Privacy Policy
Last updated: May 24, 2026
1. Controller Identification
Areatec Tecnologia e Serviços LTDA
CNPJ: 11.406.226/0001-03
Address: Rua Santos Dumont, 444 - Vila Bressan, Araras/SP - CEP 13600-650
Phones: +55 (19) 2042-1373 | +55 (11) 99128-7417
Email: contato@areatec.com.br
Areatec is the controller of personal data collected through its digital channels, including the institutional website (areatec.com.br), the Digipare application, the Olho Vivo Patrol and Olho Vivo Parking systems, the Electronic Ticket Book, and other products and services offered by the company.
2. Data Protection Officer (DPO)
In compliance with Article 41 of Law No. 13,709/2018 (LGPD), Areatec has appointed a Data Protection Officer (DPO), responsible for accepting complaints and communications from data subjects, providing clarifications, and taking measures with the National Data Protection Authority (ANPD).
Data Protection Officer (DPO): Marcelo Michielin
Email: mmichielin@areatec.com.br
3. Personal Data Collected
Areatec collects personal data according to the purpose of each interaction. The data collected varies depending on the channel used:
| Channel | Data Collected |
|---|---|
| Contact form | Name, email, phone, company, message |
| Gated content (document downloads) | Name, email, company, job title |
| Blog and newsletter | Name, email |
| Digipare application | Name, CPF, email, phone, vehicle license plate, payment data (processed by a third-party gateway) |
| Website navigation | Cookie data (language preference, consent), IP address, browser type, pages visited |
| Operating systems (Olho Vivo, Ticket Book) | Data collected according to the contract with the contracting public agency (license plate images, geolocation, infraction data) |
4. Purpose of Processing
The personal data collected by Areatec is used for the following purposes:
| Purpose | Legal Basis (LGPD) |
|---|---|
| Respond to contact requests and demonstrations | Consent (Art. 7, I) |
| Provide technical documents (gated content) | Consent (Art. 7, I) |
| Send commercial communications and newsletter | Consent (Art. 7, I) |
| Provision of contracted services (Digipare, Olho Vivo, Ticket Book) | Contract execution (Art. 7, V) |
| Improvement of navigation experience and analytics | Legitimate interest (Art. 7, IX) |
| Compliance with legal and regulatory obligations | Legal obligation (Art. 7, II) |
| Traffic enforcement and public safety | Execution of public policies (Art. 7, III) and protection of life (Art. 7, VII) |
5. Data Sharing
Areatec may share personal data with third parties in the following cases:
Contracting public agencies: Operational enforcement data (images, license plates, infractions) are transmitted to municipal and state traffic agencies according to the service provision contract, in compliance with current traffic legislation.
Service providers: Companies that assist in the operation of the systems (hosting, payment processing, email sending) receive only the data strictly necessary for the provision of the service, through contractual data protection clauses.
Competent authorities: When required by law, court decision, or request from a competent authority.
Areatec does not sell, rent, or transfer personal data to third parties for marketing purposes.
6. International Data Transfer
Some of the infrastructure services used by Areatec have servers located in the United States of America, including cloud database services (Supabase) and file storage. In these cases, the international transfer of data occurs with the adoption of appropriate security measures, including encryption in transit and at rest, and in compliance with Article 33 of the LGPD.
Areatec ensures that international service providers adopt data protection standards equivalent to or higher than those required by Brazilian legislation.
7. Data Retention
Personal data is kept for the time necessary to fulfill its purpose, observing the following periods:
| Data Category | Retention Period |
|---|---|
| Leads (contact forms and gated content) | 2 years after the last interaction |
| Contractual data (Digipare, contracts with municipalities) | 5 years after the end of the contract |
| Enforcement data (images, infractions) | According to applicable traffic legislation and contract with the public agency |
| Navigation data and cookies | 12 months |
| Data for compliance with legal obligations | According to the applicable statute of limitations (e.g., 5 years for tax data) |
After the retention period ends, the data is securely deleted or irreversibly anonymized.
8. Data Subject Rights
In compliance with Articles 17 to 22 of the LGPD, the personal data subject has the right to:
Confirmation and access: Confirm the existence of processing and access their personal data held by Areatec.
Correction: Request the correction of incomplete, inaccurate, or outdated data.
Anonymization, blocking, or deletion: Request the anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in non-compliance with the LGPD.
Portability: Request the portability of data to another service provider, upon express request.
Deletion: Request the deletion of personal data processed based on consent.
Revocation of consent: Revoke consent at any time, without compromising the lawfulness of the processing carried out previously.
Opposition: Oppose processing carried out based on legitimate interest, if an irregularity is identified.
To exercise any of these rights, the data subject must contact us by email at mmichielin@areatec.com.br. Areatec will respond to requests within up to 15 business days, as provided by law.
9. Data Security
Areatec adopts appropriate technical and organizational measures to protect personal data against unauthorized access, destruction, loss, alteration, or any form of inappropriate processing. The measures include:
Encryption: Data in transit protected by TLS 1.3 and data at rest with AES-256 encryption.
Access control: Restricted access to personal data through multi-factor authentication and the principle of least privilege.
Monitoring: Intrusion detection systems and continuous infrastructure monitoring.
ISO 27001 Compliance: Areatec maintains practices aligned with the ISO/IEC 27001 standard for information security management, ensuring auditable data protection processes.
Digital chain of custody: For enforcement data, AreaChain technology (private blockchain) ensures the immutability and traceability of each record collected in the field.
10. Cookies and Tracking Technologies
The Areatec website uses cookies and similar technologies. On your first visit, a notice lets you decide: accept all, reject non-essential, or customize by category. The categories are:
| Category | Cookie / Technology | Purpose |
|---|---|---|
| Essential | areatec_cookie_consent | Stores the user's cookie consent preference (localStorage) |
| Essential | areatec_lang | Stores the user's language preference (localStorage) |
| Functional | Mapbox GL JS | Renders the coverage map and helps identify your city when you contribute. May collect usage data according to Mapbox's policy. |
| Analytics | Cloudflare Web Analytics | Anonymous, cookieless traffic measurement. Loaded only with your analytics consent. |
Essential cookies stay always on, since they support login, security, and your preferences. Analytics cookies load only if you consent. If you decline, no measurement is performed. To review your choice, clear this site's data in your browser and the notice appears again.
11. Data of Minors
Areatec's services are not directed to minors under 18 years of age. The company does not intentionally collect personal data from children or adolescents through its digital channels. If Areatec identifies that data from minors has been inadvertently collected, it will proceed with its immediate deletion.
12. Changes to this Policy
Areatec reserves the right to update this Privacy Policy at any time, to reflect changes in its data processing practices or as a result of legislative changes. The updated version will always be published on this page, indicating the date of the last revision. We recommend periodically consulting this document.
13. Contact and Channel for Exercising Rights
For questions, requests, or the exercise of rights related to personal data protection, the data subject can contact us through the following channels:
Data Protection Officer (DPO) Email: mmichielin@areatec.com.br
Institutional Email: contato@areatec.com.br
Phone: +55 (19) 2042-1373
Address: Rua Santos Dumont, 444 - Vila Bressan, Araras/SP - CEP 13600-650
14. Validity
This Privacy Policy comes into effect on the date of its publication (May 24, 2026) and remains valid indefinitely, until it is replaced by an updated version published on this same page.
Areatec Tecnologia e Serviços LTDA — CNPJ 11.406.226/0001-03
Rua Santos Dumont, 444 - Vila Bressan, Araras/SP - CEP 13600-650