Michele Pita & Advogados Associados
Última atualização: 9 de outubro de 2026
1. Purpose and commitment to privacy
Michele Pita & Advogados Associados ("MPA" or "Firm") is committed to the protection of privacy, personal data and the confidentiality of information processed in the course of its activities.
This Privacy and Personal Data Protection Policy ("Policy") aims to present, clearly and transparently, how the Firm may collect, use, store, share, protect and eliminate personal data within the scope of this website, its communication channels, institutional relations and the provision of legal services.
Personal data processing is carried out in compliance with Law No. 13.709/2018 - Brazilian General Data Protection Law (LGPD), with Law No. 12.965/2014 - Internet Civil Rights Framework (Marco Civil da Internet), with regulations issued by the National Data Protection Authority (ANPD) and with other applicable norms.
The protection of personal data is observed in conjunction with the duties of confidentiality, secrecy and professional responsibility inherent to the practice of law.
2. Personal data controller
For personal data processing carried out within the scope of this Policy, the controller is:
Michele Pita & Advogados Associados
CNPJ No. 28.402.700/0001-21
Alameda Santos, No. 1.165, Room 11
Jardim Paulista - São Paulo/SP
ZIP Code 01419-002
E-mail: contato@michelepita.adv.br
Website: www.michelepita.adv.br
As controller, the Firm is responsible for decisions related to the purposes and means of processing personal data under its responsibility, except in situations where third parties act as independent controllers, under the terms of applicable legislation.
3. Personal data that may be processed
The personal data processed by the Firm will depend on the nature and purpose of each interaction and may include:
- Identification and contact data: name, address, e-mail, telephone, individual taxpayer ID (CPF), general registration ID (RG) and other pertinent registration information.
- Professional and business data: profession, position, role, company or organization to which the data subject is linked, professional registration and information related to their activity.
- Data related to the provision of legal services: information, documents, communications and records necessary for the analysis, contracting, execution and monitoring of advisory, administrative, judicial, arbitral or extrajudicial services.
- Financial, asset and contractual data: when necessary for the provision of services, contracting, billing, collection, fulfillment of obligations or exercise of rights.
- Sensitive personal data: when its processing is necessary due to the nature of a specific demand or legal relationship and is supported by an applicable legal basis.
- Browsing data and technical information: IP address, date and time of access, characteristics of the browser or device, pages accessed, technical logs and information resulting from the use of the website.
- Data related to the receipt of content: especially name, e-mail address and, when applicable, information about areas or topics of interest.
Data may be provided directly by the data subject, by clients or other persons related to the provision of services, obtained from public or legitimately accessible sources or collected through technologies used on the website.
4. Data origin and third-party data
Due to the nature of legal practice, the Firm may receive or obtain personal data from different legitimate sources, including clients, potential clients, representatives, counterparties, partners, service providers, judicial and administrative proceedings, courts, public bodies, notary offices (cartórios), public databases or other accessible sources under the terms of the legislation.
When a person provides the Firm with personal data of third parties, they must do so in a legitimate, pertinent and compatible manner with the purpose of the communication or provision of services, observing applicable legal obligations.
5. Purposes of processing
The Firm may process personal data to: respond to contacts, messages and requests; analyze service requests and adopt preliminary measures related to eventual contracting; draft proposals, formalize contracts and manage the professional relationship; provide legal services of an advisory, contentious, administrative, arbitral or extrajudicial nature; represent clients before public bodies, authorities, courts, notary offices, arbitral chambers and other entities; perform administrative, financial, accounting and billing procedures; fulfill legal, regulatory, contractual, ethical and professional obligations; regularly exercise rights in judicial, administrative or arbitral proceedings; protect the legitimate rights and interests of the Firm, its clients or third parties; prevent fraud, unauthorized access, security incidents and other illicit activities; ensure the operation, availability, integrity and security of the website and the technological resources used; manage the institutional relationship; organize events, meetings, publications or institutional initiatives; and send legal newsletters, articles, analyses, legislative and jurisprudential alerts, invitations, institutional communications and other content related to the Firm's practice areas, observing applicable legislation.
Data will not be used for any purpose incompatible with that which justified its collection, except when there is a legal basis that authorizes subsequent processing.
6. Legal bases for processing
Personal data processing will be carried out in accordance with the hypotheses provided for in the legislation and may be based, according to the operation performed, among other legal bases, on the data subject's consent; compliance with a legal or regulatory obligation; execution of a contract or preliminary procedures related to a contract requested by the data subject; regular exercise of rights in judicial, administrative or arbitral proceedings; and the legitimate interest of the Firm or third parties, when applicable and respecting the rights and legitimate expectations of the data subject.
When there is processing of sensitive personal data, the specific legal hypotheses applicable to this category of data will be observed.
The use of this website does not mean that all processing operations performed by the Firm are based on consent. The legal basis will be determined according to the purpose and circumstances of each processing.
7. Subscription for newsletters and communications
The user may, voluntarily, register their name and e-mail address on the subscription form made available through the website to receive legal newsletters, articles, analyses, legislative and jurisprudential alerts, institutional communications, invitations to events and other content related to the Firm's practice areas.
