Privacy policy

Summary

• The website uses no cookies and no audience analytics, advertising or tracking tools.
• Visits pass through Cloudflare, which protects and delivers the website.
• Our server keeps technical access logs for about five weeks.
• You only give us personal data if you choose to: through the partnership form, a job application, or when you write to us.

Controller

MACOHIN GESTÃO PROCESSUAL
CNPJ 17.004.396/0001-48 (Brazilian National Register of Legal Entities)
Av. Atlântica, 2554 — Sala 06
Balneário Camboriú — SC · CEP 88330-906 · Brazil

Legal representatives: André Macohin and Anderson Macohin.

For any privacy matter: [email protected].

When you simply browse

Cloudflare

The website is delivered through Cloudflare, which sits between your browser and our server to protect the site against attacks and to deliver pages faster. To do so, Cloudflare processes your IP address and technical data about each request (for example, the page requested, your browser and the time). If a connection to the site fails, your browser may send Cloudflare a technical network-error report. The connection is always encrypted (HTTPS).

Server logs

Like any web server, ours records each request: date and time, the address requested, the result, the size of the response, the page you came from (when your browser provides it) and your browser’s identification. Because visits arrive through Cloudflare, the IP address in these logs is normally Cloudflare’s, not yours. There is also a log of technical errors.

The logs are rotated every week and the four previous copies are kept; after that, they are deleted (about five weeks at most). They are used only to keep the site running and secure.

No cookies, no tracking

The website sets no cookies and uses no audience analytics, advertising or tracking tools. Fonts, images and videos are served by the website itself, not by third-party services (the exceptions are listed under “Third-party content and links”).

What stays in your browser

The home page keeps two notes in your browser’s session storage (sessionStorage), which is cleared when you close the tab:

• si-boot: the opening sequence has already been shown on this visit, so it is not repeated;
• elzasi-som: present only if you turn the sound off, so that it stays off.

These notes are not sent to us, and the website does not use localStorage. The name field in the “signature” and the command terminal on the home page work only on your device: what you type is neither sent nor stored. The page also checks, on your device, preferences such as “reduce motion” and “data saver” and the connection type, only to choose animations and video quality.

The live network map

The live map on the home page shows aggregate figures for the Sistema Intranet network (how many people are working right now and in which states; states with fewer than three active people are not named) and, for partner professionals, a photo, short name and state, shown with authorisation provided for in their contracts. The photos are served by the website itself. This feature neither reads nor sends any of your data.

Photos of team members, events and partners published on the website are used with authorisation.

When you send us data

Partnership form

On the partnership form (in Portuguese, English and German) we ask for: full name, city and state, e-mail address, a mobile number for messaging and years of practice in the field (required); Brazilian Bar Association registration number and state, firm or practice name, how you heard about Macohin and a message (optional); and your authorisation to be contacted. With each submission, the server also records the date and time, the language of the form and your IP address.

The record is saved in a file on our server, outside the public part of the website and with restricted access, and is sent by e-mail to the people responsible for partnerships at Macohin. We use this data only to assess the partnership and to contact you through the e-mail address or mobile number provided.

To block automated submissions, the form has an invisible field that only bots fill in, and it accepts no more than five submissions per hour from the same IP address; for this, the server notes the IP address and time of each submission. We do not use third-party CAPTCHAs.

Providing this data is voluntary; without the required fields and the authorisation, the form cannot be sent.

Job applications

When a vacancy is open, the application page (in Portuguese) asks for your name, a mobile number, an e-mail address (optional) and answers to a questionnaire, including salary expectations, and records the date, time and IP address of the submission. The answers are saved on our server and sent by e-mail and by messaging app to the people running the selection, only for that selection process. The same protection against automated submissions applies.

Messages

If you write to us (by e-mail, messaging app or phone), we use what you send only to reply and to deal with the matter. The contact page has no form: it lists our channels.

