Personal data protection · LGPD
Privacy policy
How MTC Serviços collects, uses, stores and protects personal data on the website, in customer service and in the services it provides, in accordance with the General Data Protection Law (Law No. 13.709/2018).
- Data controller
- MTC Serviços de Terceirização Ltda.
- Privacy channel
- contato@mtcservicos.com
- CNPJ
- 46.034.840/0001-76
- Last updated
In short
- We use your data only to serve you, provide our services and comply with the law.
- We do not sell or rent personal data.
- Google Ads measurement cookies are only stored if you click “Accept”.
- Data is protected by a secure connection and access restricted to our team.
- You can request access to, correction of or deletion of your data, with a reply within 15 days.
On this page
01
Who we are and how to contact us
MTC Serviços de Terceirização Ltda. (“MTC Serviços”), CNPJ 46.034.840/0001-76, headquartered in São Paulo/SP, is the controller of the personal data processed on the mtcservicos.com website and in the customer service and services described in this policy. This means MTC is the one that decides how and why this data is used and is responsible for it.
MTC is a small business and, under Resolution CD/ANPD No. 2/2022, keeps this channel as a direct means of communication with data subjects and with the National Data Protection Authority (ANPD).
02
Who this policy applies to
This policy applies to the personal data of:
- visitors to the mtcservicos.com website;
- people who contact us through the form, WhatsApp, phone or email;
- clients and the people connected to their cases, such as partners, representatives, attorneys-in-fact, co-owners and designated contacts;
- professionals and partners who work with us on cases.
Company data, such as the registered company name and CNPJ, is not personal data. Even so, information about the people connected to those companies receives the same care described here.
03
What data we process
When you browse the website
Technical connection data, such as IP address, date and time of access, browser type and pages visited, recorded automatically by the hosting server. If you accept cookies, also Google Ads measurement information (item 6).
On the “Contact MTC” form
Name, phone or WhatsApp, email (optional), subject, address or neighborhood of the property (optional) and the message you write.
On WhatsApp, phone and email
Your number or email address, your profile name and the messages and files you send us.
In the “Track your case” lookup
Only the 6-character code you enter. The page shows the case number, type and agency, the status and the dates of updates, without name, CPF (individual tax ID) or address.
We do not ask for sensitive data, such as health data, racial or ethnic origin, religion or biometrics. If any document sent contains this kind of information, it will be used only to the extent indispensable to the case.
04
What we use it for and on what legal basis
Each use has a defined purpose and a legal basis under the General Data Protection Law (LGPD, Law No. 13.709/2018):
| Purpose | Legal basis |
|---|---|
| Reply to inquiries, understand your case and prepare a quote | Preliminary procedures for a contract, at your request (Art. 7, V) |
| Provide the contracted services: analyses, technical reports, ART or RRT, filings and follow-up with public agencies | Performance of a contract (Art. 7, V) |
| Report on the progress of cases, by email or through the code lookup | Performance of a contract (Art. 7, V) |
| Issue invoices and meet legal, tax and regulatory obligations | Compliance with a legal or regulatory obligation (Art. 7, II) |
| Keep documents for defense in administrative or judicial proceedings | Regular exercise of rights (Art. 7, VI) |
| Send clients relationship messages, such as greetings and notices about deadlines and changes in legislation | Legitimate interest (Art. 7, IX), with the option to opt out |
| Protect the website against abuse, spam and unauthorized access attempts | Legitimate interest (Art. 7, IX) |
| Log visits to the website (IP, date and time) | Legitimate interest (Art. 7, IX): website security and operation |
| Measure ad results with Google Ads cookies | Consent, given in the cookie notice (Art. 7, I) |
Reply to inquiries, understand your case and prepare a quote
- Legal basis:
- Preliminary procedures for a contract, at your request (Art. 7, V)
Provide the contracted services: analyses, technical reports, ART or RRT, filings and follow-up with public agencies
- Legal basis:
- Performance of a contract (Art. 7, V)
Report on the progress of cases, by email or through the code lookup
- Legal basis:
- Performance of a contract (Art. 7, V)
Issue invoices and meet legal, tax and regulatory obligations
- Legal basis:
- Compliance with a legal or regulatory obligation (Art. 7, II)
Keep documents for defense in administrative or judicial proceedings
- Legal basis:
- Regular exercise of rights (Art. 7, VI)
Send clients relationship messages, such as greetings and notices about deadlines and changes in legislation
- Legal basis:
- Legitimate interest (Art. 7, IX), with the option to opt out
Protect the website against abuse, spam and unauthorized access attempts
- Legal basis:
- Legitimate interest (Art. 7, IX)
Log visits to the website (IP, date and time)
- Legal basis:
- Legitimate interest (Art. 7, IX): website security and operation
Measure ad results with Google Ads cookies
- Legal basis:
- Consent, given in the cookie notice (Art. 7, I)
On the form, the box “I authorize MTC Serviços to use this data…” records that you are aware of and agree to the use of the data to get back to you. We do not use your data for purposes incompatible with those described here.
