Privacy policy.

This Policy explains how Outdoormídia collects, uses, shares and protects the personal data of anyone who visits this site or contacts us through it.

Outdoormídia is the controller of that data under the Brazilian General Data Protection Law (Law 13.709/2018). The company’s full identification and the channel for exercising your rights are at the end of this page.

We collect only what is needed to reply to you and to keep the site working. We do not build advertising profiles of visitors.

• Data you enter in the forms: name, email, phone, company, location of interest, format, period and campaign budget, plus anything you write in the free text fields. In Work With Us, also your field of work and your city.
• Contact data via WhatsApp: when you click a WhatsApp button, you are taken to the app with a message already written. From there the conversation happens on Meta’s platform, under Meta’s rules.
• The Your brand in OOH preview, only if you send it: when you click to send it via WhatsApp or by email, the final image of the panel with your logo is stored on our servers and becomes a link, which goes in the message to our sales team. While you are only building the preview, your logo never leaves your browser.
• Technical browsing data: access logs generated automatically by the server (IP address, date and time, page accessed and browser), retained as required by the Brazilian Internet Civil Framework.
• Necessary cookies and local storage: used only to make the site work, such as remembering your choice in the cookie notice.
• Measurement cookies, only with your consent: usage statistics for the pages through Google Analytics, such as pages visited, where the visit came from and clicks on the contact buttons. Google truncates the IP address before storing it.

The audience figures from the digital network (impacts, frequency and audience profile per site) are measured in aggregate and anonymously. They describe the flow of people in front of a panel; they do not identify anyone.

That data is not cross-referenced with the contact details you send through the site and is not used to recognise individuals.

Every piece of data has a declared use. We do not sell, rent or transfer personal data for third parties to use in their own marketing.

• Reply to your request and put together the commercial proposal you asked for.
• Contact you through the channels you provided, about the subject you raised.
• Assess applications and maintain the talent pool.
• Keep the site online, secure and working.
• Comply with legal and regulatory obligations.

• Preliminary contractual procedures (art. 7, V): handling the brief you sent until it becomes a proposal.
• Consent (art. 7, I): when you fill in a form of your own accord in order to be contacted, including the talent pool.
• Compliance with a legal obligation (art. 7, II): retention of access logs.
• Legitimate interest (art. 7, IX): site security and improvement of browsing, always within your reasonable expectations.

Internally, access is restricted to those who need the data to do their work: the sales team in the case of a proposal; HR in the case of an application.

• Infrastructure providers: the site and the database run on Google cloud services (Firebase and Google Cloud), acting as processors.
• WhatsApp: when you choose that channel, the conversation is handled on Meta’s platform, under Meta’s privacy policy.
• Public authorities: only upon lawful request.

The necessary cookies and local storage only make the site work: for example, to remember your choice in the cookie notice, and to hold temporarily, inside your own browser, the brief you have just submitted so the confirmation screen can build the WhatsApp message.

The measurement cookies belong to Google Analytics and only enter the page if you click Accept in the cookie notice. They tell us which pages are visited most, where visits come from and how many end in a contact, in aggregate. If you choose Necessary only, no measurement script is loaded. To change your choice later, clear the data for this site in your browser settings and the notice appears again.

There are no advertising, social media or cross-site tracking cookies. You can block or delete cookies in your browser settings; parts of the site may then stop working as expected.

• Commercial contact data: for as long as the negotiation lasts and for up to 5 years afterwards, the usual period for questions about a commercial relationship.
• CVs and talent pool data: for up to 2 years, or until you ask for deletion.
• Access logs: 6 months, as set out in the Brazilian Internet Civil Framework.

Once the period has elapsed, the data is deleted or anonymised, except where the law requires longer retention.

The LGPD grants you the rights below. To exercise any of them, use the channel at the end of this page; we reply within 15 days.

• Confirm whether we process your data and access that data.
• Correct incomplete, inaccurate or outdated data.
• Request anonymisation, blocking or deletion of unnecessary or excessive data, or data processed unlawfully.
• Request portability of the data to another provider.
• Request deletion of data processed on the basis of your consent.
• Find out who we share your data with.
• Withdraw consent at any time.
• Petition the Brazilian National Data Protection Authority (ANPD).

We adopt technical and administrative measures to protect the data: access restricted by authentication, traffic encrypted over HTTPS and infrastructure hosted with a cloud provider that has its own security controls.

No system is infallible. Should a security incident occur with relevant risk to data subjects, we notify those affected and the ANPD, as the law requires.

We may update this Policy when we change the way we process data or when legislation requires it. The date of the last update is always at the top of the page, and relevant changes are announced here.

To exercise any of your rights, ask a question about this Policy or report a problem with your data, get in touch through the channels below.