The data provided for this purpose may be processed by technology and communication service providers hired by the Firm for contact list management, distribution of communications, administration of recipient preferences and operation of the respective services.
Registration is optional and does not constitute a condition for access to other areas of the website, contact with the Firm or contracting of legal services.
The data subject may cancel the receipt of these communications at any time through the unsubscribing mechanism made available in the messages themselves or by request sent to contato@michelepita.adv.br.
Cancellation will not prejudice the lawfulness of the processing carried out previously, and information strictly necessary to document the unsubscribe request and avoid the undue sending of new communications may be maintained.
The Firm does not sell, rent or make its contact lists available to third parties for independent use in marketing campaigns.
In addition to communications resulting from voluntary subscription, the Firm may carry out institutional communications in other hypotheses admitted by legislation, when there is an adequate legal basis and the rights of the data subject are observed.
8. Personal data sharing
The contact form uses FormSubmit to forward the visitor's name, email address, matter, language and message to the Firm's email address. Anti-bot verification uses Cloudflare Turnstile. According to FormSubmit's documentation, submissions are retained by the service for 30 days, including while recipient activation is pending. These services may involve processing data outside Brazil; do not send sensitive data or documents through the form before receiving guidance from the Firm.
To achieve the purposes described in this Policy, the Firm may share personal data, when necessary and proportionally, with providers of technology, hosting, cloud storage, communication, e-mail, newsletter management, information security and other services necessary for the operation of the Firm and its digital channels; lawyers, correspondents, partner firms, consultants, opinion-makers, experts, translators, auditors, accountants and other professionals whose participation is necessary for the provision of legal services; courts, administrative bodies, public authorities, notary offices, arbitral chambers and other entities before which professional action is necessary; financial institutions and providers related to the administrative and financial operations of the Firm; and authorities or third parties when sharing results from a legal obligation, court order, valid determination of a competent authority or regular exercise of rights.
Sharing will be limited to data pertinent to the purpose that justifies it and will observe, as applicable, duties of confidentiality, information security, data protection and professional secrecy.
When hiring providers that process personal data in support of the Firm's activities, requirements for confidentiality, data protection, information security and contractual responsibilities compatible with the processing performed may be considered, according to the nature of the service and the risks involved.
9. International personal data transfer
Some technological services used by the Firm may involve processing or storage of personal data outside Brazilian territory.
Currently, certain data related to the management and sending of electronic newsletters may be processed and stored on infrastructure located in the European Union, including in France, Germany and Belgium, for the purposes of storage, processing, contact base management, preference administration and communication distribution.
These data may remain subject to transfer for the period necessary to maintain the registration, provide the technological service and fulfill the related legal, contractual and security obligations, without prejudice to the legitimate hypotheses of retention.
When necessary for the provider's infrastructure or service execution, subsequent transfers to sub-operators or other authorized recipients may occur, provided that the legal requirements and applicable safeguards are observed.
There may also be other international transfers when necessary for the provision of technological services, use of cloud infrastructure or execution of legal services involving persons, entities or professionals located abroad.
International transfers will be carried out only when there is a legitimate purpose and applicable legal basis, observing the mechanisms, guarantees and safeguards required by the LGPD and the ANPD's regulation.
Additional information about a specific international transfer may be requested through the channel indicated in this Policy.
10. Artificial intelligence and automated technologies
The Firm does not use artificial intelligence systems for exclusively automated decision-making that produce legal effects or significantly affect the interests of visitors to this website.
The Firm may use technological resources, including artificial intelligence, automation or information processing tools, as auxiliary instruments in certain administrative, operational or professional activities.
Whenever the use of these technologies involves personal data processing, the legal bases, purposes and principles provided for in applicable legislation will be observed, especially those of necessity, adequacy, transparency, security and prevention, as well as the duties of confidentiality and professional secrecy inherent to the practice of law.
The use of technological resources does not replace the analysis, supervision and responsibility of the Firm's professionals over the legal services provided.
Should features that directly use artificial intelligence in user interaction or imply new relevant personal data processing operations be made available on this website in the future, this Policy will be updated as necessary.
11. Data protection and information security
Information security is integrated into the Firm's data protection and confidentiality practices and is considered throughout the entire information life cycle, from collection and use to storage, sharing, retention and disposal.
MPA seeks to adopt technical, administrative and organizational measures compatible with the nature of the information processed and the risks involved, intended to preserve the confidentiality, integrity and availability of the information.
Confidentiality: information must be accessed only by authorized persons and when necessary for the performance of their duties.
Integrity: information must be protected against improper changes, losses or modifications, preserving its consistency and reliability.
Availability: information and systems necessary for the Firm's activities must remain accessible to authorized persons when needed.
The measures adopted are intended to reduce risks of unauthorized access, destruction, loss, alteration, communication, disclosure or any form of inadequate or illicit processing of personal data.
Professionals, collaborators, providers and third parties who have access to information under the Firm's responsibility must observe the duties of confidentiality and security corresponding to the activities performed.
