Privacy policy and data protection

Privacy policy and data protection

Privacy policy and data protection

01. Who we are

Indústria de Vinagre Prinz Ltda. (“Prinz”, “we” or “our”), registered under CNPJ No. 91.154.823/0001-27, headquartered at Rua Oswaldo Aranha 525, Lajeado/RS, 95900-134, is the controller of the personal data processed through this website.

This Privacy Policy describes how we collect, use, store, and protect the personal data obtained when browsing our website or contacting us. It has been prepared in accordance with LGPD — Law No. 13,709/2018, the data protection principles of the Mercosur, and, for data subjects in the USA, the California Consumer Privacy Act (CCPA).


02. Data we collect

We collect only the data necessary for the purposes of this policy. We do not process sensitive data (racial origin, religious belief, genetic, biometric, health, or sexual orientation data).

Identification  —  Full name — provided by the data subject via the contact form

Contact  —  Email and phone number — provided by the data subject via the contact form

Browsing  —  IP address, browser, pages visited, date and time — collected automatically by the servers

Analytics  —  Browsing behavior, traffic source, time on page, clicks — Google Analytics (with consent)

Marketing  —  Browsing events, interactions, audience data — Meta Pixel / Meta Platforms (with consent)


03. Purpose and legal basis for processing

Each data item collected has a specific purpose and legal basis under the LGPD (art. 7) and the GDPR (art. 6):

Name, email, phone number

Purpose: Respond to contacts and requests
Legal basis (LGPD): Legitimate interest — art. 7, IX
Legal basis (GDPR): Legitimate interest — art. 6, 1, f

Browsing logs

Purpose: Security and fraud prevention
Legal basis (LGPD): Legitimate interest — art. 7, IX
Legal basis (GDPR): Legitimate interest — art. 6, 1, f

Google Analytics

Purpose: Audience analysis and website improvement
Legal basis (LGPD): Consent — art. 7, I
Legal basis (GDPR): Consent — art. 6, 1, a

Meta Pixel

Purpose: Campaign measurement, remarketing, and custom audiences
Legal basis (LGPD): Consent — art. 7, I
Legal basis (GDPR): Consent — art. 6, 1, a

Analytics and marketing cookies are activated only after the visitor gives explicit consent via the banner on first access.


04. Data sharing

Your data is not sold or transferred to third parties. We may share it only in the following cases:

  • Google LLC — audience analysis via Google Analytics, in accordance with Google’s Privacy Policy and Analytics Data Processing Terms;

  • Meta Platforms, Inc. — campaign measurement and creation of advertising audiences via Meta Pixel, in accordance with Meta’s Data Policy;

  • Service providers: hosting and IT companies contracted under confidentiality and security obligations;

  • Legal obligation: when required by law, court order, or competent authority.


05. International data transfer

Google Analytics and Meta Pixel transfer data to servers in the United States and other countries, based on standard contractual clauses and adequacy mechanisms recognized by the ANPD (art. 33, LGPD).

Data subjects in the Mercosur have their data processed under the principles of mutual protection in the applicable regional agreements. Data subjects in the USA are covered by the rights of the CCPA and other applicable state laws.


06. Data retention

Contact form  —  Up to 2 years from the last contact

Browsing logs  —  Up to 6 months — art. 15, Marco Civil da Internet

Google Analytics  —  Standard 14-month period, adjustable by the administrator

Meta Pixel  —  Generally up to 180 days in accordance with Meta Platforms policies

Legal obligation  —  Longer periods prevail when required by law

After the retention period ends, the data is securely deleted or irreversibly anonymized.


07. Information security

We adopt technical and organizational measures to protect your data:

  • HTTPS protocol (TLS encryption) in all communications;

  • Access control based on functional need;

  • Regular vulnerability monitoring;

  • Periodic training for the teams involved in data processing.

In the event of a significant incident, we will notify the ANPD and the affected data subjects within the legal timeframe (art. 48, LGPD).


08. Data subject rights

You may exercise the following rights at any time:

Confirmation and access  —  Know whether we process your data and obtain a copy — LGPD art. 18, I–II · GDPR art. 15 · CCPA

Correction  —  Rectification of inaccurate or outdated data — LGPD art. 18, III · GDPR art. 16

Deletion  —  Removal of unnecessary data or data processed in violation of the law — LGPD art. 18, IV · GDPR art. 17 · CCPA

Portability  —  Receive data in an interoperable format — LGPD art. 18, V · GDPR art. 20

Withdrawal  —  Withdraw consent for cookies at any time — LGPD art. 8, § 5 · GDPR art. 7

Objection  —  Object to processing based on legitimate interest — LGPD art. 18, IX · GDPR art. 21

Non-discrimination (USA)  —  Not to be discriminated against for exercising rights — CCPA § 1798.125

Send your request to the email indicated in section 14. We will respond within up to 15 business days (LGPD) or 45 days (CCPA).

To withdraw cookie consent, click “Manage cookies” in the website footer or adjust your browser settings.


09. Cookies and tracking technologies

Cookies are small files stored on your device that allow the website to recognize your browser on future visits. We use three categories:

Essential — always active

Necessary for the functioning of the site (session, preferences, security). They do not require consent and cannot be disabled.

Analytics — consent required

Used by Google Analytics to measure audience, browsing behavior, and site performance. They collect data in aggregated and pseudonymized form.

Cookies: _ga, _ga_[ID], _gid, _gat

Marketing — consent required

Used by Meta Pixel to measure campaigns, create custom audiences on Facebook and Instagram, and display relevant ads.

Cookies: _fbp, _fbc, fr

On first access, a consent banner will allow you to accept, refuse, or customize each category. Preferences can be changed via the “Manage cookies” link in the website footer.


10. Google Analytics

Web analytics service from Google LLC (USA) that collects information about website use through cookies and identifiers. Privacy measures adopted:

  • IP anonymization enabled (IP Anonymization) — the full IP address is not stored;

  • Data sharing with Google disabled in the property settings;

  • Retention configured for the shortest available period: 14 months.

Analytics is loaded only after consent. To opt out, install the Google Analytics opt-out add-on.

More information: Google Privacy Policy · Google Analytics Security.


11. Meta Pixel

Technology from Meta Platforms, Inc. (USA) that records actions on the website and associates them with Facebook and Instagram profiles to:

  • Measure the effectiveness of advertising campaigns;

  • Create custom audiences (Custom Audiences);

  • Create lookalike audiences (Lookalike Audiences).

The Pixel is loaded only after consent.


12. Minors

The website is not directed to individuals under 18 years of age. We do not intentionally collect data from minors. If we identify such a situation, the data will be deleted immediately (art. 14, LGPD; COPPA, USA).

Meta Pixel is subject to consent, and Prinz’s campaign settings exclude audiences under 18 years of age.


13. Changes to this policy

This policy may be updated to reflect changes in our practices, new tools, or legal obligations. The latest version will always be available on this page. For material changes, we will notify you via notice on the website or by email, renewing consent when necessary.

This Privacy and Data Protection Policy was last updated on April 15, 2026.

Indústria de Vinagre Prinz Ltda. · CNPJ 91.154.823/0001-27 · Rua Oswaldo Aranha 525, Lajeado/RS, 95900-134 · Prepared in accordance with Law No. 13,709/2018 (LGPD), GDPR (EU 2016/679), CCPA, and the data protection principles of Mercosur.