skip to content
governance · LGPD

Privacy Policy.

last updated · 25 August 2026 · under legal review

This is a courtesy translation. The Portuguese version is the one that prevails for legal purposes, and it is the version under legal review.

1. Who we are

Associação Casa Hacker, CNPJ (Brazilian company registry) 36.038.079/0001-97, headquartered in São Paulo and operating in Campinas, São Paulo State. We handle personal data in line with the LGPD (Brazilian General Data Protection Law, Law no. 13.709/2018). Data Protection Officer (DPO): privacidade@casahacker.org.

2. Data we handle

  • Event registrations: name, CPF (Brazilian individual taxpayer ID), date of birth, contact details, address, gender and accessibility needs (as provided in the form), used solely to organise your participation.
  • Contact forms and e-mail: name, e-mail and the message you send.
  • Programme applications: the data provided in that programme’s form.

3. Cookies and local storage

Essential (always on): we store in your browser (localStorage) your accessibility bar preferences (theme, font, contrast and so on) and your choice in this notice. None of this identifies you or leaves your device.

Statistics (optional, only with your consent): if you accept in the notice, we enable Google Analytics 4 with anonymised IP to understand how the site is used. You may decline without losing any functionality. To withdraw later, clear this site’s data in your browser — the notice reappears on your next visit.

4. Why we handle it

  • Consent — optional forms and communications;
  • Programme delivery — registration for events and training;
  • Legitimate interest — security and fraud prevention.

5. Sharing

We do not sell or transfer personal data. We share only with:

  • Strictly necessary processors (e-mail provider, hosting), under contract with a data protection clause;
  • Authorities, where legally required.

6. Your rights (LGPD, art. 18)

At any time you may:

  • Confirm that processing exists and access your data;
  • Correct incomplete or inaccurate data;
  • Request anonymisation, blocking or deletion;
  • Request portability;
  • Withdraw consent.

To exercise these rights, write to privacidade@casahacker.org — we respond within 15 days. You may also report to the Brazilian data protection authority, ANPD.

7. Security

Data in transit via TLS 1.2+. Data at rest on Brazilian servers with encryption and encrypted backups.

8. Retention

  • Contact form — 24 months;
  • Event or programme registration — 5 years after it ends;
  • Preferences in your browser — until you clear them.