Privacy Policy

Last updated: October 5, 2026.

This Privacy Policy explains how DVPRO handles personal data on the dvpro.com.br website and the Phantom hotsite, in compliance with Brazil's General Data Protection Law (Lei Geral de Proteção de Dados, Lei nº 13.709/2018), known as the LGPD.

The site is institutional: it has no user accounts, no online store and no prices. Data reaches us mainly through the forms you choose to submit, and we use it to get back to you with information from the product specialist about the item you asked about.

So that our team can reply to and follow up on each request, the data you send is stored in a DVPRO database, and not only in an email inbox. In short:

• we collect what you write in the forms and some technical data needed to run the site;
• we use this data to answer your request and to keep the site secure and working;
• we do not sell personal data;
• we keep form data for up to 24 months and then anonymize it;
• you can ask for access, correction or deletion of your data at any time.

The controller of the personal data processed through this site is DVPRO Engenharia de Televisão (DVPRO), located at Av. Barão Homem de Melo, 2681, sala 104, conj. 02, Estoril, Belo Horizonte, MG, Brazil, postal code 30494-085.

For any privacy or data protection matter, and to exercise your rights as a data subject, write to dvpro@dvpro.com.br or use the channels on the Contact page.

We collect data in two ways: what you send us in a form, and what the browser and the site generate automatically.

Data you send (only what each form asks for):

• Contact (Contact us): name, email, message and, if you wish, phone number, company or institution and the application you are interested in. The models of interest you added to your list go along with the message, with quantity and note, if any.
• Demo and rental: the same data as the contact form, plus job title, field of activity and expected timeframe, if you provide them.
• Technical service (RMA): name, email, phone number, company, city and state, equipment brand, model and serial number, software version and a description of the problem. The form does not accept attachments.
• Webinar: name, email and, if you wish, phone number and company, to register you for the event.
• Newsletter: name and email. The subscription only takes effect after you confirm it through the link we send to your email (double opt-in).

Data recorded automatically when you submit a form:

• the language of the page, the address of the page you were on (URL) and the site you came from (referrer), plus campaign parameters (UTM), so we know where the contact came from;
• the consent text you accepted, with date and time;
• a code derived from your IP address (a hash made with a secret key). We do not store the IP address itself. The code is used to limit repeated submissions and to curb abuse.

Technical browsing data, which does not identify you by name:

• the hosting infrastructure records technical access data, such as IP address, date and time, pages visited, browser and device, for security and so the site can work;
• usage and performance statistics (Vercel Web Analytics and Speed Insights), without cookies, and events such as clicks on the contact button or on a datasheet, with no personal data;
• if you accept analytics cookies, Google Analytics 4 starts measuring visits and page use (see the Cookies and similar technologies section).

We do not ask for sensitive data, such as health, religion or biometrics. Please do not include this kind of information, or data about other people, in free-text fields.

We use the data only for the purposes below, each one based on a legal basis in Article 7 of the LGPD:

• Replying to your contact and passing it on to the product specialist about the item you asked about: consent (Article 7, I), recorded in the form, and, for demo, rental and technical service requests, preliminary procedures at the request of the data subject (Article 7, V).
• Sending the email confirming receipt and letting the DVPRO team know there is a new contact: the same bases as the previous item.
• Recording the progress of the service, such as the stage and the person in charge: DVPRO legitimate interest in organizing its service (Article 7, IX).
• Sending the newsletter and webinar information: consent (Article 7, I). For the newsletter, only after you confirm through the link sent to your email.
• Keeping the forms secure and preventing abuse, with the anti-bot check (Cloudflare Turnstile) and the submission limit: legitimate interest (Article 7, IX).
• Keeping the site working and measuring its performance, with hosting, Vercel Web Analytics, Speed Insights and error monitoring: legitimate interest (Article 7, IX).
• Understanding how the site is used, with Google Analytics 4 and Google advertising signals: consent (Article 7, I), only if you accept analytics or marketing cookies.
• Producing internal statistics from anonymized data, such as which models are requested most: anonymized data is no longer personal data (Article 12).

