Notice: This is an informational English translation. The legally binding version of this Policy is the Portuguese (Brazil) version. In the event of any discrepancy, the Portuguese version prevails.
1. Introduction
GRON 3D STUDIO (“GRON 3D”, “we”, “our”) takes the protection of the personal data of those who interact with us seriously. This Privacy Policy explains how we collect, use, store, share, and protect personal data obtained through our website and service channels.
This Policy complies with Brazilian Law No. 13,709/2018 (General Data Protection Law — LGPD) and, to the extent applicable to data subjects located in the European Union, with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679).
2. Data Controller
The controller responsible for processing personal data is:
GRON 3D STUDIO (ESTÚDIO GRON 3D RENDER LTDA) CNPJ: 48.224.947/0001-02 Address: Avenida Doutor Laerte Vieira Gonçalves, 1737, Loja 01, Santa Mônica, postal code 38408-176, Uberlândia/MG, Brazil Data Protection Officer (DPO) e-mail: contato@gron3d.com.br
3. Data We Collect
3.1. Data you provide directly
Contact and quote forms. When you fill out our forms, we collect:
- Name;
- E-mail;
- Phone number;
- Message and project information;
- Project files you may attach (plans, references, documents).
Careers section. When you apply for a position or submit material unsolicited, we collect:
- Name and contact details;
- Curriculum vitae (CV);
- Portfolio and work samples;
- Any other information you choose to include in your application.
3.2. Data collected automatically
When you browse our website, we automatically collect, through cookies and similar technologies:
- IP address;
- Browser and device type;
- Pages visited and time spent;
- Source of access (referral).
4. Purposes and Legal Basis for Processing
We process your personal data for the following purposes, with the corresponding legal bases (Art. 7 LGPD / Art. 6 GDPR):
| Purpose | Legal Basis |
|---|---|
| Respond to contact requests and prepare quotes | Pre-contractual measures / consent |
| Perform and manage contracted services | Performance of a contract |
| Evaluate job applications | Pre-contractual measures / consent |
| Measure audience and improve the website (analytics) | Legitimate interest / consent (cookies) |
| Comply with legal and regulatory obligations | Compliance with a legal obligation |
| Promote work in portfolio (where authorized) | Consent / legitimate interest, subject to any NDAs |
5. Processing of Confidential Files and Projects
We recognize that project files submitted by clients may contain confidential and strategic information. Such materials are used exclusively to perform the contracted service and are accessible only to the team involved in the project.
Where a Non-Disclosure Agreement (NDA) is in place, we fully observe the confidentiality obligations set out therein. Projects under confidentiality are not disclosed in our portfolio without express authorization.
6. CVs and Careers Section — Retention and Disposal
Data submitted by applicants is used solely for recruitment and selection purposes.
- Retention period: we keep CVs and portfolios for 12 months from receipt, for consideration in future opportunities, unless you request deletion sooner.
- Disposal: after the retention period, or upon your request, the data is securely deleted from our systems.
- Where there is no mutual interest in proceeding, the data may be disposed of before the above period.
You may, at any time, request the deletion of your application via the e-mail indicated in this Policy.
7. Cookies and Third-Party Technologies
7.1. Google Analytics
We use Google Analytics to understand how visitors use our website and to improve the browsing experience. This tool collects usage data in aggregate form through cookies. The processing of this data is subject to Google’s privacy policy.
7.2. Cookie management
You may manage or disable cookies at any time through your browser settings or the consent banner displayed on the website. Disabling certain cookies may affect website functionality.
7.3. Links to social media
Our website contains links to external profiles (Instagram, LinkedIn, YouTube). By clicking these links, you will be directed to third-party platforms, which have their own privacy policies. GRON 3D is not responsible for the data processing carried out by these platforms.
8. Data Sharing
GRON 3D does not sell personal data. Sharing occurs only when necessary, with:
- Service and infrastructure providers (hosting, e-mail, analytics, cloud storage);
- Public authorities, where required by law or court order;
- Partners strictly involved in performing a contracted project, under a confidentiality obligation.
9. International Data Transfers
As a Brazilian company serving global clients and using technology providers located abroad (such as cloud and analytics services), your data may be processed or stored outside your country of residence.
For data subjects located in the European Union, we ensure that such transfers observe the safeguards required by the GDPR, and that your rights as a data subject remain guaranteed. We adopt appropriate technical and contractual measures to protect your data, regardless of where it is processed, in compliance with both the LGPD and the GDPR.
10. Your Rights as a Data Subject
Under the LGPD and the GDPR, you have the right to:
- Confirm the existence of processing of your data;
- Access your data;
- Rectify incomplete, inaccurate, or outdated data;
- Request anonymization, blocking, or erasure of unnecessary data or data processed in non-compliance;
- Request data portability;
- Withdraw consent, where this is the legal basis;
- Object to processing based on legitimate interest;
- For EU data subjects: lodge a complaint with the competent supervisory authority.
To exercise your rights, contact us at: contato@gron3d.com.br. We will respond within the applicable legal time frames.
11. Information Security
We adopt appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or destruction, including access controls, secure storage, and restriction of access to the team directly involved.
Despite our efforts, no system is entirely immune to risk. In the event of a relevant security incident, we will take the actions and make the communications required by applicable law.
12. Data Retention
We keep personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by legal, contractual, and regulatory obligations. After this period, the data is securely deleted or anonymized.
13. Changes to this Policy
This Policy may be updated periodically. The current version will always be published on this page, with the corresponding update date. We recommend reviewing this document periodically.
14. Contact
For questions, requests, or to exercise rights relating to this Privacy Policy:
GRON 3D STUDIO Data Protection Officer (DPO): Vinícius Carvalho E-mail: contato@gron3d.com.br Address: Avenida Doutor Laerte Vieira Gonçalves, 1737, Loja 01, Santa Mônica, postal code 38408-176, Uberlândia/MG, Brazil CNPJ: 48.224.947/0001-02