05
Who we share it with
We share personal data only when necessary and only what is indispensable:
Public agencies and entities involved in the case
São Paulo City Hall and its district offices (subprefeituras), the Fire Department, CETESB, property registry offices, CREA-SP and CAU (for ART and RRT) and other agencies connected to the contracted service.
Professionals working on your case
Engineers, architects and other qualified professionals who work with us, always bound by a duty of confidentiality.
Technology providers
Companies that process data on behalf of MTC, such as Hostinger (website and email hosting), Google (ad measurement and work tools) and other organizational software, including artificial intelligence, used internally.
Authorities
When there is a legal obligation, a court order or a request from a competent authority.
We do not sell, rent or hand over personal data for third-party advertising.
If you contact us through WhatsApp, the conversation also follows the WhatsApp privacy policy.
International transfer: some providers, such as Google and Meta (WhatsApp), may store data on servers outside Brazil. In those cases, the transfer follows Art. 33 of the LGPD and the contractual data protection safeguards offered by those providers.
07
How long we keep it
| Data | For how long |
|---|---|
| Messages and contacts that do not become a contract | For as long as needed to handle the request and keep the contact history. You can ask for deletion at any time. |
| Client data and documents | During the service and, afterward, for the legal retention and limitation periods, such as tax periods and those tied to technical responsibility. |
| Website access logs (IP address, date and time) | Kept by our hosting provider for 7 days, for the security and operation of the site. |
| Controls against abuse of the form and the case lookup | Irreversible codes generated from the IP address, phone number or message, used for 24 hours at most. |
Messages and contacts that do not become a contract
- For how long:
- For as long as needed to handle the request and keep the contact history. You can ask for deletion at any time.
Client data and documents
- For how long:
- During the service and, afterward, for the legal retention and limitation periods, such as tax periods and those tied to technical responsibility.
Website access logs (IP address, date and time)
- For how long:
- Kept by our hosting provider for 7 days, for the security and operation of the site.
Controls against abuse of the form and the case lookup
- For how long:
- Irreversible codes generated from the IP address, phone number or message, used for 24 hours at most.
At the end of these periods, the data is deleted or anonymized, except where retention is permitted by art. 16 of the LGPD.
08
How we protect data
- encrypted connection (HTTPS) across the whole site, in the form and in the case lookup;
- access to data only by team members who need it to do their work;
- server passwords and configuration files blocked from outside access;
- limits on submissions and lookups, spam filters and blocking of malicious code;
- the site stores only public case information, received from our system through a digitally signed transmission;
- periodic backups of the internal systems.
If a security incident occurs that may cause significant risk or harm, we will notify the ANPD (Brazil's data protection authority) and the affected people, as required by art. 48 of the LGPD.
The case tracking code is personal. Anyone who has the code can see the status of the case, so do not publish it or share it with people who should not follow the case.
09
Your rights
Confirmation and access
To know whether we process your data and to receive a copy of it.
Correction
To correct incomplete, inaccurate or outdated data.
Anonymization, blocking or deletion
Of data that is unnecessary, excessive or processed in violation of the LGPD.
Portability
To transfer your data to another provider, according to ANPD regulations.
Deletion
Of data processed with your consent, except for retention provided for by law.
Information about sharing
To know which public and private entities we share your data with.
Withdrawal of consent
To withdraw an authorization you have given, such as accepting cookies, at any time.
Objection
To object to processing carried out without consent, such as the sending of commercial messages.
Review of automated decisions
To request review of decisions made solely on the basis of automated processing.
These rights are set out in arts. 18 and 20 of the General Data Protection Law.
10
How to exercise your rights
Make a request
Write to contato@mtcservicos.com with the subject “Privacy” or contact us on WhatsApp at (11) 93434-6065. The request is free of charge.
Identity verification
To protect your data, we may ask for information confirming that the request is yours or your representative's.
Response
We respond within 15 days. If any data must be kept because of a legal obligation, we will explain the reason.
If you are not satisfied with the response, you can file a petition with the National Data Protection Authority (ANPD).
11
Other information
Children and teenagers
The MTC website and services are intended for adults and businesses. We do not knowingly collect data from people under 18.
Links to other websites
The site has links to public agencies, legislation and WhatsApp. Those sites have their own privacy rules, which MTC does not control.
Changes to this policy
We may update this policy when our services or the law change. The date of the last update appears at the top of the page, and relevant changes will be highlighted on the site.
Legislation
This policy follows Law No. 13.709/2018 (LGPD), Law No. 12.965/2014 (Marco Civil da Internet) and ANPD rules.
Questions about your data?
Contact our privacy channel. We reply within 15 days, at no cost.