GDPR (EU), LGPD (Brazil) & CCPA Compliant

Privacy & Data Protection Policy

Controller: BrunoDEV•Last Updated: October 2026•Contact: [email protected]

1. Overview & Commitment

Confidentiality and data protection are core principles at BrunoDEV. This Privacy Policy outlines how we collect, process, store, and safeguard personal data when you visit our website or submit inquiries regarding our Cybersecurity, DevOps, Cloud Architecture, Artificial Intelligence, and Software Engineering services.

We operate in strict accordance with the General Data Protection Regulation (GDPR - Regulation EU 2016/679), Brazil's General Data Protection Law (LGPD - Law 13,709/2018), and internationally recognized cyber defense standards (ISO 27001 & CIS Controls).

2. Personal Data Collected

We process only the minimum information necessary to fulfill your request:

  • Information voluntarily provided via the contact form: Full name, professional or personal email address, company name (optional), estimated budget bracket, and project description.
  • Technical and security metadata: IP addresses (anonymized and filtered to mitigate DDoS/brute-force attacks), request timestamps, browser headers, and approximate country geolocation for automatic language adaptation.
  • No sensitive personal data: We do not collect or request special categories of data (e.g., racial/ethnic origin, political or philosophical opinions, health or biometric information).

3. Legal Bases and Purposes of Processing

Processing is carried out strictly under valid legal frameworks:

  • Performance of Pre-contractual Steps (GDPR Art. 6(1)(b) / LGPD Art. 7(V)): To respond to inquiries, evaluate project requirements, and prepare formal consulting proposals requested by you.
  • Legitimate Interests & Cyber Defense (GDPR Art. 6(1)(f) / LGPD Art. 7(IX)): Maintaining server integrity, protecting against automated bot attacks, denial-of-service attempts, and infrastructure abuse.
  • Compliance with Legal Obligations: When mandated by applicable statutory or tax regulations.

4. Security & Data Retention

We employ enterprise-grade cybersecurity controls to protect your data from unauthorized access or destruction:

  • End-to-end transport layer encryption via TLS 1.3 / HTTPS on all network communications.
  • Zero Trust server architecture, restrictive firewall policies, and active rate limiting.
  • We never sell, rent, or trade your personal information with third-party brokers or advertisers.
  • Data is retained only as long as necessary to handle your inquiry or maintain our contractual relationship, after which it is permanently purged.

5. Cookies & Local Storage

Our site is intentionally free of invasive behavioral trackers:

  • Essential Cookies: Required solely for network routing, security verification, and rate limiting.
  • Browser Local Storage: Used strictly to remember your language selection (lang) and your cookie banner preference (brunodev_cookie_consent).
  • No Third-Party Ad Trackers: We do not deploy third-party advertising pixels or behavioral profiling tools.

6. Your Rights

Under GDPR Articles 15–22 and LGPD Article 18, you maintain full control over your personal data:

  • The right to access and obtain a copy of your stored personal data;
  • The right to rectify inaccurate, out-of-date, or incomplete data;
  • The right to request data erasure ("Right to be Forgotten");
  • The right to restrict or object to certain processing activities;
  • The right to data portability and immediate consent revocation.

7. Data Protection Officer & Inquiries

To exercise any of your data protection rights, reach out directly to our dedicated contact point:

Email: [email protected]
Expected turnaround: Within 1 business day.