1. Who controls the data
Conexão Ancestral is responsible for decisions concerning personal data processed directly through this website. This Policy describes the practices of the current website and does not replace the separate policies of external platforms reached through links.
2. Data we may process
- Contact: name, email address, optional telephone number, subject and the content of a message submitted through the contact form.
- Account: name, email address, credentials managed by the authentication provider and, when supplied, telephone number, Brazilian taxpayer number (CPF), address and profile image.
- Donations: history, amount, date, project and contribution status when this information is made available through an integration or recorded for accountability. The website does not directly collect full payment-card numbers.
- Technical data: IP address, access logs, browser and device information, selected language and data required to maintain an authenticated session.
3. How data is obtained
- Directly from you when you create an account, update your profile or submit a message.
- Automatically through the hosting, security and authentication services required to operate the website.
- From an external platform only when an authorized integration makes contribution or related activity data available.
4. How we use data
- Respond to messages and requests.
- Create, authenticate and manage your account and preferences.
- Display contribution records when available and support accountability.
- Prevent abuse, protect the website and comply with legal obligations.
- Send communications only when an appropriate legal basis and a genuine subscription option are available.
5. Legal bases
Under Brazil’s General Data Protection Law (LGPD, Law No. 13,709/2018), each processing activity must have a specific purpose and an appropriate legal basis. Depending on the activity, we may process data to respond to your request, provide account-related services, comply with a legal obligation, exercise legal rights, protect the website or, where required, with your consent.
6. Processors and sharing
We use providers for hosting, authentication, databases, storage and email delivery. Data may also be sent to external services you choose to access, such as a donation platform, video provider, social network or postal-code lookup service. Sharing must be limited to what is necessary for each purpose.
7. External donations and payments
When you choose to donate, you may be redirected to an external platform. Payments, financial data and receipts are processed under that platform’s terms and privacy policy. The availability of a general link or project-specific links may vary; this website does not confirm a contribution without information received from the responsible provider.
8. Local storage and cookies
In the current version, the website uses browser storage and technically necessary mechanisms to maintain sessions, remember the selected language and protect features. The website does not install first-party advertising or audience-measurement cookies. External content and pages may use their own technologies under their respective providers’ policies.
9. International transfers
Some infrastructure providers and external services may process data outside Brazil. In those cases, safeguards required by the LGPD must be adopted and data must remain limited to the stated purpose.
10. Security and retention
We adopt proportionate technical and organisational measures to reduce the risk of unauthorised access, loss or alteration. Data is retained while necessary for the stated purposes, security, accountability and legal obligations; it should then be deleted or anonymised where applicable.
11. Your rights
- Confirm whether processing takes place and access your data.
- Correct incomplete, inaccurate or outdated data.
- Request anonymisation, blocking, deletion or portability where applicable.
- Obtain information about the parties with whom data has been shared.
- Withdraw consent and obtain information about the consequences of withholding it when consent is the legal basis.
- Submit a request to Conexão Ancestral and, where applicable, a petition to Brazil’s National Data Protection Authority.
12. Contact
To exercise your rights or ask privacy questions, contact us at contato@conexaoancestral.org.
13. Changes to this policy
This Policy may be updated to reflect changes to the website or its processing practices. The date of the current version will be shown at the beginning of this page.