LGPD

1. Our commitment

BW processes personal data in accordance with the Brazilian General Data Protection Law (Law 13.709/2018), following the principles of purpose, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination and accountability. This page complements our Privacy Policy.

2. What personal data we process

• Website contact and quote form: name, company, email, phone, subject, message, product of interest and the page the request was sent from.
• Technical newsletter: email address and chosen language.
• Business relationship: work name, job title, email and phone of customer and supplier contacts, plus the history of service, proposals, orders and deliveries.
• Company data: tax ID (CNPJ), legal name, address and other public registration details, including those looked up in the Federal Revenue database.
• Tax and financial data: electronic invoices, billing, payments and receipts related to sales and purchases.
• Technical security data: IP address and access logs of the company's internal system, used to protect accounts against unauthorised access.
• We do not process sensitive personal data (such as health, religion or biometrics) or data of children and teenagers.

3. What we use it for and on which legal basis

• Answering requests, specifying products and sending quotes — pre-contractual steps requested by the data subject (art. 7, V).
• Processing orders, deliveries, warranty and billing — performance of a contract (art. 7, V).
• Issuing and keeping tax documents and meeting accounting and tax duties — legal obligation (art. 7, II).
• Sending the technical newsletter — consent, which you can withdraw at any time (art. 7, I).
• Keeping the customer relationship, following up on proposals and improving service — legitimate interest, within what you would reasonably expect (art. 7, IX).
• Protecting the website and the internal system against fraud and unauthorised access — legitimate interest and fraud prevention (art. 7, IX).
• Defending the company in legal, administrative or arbitration proceedings — regular exercise of rights (art. 7, VI).

4. Who we share it with

We never sell, rent or transfer personal data. We share only what is needed, with:

• Manufacturers represented by BW, when required to specify the product, issue the proposal or fulfil the order.
• Carriers, to deliver the goods.
• Our accounting firm, to meet tax and accounting duties.
• Technology providers that host the website, the database and file storage (Cloudflare), plus email and messaging services (such as WhatsApp, when you choose that channel).
• Public authorities, when required by law or court order.

5. International transfer

Some technology providers may store or process data on servers outside Brazil. In those cases we use providers that adopt contractual clauses and security measures compatible with the LGPD (art. 33).

6. How we protect data

• Encrypted communication (HTTPS) across the website and the internal system.
• Internal system access restricted to authorised staff, with permission profiles (sales, finance, management).
• Passwords stored encrypted and automatic lock after repeated access attempts.
• Tax files kept in private storage, with no public access.
• Staff confidentiality commitment and periodic access reviews.

7. How long we keep it

• Contacts and quotes: for as long as needed to serve you and maintain the business relationship. Contacts that did not move forward can be deleted or anonymised at any time, on request.
• Newsletter: until you unsubscribe.
• Tax and accounting documents: for the period required by tax law (as a rule, at least 5 years).
• Contract-related records: for as long as needed to defend rights, under the legal limitation periods.

8. Cookies

The bwinstrumentacao.com.br website uses no advertising or third-party tracking cookies; it uses only resources strictly required for it to work. The company's internal system uses a session cookie only to keep staff signed in.

9. Changes to this page

We may update this content to reflect changes in our processes or in the law. The date of the last update is always shown at the top of the page.

Your rights as a data subject (LGPD art. 18)

• Confirmation and access

  Know whether we process your data and receive a copy of it.

• Correction

  Fix incomplete, inaccurate or outdated data.

• Anonymisation, blocking or deletion

  Of unnecessary or excessive data, or data processed unlawfully.

• Portability

  Receive your data in a structured format to take to another provider.

• Deletion

  Ask for deletion of data processed on the basis of your consent.

• Information on sharing

  Know which companies and bodies your data was shared with.

• Information on consent

  Know what happens if you do not give consent.

• Withdrawal of consent

  Withdraw consent at any time — for example, unsubscribe from the newsletter.

• Objection and review

  Object to unlawful processing and ask for review of automated decisions.