Privacy Policy

1. Who the controller is

The controller of the personal data processed on this website is Associação Paulista Ampliar (Instituto Ampliar), a non-profit civil society organization located at Rua Dr. Bacelar, nº 1043, Vila Clementino, São Paulo/SP, CEP 04026-002, Brazil.

Contact: ampliar@ampliar.org.br · +55 (11) 3253-3530 · +55 (11) 94305-0706 (WhatsApp).

2. What data we collect and why

We collect only the data below, each for a defined purpose:

• Newsletter: your email address, when you enter it in the footer form and tick the consent box. We use it only to send the Instituto Ampliar newsletter, with news, events and ways to support us.
• Technical cookies: small files the website needs to run securely, such as keeping your session and protecting against automated submissions and fraud. They do not identify you for advertising purposes.
• Admin panel: username, password and access logs of the Instituto Ampliar internal staff who update the website content. This area is not open to the public.

For now, we do not use audience analytics tools or advertising cookies. If this changes, this Policy will be updated before the change, and consent will be requested where the law requires it.

3. Legal basis

We process data under the legal bases of article 7 of the LGPD: consent, for sending the newsletter; legitimate interest and the need to keep the website secure, for technical cookies; and legitimate interest in managing the website, for the internal staff's access data.

4. Links to external services

The website links to third-party services: Google Forms (registration forms for sponsors and donors), WhatsApp and our social media profiles (LinkedIn, Instagram and Facebook). When you click, you leave this website, and any data you provide there is also handled under those services' own policies, which we recommend you read. Information sent through the registration forms reaches Instituto Ampliar and is used only to manage our relationship with sponsors and donors.

5. Donations

Donations are currently made by PIX or bank transfer, outside this website. The website does not collect or store bank or payment data. When payments become available on the website, this Policy will be updated to state what data will be processed and by whom.

6. Sharing

We do not sell or rent personal data. Data may be processed by service providers working for us, always within the stated purpose: the website hosting company and the email delivery tool used for the newsletter. We may also share data when required by law or by order of a competent authority.

7. How long we keep data

Your newsletter email is kept while your subscription is active and is deleted when you unsubscribe. Session cookies expire at the end of your visit or shortly after. Admin panel access logs are kept for as long as needed for website security and to meet legal obligations.

8. Your rights

Under article 18 of the LGPD, you may ask Instituto Ampliar, at any time, for:

• confirmation that we process your data;
• access to your data;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
• portability of your data to another service provider, subject to the regulations;
• deletion of data processed on the basis of your consent;
• information about whom we share your data with;
• information about the possibility of not giving consent and the consequences of refusing;
• withdrawal of consent.

You may also file a complaint with the Brazilian National Data Protection Authority (ANPD).

9. How to exercise your rights

Send your request to ampliar@ampliar.org.br, which is also the contact channel of the data protection officer. To unsubscribe from the newsletter, just use the unsubscribe link included in every email. We may ask for information to confirm your identity before responding, to protect your data.

10. Cookies

This website uses only technical cookies, which are needed for it to work and stay secure. You can delete or block them in your browser settings, but some features, such as submitting the newsletter form, may stop working.

11. Security

We adopt technical and administrative measures to protect data against unauthorized access, loss or alteration, such as encrypted connections (HTTPS) and restricted access to the admin panel. No system is completely immune to incidents; if an incident that may pose a relevant risk occurs, we will notify the affected data subjects and the ANPD, as required by law.

12. Children and adolescents

This website is not intended to collect data from children. The newsletter is intended for people over 18; adolescents should subscribe with the guidance of their parents or guardians. If we find children's data collected without the consent of a parent or guardian, it will be deleted.

13. Changes to this Policy

This Policy may be updated, for example when the website starts accepting payments or using new tools. The date of the current version appears at the top of the page. Relevant changes will be announced on the website.

14. Contact

Questions about this Policy or about how your data is handled: ampliar@ampliar.org.br · +55 (11) 3253-3530 · Rua Dr. Bacelar, nº 1043, Vila Clementino, São Paulo/SP, CEP 04026-002, Brazil.