Privacy Policy

Who are we?

Grupo Oito ("we") takes privacy seriously. Therefore, in this Privacy Policy ("Policy"), we explain how we use, store, share, and protect the personal data collected from the use of our services.

Our Entities

GRUPO OITO OÜ
Estonian Registry Code: 17195338
Address: Harju maakond, Tallinn, Kesklinna linnaosa, Tartu mnt 67/1-13b, 10115, Estonia

OITO PAGAMENTOS E COBRANÇAS LTDA
CNPJ: 40.145.936/0001-25
Address: Rua Bispo Renato Conceicao da Cunha, 384, Edif Multi Center Sala 104, 42703-080, Lauro de Freitas, BA, Brazil

Important Definitions

LGPD: Brazilian Federal Law No. 13.709, which regulates the processing of personal data.

GDPR: Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data.

Processing Agents: The Controller and the Processor responsible for decisions regarding Personal Data.

Personal Data: Information relating to an identified or identifiable natural person.

Processing: Any operation performed on Personal Data, whether automated or not.

Clients

Data we collect: Generally, when a Client contracts, uses, or interacts with the Services, we collect personal data divided into three main categories:

• Professional contact details (name, title, company, phone, email)
• Marketing preferences
• Account credentials (email, username, password)
• Payment information (credit card, bank details)
• Technical support data
• Financial data

Data Subject Rights (LGPD and GDPR)

Data Subjects have rights guaranteed by law and can exercise them by contacting us at: dpo@bootdesk.eu.

• Confirmation of processing existence
• Access to data
• Correction of incomplete/inaccurate data
• Anonymization, blocking, or deletion of unnecessary data
• Data portability
• Deletion of data ("right to be forgotten")
• Limitation of processing
• Objection to processing
• Right to human review of automated decisions
• Revocation of consent

Security

Personal Data processed by Grupo Oito is protected by physical, technical, and organizational security measures including firewalls, data encryption, and access controls.