Privacy Policy
Last updated: 3 de janeiro de 2025
Introduction
Instituto Orca values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect your information when you visit our website or interact with us.
By using our website or providing your personal data, you agree to the practices described in this policy. We recommend that you read this document carefully.
Data We Collect
Data Provided Directly by You
We collect information that you voluntarily provide to us, including:
Contact Form:
- Full name
- Email address
- Phone (optional)
- Message subject
- Message content
Talent Bank:
- Full name
- Email address
- Phone
- Area of expertise/specialization
- Professional experience
- Availability
Event Registration:
- Full name
- Email address
- Phone
- Event-specific information
Data Collected Automatically
When you browse our website, we automatically collect:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent
- Date and time of access
- Referring website
Purposes of Processing
We use your personal data to:
- Communication: Respond to your messages, questions, and requests
- Volunteer Management: Evaluate applications and manage participation in projects
- Events: Organize and communicate about events and activities
- Newsletter: Send updates about our activities (with your consent)
- Donations: Process and acknowledge contributions
- Improvements: Analyze website usage to improve our services
- Legal Compliance: Meet legal and regulatory obligations
Legal Basis for Processing
We process your data based on:
- Consent: For newsletter and marketing communications
- Contract Performance: To process your participation in events or volunteering
- Legitimate Interest: To improve our services and respond to communications
- Legal Obligation: When required by law or regulation
Data Sharing
We may share your data with:
- Service Providers: Companies that assist us in operations (hosting, email, analytics)
- Partners: Partner organizations in specific projects (with your consent)
- Legal Obligations: Competent authorities when required by law
- Rights Protection: To protect the rights of Instituto Orca or third parties
Storage and Retention
Data Location
Your data is stored in:
- Secure servers located in Brazil and trusted international providers
- For the period necessary to fulfill the purposes described in this policy
- In compliance with applicable legal terms
Specific Retention Policies
- Contact Data Retained for up to 5 years after last interaction for communication history
- Volunteer Data Retained while there is mutual interest in collaboration or participation in projects
- Event Data Retained for 2 years after event completion for certification and follow-up purposes
- Navigation Data Analytics data retained for up to 26 months according to Google Analytics policies
Security
We implement appropriate technical and organizational measures to protect your data against:
- Data encryption in transit and at rest
- Access control based on need-to-know
- Continuous system monitoring and threat detection
- Secure and regular backups for data loss prevention
- Regular team training on security practices
Your Rights
According to LGPD, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct incorrect or outdated data
- Deletion: Request deletion of your data
- Portability: Receive your data in a structured format
- Opposition: Oppose processing in certain situations
- Revocation: Withdraw consent at any time
- Information: Know who we share your data with
How to Exercise Your Rights
To exercise any of your rights, contact us through:
Email: contact@institutoorca.org.br contato@institutoorca.org.br
Subject: "Data Protection Rights" Data Protection Rights - [Describe your request]
We will respond to your request within 15 business days as established by applicable law
Cookies and Similar Technologies
We use cookies to improve your browsing experience. For more information, see our
Children and Adolescents
Our website is not directed to children under 13 years old. We do not intentionally collect data from children. If you believe we have collected data from a child, please contact us immediately.
International Transfer
Your data may be transferred to servers located outside Brazil. In such cases, we ensure that transfers are made with appropriate safeguards and in compliance with LGPD.
Changes to this Policy
We may update this Privacy Policy periodically. We will notify significant changes through:
Legislation and Jurisdiction
This policy is governed by Brazilian law, especially the General Data Protection Law (LGPD). Any dispute shall be submitted to the courts of [City], to the exclusion of any other.
Contact and DPO
Orca Institute
Website: www.institutoorca.com.br www.institutoorca.com.br
Email: privacy@institutoorca.org.br contato@institutoorca.org.br
For specific data protection questions:
Email: privacy@institutoorca.org.br contato@institutoorca.org.br
Subject: Data Protection - [Describe your request]