Version 1.0

Data Processing Agreement

Effective from 29 de junho de 2026

Download PDF

Versão em Português (pt-BR) →

Key protections in this Agreement

Data stored in Brazil

Consent records are stored exclusively in São Paulo, Brazil (Hostinger VPS).

Pseudonymized IPs

IP addresses are hashed via SHA-256 with salt — the original IP is never stored.

72-hour breach notification

We notify you without undue delay in case of any security incident.

Exportable consent proof

Export your consent records in CSV or JSON at any time for audit purposes.

30-day advance notice for changes

Any DPA updates are communicated at least 30 days in advance.

LGPD-compliant framework

Governed by Brazil's Lei Geral de Proteção de Dados (Law No. 13,709/2018).

Note: This Data Processing Agreement is governed by Brazilian law (LGPD — Lei nº 13.709/2018). The authoritative version is the Portuguese (pt-BR) version. In case of conflict between this translation and the Portuguese version, the Portuguese version prevails.

This DPA governs how CookieFácil (operated by PAGOPAGO TECNOLOGIA E COMERCIO LTDA - ME, CNPJ 52.280.228/0001-86) processes personal data on behalf of its clients in connection with cookie consent management services.

The full Portuguese text is the binding version. To review or download the complete DPA:

Read full DPA (pt-BR) Download PDF

Questions about this Agreement? Contact our Data Protection Officer: privacidade@cookiefacil.com.br

CookieFácil assists with cookie consent management but does not provide legal advice. Consult a qualified data protection attorney for legal compliance guidance.