Privacy policy

This policy explains which personal data the treo360.com website collects, why, who we share it with, how long we keep it and how you can exercise your rights. It follows Brazil’s General Data Protection Law (Law No. 13,709/2018, “LGPD”).

Who the controller is

The data controller is Treo 360 Machine Solutions LTDA, registered under CNPJ 67.625.787/0001-58, headquartered at Rua Vilson Antonio Vivian, 285 D, Bom Retiro, Chapecó, Santa Catarina, Brazil, ZIP code 89811-160, operating under the TREO 360 brand.

Our data protection officer is Edimilson Marangoni Fernandes dos Santos, who can be reached at edimilson@treo360.com.

What we collect

When you fill in the contact form, we receive the data you provide: name, company, job title, business email, phone, plant or location and your message. Job title and plant are optional. We also record the language of the page the form was sent from.

To protect the form from bots, we use Cloudflare Turnstile, which evaluates technical browser signals and your IP address at the moment you submit. We do not store the result of that check.

To measure site traffic, we use Cloudflare Web Analytics, which counts visits and page views in aggregate. It does not use cookies, does not build individual profiles and does not identify visitors.

Video: the company video is only loaded from Cloudflare Stream when you click to play it. Until then, no connection is made to the video service.

The site sets no first-party cookies and no advertising or tracking cookies, and it does not collect sensitive data. The only thing it keeps in your browser, in local storage, is that you closed the cookie notice, so it is not shown again. That record does not identify you, is not sent anywhere and can be removed by clearing the site’s data in your browser.

How we use it and on what legal basis

• To answer your enquiry and follow up on the business or technical conversation you started — based on your consent, given by ticking the authorization box on the form (LGPD art. 7, I), and, where a negotiation follows, on steps prior to entering into a contract (art. 7, V).
• To protect the site and the form against abuse and automated submissions — based on legitimate interest (art. 7, IX).
• To understand, in aggregate, how the site is used so we can improve it — based on legitimate interest (art. 7, IX).

We do not sell personal data, do not use it for advertising and do not send marketing communications without asking for your permission.

Who we share it with

We rely on providers that process data on our behalf, solely for the purposes above:

• Cloudflare, Inc. — site hosting, form processing, bot protection (Turnstile), traffic metrics (Web Analytics) and video (Stream).
• Resend, Inc. — delivering the form message to our team by email.
• Google LLC — Google Workspace, where the message is received and stored.

These providers may process data outside Brazil, notably in the United States. In those cases the international transfer follows LGPD art. 33, based on the contractual safeguards each provider offers.

We may also share data when required by law or by order of a competent authority.

How long we keep it

Contact form messages are kept for 24 months after the last contact and then deleted, unless the contact has turned into a business relationship, in which case the data follows the retention periods of that relationship and of the applicable legal obligations.

You can ask for deletion before then at any time.

Your rights

Under LGPD art. 18, you may at any time:

• confirm whether we process your data and access it;
• correct incomplete, inaccurate or outdated data;
• request anonymization, blocking or deletion of data that is unnecessary or processed unlawfully;
• request portability of your data;
• withdraw your consent and request deletion of the data processed on that basis;
• find out which entities we share your data with;
• object to processing based on legitimate interest.

To exercise any of these rights, write to edimilson@treo360.com. We reply within 15 days. If you are not satisfied with our answer, you may also file a complaint with Brazil’s National Data Protection Authority (ANPD).

Security

The site is served over HTTPS only, service credentials are kept as encrypted secrets and access to received messages is restricted to the team that answers enquiries.

Changes to this policy

We may update this policy when the site or our providers change. The date of the last update is shown at the top of the page.