Privacy Policy

1. Who the controller is

The controller of the personal data processed through www.efengenhariaesolucoes.com.br is EF Engenharia e Soluções, CNPJ (Brazilian company registration number) 20.300.855/0001-45, with its registered office at Av. Água Fria, 467, Sala 184, Água Fria, São Paulo - SP, CEP 02333-000, Brazil.

Contact channel for data subjects: contato@efconstrucoes.com.br or +55 (11) 2971-7035.

2. What data we collect and why

Form	Data	Purpose
Quote request	Name, company, email, phone, service of interest, city/state of the site or plant and description of requirements	To respond to your request and prepare the quote
Careers	Name, email, phone, area of interest, message and CV (PDF or Word)	To assess your application and keep your CV in our talent pool

Direct contact. If you contact us by WhatsApp, phone or email, we process the data from that conversation in order to respond to your request.

Browsing data (only with your consent). If you accept the cookie notice, we use Google Analytics 4 and the Meta Pixel, which record your visit and actions such as form submissions and clicks on the WhatsApp, email and phone links, so that we can measure results and improve our advertising on Facebook and Instagram. This information does not include the content of the forms. These tools do not run in the administrative area of the site.

Bot protection. When forms are submitted, the Cloudflare Turnstile check analyses technical browser signals, such as IP address and device characteristics, to distinguish people from bots.

We do not request sensitive personal data. Please do not include unnecessary information in your CV or message, such as marital status, children, religion or health data.

3. Legal bases

• Responding to requests for proposals, quotes and contact: preliminary procedures related to a contract, at the data subject's request (art. 7, V, LGPD).
• Assessing applications: procedures preliminary to hiring (art. 7, V). Keeping your CV in the talent pool: consent (art. 7, I), which you may withdraw at any time.
• Measurement and advertising cookies: consent (art. 7, I), given through the cookie notice.
• Protecting forms against bots and fraud: legitimate interest (art. 7, IX).
• Compliance with legal and regulatory obligations and defence in legal proceedings: art. 7, II and VI.

4. Cookies and how to change your choice

No measurement or advertising cookies are enabled before you accept. If you decline, these tools are not loaded. You can change your choice at any time via "Cookie preferences" in the site footer, and you can also block or delete cookies in your browser settings. You can also adjust your ad preferences at facebook.com/adpreferences.

5. Where data is stored and who it is shared with

We do not sell personal data. Form submissions are stored in a private database, with login-restricted access for authorised people only. To operate the site, we rely on the following providers, which process data solely to provide their services to us:

• Vercel (website hosting)
• Supabase (database and private storage of submissions and CVs, on servers located in São Paulo)
• Microsoft 365 (forwarding submissions to our corporate email)
• Cloudflare Turnstile (bot verification on forms)
• Google (Analytics) and Meta (Pixel) (measurement and advertising, only with your consent)
• Google Fonts (the site's typefaces, loaded from Google's servers)

Some of these providers may process data outside Brazil; in that case, we comply with the LGPD rules on international data transfers (arts. 33 to 36). We may also share data with authorities when required by law or court order.

6. How long we keep data

• Requests for proposals, quotes and contact: up to 5 years from the date of submission, with automatic deletion at the end of that period. If the enquiry results in a contract, the data follows the applicable legal and contractual retention periods.
• CVs: kept in the talent pool until you request deletion, based on the consent given on submission.
• Google Analytics: according to the tool's retention settings, up to a maximum of 14 months. Meta Pixel: according to Meta's policy.
• At the end of these periods, data is deleted or anonymised, unless the law requires it to be retained (arts. 15 and 16, LGPD).

7. Your rights

Under art. 18 of the LGPD, you may request: confirmation that processing takes place; access to your data; correction of incomplete, inaccurate or out-of-date data; anonymisation, blocking or deletion of unnecessary data or data processed in breach of the law; portability; deletion of data processed on the basis of consent; information about sharing; information about the possibility of refusing consent and its consequences; and withdrawal of consent. Send your request to contato@efconstrucoes.com.br.

8. Security

We adopt technical and administrative measures to protect data: encrypted connections (HTTPS) across the entire site, private database and CV storage, login-restricted access for authorised people and bot verification on forms. In the event of an incident that may cause significant risk or harm, we will notify you and Brazil's National Data Protection Authority (ANPD), in accordance with art. 48 of the LGPD.

9. Changes and complaints

This policy may be updated; the date at the top indicates the version in force. You may also lodge a complaint with the ANPD at www.gov.br/anpd.