PRIVACY NOTICE
J.D.Rassi Advogados (“J.D.Rassi”) collects, uses, stores, shares, and protects personal data in the course of its activities in accordance with the Brazilian General Data Protection Law, Law No. 13,709/2018 (“LGPD”), including its underlying foundations, principles, and legal bases, as well as other applicable laws and regulations.
Ensuring the privacy and protection of the personal data of our website users, clients, staff, partners, and other data subjects connected with the firm is a priority for us.
We have therefore prepared this Privacy Notice to explain how J.D.Rassi processes personal data.
Personal Data Processed by J.D.Rassi
All information provided by staff, associates, business partners, clients, or third parties is protected under strict confidentiality standards and used only for the purposes for which it was collected.
All processing operations are carried out in accordance with the LGPD and other applicable regulations, and J.D.Rassi’s processing activities are supported by an appropriate legal basis.
J.D.Rassi may process the following personal data for the purposes set out below:
| Type of Personal Data | Description | Purpose |
|---|---|---|
| Identification Data | Full name; address; date of birth; nationality; identification document details (for example, Brazilian identity card — RG, taxpayer identification number — CPF, driver’s license — CNH, or Brazilian Bar Association registration — OAB, as applicable); email address; telephone number. | To identify individuals and verify their identity for the provision of services; to maintain a database of staff, clients, associates, business partners, firm partners, and other relevant individuals. |
| Academic and Professional Data | Employment history; current employment; profession; position; educational background. | To maintain a database of candidates for employment, internships, associate and partnership positions, and service provision. |
| Financial Data | Payment details; remuneration; bank account details. | To identify individuals and verify their identity, comply with tax, legal, and/or regulatory requirements, and make or receive payments. |
Personal data may also be processed for the following purposes: holding meetings and videoconferences; conducting training; preparing documents; analyzing products, services, cases, or other situations presented by clients to provide advice and prepare memoranda and legal opinions; managing investigations; participating in audits; and drafting, reviewing, or negotiating contracts.
J.D.Rassi does not sell personal data or use it for commercial sharing or targeted advertising.
J.D.Rassi is the controller of the personal data processed in the course of its activities.
COOKIES
Cookies are small text files sent by a website to a user’s computer and stored there, containing information related to website browsing. Cookies allow the user’s browser to store small amounts of information that our server can subsequently read.
J.D.Rassi uses cookies to facilitate the use of its website and compile information about how it is used, helping us improve its structure and content. Cookies may also be used to streamline users’ activities and improve their future experience on J.D.Rassi’s website.
Data subjects may withdraw their consent to cookies at any time by deleting cookies through their preferred browser’s settings. Disabling cookies may affect the availability of certain website tools and features and prevent them from functioning as intended. It may also remove any saved preferences, affecting the user’s experience.
Sharing of Personal Data
To fulfill the purposes listed above, J.D.Rassi may, where necessary, share personal data with the following third parties:
Local counsel and partner law firms in Brazil or abroad, auditors, accountants, translators, and financial institutions that assist in the provision of legal services;
Regulatory bodies or public authorities, including judicial bodies and the Brazilian National Data Protection Authority (ANPD);
Providers of software and technology required for the firm’s management and security.
Our security measures also extend to the third parties with whom we share personal data, except for regulatory bodies and public authorities, whose practices are beyond our control.
International Transfers of Personal Data
J.D.Rassi is based in Brazil. In certain circumstances, however, we may share personal data with third parties located outside Brazil, such as cloud storage service providers, which may act as processors or joint controllers.
Regardless of where data is processed or stored, J.D.Rassi adopts the technical and administrative measures necessary to ensure its security, confidentiality, and privacy. These include privacy and information security assessments and specific contractual clauses to ensure that processing complies with the LGPD or equivalent legislation.
Data Subjects’ Rights
Data subjects have the right to:
Obtain confirmation of whether their personal data is being processed;
Access their personal data;
Correct incomplete, inaccurate, or outdated personal data;
Request the anonymization, blocking, and/or deletion of data that is unnecessary, excessive, or processed in breach of the LGPD;
Request data portability to other service or product providers;
Request the deletion of data processed on the basis of consent;
Obtain information about the sharing of personal data with third parties;
Obtain information about the possibility of withholding consent and the consequences of doing so;
Withdraw consent in accordance with applicable law;
Request a review of decisions based solely on the automated processing of personal data.
To properly fulfill a request, J.D.Rassi will take the steps necessary to verify the data subject’s identity.
Retention and Deletion of Personal Data
Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, subject to the retention periods established by applicable laws and regulations.
Requests for the deletion or anonymization of personal data may be fulfilled only where retention is not required by law, a regulatory authority, contractual performance, or other grounds justifying continued storage.
Security Measures
We adopt technical and administrative security measures to protect personal data against unauthorized access, destruction, loss, alteration, and improper disclosure or dissemination. Sensitive personal data, including health data, and the personal data of children and adolescents are subject to the highest level of protection and confidentiality, with access restricted to authorized professionals.
We expect everyone in our value chain to uphold the same level of security that we strive to maintain. We therefore assess third parties that may process personal data on our behalf or for our benefit. Despite these precautions and efforts, we cannot guarantee that our services and systems are immune to security breaches.
Children and Adolescents
J.D.Rassi’s website is institutional and informational in nature and is not specifically directed at children or adolescents.
We do not intentionally collect personal data from children or adolescents through the website. If such information is submitted through the contact form, it will be processed solely to respond to the request received.
Parents or legal guardians who believe that a child or adolescent has improperly provided personal data may request its deletion through the contact channel specified in this notice.
Changes
This notice may be updated periodically. Material changes will be communicated through our official channels.
Contact Details
If you have any questions or wish to exercise your rights, please email contato@jdrassi.com.br. Our Data Protection Officer is João Daniel Rassi, who can be contacted at the same email address.
Date: April 30, 2026