top of page

Privacy Policy 

This Privacy Policy aims to clarify, in a transparent, clear, and accessible manner, how HE International Business, operating in the strategic consulting segment focused on international business connections, institutions, and opportunities in Brazil and abroad, collects, uses, stores, shares, and protects the personal data of users and visitors to its official website. This instrument applies to all interactions carried out on the digital platform, encompassing general browsing, filling out contact forms, submitting institutional messages, and related communications.

1. Personal Data Collected

HE International Business collects personal data in specific and limited situations, strictly necessary for the proper provision of its services and for the technical operation of the virtual environment, divided into the following categories:

 

- 1.1. Data provided directly by the data subject: Collected when the user fills out the institutional contact form, sends electronic messages, or requests information about consulting services. Includes: full name, email address, corporate or personal phone number, name of the company or entity represented, institutional position or function, and the descriptive content of the forwarded message.

- 1.2. Automatically collected browsing data: Collected during browsing through connection logs and digital identification technologies. This includes: Internet Protocol (IP) address, access date and time logs, web browser identifier and type, technical specifications of the operating system and device used, pages and sections accessed, time spent on the site, and navigation paths. The website platform is hosted by the technological infrastructure provided by Wix.com Ltd., which acts as the operator and technical processor of hosting and integrated analytical tools.

- 1.3. Publicly accessible data: Strictly professional information shared spontaneously by the data subject in their message or through voluntary referral to public profiles on professional networks, such as LinkedIn, as part of the context of intended commercial or institutional dealings.

2. Purposes and Legal Basis of the Processing

The personal data processing operations carried out by HE International Business are based on the authorizing provisions set forth in Federal Law No. 13,709/2018 (Lei Geral de Proteção de Dados Pessoais — LGPD, the Brazilian General Data Protection Law), as shown in the table below:

Data Category 

Purpose of Processing

Legal Basis
(Art. 7 of the LGPD)

Registration and contact data (name, e-mail, phone, company, message)

Handling institutional requests, answering questions, presenting business proposals and pre-contractual communication

Performance of preliminary procedures at the data subject's request (Art. 7, V) or Express consent (Art. 7, I)

Connection and browsing records (IP address, date, time, access logs)

Cybersecurity, fraud prevention, compliance with legal requirements for log retention and improvement of the website's stability

Compliance with a legal or regulatory obligation (Art. 7, II — Marco Civil da Internet, the Brazilian Internet Act) and Legitimate interest (Art. 7, IX)

Analytical and statistical usage data (pages visited, session time)

Tracking website performance, optimizing the browsing experience and improving the trilingual institutional structure

Controller's legitimate interest (Art. 7, IX)

3. Use and Management of Cookies

Cookies are small text files stored on the user's device that record technical parameters and browsing preferences. The HE International Business website uses the following categories of cookies:
 

  1. Strictly necessary cookies: Essential for the technical operation, integrity, security, authentication, and stability of the platform hosted on Wix.
     

  2. Analytical and performance cookies: Used to quantify audience, identify traffic patterns, and evaluate the technical performance of pages in each language version.
     

  3. Functionality and preference cookies: These cookies store visitor choices, such as selected language preference, improving ongoing usability.
     

Visitors can configure, refuse, or delete cookies at any time through their internet browser preferences or the consent tools available on the website's homepage banner. Disabling necessary cookies may compromise the proper functioning of certain sections of the platform.

4. International Data Sharing and Transfer

HE International Business does not sell, transfer, or rent personal data to third parties under any circumstances. Information is shared exclusively in the following circumstances:
 

  1. Infrastructure and technology providers: Wix.com Ltd. and its technical subsidiaries are responsible for hosting, databases, security certificates, and analytics tools for the portal.
     

  2. Essential service providers: Information technology support professionals and technical consultants strictly bound by formal confidentiality agreements and duties of non-disclosure.
     

  3. Legal or regulatory determination: By means of a reasoned court order, request from competent police authorities or government oversight bodies, in strict compliance with current legislation.
     

Given the use of global cloud infrastructure provided by Wix.com Ltd., with servers located in foreign jurisdictions (such as the United States, the European Union, and Israel), operations may involve the international transfer of personal data. In these cases, security standards and contractual clauses equivalent to the protection guidelines provided for in the LGPD (Brazilian General Data Protection Law) and applicable international frameworks are required.

5. Data Subject Rights

In accordance with Article 18 of the General Data Protection Law (LGPD), the data subject may exercise the following rights at any time and upon express request:

  1. Confirmation that your personal data is being processed;

  2. Full and easy access to the processed data;

  3. Correction of incomplete, inaccurate, or outdated data;

  4. Anonymization, blocking, or deletion of unnecessary, excessive, or illegally processed data;

  5. Data portability to another service or product provider, upon express request;

  6. Deletion of personal data processed based on consent, except in cases where legally required to be retained;

  7. Information about the public and private entities with which the controller has shared data;

  8. Information about the possibility of not providing consent and the consequences of refusal;

  9. Revocation of previously granted consent.

To exercise any of the listed rights, the holder must send a formal communication to the following channel: hanno@heinternationalbusiness.com . Requests will be analyzed and answered within the legal deadline of up to 15 (fifteen) consecutive days, counted from the receipt of the holder's request, subject to due confirmation of their identity.

6. Data Retention Periods and Criteria

The personal data processed by HE International Business will be stored for the period strictly necessary to achieve the purposes that motivated its collection, respecting the following parameters:

  1. Contact form data: Kept for the duration of commercial or institutional negotiations and deleted when mutual interest ceases, except where legally required.

  2. Connection records and access logs: Kept for the mandatory period of 6 (six) months, in accordance with the provisions of article 15 of Law No. 12.965/2014 (Brazilian Internet Bill of Rights).

  3. Data subject to legal obligations or the regular exercise of rights: Retained for the limitation periods expressed in the Brazilian Civil Code and related regulations.

7. Information Security Measures

HE International Business adopts technical and organizational safeguards compatible with the nature of the data processed to protect it against unauthorized access, destruction, loss, alteration, or any form of inappropriate or unlawful processing. These safeguards include the use of encrypted communication protocols (HTTPS/SSL), restrictive operational access controls, and strong password policies.

8. Processing of Data of Minors

The website and consulting activities of HE International Business are intended exclusively for corporate clients and professionals of legal age, and do not intentionally collect personal data from individuals under 16 (sixteen) years of age. If accidental receipt of data from minors is detected without the appropriate legal consent, such records will be promptly deleted.

9. Linguistic Versions and Legal Prevalence

Considering the global reach of HE International Business, the content of this portal and this Privacy Policy are available in Portuguese, English, and German. In case of any discrepancies in terminological or hermeneutical interpretation between the texts in different languages, the version written in Portuguese (Brazil), governed by Brazilian law, shall prevail.

10. Updates to this Policy

HE International Business reserves the right to update, revise, and modify the content of this Privacy Policy at any time, aiming to ensure continued adherence to legislative and regulatory changes and innovations in its operational routines. Changes will take effect immediately upon their publication on the institutional website. Periodic visits to this section are recommended.

Last revised on: September 21, 2026.

11. Controller Identification and Contact Channel

For clarifications, questions, requests, or communications regarding this Privacy Policy and data protection procedures, the data subject should contact the qualified controller directly as follows:

Controller: Hanno Erwes — CEO

Organization: HE International Business

bottom of page