This policy explains which personal data traumazero.com collects, why it collects it, who it is shared with and how you exercise your rights, under Brazilian Law 13,709/2018 (LGPD).
Last updated: 16 September 2026.
Who the controller is
The controller of the personal data processed on this site is Trauma Zer0, based in Montenegro, Rio Grande do Sul, Brazil.
Data protection officer (DPO): Patrícia Wadenphul — dpo@traumazero.com. Deputy: Marcelo Ahlert Rech, at the same address.
What this site collects
We collect only what you send us and the minimum needed for the site to work:
- Contact and evaluation request forms: name, work e-mail, company, telephone and whatever message you write.
- Use case form: the answers you send and the level of publication permission you choose.
- Customer area: name, e-mail, company and a record of the downloads made, for licensing control and support.
- Technical browsing data: IP address, browser type and pages visited, generated automatically by the server.
What this site does NOT collect
It is important to separate two things that are often confused.
The Trauma Zer0 product is installed on the customer’s own infrastructure. The data the product collects from the machine estate — inventory, activity, evidence — stays on the customer’s server, under the customer’s exclusive control. Trauma Zer0 does not receive, store or access that data as part of how the product works. In that relationship the customer is the controller, and Trauma Zer0 is not a processor.
This policy covers exclusively the data collected by this website.
Why we process it, and on what legal basis
- To answer sales and support enquiries — legal basis: preliminary steps relating to a contract, at the data subject’s request (LGPD art. 7, V).
- To grant access to downloads and documentation — legal basis: performance of a contract (LGPD art. 7, V).
- To keep the site secure and working, including access logs — legal basis: compliance with a legal obligation (LGPD art. 7, II) and legitimate interest (art. 7, IX).
- To publish testimonials and use cases — legal basis: consent, obtained specifically in the form itself.
Who we share it with
We do not sell personal data and we do not pass it on for third-party advertising. We share it only with providers that keep the site running:
- Cloud infrastructure providers, in Brazil and the United States, where the site is hosted.
- A corporate e-mail provider, used to receive and answer the messages sent through the forms.
International transfer: part of the infrastructure is outside Brazil. The transfer takes place to make hosting and communication possible, with providers that apply contractual and technical safeguards compatible with the LGPD.
How long we keep it
- Contact messages: for as long as the enquiry lasts and for up to 2 years afterwards, as commercial history.
- Customer area accounts and download records: for as long as the account exists, and download records for as long as licensing auditing requires.
- Technical access logs: 6 months, as required by Brazil’s Marco Civil da Internet.
Once the purpose is over, data is deleted or anonymised, unless a legal obligation requires it to be kept.
Your rights
You may, at any time, ask for: confirmation that we process your data; access to it; correction of incomplete or outdated data; anonymisation, blocking or deletion of unnecessary data; portability; information about sharing; and withdrawal of consent, where that is the basis used.
To exercise any of these rights, write to dpo@traumazero.com or use the contact page. We reply within 15 days.
Security
The site is served exclusively over an encrypted connection (HTTPS). Administrative access is restricted and authenticated, and the customer area requires individual credentials. In the event of a security incident that could pose significant risk to data subjects, we will notify those affected and the ANPD, Brazil’s data protection authority, within the legal deadlines.
Cookies
The use of cookies is described in detail in the Cookie policy.
Changes to this policy
When this policy changes, the update date at the top of the page changes with it. Material changes will be communicated through the usual customer contact channels.