Who this applies to
This page applies to the processing of data of people in Brazil and to bookings at Brazilian car parks (br.parkz.pt). It complements the privacy policy, which details the data collected and retention periods.
Controller and data protection officer
Controller: Eatz, Lda, Rua Luís de Camões, 161, 1.º Esq., 4470-190 Maia, Portugal.
Contact channel for the data protection officer (“encarregado”, article 41): [email protected].
Legal bases (article 7)
- Performance of a contract (item V): making and managing your booking.
- Legal obligation (item II): issuing tax documents, which may require your CPF.
- Legitimate interest (item IX): security, fraud prevention, aggregated statistics and improving the service.
- Regular exercise of rights (item VI): defending legal claims.
- Consent (item I): offers by e-mail and optional cookies.
The CPF is optional at checkout and only used for tax identification and fraud prevention.
Your rights (article 18)
- confirmation that we process your data and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymisation, blocking or deletion of unnecessary data or data processed unlawfully;
- portability to another provider;
- deletion of data processed on the basis of consent;
- information about who we share data with;
- information about the option not to consent and its consequences;
- withdrawal of consent;
- review of decisions taken solely by automated processing (article 20).
Send your request to [email protected]. We reply straight away in simplified form or, if you ask for a full statement, within 15 days.
Sharing and international transfers
We share data with the operator of the car park you booked, with Stripe (payments) and with hosting and e-mail providers. Some of them are outside Brazil (European Union and United States). These transfers are made to perform the contract you asked for and under contractual clauses ensuring a level of protection compatible with the LGPD (article 33).
Security and incidents
We take technical and administrative measures to protect your data (article 46). If a security incident may cause significant risk or harm, we notify the ANPD and the people affected, as required by article 48.
Complaints
If you are not satisfied with our answer, you can petition the National Data Protection Authority (ANPD) or consumer protection bodies such as Procon and consumidor.gov.br.