Last updated: October 2026
1. Data Controller
Gateway Mercosur is a business project operated by:
Amicia Online Marketing
Owner: André Martin Désor
Rua Victor Meirelles, 17
88160-480 Biguaçu – SC
Brazil
CNPJ: 28.455.351/0001-06
Phone / WhatsApp: +55 48 3299-4055
Email: andre@amicia.agency
Gateway Mercosur is not a separate legal entity. Amicia Online Marketing is responsible for the processing of personal data in connection with this website.
2. Scope and General Information
We respect your privacy and process personal data in accordance with applicable data protection laws, including Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados Pessoais – LGPD).
Where applicable to our processing activities, we also take into account the requirements of the EU General Data Protection Regulation (GDPR).
Personal data means any information relating to an identified or identifiable natural person. This may include, for example, a name, email address, telephone number, company-related contact information, IP address or information contained in a communication.
We process personal data only for specific and legitimate purposes and only to the extent necessary for those purposes.
3. Website Access and Server Log Data
When you access this website, technical information may be processed automatically by the hosting and technical infrastructure used to operate the website.
Depending on the technical configuration, this may include:
- IP address
- date and time of access
- requested page or file
- amount of data transferred
- browser type and version
- operating system
- referrer URL
- HTTP status code
- technical information required to maintain the security and functionality of the website
This information may be processed for the operation, security, stability and technical administration of the website.
Where the GDPR applies, the legal basis may be our legitimate interest in operating a secure, stable and technically reliable website pursuant to Art. 6(1)(f) GDPR, where the applicable legal requirements for relying on that legal basis are met.
4. Contacting Us
If you contact us by email, telephone, WhatsApp or through a contact form or other communication function made available on the website, we process the information you provide in order to respond to your enquiry and communicate with you.
Depending on the communication, this may include:
- name
- company
- email address
- telephone number
- information contained in your message
- other information voluntarily provided by you
Where the processing is necessary to take steps at your request before entering into a contract or to perform a contract, the legal basis may be Art. 6(1)(b) GDPR where the GDPR applies.
In other cases, processing may be based on our legitimate interest in responding to enquiries and maintaining business communications, pursuant to Art. 6(1)(f) GDPR where applicable.
5. Communication via WhatsApp
WhatsApp may be offered as an optional communication channel.
If you choose to contact us via WhatsApp, we process the information contained in your communication for the purpose of responding to your enquiry and communicating with you.
WhatsApp is provided by companies within the Meta group. WhatsApp and other companies within the Meta group may process personal data in accordance with their own terms and privacy policies, including in jurisdictions outside your country of residence.
You are not required to use WhatsApp to contact us. You may alternatively contact us by email or telephone.
6. Cookies and Similar Technologies
This website may use cookies and similar technologies.
Technically necessary cookies or similar technologies may be used where required for the operation, security and functionality of the website.
Non-essential cookies and similar technologies used for analytics, marketing or other optional purposes are only activated where required by applicable law after the necessary consent has been obtained.
Where a consent mechanism is provided, you may change or withdraw your consent at any time with effect for the future through the available cookie settings.
The specific cookies and similar technologies used on the website may change as website functionality and services are added or modified. Where required, the Privacy Policy and cookie information will be updated accordingly.
7. WordPress, Elementor and Website Technologies
This website may use WordPress, Elementor and other technical components required for its operation and maintenance.
Depending on the configuration of the website, these technologies may process technical information or use technically necessary cookies or similar technologies.
Additional third-party services or plugins may be integrated into the website from time to time. Where such services involve the processing of personal data, the relevant information will be provided in this Privacy Policy or through the applicable cookie information and consent mechanism, where required.
8. Third-Party Services and Embedded Content
The website may use third-party services or display third-party content, for example where required for website functionality, communication, security, analytics or other purposes.
The specific services used may change over time.
Where the use of a third-party service involves the processing of personal data, the relevant information will be provided where required by applicable law. Where consent is required for a third-party service or technology, it will not be activated before the necessary consent has been obtained.
9. Legal Bases for Processing
Depending on the circumstances, personal data may be processed on the following legal bases where the GDPR applies:
- performance of a contract or steps taken at your request before entering into a contract;
- compliance with a legal obligation;
- our legitimate interests, provided that those interests are not overridden by your rights and freedoms;
- your consent, where consent is required or relied upon; and
- other legal bases permitted under applicable law.
