EN PT
Join the waitlist

Your LGPD Rights

Last updated:

What is LGPD?

The Lei Geral de Proteção de Dados (LGPD, Lei nº 13.709/2018) is Brazil's data protection law. It gives you, as a resident of Brazil, specific rights over the personal data that companies hold about you.

Pau Brasil takes these rights seriously. This page summarizes them and shows you exactly how to exercise them.

For the detailed picture of what data we collect, why, and how we use it, see the Privacy Policy.

Your rights at a glance

Under LGPD Art. 18, you have nine rights:

1. Confirmation of processing

You can ask us to confirm whether we hold and process data about you.

2. Access

You can request a copy of the personal data we hold about you, in a clear, accessible format.

3. Correction

You can ask us to correct data that is incomplete, inaccurate, or outdated.

4. Anonymization, blocking, or deletion of unnecessary data

You can ask us to anonymize, block, or delete personal data that is unnecessary, excessive, or processed in non-compliance with LGPD.

5. Portability

You can request your data in a machine-readable format that you can transfer to another service provider.

6. Deletion of data processed with consent

You can ask us to delete data we process based on your consent. Some data cannot be deleted because we are required by law to retain it (see "What we cannot delete" below).

7. Information about who else has your data

You can ask us to tell you with which public or private entities we have shared your data.

8. Information about consent consequences

You can ask us to explain the consequences of refusing or revoking your consent.

9. Revocation of consent

You can withdraw any consent you previously gave us, at any time, for any consent-based processing.

You also have:

  • The right to complain to ANPD (Autoridade Nacional de Proteção de Dados, gov.br/anpd) if you believe Pau Brasil is mishandling your data.
  • The right to opposition to processing carried out without your consent if that processing is non-compliant with LGPD.

How to exercise your rights

Pau Brasil is launching in phases. Below is what is available at each phase.

Current phase — waitlist (email-only, manually handled)

Send a request to privacy@paubrasilchampionship.com describing:

  • Who you are (the email address registered with Pau Brasil is usually enough)
  • Which right you want to exercise
  • Any specifics (e.g., "delete my data" or "send me a copy of my waitlist record")

Your request is handled manually by Pau Brasil staff. You will receive:

  • An acknowledgment within 48 hours of receipt
  • A substantive response within 15 days as required by LGPD Art. 19. For complex requests, ANPD guidance permits a one-time 15-day extension; if we need to take that extension, we will tell you and explain why.

If you want to revoke marketing consent specifically, every marketing email/SMS you receive contains a one-click revocation link — you do not need to file a formal request.

When registration opens — additional channels become available

When Pau Brasil's registration product launches, the following will be added:

Web form at www.paubrasilchampionship.com/lgpd/solicitar-direitos

  • Structured form that guides you through which right to exercise
  • Lets you submit a request without composing an email

In-app self-service in your Account Settings

  • See exactly which Terms and Policy versions you have accepted, and when
  • View and change your marketing preferences per channel (email, WhatsApp, SMS)
  • Download your data in a machine-readable format
  • Delete your Account (with a 7-day cooling-off period for safety — explained below)

We will update this page with notice when these additional channels go live.

Identity verification

To protect your data from fraudulent requests, we verify your identity before acting on a request. The level of verification depends on the request:

  • Low-risk requests (confirmation, access, correction): we send you a verification link by email and confirm control of your registered email.
  • High-risk requests (deletion of a registered Account): we use email verification plus a 7-day cooling-off period. This protects you if someone else attempts to delete your Account without your knowledge — you have 7 days to notice the verification email and cancel the request.
  • If you are not in our system: we will confirm that no data is held and provide general guidance.

We will never charge you for exercising your rights.

