodic review of security practices and utilized providers.
In the event of a security incident that may affect personal data, Leandro Neves© will notify the ANPD (for Brazilian users) and the competent data protection authority (for EEA users) within the applicable legal deadlines, as well as the affected data subjects when the incident could entail significant risk.
Minors
The Site and Services of Leandro Neves© are intended exclusively for individuals over 18 years of age. Leandro Neves© does not intentionally collect personal data from children or adolescents. If Leandro Neves© identifies that it has inadvertently collected data from minors, such data will be immediately deleted.
Parents or guardians who believe their minor children have provided personal data to Leandro Neves© should contact us immediately at the e-mail indicated in Section 16 to request deletion.
Changes to this Policy
Leandro Neves© reserves the right to modify this Privacy Policy at any time, due to legislative changes, new data practices, or the incorporation of new services. The updated version will be published on the Site indicating the effective date.
Substantial changes — those affecting data subjects' rights or the purposes of processing — will be communicated by e-mail to registered data subjects with a minimum notice of 10 (ten) days. Continued use of the Site after this period implies acceptance of the changes.
Data Protection Authorities
The data subject has the right to file complaints with the competent data protection authority, without prejudice to other administrative or judicial remedies:
🇧🇷 Brazil — ANPD
National Data Protection Authority (ANPD)
Petitions via portal:
gov.br/anpd
🇪🇺 European Union
A data subject located in the EEA may lodge a complaint with the supervisory authority of the Member State where they habitually reside, work, or where the alleged infringement occurred. The list of authorities is available at: edpb.europa.eu.
Leandro Neves© encourages the data subject to contact us directly (Section 16) before resorting to the regulatory authority, committing to handling all complaints in good faith and in the shortest possible time.
Contact and Data Protection Officer (DPO)
To exercise your rights, clarify doubts, file privacy complaints, or request information about this Policy, contact the data controller:
Owner / Data Protection Officer: Leandro Neves
E-mail: leandro.nve@gmail.com
Website: https://leandronve.com/
Postal address: Balneário Camboriú/SC / Brazil
*Response time: up to 15 calendar days (LGPD) / 1 month (GDPR). Requests received in writing take priority in processing.
Note on DPO (GDPR Art. 37): The formal designation of a Data Protection Officer is mandatory for organizations that carry out large-scale processing or processing of special categories of data. Being a microenterprise/independent professional with a reduced volume of processing, Leandro Neves© may not be obliged to formally appoint a DPO, without prejudice to maintaining a dedicated and responsive contact channel for all privacy requests.