Responsibility and scope
EBBIM — Empresa Brasileira de BIM, identified by Brazilian business registration number (CNPJ) 65.282.573/0001-09, is responsible for the operations described in this policy. The privacy contact address is ebbim@ebbim.com.br.
Other ecosystem websites and services may link to this page as a reference. Such a link does not mean they all use the same forms, providers or processing activities. Purchases, enrolments and other product features must be considered according to the information provided by the relevant service.
Contact and enquiries
The institutional website contact form requests a name, email address and message; a phone number is optional. These data are used to receive the request, respond and continue providing assistance. Messages are emailed to the EBBIM team and may be forwarded to its internal relationship management system to organise assistance.
Protection against automated submissions uses Cloudflare Turnstile. Form validation may send the verification token and the connection's IP address to that provider. Avoid including sensitive data or personal documents that are unnecessary for your request.
Partnership proposals
The partnership form requests a name, email address, LinkedIn professional profile URL, description of the proposal and a CV file. A mobile number and Lattes CV URL are optional. The data and file are emailed to EBBIM to assess the proposal and contact the interested person. Providing a profile URL in this form does not authorise access to or publishing on the social network account.
Browsing, infrastructure and cookies
Operating the websites involves processing access requests and technical data, such as IP addresses, browser information, timestamps and error records, depending on the services used. The institutional website uses Vercel Web Analytics for browsing metrics. The provider's documentation explains how these metrics are produced.
The Dicas de BIM editorial dashboard uses authentication and session cookies for account access. Embedded content, such as YouTube videos, may connect to its provider and use that provider's technologies. Browser and platform settings allow you to manage cookies and other features; restrictions may affect functionality.
Editorial accounts and social connections
Dicas de BIM dashboard accounts contain identification and authentication data, a name, an email address and an editorial role. These data enable access and content management.
When a social connection is authorised, processing may include the profile identifier and name, authorisation credentials, connection validity and publishing details such as text, destination, scheduled time and post identifier. The purpose is to carry out publishing operations authorised by the responsible person. Authorisation takes place on the social network itself; the blog's connection form does not request your LinkedIn password.
Publishing on behalf of a Page depends on permissions granted by the network and its responsible person. Associating an application with a company does not authorise every operation on its behalf. The responsible person may revoke access through the social network's settings and ask EBBIM for information or action regarding connection data.
Purposes and legal bases
Processing must be limited to the purpose and legal basis applicable to each operation. Handling a data subject's enquiry may involve steps requested before entering into a contract; service delivery may involve performance of a contract; legal obligations and the exercise of rights may require specific records. Where an operation depends on consent, that consent must be requested specifically and may be withdrawn.
Where applicable, legitimate interest requires assessment of the purpose, necessity and the data subject's rights. Merely visiting the website is not treated by this policy as blanket consent for any use of data.
Providers and sharing
The services described use providers for hosting and infrastructure, message delivery, databases, file storage, protection against automation and social integration. Components used include Vercel, Resend, Supabase and Cloudflare, together with the platforms providing embedded content or authorised connections.
Contact data are used for EBBIM assistance. Details of an authorised post are transmitted to the selected network. Requests from authorities and legal obligations may require other disclosures within the limits of the law. Each provider also publishes information about processing under its own responsibility.
Provider infrastructure may involve processing outside Brazil. International transfers must comply with the LGPD and applicable regulations. Information about a specific operation may be requested through the privacy contact address.
Retention and security
Retention must take account of the purpose of the data, legal obligations and the need to exercise rights. This policy does not set one retention period for every category. You may request information about the period or criteria applicable to your data.
The websites use HTTPS connections and authentication for restricted dashboards. Data protection requires technical and organisational measures appropriate to each operation. No service can guarantee absolute freedom from risk; suspected exposure or misuse can be reported through the privacy contact address.
Your rights and how to contact us
You may request confirmation of processing, access, correction and other rights provided by the LGPD. Requests for erasure, portability, objection or withdrawal of consent will be considered according to legal requirements and exceptions. The LGPD page explains these rights and how to submit a request.
Send your request to ebbim@ebbim.com.br, identifying the service and what you wish to consult or correct. If identity verification is necessary to protect the data, it must be proportionate to the request. Do not send passwords or social network credentials.
Updates
This policy may be updated to reflect changes in services or processing information. The version date appears at the top of the page. Updating this text alone does not legitimise changes of purpose or operations that require authorisation.
