Privacy Policy

Controller: EVELLYNN DOBSCHINSKI ADVOCACIA E CONSULTORIA ESPECIALIZADA Address: Rua Agenor Lopes, No. 25, room 1002, cx pst 084, Boa Viagem – Recife/PE – ZIP 51021-110 Privacy/LGPD e-mail: evellynn@dobschinski.com.br Recommended subject: LGPD - Data Subject

2.1 Data provided directly by you: • Name • E-mail • Phone/WhatsApp • City/State • Subject of the request • information voluntarily provided Please, without prior alignment, avoid sending unnecessarily extensive or sensitive data through general channels (especially WhatsApp or forms). 2.2 Technical and usage data: • IP address • Date and time of access • Pages visited • Browser and device information • Technical security logs • Cookie consent preferences (category selection, date/time stamp, and technical preference data - stored locally on your device) • Technical session and visitor identifiers set by the hosting platform (see item 5.4) • Record that the fraud security warning was dismissed (stored locally on your device for up to 90 days)

• Responding to requests and messages • Initial contact and related communication • Scheduling and follow-ups (when applicable) • Use of external functions after consent (maps, WhatsApp, videos, etc.) • Compliance with legal, regulatory, and professional obligations • Protection of rights, security, and operation of the website

• Consent • Pre-contractual measures and/or contract performance • Legal or regulatory obligation • Regular exercise of rights in judicial/administrative proceedings • Legitimate interest, observing the data subject's rights

The website uses prior blocking of non-necessary cookies and functions. Only technically necessary cookies may be active by default. Optional content (such as maps, communication widgets, videos, and embedded media) is only loaded after consent, partly through click-to-load. After consent, content may be loaded immediately for better usability. By choosing to enable them, you acknowledge that such content is provided and operated by third parties and may be subject to those providers' own policies. We are not responsible for optional third-party content enabled through click-to-load, nor for any changes, unavailability, or practices of those services. Consents can be adjusted or revoked at any time via the "Cookie Settings" link in the footer. To manage your choice, we store your consent decision (category selection, date/time stamp, and technical preference data) locally on your device to the extent technically necessary. • Google Maps: embedded maps may process technical data (for example, IP address) by third-party providers, including outside Brazil. • WhatsApp (widget/button): may remain blocked until consent; if enabled/clicked, it may redirect to WhatsApp/Meta. • YouTube, Instagram, and other embeds: may process technical data and set cookies according to their own policies. 5.1 CCM19 consent tool: we use CCM19 (Papoo Software & Media GmbH, Germany) to obtain, store, and document consents. For this purpose, the script is loaded from the company's servers in the European Union, which receive technical data (for example, IP address, date/time, browser) and the consent decision in pseudonymized form. Legal basis: compliance with legal obligation and legitimate interest (Art. 7, II and IX, LGPD). 5.2 Cloudflare: website traffic passes through the network of Cloudflare, Inc. (USA) for fast delivery and protection against attacks (for example, DDoS). In this context, technical data such as IP address and request information are processed. There may be international data transfer (see item 9). Legal basis: legitimate interest in the security and stability of the website (Art. 7, IX, LGPD). 5.3 Necessary local storage: we store locally on your device (localStorage) your consent decision (ccm_consent) and, if applicable, the record that the fraud warning was dismissed (fraud_notice_dismissed, for up to 90 days). This data is not transmitted to third parties. 5.4 Hosting platform cookies: the technical platform Emergent (Emergent Labs Inc., USA) sets, directly from the server, the cookies __emg_sid (duration: 30 minutes, renewed with each access) and __emg_vid (duration: 12 months), which contain random session and visitor identifiers. These cookies are set by the platform independently of our website and cannot be disabled through the cookie settings. We have requested information from Emergent about the purpose and disabling of these cookies; this Policy will be updated as soon as there is a response. Legal basis: legitimate interest in the technical operation of the website (Art. 7, IX, LGPD).

Currently, fonts are generally loaded locally (without external requests to Google Fonts). Third-party content or plugins may still load external resources; in that case, the consent rules and this Privacy Policy apply.

At the moment, analytics features, marketing pixels, and advertising tracking are disabled. The technical structure may be prepared for future activation. The use of non-necessary tracking technologies will only occur with consent and, where applicable, after updating this Privacy Policy.

The articles in our legal blog are created and managed with the open-source WordPress system, installed on the subdomain blog.dobschinski.com.br and hosted by HostGator Brasil. The articles and their images are displayed at https://dobschinski.com.br/[language]/blog; for this purpose, our server retrieves the content directly from the WordPress installation, so that when you read articles on this website, your browser does not connect to the blog subdomain. When accessing blog.dobschinski.com.br directly, you are redirected to this page; at that moment, the HostGator server records technical access data (for example, IP address, date/time, browser, and requested address) in log files for security and operation purposes, according to the provider's policies. The blog comment function is not available; we do not collect personal data from readers through the blog. The WordPress administrative area is used exclusively by the law firm; it only processes data of the administrator users themselves (username, email, encrypted password). Blog articles are for informational purposes only and do not constitute legal consultation or opinion. Legal basis: legitimate interest in the dissemination of legal information and system security (Art. 7, IX, LGPD).

Personal data may be shared with necessary service providers, for example for hosting, e-mail, maps, embedded content, security, performance, and infrastructure. This may include, in particular, HostGator Brasil (domains, blog hosting), Emergent Labs Inc. (development, deployment and technical platform, including Google Cloud infrastructure), Cloudflare, Inc. (website delivery and security), Papoo Software & Media GmbH (CCM19, consent management), and Proton AG (e-mail), as well as their subcontractors. Sharing occurs only to the extent necessary and in compliance with data minimization and security.

Due to the use of technical platforms and external services (for example, HostGator, Emergent, communication, maps, videos, social networks, infrastructure), data may be transferred to other countries, including with a different level of data protection. Appropriate protective measures are sought; however, a fully risk-free digital environment cannot be guaranteed. For especially sensitive information, we recommend that the sender also uses a Proton account and sends the message from Proton to Proton. Alternatively, sensitive information may be transmitted through other secure communication channels agreed in advance.

• Contact requests (form/e-mail/WhatsApp): as long as necessary for assistance, plus an additional reasonable period • Pre-contractual communication: according to professional and legal requirements • Technical logs: according to hosting/server policies and security needs

Appropriate organizational and technical measures are adopted, for example access controls, secure connections (HTTPS/SSL/TLS), updates, and privacy-oriented configurations. Both mainstream systems (for example, Windows, macOS/iOS, iCloud, Microsoft Office) and open solutions (Linux/Open Source) may be used. No system is absolutely secure.

• Confirmation of processing and access • Correction of incorrect or outdated data • Anonymization, blocking, or deletion of unnecessary data • Data portability, when applicable • Information about sharing • Withdrawal of consent and information about consequences • Deletion of data processed based on consent, when applicable To exercise your rights, send a request to evellynn@dobschinski.com.br with the subject "LGPD - Data Subject". There is also the right to petition the ANPD.

This website may contain links to third-party pages. We are not responsible for the content, privacy practices or security of these websites. Please read the policies of the respective providers. This website contains links to external platforms such as LinkedIn, Instagram, Facebook and YouTube. These links are implemented as simple external references. Merely visiting our website does not load content from these platforms and does not set social media cookies through these platforms. Only when you actively click such a link will you leave our website and be redirected to the respective external platform. From that point onward, the respective platform operator is responsible for the processing of personal data. Please refer to the privacy information of the respective providers.

This Privacy Policy may be updated periodically. The version published on this page with the update date applies.