Privacy policy

Data processed and purposes

When you contact us by email or telephone, we may process your name, contact details, company, message content and any documents you send. We use this information to respond to your inquiry, prepare an offer, take requested pre-contractual steps, manage a contractual relationship and establish, exercise or defend legal claims.

When you access the website, technical data necessary for delivery and security may be processed, such as your IP address, date and time, requested page, referring address, browser type, operating system and device information. These data are used to provide the website, prevent abuse, diagnose faults and maintain security.

Legal bases

Depending on the circumstances, processing is based on the performance of a contract or requested preliminary procedures, compliance with a legal or regulatory obligation, the regular exercise of rights, or the controller's legitimate interests, while respecting the data subject's rights and legitimate expectations.

Hosting, recipients and international transfers

This website is provided through the ChatGPT Sites platform. To deliver the website, OpenAI and infrastructure providers engaged by the platform may process technical data strictly necessary for the service to function securely.

We do not sell personal data or share it for advertising. Personal data may be shared with legally competent public authorities and public bodies only where required by law or an applicable order.

We treat your messages confidentially. Our email communication uses transport encryption whenever the customer’s email provider supports it. For sensitive information, we can also communicate via S/MIME-encrypted email or arrange a confidentiality agreement in advance.

When you choose the booking option, you are redirected to Google Calendar, which may process the information you provide to organize the appointment and make Google Meet available. Meet meeting data is encrypted in transit. AUTOSOFT does not record meetings. Chat-message retention depends on the applicable Google Meet settings.

For details, see the Google Privacy Policy.

Because technical services may operate in different countries, international transfers of data may occur. In such cases, the applicable requirements and safeguards of the LGPD will be observed.

Cookies and tracking

The code of this website does not use advertising cookies, audience analytics tools or external trackers. The hosting platform may use technologies strictly necessary for security and service delivery.

If optional features requiring consent are added in the future, they will only be enabled after an appropriate consent mechanism has been implemented and this policy has been updated.

Retention period

Communication data are retained only for as long as necessary to respond to the inquiry, maintain the business relationship, comply with legal obligations and establish, exercise or defend legal claims. Technical logs are retained for as long as required for platform operation and security. Data are then deleted or anonymized unless retention is required or permitted by law.

Data-subject rights

Under Article 18 of the LGPD, you may request, where applicable: confirmation that processing exists; access; correction; anonymization, blocking or deletion of unnecessary or unlawfully processed data; portability; information about sharing; information on the possibility and consequences of withholding consent; withdrawal of consent; objection to processing; and review of automated decisions as provided by law.

To exercise your rights, use the privacy contact above. We may request information strictly necessary to confirm your identity and protect your data.

Security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration or improper disclosure.