Privacy Policy

This Privacy Policy explains how Observatório de Feminicídio do Estado do Rio de Janeiro (“the Controller”, “we”) processes personal data in accordance with the Brazilian General Data Protection Law (LGPD). It applies to the public website https://www.observatoriofeminicidiorj.com.br and to authenticated administrative areas.

1. Controller and contact

• Controller: Observatório de Feminicídio do Estado do Rio de Janeiro.
• DPO e-mail: privacidade@observatorio.infojohn.com.br.

2. What data we collect

• Browsing data: IP (possibly masked), date/time, user agent, pages visited, referrer URL, cookie identifiers.
• Cookies: necessary (session, security, language, consent) and — upon consent — analytics.
• Data you provide: name, e-mail and any information submitted via forms (e.g., contact, registrations).
• Administrative area: activity logs (Spatie Activity Log), account data and panel action metadata.
• Aggregated/anonymous data: statistics without identifying a natural person.

3. Purposes of processing

• Operate and maintain the website/applications (authentication, security, fraud prevention, logs).
• Respond to requests, registrations and institutional communications.
• Produce usage statistics to improve content and accessibility.
• Comply with legal obligations and protect rights.

4. Legal bases

Processing relies on LGPD articles 7 and 11, as applicable:

• Consent (e.g., analytics cookies).
• Compliance with legal/regulatory obligations.
• Execution of public policies (when applicable).
• Legitimate interests (continuous improvement, security, fraud prevention), subject to impact assessment.
• Performance of a contract or fulfilling requests when necessary.
• Regular exercise of rights in legal proceedings.

5. Sharing and processors

We may share data with processors providing services (hosting, monitoring, e-mail, analytics, storage) under agreements imposing security and confidentiality. International transfers may occur when providers are located abroad, in accordance with LGPD mechanisms (art. 33 et seq.).

6. Retention and disposal

We retain personal data for as long as necessary to fulfill the purposes above and legal obligations. Technical logs may have specific retention periods. Afterwards, data are deleted or anonymized.

7. Your rights (LGPD art. 18)

You may request from the DPO:

• Confirmation of processing and access to your data.
• Correction of incomplete, inaccurate or outdated data.
• Anonymization, blocking or deletion of unnecessary or non-compliant data.
• Portability, subject to trade/industrial secrets and ANPD regulation.
• Information about sharing and the possibility of withholding consent and its consequences.
• Withdrawal of consent when it is the legal basis.

To exercise your rights, e-mail privacidade@observatorio.infojohn.com.br.

8. Information security

We adopt technical and administrative measures proportional to risk (access control, encryption in transit, audit logs, environment segregation). In case of a relevant incident, we will follow applicable legal procedures.

9. Cookies

We use the following types:

• Strictly necessary: Laravel session (laravel_session), CSRF protection (XSRF-TOKEN), language and consent preferences.
• Functional: remember interface options (language, accessibility).
• Analytics (subject to consent): audience and performance metrics (e.g., GA4).

You can manage consent in our cookie banner and in your browser settings. Disabling necessary cookies may affect the site’s operation.

10. Search and logs

Public search queries may be pseudonymously logged for diagnostics and improvement. In the admin panel, actions are logged for audit and security.

11. Children and adolescents

This site is not directed to children. If we identify data of a child or adolescent without proper safeguards, we will take appropriate measures.

12. Policy updates

We may update this Policy to reflect legal, technical or operational changes. The effective date will be updated at the top of this page.

13. Contact us

For privacy questions or requests: privacidade@observatorio.infojohn.com.br.

---

Version: 21/08/2025 — This text is provided to comply with Brazil’s LGPD.