Home

EBBIM · Empresa Brasileira de BIM

LGPD and data subject rights

This page complements the privacy policy and provides a reference for EBBIM ecosystem websites. It explains Brazil's General Personal Data Protection Law — Law No. 13,709/2018 (LGPD) — and the contact channel for matters involving your data.

Scope of this page

The LGPD protects data relating to an identified or identifiable natural person. Account information, enquiries and social connection details may constitute personal data. EBBIM — Empresa Brasileira de BIM, CNPJ 65.282.573/0001-09, provides ebbim@ebbim.com.br for requests about operations under its responsibility.

Each service remains responsible for explaining its purposes, data and applicable conditions. Linking to this page does not transfer another company's responsibility or prove that two products use the same data or permissions.

Processing principles

Processing must observe purpose, suitability, necessity, free access, data quality, transparency, security, prevention, non-discrimination and accountability, as provided in Article 6 of the LGPD.

This means defining why data are necessary, limiting their use to the stated operation, providing information to the data subject and adopting protective measures. Access to data in one product does not automatically authorise use in another service or for another purpose.

Legal bases and consent

The legal basis depends on the actual operation. Consent, performance of a contract or preliminary steps requested by the data subject, legal obligations, the exercise of rights and legitimate interest are distinct grounds under the law; they are not interchangeable.

Where required, consent must be freely given, informed and unambiguous, linked to a specific purpose. Withdrawal must be possible; it does not in itself make previously lawful processing unlawful. Sensitive personal data and children's and adolescents' data have their own requirements under the LGPD.

Data subject rights

Articles 18 to 20 of the LGPD provide rights subject to the legal conditions of each case. They include:

  • Confirmation of processing and access to personal data.
  • Correction of incomplete, inaccurate or outdated data.
  • Anonymisation, blocking or erasure of unnecessary or excessive data, or data processed in breach of the law.
  • Portability, as regulated and subject to commercial and industrial secrecy.
  • Erasure of data processed with consent, except where retention is legally permitted.
  • Information about sharing and the possibility and consequences of withholding consent.
  • Withdrawal of consent and objection where provided by law.
  • Requesting review of decisions based solely on automated processing that affect your interests, where such a situation exists.

How to submit a request

Write to ebbim@ebbim.com.br with the subject “Personal data — LGPD”. Identify the website or product, your relationship with the service and your specific request. An account or enquiry identifier, if known, may help locate the record. Do not send passwords, tokens or document copies unless necessary and directed through an appropriate channel.

Proportionate verification of identity or representation may be required to prevent unauthorised access. Responses must follow the applicable legal time limits and procedures. Under Article 19, the LGPD provides for immediate simplified confirmation or access, or a clear and complete statement within 15 days; this is not a blanket promise to resolve every other type of request within that period.

Where a request cannot be fulfilled, the applicable reasons must be explained, such as no processing under EBBIM's responsibility or a legal restriction. Data subjects may also petition Brazil's National Data Protection Agency (ANPD) under its procedures.

Retention, sharing and incidents

Erasure is not automatic in every situation: the LGPD permits retention, for example, to comply with a legal or regulatory obligation, subject to legal conditions. Responses must distinguish data that can be erased from data whose retention has a lawful justification.

Sharing and international transfers must have a purpose and basis compatible with the law. Integration between services does not remove this requirement. Incidents that may cause significant risk or harm must be assessed and reported in accordance with applicable legal and regulatory obligations. Suspicions may be reported to ebbim@ebbim.com.br.

Relationship with service policies

The privacy policy describes the data flows covered for the institutional website and Dicas de BIM. Other products may provide additional information about forms, accounts, contracts, enrolments or integrations. Identify the particular service when making an enquiry.

The Portuguese, English and Spanish versions serve the same informational purpose. This page does not claim ANPD certification and does not replace the legal text or an assessment of a specific processing operation.

Personal data enquiries

ebbim@ebbim.com.br

References

Related information

Privacy policy