← Back
Privacy Policy and Data Protection
OCIBR — Italian Citizenship Organization in Brazil
Version 1.0 — April 26, 2026 | Controller: C. Salvati | privacy@ocibr.com.br

1. Data Controller

This document governs the relationship between the user and the OCIBR platform (ocibr.com.br), operated by C. Salvati. For purposes of Brazilian LGPD (Law 13,709/2018) and EU GDPR (Regulation 2016/679), the Controller is the individual responsible for personal data processing decisions.

DPO contact: privacidade@ocibr.com.br

2. Data Collected

2.1 Identification

Full name, date of birth, city, state, country, mobile number, primary email and recovery email.

2.2 Access

Username, unique identification number generated by the platform, password stored in encrypted format (bcrypt).

2.3 Biometric Data

Important: The platform collects and stores facial images for identity verification. This is sensitive data under LGPD Art. 5 and GDPR Art. 9, requiring explicit consent from the data subject.

3. Purpose

a) Identity verification and fraud prevention; b) Provision of contracted services; c) Communication about the process; d) Sharing with authorized notaries, sworn translators and attorneys.

4. Data Sharing

Data is shared exclusively with notaries, sworn translators, attorneys and Brazilian and Italian public authorities. No data is sold or shared for commercial purposes.

5. Security and Storage

Data stored with TLS encryption in transit and at rest. Retention for 10 years after process completion or contract termination.

6. Data Subject Rights

Access, correction, deletion, portability and withdrawal of consent at any time. Contact: privacidade@ocibr.com.br

7. International Transfer

Data may be transferred to Italy and EU countries, with guarantees under GDPR Art. 46 and LGPD Art. 33.

8. Changes

Material changes will be communicated by email at least 30 days in advance.