Privacy Policy

Privacy Policy

Privacy Policy

Last updated: [03/2026]

This Privacy Policy describes how EDTOOL TECHNOLOGIE, headquartered in BREJÃO – PE – BRAZIL, registered under number [999.999.9999/99], processes the personal data of users, clients, leads, partners, and visitors of the website https://edtool.de.

For any matters related to data protection, please contact us via email at dpo@edtool.de. If necessary, our Data Protection Officer (DPO) can be reached at +55 61 998637634.

1. Who is the Data Controller

The controller of your personal data is:

  • Email: contact@edtool.de
  • Company: EDTOOL TECNOLOGIA
  • Phone: +55 61 998637634

2. What personal data we collect

We may collect the following categories of personal data:

  • Identification data, such as first and last name;
  • Contact data, such as email, phone number, and company;
  • Contractual and commercial data, such as order history, proposals, and payments;
  • Technical data, such as IP address, browser, device, language, and access logs;
  • Website usage data, such as pages visited, traffic source, and form interactions;
  • Communications sent by you, including via email, forms, or support channels;
  • Other data that you voluntarily provide to us.

3. How we collect data

Data may be collected:

  • Directly from you, when filling out forms, hiring services, or contacting us;
  • Automatically, while browsing our website, through logs, cookies, and similar technologies;
  • From third parties, such as payment platforms, CRM systems, business partners, or analytics tools, where permitted by law.

4. Purposes of processing and legal bases

We process your personal data for the following purposes:

  • Responding to contacts, demo requests, or commercial inquiries
    Legal basis: pre-contractual measures and/or legitimate interest.
  • Executing contracts and providing our services
    Legal basis: performance of a contract.
  • Managing billing, invoicing, tax, and accounting obligations
    Legal basis: compliance with a legal obligation.
  • Improving our products, services, security, and user experience
    Legal basis: legitimate interest.
  • Sending marketing communications, newsletters, and offers
    Legal basis: consent, when required, or legitimate interest, when permitted by applicable legislation.
  • Preventing fraud, abuse, and security incidents
    Legal basis: legitimate interest and/or legal obligation.
  • Complying with requests from public authorities or regulatory obligations
    Legal basis: legal obligation.

5. Cookies and similar technologies

Our website may use cookies and similar technologies for technical operation, security, audience measurement, personalization, and marketing.

Where required by applicable law, we will request your consent before activating non-essential cookies. You can manage your preferences through the cookie banner or preference center.

6. Data sharing

Your data may be shared, when necessary, with:

  • Service providers for hosting, infrastructure, CRM, support, and analytics;
  • Payment processors, financial institutions, and operational partners;
  • Legal, accounting, and auditing consultants;
  • Public or regulatory authorities, when there is a legal obligation;
  • Business partners, when necessary for the provision of the service and based on an appropriate legal basis.

We require third parties to process personal data securely, confidentially, and only for legitimate and compatible purposes.

7. International transfers

If your data is transferred outside the European Economic Area (EEA), we will adopt adequate safeguards, such as adequacy decisions, standard contractual clauses, or other legally valid mechanisms.

8. Data retention

We will keep your personal data only for as long as necessary to fulfill the purposes described in this Policy, including to meet legal, regulatory, tax, or accounting requirements, or for the defense of rights.

Retention periods may vary depending on the category of data and the purpose of the processing. When data is no longer necessary, it will be deleted or anonymized, unless retention is permitted or required by law.

9. Your rights

Under the GDPR and applicable legislation, you may exercise, where applicable, the following rights:

  • Right of access to your personal data;
  • Right to rectification of incomplete, inaccurate, or outdated data;
  • Right to erasure (“right to be forgotten”);
  • Right to restriction of processing;
  • Right to object to processing;
  • Right to data portability;
  • Right to withdraw consent at any time, when processing is based on consent;
  • Right to lodge a complaint with a competent supervisory authority.

10. How to exercise your rights

To exercise your rights, please send a request to [PRIVACY EMAIL], with sufficient information for us to verify your identity and understand your request.

We may request additional information to confirm your identity when necessary, and we will respond within the timeframes provided by applicable legislation.

11. Automated decision-making and profiling

[Select one of the options below and remove the one that does not apply]

  • Option A: We do not engage in automated decision-making that produces legal effects or significant impacts on you.
  • Option B: We may use automated processes and/or profiling for [DESCRIBE PURPOSE]. In such cases, we will provide additional information about the logic involved, the significance, and the envisioned consequences, as required by law.

12. Data of minors

Our services are not intentionally directed at minors under [APPLICABLE AGE], unless expressly indicated and with the appropriate legal basis. If you believe a minor has improperly provided us with personal data, please contact us so we can take appropriate action.

13. Information security

We adopt appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, alteration, or improper disclosure.

While we strive to protect your information, no system is completely immune to failure. Therefore, we also rely on internal policies, access controls, and periodic security reviews.

14. Links to third-party websites

Our website may contain links to third-party websites, plugins, and services. We are not responsible for the privacy practices of these third parties. We recommend that you read their respective policies before providing any personal data.

15. Changes to this Policy

We may update this Privacy Policy periodically to reflect legal, technical, or operational changes. The most recent version will always be available on this page, with the corresponding update date.

16. Supervisory authority

If you are in the European Economic Area and believe your rights have not been adequately addressed, you may lodge a complaint with the data protection supervisory authority of your country of habitual residence, place of work, or place of the alleged infringement.

17. Contact

If you have any questions about this Privacy Policy or the processing of your personal data, please contact us:

  • Email: dpo@edtool.de
  • Company: EDTOOL TECNOLOGIA