Privacy Policy

1. Who we are

The controller of your personal data is DANIELE SOUZA DE AMORIM LTDA, registered under Brazilian company number (CNPJ) 47.534.103/0001-03, trading as DSA Outsourcing Comercial, which provides outsourced commercial operations (SDR, Inside Sales, Closers and Customer Service).

This policy applies to the website site.dsa-sistemas.com — including the pages for each service and the English version — and to the personal data collected through it, including once that data is handled in DSA's own internal systems.

2. What data we collect

a) What you send us

When you fill in the contact form, you provide:

• Name
• Phone / WhatsApp
• E-mail
• Message (whatever you choose to write)

b) What is recorded along with your submission

When you submit the form, our system automatically records, together with your message:

• the page of the website the contact came from;
• the source of your visit — the campaign or website that brought you here (see item 7);
• the browser and device you used;
• whether the e-mail delivery succeeded.

c) Data about your browsing

• Audience measurement: we record visits and pages viewed to understand how the site is used. Part of that measurement is performed by Cloudflare, which delivers the pages, and happens on every visit; measurement through Google Analytics only happens if you accept cookies (item 7).
• Server logs: as on any website, the server keeps, for a limited time, the IP address, date and time, the address requested and the browser identification. These records exist for security, to investigate abuse and to comply with the law.

3. Why we use your data (purposes)

• To reply to your enquiry and present our services;
• To prepare tailored commercial proposals;
• To contact you by phone, WhatsApp or e-mail;
• To know which channel, campaign or ad brought you to us;
• To measure the performance of the website and the results of our marketing, including advertising;
• To protect the website against automated submissions, abuse and fraud.

4. Legal basis

Each use has its own legal basis, under article 7 of the LGPD:

• Consent — submitting the form and, separately, accepting analytics and advertising cookies in the notice shown on the site;
• Legitimate interest — replying to your request, conducting commercial discussions, understanding which channel you came from and keeping the site secure;
• Compliance with a legal obligation — keeping access logs, as required by the Brazilian Internet Act (Marco Civil da Internet).

5. Who we share it with

We do not sell your data. It may be processed by service providers that make the website work, always limited to the purposes above:

6. International data transfers

The providers listed in item 5 are foreign companies and may store or process data on servers outside Brazil. These transfers take place to make the form submission, the delivery and security of the website and the measurement of audience and advertising possible, and rely on the data protection safeguards and contractual commitments offered by those providers, under chapter V of the LGPD.

7. Cookies, browser storage and measurement

On the pages of the site, your first visit shows a notice with the options Accept and Decline (this policy page does not show the notice — to review your choice here, use the button below). Your choice is stored in your own browser and applies to future visits.

• If you accept: we load Google Analytics and the Meta Pixel. That same acceptance releases both usage measurement and the signals used to measure and personalise advertising.
• If you decline: neither is loaded, and no analytics or advertising cookie is created.
• Regardless of your choice, two things still happen: the audience measurement performed by Cloudflare when pages are delivered, and a record kept in your browser of which campaign or website brought you here — stored for up to 90 days and sent along when you fill in the form, so we know how you found us. That record does not identify you personally.

8. How long we keep it

We back up our system every day. The backups are encrypted before they leave the server (AES-256, with the key kept elsewhere) and are stored outside it, with Cloudflare, which deletes them automatically after 14 days. So, once deleted, data may still remain in a backup for up to that period — unreadable without the key — until the backup itself is discarded.

9. Your rights

Under article 18 of the LGPD, you may at any time ask us to:

• Confirm whether we process your data, and access that data;
• Correct incomplete, inaccurate or outdated data;
• Anonymise, block or delete data that is unnecessary, excessive or processed unlawfully;
• Receive your data in a format you can take to another provider (portability);
• Delete data processed on the basis of your consent;
• Know who we have shared your data with;
• Be told that you may refuse consent, and what happens if you do;
• Withdraw your consent;
• Object to processing carried out without consent, where you believe it does not comply with the law;
• Request a review of decisions taken solely by automated means, if any.

We reply as quickly as we can. If you are not satisfied with our answer, you may file a complaint with the ANPD — Brazil's National Data Protection Authority.

10. Data Protection Officer

The data protection officer responsible for receiving communications from data subjects and from the ANPD is Felipe Estácio, who can be reached through the same channels listed in item 9.

11. Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration: the site always runs over an encrypted connection, access to the enquiries we receive is restricted to DSA's management, your IP address is not stored alongside the enquiry you send, and backups are encrypted. No method of transmission over the internet is 100% secure, but we work to maintain an adequate level of protection.

12. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on this page, with the date of the last update and the version number shown at the top. Material changes take effect once published.

13. Contact

Questions about this policy or about how we handle your data? Talk to us at daniele.amorim@dsarepresentações.com or on WhatsApp +55 47 99627-4566.