Privacy Policy

1. Who the controller is

The data controller is WS FROTAS LTDA, CNPJ 69.255.124/0001-14, registered at Servidão Ana Cardoso, 445, Bloco B, Casa 19, São João do Rio Vermelho, Florianópolis/SC, Brazil, CEP 88060-360.

For anything related to personal data, contact us at [email protected] or +55 48 99120-0012.

2. What data we process

We only process the data each purpose needs:

• Rental customers: name, CPF or CNPJ, ID, driver's licence, address, phone, email, details of the rented vehicle or trailer, the contract and signature, payment and billing details, and traffic fines linked to the rental period.
• Contact through the website, WhatsApp, phone or email: the information you send us to get service or a quote.
• Management system users (authorised staff and partners): name, email address and profile picture received from Google when you sign in with your Google account, plus a record of actions taken in the system.
• Technical data: IP address, date and time of access to the system and basic browser information, kept as access logs.

3. Why we use it and on what legal basis

• Performing the rental contract: identifying the renter, issuing and signing the contract, handing over and receiving the asset, billing and issuing documents (LGPD, art. 7, V).
• Meeting legal and regulatory obligations: tax and accounting duties and nominating the driver responsible for traffic offences under the Brazilian Traffic Code (LGPD, art. 7, II).
• Authenticating management system users and controlling who can use each function (LGPD, art. 7, V and IX).
• Preventing fraud, protecting our vehicles and trailers and keeping the system secure (LGPD, art. 7, IX, legitimate interest).
• Answering contact and quote requests (LGPD, art. 7, V, pre-contractual steps).

4. Sign in with Google

The management system lets you sign in with a Google account. When you do, we receive only your name, email address and profile picture from Google (the openid, email and profile scopes). We use them solely to identify you, create your session and check that you are authorised.

We do not access your email, contacts, files or any other data in your Google account. We do not sell this data, use it for advertising or share it with third parties, except where the law requires. WS Frotas' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Who we share it with

We do not sell personal data. We share only what is necessary with:

• Traffic authorities, to nominate the driver responsible for fines.
• Payment institutions and banks, to process charges.
• Our accountants, to meet tax obligations.
• Technology providers that host and run our systems, under contract and confidentiality duties.
• Public authorities, where there is a legal obligation or court order.

6. International transfers

Part of our infrastructure (hosting, storage and email) is provided by companies with servers outside Brazil, including in the United States. These transfers follow article 33 of the LGPD and use providers whose security and data protection standards are compatible with the law.

7. How long we keep it

• Rental contract data: for the contract and the legal tax-retention and limitation periods (generally up to 5 years after the contract ends).
• System access logs: at least 6 months, as required by Brazil's Internet Civil Framework (Law 12,965/2014, art. 15).
• Management system account data: while access is active, then removed or anonymised, unless the law requires us to keep it.
• Contact requests that did not become a contract: up to 12 months.

8. How we protect it

We use encrypted connections (HTTPS), role-based access control, user authentication, encrypted backups and access logging. Only authorised people access customer data, and only when their work requires it.

9. Your rights

Under article 18 of the LGPD you may ask us at any time for:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or out-of-date data;
• anonymisation, blocking or deletion of data that is unnecessary or processed unlawfully;
• portability of your data to another provider;
• information about who we share your data with;
• withdrawal of consent, where processing is based on it.

10. How to exercise your rights

Send your request to [email protected]. We reply within 15 days. We may ask you to confirm your identity first, to protect your data. You can also complain to Brazil's National Data Protection Authority (ANPD).

11. Cookies

The www.wsfrotas.com website does not use advertising or tracking cookies. The management system uses only essential cookies that keep your session active and secure; sign-in does not work without them.

12. Changes

We may update this policy to reflect changes in the law or in our services. The date of the latest update is always shown at the top of this page.