What we cannot delete

When you ask us to delete your data, we honor the request to the maximum extent the law permits. Some data we cannot delete because we are required to retain it:

  • Fiscal records — Brazilian tax law requires us to retain financial records for 5 to 7 years.
  • Consent records — we retain a record that you consented to past actions (and when you revoked) for legal-defense purposes. After a deletion request, we keep only the bare audit record; we delete or anonymize the personal data within it.
  • Records under legal hold — if there is active litigation or a regulatory inquiry involving your data, we hold the data until the legal matter is resolved.
  • Records necessary for legal defense — for up to 5 years (consumer claims under CDC) or 10 years (general civil claims), we may retain limited records to defend against potential claims.

We will always tell you what we retained, why, and for how long.

Special data categories

Some categories of your data have extra protections:

Medical data

Health information you provide at registration (injuries, conditions, medications, allergies, emergency contact, etc.) is treated as sensitive personal data under LGPD Art. 5 II. It is:

  • Collected only with your separate, specific consent
  • Accessible only to medical staff and event operations leads
  • Audit-logged
  • Deleted 90 days after the tournament concludes (with limited exceptions for active claims)

Biometric data (identification photo)

Your photo, used for identity verification at events, is also sensitive personal data. It is:

  • Collected with separate consent
  • Used only for identity verification and official tournament records
  • Subject to deletion on request, with limited exceptions for tournament records

Marketing consent

You can revoke marketing consent at any time, per channel:

  • Email marketing: one-click unsubscribe in any marketing email
  • WhatsApp marketing: reply "PARAR" or via privacy contact
  • SMS marketing: reply "PARAR" or via privacy contact
  • Or all at once: contact privacy@paubrasilchampionship.com

Revoking marketing consent does not affect transactional communications about your Account, registrations, or events you are participating in — those continue regardless because they are necessary for the operation of the service.

Image and likeness (Athletes and Music Participants)

When you compete at a Pau Brasil event, you grant Pau Brasil a mandatory release to broadcast, archive, and use your image and audio for tournament-related purposes (see Terms of Service § 7). This release is a condition of competing. You can:

  • Decline broader commercial uses (those are separately opted in)
  • Ask Pau Brasil to stop future use of specific content in narrow circumstances (e.g., dignity-harming use, contrary to your stated values)
  • NOT retroactively revoke consent for content already published in good faith

Image rights are a complex area; see Terms of Service § 7 and § 8 for the detail.

DPO / data protection contact

During the v0 phase, the Pau Brasil data protection point of contact — and the named accessibility contact and the handler for your LGPD rights requests (DSAR) — is Maria Teresa C. Hora (Administration, Pau Brasil, LLC), reachable at privacy@paubrasilchampionship.com.

When the Brazilian operating entity is established, the entity's appointed Data Protection Officer (DPO) will be designated and identified here. The DPO's name, role, and contact information will be published at www.paubrasilchampionship.com/lgpd upon designation.

Accessibility

Beyond LGPD, the Lei Brasileira de Inclusão (LBI), Lei nº 13.146/2015 confers separate accessibility rights. Pau Brasil's commitments:

  • Web accessibility: we target WCAG 2.1 AA (and the corresponding Brazilian standard, ABNT NBR 17060) for our digital surfaces, implemented progressively.
  • Accommodation requests: athletes with disabilities can request accommodations through the registration form; non-athlete users can contact privacy@paubrasilchampionship.com.
  • Alternate communication channels: if you cannot use email to exercise your rights, we will accept and respond to requests by post or telephone on request.
  • Accessibility barriers: if you encounter an accessibility barrier on any Pau Brasil surface, contact privacy@paubrasilchampionship.com so we can help and fix it.

Complaints to ANPD

If you are not satisfied with Pau Brasil's response to a request, or if you believe Pau Brasil is mishandling your data, you can complain to ANPD (Autoridade Nacional de Proteção de Dados) at:

  • Website: gov.br/anpd
  • Complaint form: ANPD's online complaints channel

Pau Brasil cooperates with ANPD investigations.

Changes to this page

Changes to your rights or how to exercise them are communicated by email and by notice on the Platform at least 30 days before they take effect. Routine clarifications and typos may be made without advance notice; a change log is maintained.

Back to home Join the waitlist