If you withdraw your consent, we stop using the data for the purpose that depended on it, without affecting what was done before.

We do not make automated decisions based on your data and we do not use it to build behavioral profiles. The site does not show prices, and the data is not used for that purpose either.

The DVPRO team that handles your request (sales, technical and support) accesses the data through access profiles limited to what is needed. We do not sell personal data. We use service providers (processors) that handle data on behalf of DVPRO, only for the purposes below:

• Vercel: site hosting, usage and performance statistics without cookies (Web Analytics and Speed Insights) and storage of the site media files.
• Prisma Postgres: the cloud database where submitted forms are recorded.
• Resend: sending the confirmation email to you and the notice to the DVPRO team. The content of these emails includes the form data.
• Cloudflare: anti-bot check (Turnstile) on the forms. The script is only loaded when you reach a form, and Cloudflare receives your IP and technical browser signals to decide whether the visit is from a person.
• Google: Google Analytics 4, only if you accept analytics cookies, and YouTube videos, only when you tap play (see the Third-party content section).
• Sentry: site error monitoring, when enabled. The service is configured not to receive cookies, form content or user data; error records carry only technical information.
• CRM system: if DVPRO connects a CRM to the site, each new contact is sent to it for sales follow-up.

When handling your request requires the involvement of the brand manufacturer, such as in a technical service case, we share with it only what is needed for that.

We may also share data when required by law, a court order or a competent authority, and to defend DVPRO rights in judicial, administrative or arbitration proceedings.

Some of the providers mentioned, such as Vercel, Resend, Cloudflare, Google, Sentry and the database provider, have infrastructure outside Brazil, especially in the United States. For this reason, personal data may be processed abroad.

This transfer is made to deliver the service you requested, in accordance with Article 33 of the LGPD, with providers that offer contractual data protection safeguards. If you want to know more about the safeguards of a specific provider, ask at dvpro@dvpro.com.br.

• Form data (contact, demo, rental, technical service and webinar): up to 24 months from the date of submission. After that, an automatic routine that runs every day anonymizes the record: it erases the name, phone number, company, job title, message, city and equipment serial number and the code derived from the IP, and replaces the email with a fictitious address.
• What is left after anonymization does not identify you and is used only for statistics: origin and type of contact, application, models requested, language and the consent text with its date.
• Newsletter: up to 24 months after your last contact or sign-up, or sooner if you ask to unsubscribe. After that, the subscription email is anonymized.
• Submission count used against abuse: erased after about one day.
• Cookies: see the durations in the Cookies and similar technologies section.
• Technical access logs from hosting and error monitoring: for the periods set by each provider.
• Copies outside the site, such as emails exchanged with the team and any records in a CRM, are outside the automatic routine. DVPRO erases them when they are no longer needed and whenever you ask for deletion.

If the contact results in a contract, the data needed for the contract and for legal obligations, such as tax obligations, are handled outside the site, for the periods required by law.

Cookies are small files that the site stores in your browser. This site uses few of them, and you control the optional ones through the banner that appears on your first visit and, later, in Cookie preferences, in the footer of every page. Reject and accept have the same prominence, and the site works in both cases. Your choice is valid for 12 months; after that, we ask again.

Essential cookies (always on, they do not depend on consent):

• dvpro_consent: stores your choice about cookies (version, analytics yes or no, marketing yes or no, and date). It contains no personal data. Duration: 12 months.
• dvpro_cart: stores the list of models of interest you built to send with your contact request (model and quantity). It is digitally signed so it cannot be altered, and it is only stored when you add a model. Duration: 90 days, or until you empty the list.
• dvpro_cart_count: stores only the number of items in the list, to show the Contact (n) counter in the header. Duration: 90 days, or until you empty the list.

