Who is responsible
SOLERWORKS LTDA, São Paulo, SP, Brazil, is the controller for the processing described here. You can reach the privacy contact at privacy@solerworks.com. Company details are in the Impressum.
What this notice covers
It covers this website and our business correspondence. It does not cover personal data that SolerWorks processes for an enterprise client as a data processor. That processing is governed by the data processing agreement with that client, and the client is the controller.
Visiting the site
When your browser requests a page, the hosting provider that serves this site processes your IP address, the time of the request, the page requested and your browser type in its server logs. This is needed to deliver the site and keep it secure. The legal basis is our legitimate interest in running a secure website (GDPR Art. 6(1)(f); LGPD Art. 7, IX). We do not combine these logs with any other data and do not use them to identify you.
Forms and email
The site has three forms: the deal qualification form, the audit dossier request and the sub-processor change notification signup. We process what you enter, which is your name, work email, company, role and your answers about the engagement, to assess and answer your request. The legal basis is taking steps at your request before entering into a contract (GDPR Art. 6(1)(b); LGPD Art. 7, V) and our legitimate interest in handling business inquiries (GDPR Art. 6(1)(f); LGPD Art. 7, IX).
If a form cannot be sent from the site, it opens a drafted message in your own email program instead. In that case nothing reaches us until you send that email. The same applies when you write to any of our addresses directly.
The notification signup is used only to tell you when the sub-processor list changes. You can stop it at any time by writing to the privacy contact.
International transfers
SolerWorks is established in Brazil, so your data is processed there. For data coming from the European Economic Area this relies on the European Commission’s adequacy decision for Brazil of January 2026 (GDPR Art. 45). Where a service provider processes data in another country, we rely on an adequacy decision or on Standard Contractual Clauses.
How long we keep it
We keep inquiries for as long as it takes to handle them and any relationship that follows, and then delete them unless the law requires us to keep them longer. Notification signups are kept until you ask us to stop. Server logs are kept by the hosting provider for a limited period under its standard settings.
Your rights
You may ask for access to your data, correction, deletion, restriction of processing, a portable copy, and you may object to processing based on legitimate interests. The LGPD gives equivalent rights under Art. 18. Write to privacy@solerworks.com and we will answer within the period the law sets. You may also complain to the data protection authority where you live or work, or to Brazil’s authority, the ANPD.