GSX Import Export Company is committed to protecting the privacy and personal data of our customers, partners, and visitors. This Privacy Policy describes how we collect, use, store, and protect your personal information, in compliance with Brazil's General Data Protection Law (LGPD - Law 13.709/2018), the European Union's General Data Protection Regulation (GDPR), and other applicable data protection legislation.
1. Data Controller Identification
Company Name: GSX Import Export Company Tax ID (CNPJ): 14.996.018/0001-08 Address: Rua Uberaba, 600 B - Mulde, Indaial - Santa Catarina - ZIP 89084-740, Brazil Privacy Email: privacy@gsx.company Data Protection Officer (DPO): George Stangherlin - COO & Operations Director
2. Data Collected
We collect only the data strictly necessary to provide our services:
Identification data: name, email, phone
Business data: company name, position, industry
Communication data: messages sent through contact forms
We process your personal data based on the following legal grounds:
Consent: by using our contact form, you consent to the processing of the data provided
Contract performance: to fulfill commercial obligations
Legitimate interest: to respond to requests and improve our services
Legal obligation: when required by law
4. Purpose of Processing
We use your personal data exclusively to:
Respond to your contact requests
Provide information about our products and services
Process business transactions
Comply with legal and regulatory obligations
Improve user experience on our website
5. Data Sharing
GSX does NOT sell, rent, or provide your personal data to third parties for commercial or marketing purposes.
Your data may be shared only in the following situations:
With essential service providers (hosting, email) who act as processors under our instructions
When required by law or court order
To protect the rights and security of GSX and third parties
All third parties that process data on our behalf are contractually obligated to maintain the confidentiality and security of the data.
6. Cookies and Tracking Technologies
Our website does NOT use tracking or advertising cookies.
We use only essential technical cookies for basic site functionality, which do not collect personally identifiable information.
Server log data (such as IP address and pages accessed) is automatically collected for security and technical maintenance purposes and is kept for a limited period.
7. Retention Period
We keep your personal data only as long as necessary to:
Fulfill the purposes described in this policy
Meet legal, tax, and regulatory obligations
Exercise rights in legal proceedings
After these needs expire, data will be securely deleted or anonymized.
8. Data Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction:
Encryption of data in transit (SSL/TLS)
Restrictive access controls
Security monitoring
Regular backups
Staff training on data protection
9. Your Rights
Under LGPD and GDPR, you have the following rights:
Confirmation of the existence of data processing
Access to your personal data
Correction of incomplete, inaccurate, or outdated data
Anonymization, blocking, or deletion of unnecessary data
Data portability to another provider
Deletion of data processed with your consent
Information about data sharing
Withdrawal of consent
To exercise your rights, contact us through the channels indicated in section 1.
10. International Data Transfer
Your website and email data are stored on servers located in the United States, operated by our hosting provider OrangeHost LLC (Delaware, USA).
The United States has internationally recognized adequacy agreements and transfer mechanisms. Additionally, we ensure that:
Our hosting provider implements appropriate technical and organizational security measures
Appropriate safeguards are applied as required by LGPD and GDPR (standard contractual clauses, certifications)
Data is protected with the same security standards regardless of location
11. Data of Minors
Our services are directed at businesses and professionals. We do not intentionally collect data from persons under 18 years of age.
If we identify inadvertent collection of data from minors, it will be immediately deleted.
12. Changes to this Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.
The updated version will be published on this page with the date of the last revision.
We recommend that you review this policy regularly.
13. Contact and Complaints
For questions about this Privacy Policy, exercising rights, or complaints:
GSX Import Export Company Tax ID (CNPJ): 14.996.018/0001-08 Email: privacy@gsx.company Phone: +55 (47) 99639-4377 Address: Rua Uberaba, 600 B - Mulde, Indaial - Santa Catarina - ZIP 89084-740, Brazil
You also have the right to file complaints with data protection authorities:
Brazil: National Data Protection Authority (ANPD) - www.gov.br/anpd
European Union: Supervisory authority of your country