Who we are
The controller of the data described in this policy is CACAUTECH - INOVACOES E NEGOCIOS DE CACAU LTDA, trading as CACAUTECH - INOVACOES E NEGOCIOS DE CACAU, registered under CNPJ No. 47.730.716/0001-08, a Brazilian limited liability company formed on 26 August 2022, with its registered office at Distrito Banco do Pedro, SN, Fazenda Porto Esperança, Distrito de Banco do Pedro, Ilhéus, BA, postal code 45666-000, Brazil.
Main activity: development and licensing of off-the-shelf computer software (CNAE 62.03-1-00). Secondary activities: technical support, maintenance and other information technology services (CNAE 62.09-1-00) and experimental research and development in the physical and natural sciences (CNAE 72.10-0-00).
The policy applies to this website, to contacts made by email and telephone, and to the company's relationship with clients and research partners.
Data we collect
- Identification and contact: name, email, telephone and, when provided, the name of the farm, cooperative or company the person represents.
- Contract data: Brazilian taxpayer number (CPF or CNPJ), address and the bank details strictly needed for proposals, licence agreements, service orders and invoicing.
- Support data: descriptions of equipment, systems and reported problems when the company provides support or maintenance.
- Research data: information about growing areas and samples supplied by partners in experimental trials, handled as data about the property rather than the person whenever possible.
- Access logs: IP address, browser type and pages visited, generated by the infrastructure that hosts the website.
The contact form on this website sends nothing to a Cacautech server: it opens the visitor's own email program with the text already composed, and the message leaves from the writer's account.
Purposes
- Replying to messages, requests for proposals and questions about the services;
- Drafting, performing and managing licensing, support and research agreements;
- Providing technical support and maintenance for the agreed systems and equipment;
- Running experimental trials and recording their results;
- Issuing tax documents and meeting accounting, labour and tax obligations;
- Protecting the website and the company's systems against misuse.
Sharing
- Service providers: accounting firm, hosting provider, email provider and development tools, each limited to what is necessary and bound by confidentiality;
- Financial institutions: banks and payment services, only to receive and pay contracted amounts;
- Research partners: universities, institutes or growers taking part in the same trial, limited to the data the project requires and subject to prior agreement;
- Authorities: where there is a legal duty, an inspection or a court order.
Outside these situations, no personal data is passed on to third parties.
Cookies
This website does not set advertising, cross-site tracking or audience measurement cookies. The platform that hosts and delivers the pages may set strictly technical cookies related to security and content delivery. Visitors can block them in their browser without losing access to the site or to the company's contact channels.
Retention
- Messages and proposals that did not lead to a contract: for as long as needed to reply and for a possible resumption of talks;
- Agreements, service orders and support records: for the term of the agreement and the applicable limitation period;
- Tax and accounting documents: for the period required by law, as a rule five years;
- Research records: for the duration of the project and the time needed to verify results, with anonymisation preferred;
- Data processed on the basis of consent: until consent is withdrawn.
Once the period ends, data is securely deleted or anonymised.
Your rights
Under article 18 of Law No. 13.709/2018, the data subject may ask Cacautech for:
- Confirmation that processing takes place and access to the data;
- Correction of incomplete, inaccurate or outdated data;
- Anonymisation, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
- Portability to another provider, subject to applicable regulation;
- Information about the entities with which the data has been shared;
- Withdrawal of consent and objection to processing based on legitimate interest.
Security
- Website served only over an encrypted connection (HTTPS);
- Email accounts and code repositories restricted to partners and authorised staff, with individual credentials;
- Separation between client data and experimental trial data;
- Backups and periodic review of protection practices.
If a security incident occurs that may cause relevant risk or harm to data subjects, the Brazilian National Data Protection Authority and the affected people will be notified within the time limits set by law.
International transfers and external links
The hosting, email and development services used by the company may store data on servers located outside Brazil. When that happens, the transfer relies on the grounds set out in the LGPD, such as an adequate level of protection in the destination country or specific contractual clauses. Links to third-party pages, including research institutions, lead to websites with their own policies, which this policy does not cover.
Changes
This policy may be updated when the services, the systems or the legislation change. The version in force is always the one published on this page, with the revision date shown at the top. Relevant changes will be highlighted here.
Contact and data protection officer
- Company: CACAUTECH - INOVACOES E NEGOCIOS DE CACAU LTDA (Cacautech)
- CNPJ: 47.730.716/0001-08
- Address: Distrito Banco do Pedro, SN, Fazenda Porto Esperança, Distrito de Banco do Pedro, Ilhéus, BA, 45666-000, Brazil
- Phone: +55 (71) 3251-8050
- Data protection officer's email: contato@cacauteratech.com