Privacy Policy

This policy explains how Studio Stefanovicz collects, uses and protects the data of people who visit this site or contact us, in line with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).

Who we are

Studio Stefanovicz is the brand name of Atelier de Artes Stefanovicz (Brazilian company registration / CNPJ 28.918.666/0001-42), based at Rua Dr. Neto de Araújo, 55, Vila Mariana, São Paulo, Brazil, ZIP 04111-000 — the data controller for this site. Questions about this policy can be sent to studiostefanovicz@gmail.com or through the studio's WhatsApp.

As a small-scale data processing agent, the Studio is exempt from formally appointing a Data Protection Officer, but keeps the email above as its channel for privacy and data protection matters.

What data we collect

Browsing data, collected automatically through Google Analytics and the Meta Pixel once you consent to analytics and/or advertising cookies (see the Cookies section): pages visited, time spent browsing, traffic source and interactions with the site, in aggregate and largely anonymous form.

Data you provide voluntarily: when you reach out by WhatsApp, phone or email to ask about a piece, we may receive your name, phone number and whatever information you share in that conversation.

What we use this data for, and our legal basis

Browsing data (analytics): processed based on our legitimate interest in understanding and improving the site experience.

Browsing data (advertising/remarketing): processed based on your consent, given in the cookie banner.

Commercial contact data: processed based on pre-contractual steps or the sales contract itself, where applicable, and on our legitimate interest in responding to questions about pieces, availability and projects.

Who we share it with, and international transfers

Browsing data is processed by Google (Analytics) and Meta (Pixel/Instagram/Facebook Ads), companies that may transfer and store data on servers outside Brazil, under the safeguards set out in their own privacy policies and the international-transfer mechanisms required by the LGPD. We do not sell your data or share it with third parties for any other purpose.

Cookies

We use three categories of cookies: necessary, always active, essential for the site to work; analytics (Google Analytics), which help us understand how the site is used, in aggregate; and advertising (Meta Pixel), used for remarketing and more relevant ads on Instagram and Facebook.

Analytics and advertising cookies only load after your choice in the banner shown on your first visit, where you can accept all, reject non-essential cookies, or configure each category separately.

Your rights

Under the LGPD, you may request at any time: confirmation that we process your data, access to it, correction of incomplete or outdated data, anonymization, blocking, deletion of unnecessary data, portability, and withdrawal of consent. To exercise these rights, write to studiostefanovicz@gmail.com.

To withdraw a cookie consent you've already given, delete this site's cookies in your browser settings — the choice banner will appear again on your next visit. You can also manage personalized ads directly in Google's and Meta's own ad settings.

Automated decisions

We do not carry out automated decision-making or profiling that produces legal effects or significantly affects data subjects.

Data retention

Google Analytics browsing data: kept for up to 26 months, the tool's default period.

Commercial contact data (WhatsApp, phone, email): kept for as long as the business relationship lasts and for up to 5 years after the last contact, the general statute-of-limitations period under Brazil's Civil Code and Consumer Protection Code.

After these periods, data is deleted or anonymized, unless the law requires a different period.

Information security

We adopt reasonable technical and administrative measures to protect your data against unauthorized access, loss or misuse. In the event of a security incident that could pose significant risk, we will notify affected data subjects and Brazil's National Data Protection Authority (ANPD), as required by the LGPD.

Changes to this policy

This policy may be updated from time to time. The date of the last update is shown at the top of this page.