Last updated: July 2026
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:
VERBUM ASSESSORIA CONTABIL E EMPRESARIAL LTDA
ROMUALDO GALVAO, 293, SALA 604 COND EDF COMERCIAL SFAX - TIROL, NATAL/RN, CEP 59020-640, Brazil
CNPJ: 64.710.521/0001-15
Managing Director: COSMA DANIELLE MACHADO DA COSTA
Email: [email protected]
The appointment of a data protection officer is not required under Art. 37 GDPR, since our company does not as a rule permanently employ at least 20 people on the automated processing of personal data. For data protection questions you can contact the email address given above at any time.
When you call up our website, the browser in use on your device automatically sends the following information to the server of our website, where it is stored temporarily in so-called server log files:
The data named is processed for the following purposes: ensuring a smooth connection to the website, ensuring comfortable use of our website, evaluating system security and stability, and for further administrative purposes.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest follows from the purposes of data collection listed above, in particular the security and stability of our website.
Retention period: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected to provide the website, this is the case when the session in question has ended. The server log files are automatically deleted after 7 days at the latest.
If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, are stored with us for the purpose of handling the enquiry and in case of follow-up questions. The following data is collected in the process:
We do not pass this data on without your consent.
Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures taken at the request of the data subject). Insofar as your enquiry does not relate to the conclusion of a contract, Art. 6(1)(f) GDPR (legitimate interest in the effective handling of enquiries addressed to us) is the legal basis.
Retention period: The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions — retention periods in particular — remain unaffected.
Our website uses exclusively technically necessary cookies. These are small text files that your browser creates automatically and that are stored on your device when you visit our website.
Technically necessary cookies are exempt from the consent requirement under § 25(2) TTDSG (German Telecommunications Digital Services Data Protection Act), since they are strictly required for the operation of the website. These cookies cannot be deactivated.
We do not use tracking cookies, analytics cookies or advertising cookies without your prior express consent. Any such consent is obtained via our cookie consent banner.
Legal basis for technically necessary cookies: § 25(2) TTDSG in conjunction with Art. 6(1)(f) GDPR.
Legal basis for optional cookies: Art. 6(1)(a) GDPR (consent).
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
Purpose: We use Google Ads conversion tracking in order to measure the effectiveness of our advertising campaigns. If you click on an ad placed by Google, a cookie for conversion tracking is stored on your device. These cookies expire after 30 days and do not serve personal identification.
If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked on the ad and were forwarded to this page. Every Google Ads customer receives a different cookie. The information obtained via conversion cookies serves to produce conversion statistics for Ads customers who have opted for conversion tracking.
Legal basis: Art. 6(1)(a) GDPR (consent). The conversion tracking cookie is set only if you have given your consent via our cookie consent banner. You can withdraw your consent at any time with effect for the future.
Data transfer to third countries: Google may transfer collected data to the USA. The transfer takes place on the basis of the EU-US Data Privacy Framework (DPF). Further information can be found in Google’s privacy policy: https://policies.google.com/privacy.
Where a payment obligation exists after conclusion of the contract, we use an external payment service provider to process the payment. Your payment data (e.g. credit card number, bank details) is transmitted directly to the payment service provider and processed there.
We ourselves at no point store complete credit card or bank details on our servers. From the payment service provider we receive merely a confirmation of the success or failure of the payment and, where applicable, a transaction ID for matching purposes.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Processing the payment data is necessary for the performance of the contract concluded between you and us.
Because our company is based in Brazil, personal data is transferred to a third country. Brazil is a third country outside the European Union. The transfer of personal data to Brazil takes place on the basis of Art. 49(1)(a) GDPR (explicit consent) or Art. 49(1)(b) GDPR (performance of a contract). With the Lei Geral de Proteção de Dados (LGPD), Brazil has its own data protection law.
Protective measures: Where personal data is transferred to recipients in third countries that are not covered by the DPF adequacy decision, we ensure through appropriate safeguards that the rights of the data subjects are adequately protected. To this end we conclude EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.
In exceptional cases the transfer can be based on your explicit consent pursuant to Art. 49(1)(a) GDPR. In that case you will be informed of the possible risks before the transfer.
You have the following rights vis-à-vis the controller with regard to your personal data:
To exercise your rights please contact us by email at: [email protected]. We will deal with your matter without delay, and at the latest within one month.
Without prejudice to any other administrative or judicial remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR.
You may assert this right with a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement. You will find a list of the data protection supervisory authorities in Germany at: https://www.bfdi.bund.de.
We reserve the right to adapt this privacy policy in order to bring it into line with changed legal situations or with changes to the service or to data processing. This applies, however, only with respect to statements about data processing. Where consents are required or where parts of the privacy policy contain provisions of the contractual relationship with users, the changes are made only with the users’ agreement.
The current version is always available on this page. Please inform yourself regularly about the content of our privacy policy.
Last updated: July 2026