Optional cookies (only with your permission, and only if the corresponding tool is active on the site):

• Analytics: _ga and _ga_ followed by the Google Analytics 4 property code. They are used to count visits and understand page use, so we can improve the site. Duration: up to 2 years (Google default). Google Analytics is only loaded after you accept analytics; if you withdraw, we stop sending data and delete these cookies.
• Marketing: with this option, Google starts receiving advertising signals (Consent Mode v2) to measure campaigns and personalize DVPRO ads, and may store its own cookies. The site does not load other advertising tools.

No cookies: Vercel Web Analytics and Speed Insights measure visits and performance without storing cookies in your browser and do not depend on the banner. The site code also does not store data in the browser local storage (localStorage or sessionStorage).

Team cookies: people who work on the site (administration and draft preview) receive their own session cookies, such as payload-token and __prerender_bypass. They are essential for login, are short-lived and are not stored for visitors.

You can also block or delete cookies in your browser settings. Blocking the essential ones may prevent features such as the list of models of interest.

YouTube videos: before you tap play, we show only the cover image, loaded by our server, with no contact between your browser and Google. When you tap, the video is loaded from YouTube in enhanced privacy mode (youtube-nocookie.com), and Google may record data about your viewing and store cookies, according to its own policy.

Cloudflare Turnstile: the anti-bot verification script is only loaded when you focus on a form or when it appears on screen.

WhatsApp and social networks: the WhatsApp button, when the site offers it, and the links to social networks, such as Instagram, Facebook, YouTube and Vimeo, only open the corresponding service. From there, that service policy and terms apply. We only record, with no personal data, that the click on WhatsApp happened.

The LGPD (Article 18) guarantees you, at any time and free of charge, the right to:

• confirm whether we process your data and have access to it;
• correct incomplete, inaccurate or outdated data;
• ask for anonymization, blocking or deletion of unnecessary or excessive data, or data processed in violation of the law;
• ask for data portability, under the regulations of the Brazilian National Data Protection Authority (ANPD);
• ask for deletion of data processed on the basis of your consent;
• know which public and private entities we share your data with;
• be informed about the possibility of not giving consent and about the consequences of refusing;
• withdraw consent and object to processing carried out in violation of the law.

How to ask: write to dvpro@dvpro.com.br, preferably from the same email you used in the form, so that we can find your data and confirm the request is yours. We do not ask for documents beyond what is needed. You can also use the channels on the Contact page.

Deadline: we reply within 15 calendar days of receiving the request.

For deletion requests, we anonymize all records linked to your email in our system (contacts, requests, models of interest, technical service, newsletter subscription and the copies in the email sending queues) and we delete the copies outside the site, such as messages in the team inboxes and records in a CRM. We notify those who received the data and we record the request, without storing your email in plain text.

To unsubscribe from the newsletter or withdraw any consent, write to the same email. To change your choice about cookies, use Cookie preferences, in the site footer. You can also petition the ANPD at any time.

We adopt technical and organizational measures to protect the data, including:

• encrypted connection (HTTPS) across the whole site, with HSTS and security headers;
• access to form data only for authorized team members, with login and access profiles;
• anti-bot check and submission limit on the forms;
• storing a code derived from the IP, and not the IP address itself;
• error monitoring configured not to send personal data.

No system is completely free of failures. If a security incident occurs that may cause you relevant risk or harm, we will notify you and the ANPD, under Article 48 of the LGPD.

The site is aimed at professionals, researchers and institutions and is not intended for people under 18. If you believe a minor has sent data through this site, write to dvpro@dvpro.com.br and we will delete the record.

We may update this policy when the site, the service providers or the law change. The date of the last update appears at the top of this page. If a change alters the purpose of the optional cookies, the banner asks for your choice again.

The English and Spanish versions are translations made to ease reading. In case of divergence, the Portuguese version prevails.

Questions, requests or complaints about this policy can be sent to dvpro@dvpro.com.br or through the Contact page.

See also the site Terms of Use.