Voice conversation with Elza

The “Talk to Elza” button opens another website, sistemaintranet.ai/elza-parceiro ↗, which has its own privacy notice (in Portuguese). In short, according to that notice: the microphone is switched on only after you allow it; Macohin does not record the audio; the voice is processed by a technology provider that may be outside Brazil; what you say (name, professional registration, contact details and practice profile) goes to Macohin’s partnerships team, only to contact you about the partnership; and the record is kept for up to 180 days if the partnership does not go ahead. The controller of that data is also Macohin Gestão Processual.

Third-party content and links

One standalone page loads third-party content: the partner accreditation page (in Portuguese), with a Google Drive video. When you open that page, your browser connects to Google, which receives your IP address and may set its own cookies, under Google’s privacy policy.

The map on that page is an image served by the website itself, made with OpenStreetMap data; the link to open the map takes you to Google Maps only if you click it.

Links to other websites (press articles, the City Council, professional networks, maps, messaging apps) take you off this site; each website’s own rules apply there.

Purposes and legal bases

Under Brazil’s General Data Protection Law (LGPD) and, where it applies, the EU General Data Protection Regulation (GDPR):

• Delivering the website and keeping it secure (Cloudflare, server logs and protection of the forms): legitimate interests (LGPD art. 7, IX; GDPR Art. 6(1)(f)).
• Handling your partnership request: your consent, given in the form’s authorisation box (LGPD art. 7, I; GDPR Art. 6(1)(a)), and steps prior to entering into a contract at your request (LGPD art. 7, V; GDPR Art. 6(1)(b)). You can withdraw your consent at any time; this does not affect processing carried out before the withdrawal.
• Selection processes: steps prior to entering into a contract at your request (LGPD art. 7, V; GDPR Art. 6(1)(b)).
• Replying to messages: steps prior to a contract or legitimate interests, depending on the matter (LGPD art. 7, V or IX; GDPR Art. 6(1)(b) or (f)).
• Complying with legal obligations, where applicable (LGPD art. 7, II; GDPR Art. 6(1)(c)).

The browser notes are strictly necessary for the features you choose (the opening sequence and the sound) and never leave your device. The website makes no automated decisions about you.

Recipients

We do not sell or pass on personal data. To run the website, we rely on:

• Cloudflare: delivery and security of the website;
• Google (Gmail): some of the mailboxes that receive partnership forms and job applications are delivered to Gmail;
• a messaging app: notices of job applications to the people running the selection.

We may also disclose data to authorities where the law requires.

International transfers

Macohin is based in Brazil. Cloudflare, Google and the messaging app operate servers in many countries. Technical access data and, for e-mail and messaging, the content of submissions may therefore be processed outside Brazil and outside the European Union (LGPD art. 33; GDPR Chapter V).

How long we keep data

• Server logs: about five weeks.
• Browser notes: until you close the tab.
• Partnership forms and job applications: for as long as needed to handle the partnership or the selection process, or until you ask for erasure, unless the law requires us to keep them.
• Voice conversation: as stated in that page’s notice (up to 180 days if the partnership does not go ahead).

Your rights

Under the LGPD (art. 18) and, where applicable, the GDPR (Arts. 15 to 21), you may at any time ask for:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or out-of-date data;
• anonymisation, blocking, restriction or erasure of data that is unnecessary, excessive or processed unlawfully;
• portability of your data to another provider;
• erasure of data processed on the basis of your consent;
• information about whom we share data with;
• withdrawal of your consent.

You may also object to processing based on legitimate interests. To exercise any right, write to [email protected]; we may ask you to confirm your identity before replying, within the legal deadlines.

You also have the right to lodge a complaint with a supervisory authority: in Brazil, the ANPD (the National Data Protection Authority); in the European Union, the authority in the country where you live or work.

Security

The website works only over an encrypted connection (HTTPS). Partnership forms and job applications are kept outside the public part of the website, in folders with restricted access on the server. If a security incident could create a relevant risk or harm to you, we will notify you and the competent authority, as the law requires.

Changes to this policy

If the website starts processing data differently, we will update this page and the date at the top.