Privacy Policy & Cookies

1. Data controller

The data controller for personal data collected via this website is the Honorary Consulate of Brazil in Romania, with seat at 28 Mihai Eminescu Street, 500079 Brașov, Romania. For privacy-related inquiries you may contact us at consulate@brazil.org.ro.

2. What data we collect

We collect only the personal data you choose to provide through:

• Contact form: full name, email address, subject, and message.
• Emergency assistance form: full name, email, phone, current location, nature of the emergency, and description.
• Trade Mission interest form: full name, email, company, role, country, sector, and statement of interest.
• Event registrations: name, email, and any specific information required by the event (e.g. dietary preferences, identity document for security-screened events).
• Newsletter subscription: email address.

Technical data — IP address, browser type, pages visited — may be processed by our hosting provider for the sole purposes of security, abuse prevention, and aggregated traffic analytics. No advertising or third-party tracking cookies are used.

3. Why we process this data

• To respond to your inquiry, assistance request, or registration.
• To organise and administer events, missions, and consular activities.
• To send the newsletter, where you have opted in.
• To comply with legal and consular obligations under Brasilian and Romanian law.
• To ensure the security and proper functioning of this website.

The legal bases are your consent (Art. 6(1)(a) GDPR), the performance of a task requested by you (Art. 6(1)(b)), the public interest mission of the Consulate (Art. 6(1)(e)), and legal obligations (Art. 6(1)(c)).

4. Who has access

Data is accessed only by authorised personnel of the Consulate. Where strictly necessary, it may be shared with the Embassy of Brazil in Bucharest, the Ministry of Foreign Affairs of Brazil (Itamaraty), or competent Romanian authorities. Personal data is never sold or shared for commercial purposes.

Processors acting on our behalf — secure hosting, email delivery, and form infrastructure — are bound by data-processing agreements and process data exclusively on documented instructions from the Consulate.

5. International transfers

Where data is transferred outside the European Economic Area — for instance to authorities in Brazil in the course of consular activities — appropriate safeguards under Articles 45–49 GDPR apply, including standard contractual clauses or transfers required for the performance of consular duties.

6. Retention

Contact and intake messages are retained for as long as necessary to handle your request and to meet record-keeping obligations, typically up to 3 years. Event registrations are retained for the duration of the event plus 2 years. Newsletter data is retained until you unsubscribe.

7. Your rights

Under the GDPR you have the right to:

• Access your personal data and obtain a copy.
• Request rectification of inaccurate data.
• Request erasure ("right to be forgotten"), subject to legal retention obligations.
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.
• Lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro.

To exercise any of these rights, write to consulate@brazil.org.ro.

8. Cookies

This website uses only the cookies strictly necessary for it to function (for example, to remember your language preference and to keep an administrative session signed in). These cookies do not require consent under Romanian Law 506/2004.

We do not use advertising cookies, profiling cookies, or third-party tracking. We do not embed social-media trackers. If we ever introduce optional analytics, you will be asked to opt in via a cookie banner before any non-essential cookie is set.

You may delete or block cookies at any time through your browser settings; doing so may affect site functionality.

9. Security

We apply appropriate technical and organisational measures — encrypted transport (HTTPS), access controls, and the principle of least privilege — to protect personal data against unauthorised access, loss, or disclosure.

10. Changes to this policy

This policy may be updated to reflect changes in our practices or in applicable law. The "last updated" date above will always reflect the current version.