Privacy and Data Protection Policy

Last updated: 12 July 2026.

1. Controller and contact

Associação Auxílio à Reciclagem de Eletrônicos e Inclusão Digital – Ecobraz, registered under Brazilian CNPJ 14.197.457/0001-42, is responsible for the decisions concerning the processing of personal data described in this policy. Requests may be sent to contato@ecobraz.org.br.

2. Data collected

The collection request form may record name, company, e-mail address, telephone number, the address or postcode of the operation, city, state, materials, volume, documentation requirements, timescale, referring page and campaign parameters. Technical data such as IP address, browser and access logs may be processed for security, diagnostics and measurement.

3. Purposes

Assessing the request and verifying whether the collection is feasible;
Making contact, preparing a proposal and organising the operation;
Recording the enquiry in our sales system;
Preventing abuse, fraud and security failures;
Measuring the performance of the website and of campaigns;
Sending marketing communications only where authorisation or another applicable legal basis exists.

Data may be processed by suppliers required for hosting, security, customer service, CRM, automation and communication. The form feeds requests into Ploomes. Where the data subject ticks the communications option, their contact details may also be sent to E-goi. These suppliers receive only the data necessary for their respective purposes.

Processing may take place for preliminary procedures related to the request, performance of a contract, compliance with obligations, the regular exercise of rights, assessed legitimate interest and consent, depending on the purpose. Marketing authorisation is optional and may be withdrawn.

6. Retention

Data are kept for the period necessary for handling the enquiry, the commercial relationship, legal obligations, dispute prevention and the protection of rights. They may subsequently be erased, anonymised or retained where an applicable legal ground exists.

7. Data subject rights

Data subjects may request confirmation of processing, access, rectification, information about data sharing and the other rights provided for in applicable legislation. Requests must allow the identity of the requester to be verified securely.

8. Cookies and metrics

The website may use essential technologies and measurement tools for operation, security and performance analysis. Browser settings can limit cookies, although some functions may be affected.

9. Security and updates

Ecobraz adopts technical and administrative measures proportionate to the processing. No environment is entirely immune to incidents. This policy may be updated to reflect operational, legal or technological changes, with the date of the current version indicated.

What we use: the website uses Google Analytics 4 to measure visits, traffic sources and interactions (such as button clicks and form submissions). These measurements use Google cookies and identifiers (tag G-Y1ERW8GNPR).

Consent mode: we apply Google Consent Mode v2. For visitors from the European Union, the European Economic Area, the United Kingdom and Switzerland, measurement starts switched off and is only enabled after acceptance in the cookie banner. For all other visitors, measurement starts enabled, with the option to decline available in the same banner.

Your choice: your decision (accept or decline) is stored in your browser and applies to subsequent visits. You can change it at any time via the Cookie preferences link in the footer of any page.

Heatmaps (Microsoft Clarity): we use Microsoft Clarity to understand how visitors use the website (the areas most clicked, how far pages are scrolled and anonymised session replays), with the aim of improving the experience. Text typed into form fields is masked by default and the tool respects the same cookie-banner choice described above.

Ad conversion measurement: when the collection form is submitted, the e-mail address and telephone number provided may be transmitted to Google in encrypted (hashed) form, solely to identify which advert originated the enquiry (Google Ads enhanced conversions). This transfer respects the same cookie-banner choice described above: where cookies are declined, these data are not used.

What we do not do: we do not sell browsing data and we do not send marketing communications without your specific consent, which is given via a separate, optional checkbox when the request is submitted.