Under the Brazilian LGPD, personal data is processed on the basis of the applicable legal hypotheses provided by the LGPD, depending on the nature and purpose of the processing.
10. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected, taking into account applicable legal, contractual and regulatory retention requirements.
The retention period may therefore depend on the type of information and the purpose for which it is processed.
When the relevant purpose no longer applies and there is no legal requirement or legitimate reason to retain the information, personal data will be deleted, anonymised or otherwise handled in accordance with applicable law.
11. Disclosure and Service Providers
We do not disclose personal data to third parties except where there is an appropriate legal basis.
Personal data may be made available to service providers and technical partners where necessary to operate, maintain, secure or provide website functionality or services.
Such service providers may include, depending on the services actually used:
- hosting and infrastructure providers;
- website and technical service providers;
- communication providers;
- security providers;
- analytics or marketing service providers, where applicable; and
- other providers supporting the operation of the website or our business activities.
Email delivery (Brevo): Outgoing emails from our domain, including our replies to your enquiries and the notifications generated by the contact form on this website, are sent via the email delivery service Brevo, operated by Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France. For this purpose, Brevo processes the sender and recipient email addresses, the content of the email and technical delivery data (such as the time of sending and the delivery status) on our behalf as a processor, solely in order to deliver the email. Brevo’s data processing agreement in accordance with Art. 28 GDPR applies. Brevo may also process data outside the European Union; where this is the case, appropriate safeguards are in place. Further information: brevo.com/legal/privacypolicy.
Where required by applicable law, appropriate contractual and organisational safeguards are used when engaging service providers.
12. International Data Transfers
Amicia Online Marketing is based in Brazil. Personal data may therefore be processed in Brazil.
Depending on the technical and service providers used by the website or our business, personal data may also be processed in other countries.
Where applicable law requires specific safeguards for international data transfers, we will use an appropriate legally recognised transfer mechanism and applicable safeguards.
Information concerning relevant international transfers will be provided where required by applicable law.
13. Your Rights under the GDPR
Where the GDPR applies, you may have the following rights, subject to the applicable legal requirements and limitations:
- right of access to your personal data;
- right to rectification of inaccurate or incomplete data;
- right to erasure;
- right to restriction of processing;
- right to data portability;
- right to object to certain processing activities;
- right to withdraw consent at any time where processing is based on consent; and
- right to lodge a complaint with a competent data protection supervisory authority.
You may exercise applicable rights by contacting:
Email: andre@amicia.agency
14. Your Rights under the Brazilian LGPD
Where the LGPD applies, data subjects may exercise the rights provided by applicable Brazilian data protection law.
These rights may include, among others:
- confirmation of the existence of processing;
- access to personal data;
- correction of incomplete, inaccurate or outdated data;
- anonymisation, blocking or deletion of unnecessary, excessive or unlawfully processed personal data, where applicable;
- information about the entities with which personal data has been shared, where applicable;
- information about the possibility of refusing consent and the consequences of such refusal, where consent is involved; and
- other rights provided by applicable law.
Requests concerning personal data may be sent to:
Email: andre@amicia.agency
15. Withdrawal of Consent
Where processing is based on consent, you may withdraw your consent at any time with effect for the future.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Where applicable, withdrawal can also be carried out through the cookie settings provided on the website.
16. Direct Marketing
Where we process personal data for direct marketing purposes, you may object to such processing at any time.
Following a valid objection, personal data will no longer be processed for the relevant direct marketing purposes, subject to applicable legal requirements.
17. Data Security
We implement reasonable and appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, destruction, alteration or other unlawful or unauthorised processing.
The website uses HTTPS encryption for data transmitted between the user’s browser and the website where supported by the relevant technical infrastructure.
No method of transmission or storage can be guaranteed to be completely secure. We therefore continuously review and, where appropriate, improve our technical and organisational security measures.
18. Automated Decision-Making
We do not intend to use personal data collected through this website for automated decision-making that produces legal effects or similarly significant effects on individuals.
19. Privacy Contact
For questions concerning the processing of personal data or to exercise applicable data protection rights, please contact:
Amicia Online Marketing
Attn.: André Martin Désor
Rua Victor Meirelles, 17
88160-480 Biguaçu – SC
Brazil
Email: andre@amicia.agency
Phone / WhatsApp: +55 48 3299-4055
20. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, particularly where the website, services, technologies or applicable legal requirements change.
The current version will be published on this website together with the date of the latest update.