As at: July 2026
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:
SOLE CONTABILIDADE LTDA
Rua Sao Diogo, 1, Parte
Ponta D'areia — Niteroi/RJ
CEP: 24040-045
Brazil
CNPJ: 64.740.302/0001-89
Managing Director: Marcus Vinicius Vieira Neres de Farias
Email: [email protected]
The appointment of a data protection officer is not required under Art. 37 GDPR, since our company does not, as a rule, permanently employ at least 20 people on the automated processing of personal data. For any data protection questions you may contact the email address given above at any time.
When you access our website, the browser used on your device automatically sends the following information to our website's server, where it is temporarily stored in what are known as server log files:
The data listed above is processed for the following purposes: ensuring a smooth connection to the website, ensuring comfortable use of our website, evaluating system security and stability, and for further administrative purposes.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest follows from the purposes of data collection listed above, in particular the security and stability of our website.
Storage period: The data is deleted as soon as it is no longer required for the purpose for which it was collected. Where data is recorded in order to provide the website, this is the case once the session in question has ended. Server log files are deleted automatically after seven days at the latest.
If you send us enquiries via the contact form, the details you provide in the enquiry form, including the contact data you enter there, are stored by us in order to process the enquiry and in case of follow-up questions. The following data is collected in the process:
We do not pass this data on without your consent.
Legal basis: Art. 6(1)(b) GDPR (taking steps prior to entering into a contract at the request of the data subject). Where your enquiry does not relate to the conclusion of a contract, the legal basis is Art. 6(1)(f) GDPR (legitimate interest in dealing effectively with enquiries addressed to us).
Storage period: The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data ceases to apply. Mandatory statutory provisions — retention periods in particular — remain unaffected.
Our website uses only technically necessary cookies. These are small text files that your browser creates automatically and that are stored on your device when you visit our website.
Technically necessary cookies are exempt from the consent requirement under Sec. 25(2) TTDSG (German Telecommunications Digital Services Data Protection Act), since they are strictly required for the operation of the website. These cookies cannot be disabled.
We do not use tracking cookies, analytics cookies or advertising cookies without your prior express consent. Where applicable, such consent is obtained through our cookie consent banner.
Legal basis for technically necessary cookies: Sec. 25(2) TTDSG in conjunction with Art. 6(1)(f) GDPR.
Legal basis for optional cookies: Art. 6(1)(a) GDPR (consent).
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter „Google“).
Purpose: We use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. When you click on an advertisement placed by Google, a conversion tracking cookie is stored on your device. These cookies expire after 30 days and are not used to identify you personally.
If you visit certain pages of our website while the cookie has not yet expired, Google and we can recognise that you clicked on the advertisement and were forwarded to this page. Every Google Ads customer receives a different cookie. The information obtained via conversion cookies is used to compile conversion statistics for Ads customers who have opted in to conversion tracking.
Legal basis: Art. 6(1)(a) GDPR (consent). The conversion tracking cookie is only set if you have given your consent via our cookie consent banner. You may withdraw your consent at any time with effect for the future.
Transfer of data to third countries: Google may transfer collected data to the USA. The transfer takes place on the basis of the EU-US Data Privacy Framework (DPF). Further information can be found in Google's privacy policy: https://policies.google.com/privacy.
Where a payment obligation arises after a contract is concluded, we use an external payment service provider to process the payment. Your payment data (e.g. credit card number, bank details) is transmitted directly to the payment service provider and processed there.
We ourselves never store complete credit card or bank details on our servers. From the payment service provider we receive only a confirmation of whether the payment succeeded or failed, together with a transaction ID for reconciliation where applicable.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Processing the payment data is necessary in order to perform the contract concluded between you and us.
As our company is based in Brazil, personal data is transferred to a third country. Brazil is a third country outside the European Union. The transfer of personal data to Brazil takes place on the basis of Art. 49(1)(a) GDPR (express consent) or Art. 49(1)(b) GDPR (performance of a contract). Brazil has its own data protection law in the Lei Geral de Proteção de Dados (LGPD).
Safeguards: Where personal data is transferred to recipients in third countries not covered by the DPF adequacy decision, we ensure through appropriate safeguards that the rights of data subjects are adequately protected. To that end we conclude EU Standard Contractual Clauses under Art. 46(2)(c) GDPR.
In exceptional cases the transfer may be based on your express consent under Art. 49(1)(a) GDPR. In that case you will be informed of the possible risks before the transfer takes place.
You have the following rights in relation to your personal data vis-à-vis the controller:
To exercise your rights please contact us by email at: [email protected]. We will deal with your request without undue delay, and in any event within one month.
Without prejudice to any other administrative or judicial remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR.
You may exercise this right before a supervisory authority in the Member State of your residence, your place of work, or the place of the alleged infringement. A list of the data protection supervisory authorities in Germany can be found at: https://www.bfdi.bund.de.
We reserve the right to adapt this privacy policy in order to bring it into line with changes in the law or with changes to the service or to data processing. This applies, however, only to statements about data processing. Where consents are required, or where parts of the privacy policy contain provisions of the contractual relationship with users, the changes will only be made with the users' agreement.
The current version is always available on this page. Please check the content of our privacy policy regularly.
As at: July 2026