Privacy Policy

1. Who is the controller

The controller of the personal data processed on this platform is DMG Drives (CNPJ 37.847.582/0001-56), responsible for defining the purposes and means of processing described in this policy.

2. Data we collect

We collect only the data necessary to handle requests and deliver our services, which may include:

• Identification and contact data (name, email, phone and company) provided in forms or via WhatsApp;
• Browsing data (IP address, pages visited, device and access source) collected through cookies and analytics tools;
• The content of messages sent in quote requests, technical support enquiries or training registrations.

3. Purpose of processing

We use the data for legitimate and specific purposes, such as:

• Respond to commercial contacts and technical support requests;
• Prepare quotes and manage training registrations;
• Improve the browsing experience and measure site performance;
• Comply with legal, regulatory and contractual obligations.

4. Legal basis (LGPD)

Each processing activity relies on a legal basis set out in Article 7 of the LGPD, depending on the context:

• The data subject’s consent, particularly for non-essential cookies and marketing communications;
• Performance of a contract or of preliminary steps taken at the data subject’s request;
• Legitimate interest, to improve our services and security while respecting your rights and expectations;
• Compliance with a legal or regulatory obligation.

5. Sharing and retention

We do not sell personal data. Sharing occurs only with processors and partners strictly necessary to deliver the services (for example, hosting, analytics and messaging providers), always under confidentiality obligations. Data is kept only for as long as necessary for the stated purposes or as required by law.

6. Data subject rights

Under Article 18 of the LGPD, you may at any time request:

• Confirmation that processing exists and access to your data;
• Correction of incomplete, inaccurate or outdated data;
• Anonymization, blocking or deletion of unnecessary or non-compliant data;
• Portability and information about data sharing;
• Withdrawal of consent and objection to processing based on legitimate interest.

7. Information security

We adopt technical and organizational measures to protect personal data against unauthorized access, loss, alteration or improper disclosure, reviewed periodically in line with industry best practices.