No technological environment is absolutely immune to risks. Should a security incident involving personal data be identified, the firm will take the necessary measures for investigation, containment, and mitigation of its effects and will carry out any communications that may be required by applicable legislation and regulation.
12. Cookies and similar technologies
In its current configuration, the website does not use cookies or similar technologies for browsing analysis or advertising and does not provide a cookie preference tool.
Links to external services, such as maps and social networks, are accessed only when selected and are not embedded in the pages. The contact and newsletter forms may load the Cloudflare Turnstile anti-bot verification service. Newsletter registration takes place on the website with consent given in the form, without subsequent email confirmation. Subscriptions and cancellation preferences are recorded in Brevo. Cancellation through the website requires confirmation by the email address holder. Use of those services is subject to information and policies provided by their respective operators.
The user may also manage cookies through their browser settings, with the caveat that disabling certain technologies may impair some functionalities.
The cookies and technologies actually used by the website must correspond to the settings and functionalities implemented at any given time.
13. Retention and deletion of personal data
Personal data will be kept for the period necessary to fulfill the purposes for which it was collected or subsequently processed.
The definition of the retention period may consider the duration of the professional, contractual, or institutional relationship; applicable legal, regulatory, statute of limitations, and decadence periods; ethical and professional obligations related to legal practice; the need to exercise or defend rights; determinations by competent authorities; and the specific purpose that justified the processing.
Once the purpose is concluded and there is no legal basis for its retention, the data may be deleted or anonymized, subject to the legal exceptions for maintenance.
14. Data subject rights
Under applicable legislation, the data subject may exercise, when applicable, the rights of: confirmation of the existence of processing; access to processed personal data; correction of incomplete, inaccurate, or outdated data; anonymization, blocking, or deletion of unnecessary or excessive data or data treated in non-compliance with the legislation; data portability, under applicable regulation; deletion of data processed based on consent, except for legal retention exceptions; information about public and private entities with which their data has been shared; information about the possibility of not providing consent and the consequences of that choice; revocation of consent; opposition to processing carried out in non-compliance with the legislation; and filing petitions with the National Data Protection Authority (Autoridade Nacional de Proteção de Dados), subject to applicable legal requirements.
The exercise of a specific right may be limited when the maintenance or processing of the data is necessary for compliance with a legal or regulatory obligation, for the regular exercise of rights, for the protection of third-party rights, for compliance with professional secrecy, or in other situations authorized by law.
To preserve the security of information and prevent unauthorized access or improper alteration of data, the firm may request additional information strictly necessary to confirm the identity or legitimacy of the requester.
Requests will be analyzed and answered within the deadlines and conditions provided for in applicable legislation and regulation.
15. Contacts, potential clients, and confidential information
Sending a message through this channel does not automatically establish an attorney-client relationship. Review of the matter depends on prior assessment of scope, availability, conflicts of interest and formal engagement.
Before formalizing a professional relationship, it is recommended that confidential documents, strategic information, sensitive personal data, or content subject to secrecy be sent only when necessary and through the appropriate channels indicated by the firm.
Once the professional relationship is established, information related to legal services will be subject, in addition to data protection legislation, to the legal, ethical, contractual, and professional duties applicable to legal practice.
16. Third-party data related to the provision of legal services
Due to the nature of legal practice, the firm may process personal data of persons who do not have a direct contractual relationship with MPA, such as representatives, employees, partners, administrators, witnesses, adverse parties, experts, attorneys-in-fact, professionals, and other individuals related to a specific demand.
In such cases, processing will be carried out to the extent necessary for the provision of legal services, compliance with legal or regulatory obligations, or the regular exercise of rights, observed the principles and guarantees provided for in applicable legislation.
17. Links, platforms, and third-party environments
The website may provide links to pages, platforms, or services maintained by third parties.
Access to these environments will be subject to their respective terms of use and privacy and security policies.
The firm is not responsible for processing practices carried out independently by third parties over whom it has no control, without prejudice to the responsibilities that may be attributed to it by legislation regarding operations under its control.
18. Children and adolescents
The website is institutional and professional in nature and is not specifically directed at children or adolescents.
In the event that personal data of children or adolescents are processed due to a specific provision of legal services or other legitimate situation, applicable legal requirements will be observed, especially the protection of their rights and their best interests.
19. Updates to this Policy
This Policy may be changed periodically to reflect legislative or regulatory changes, alterations in the firm's procedures, the adoption or replacement of technologies, the implementation of new website functionalities, or improvements to privacy and information security practices.
The current version will be available on this page with the indication of its last update.
When a specific change requires additional manifestation from the data subject or specific communication, the relevant measures will be taken.
20. Contact regarding privacy and data protection
Questions related to this Policy, requests regarding the processing of personal data, and requests for the exercise of rights provided for in the legislation may be sent to:
Michele Pita & Advogados Associados
E-mail: contato@michelepita.adv.br
The firm will analyze requests in accordance with applicable legislation and regulation and may request the information strictly necessary to confirm the identity or legitimacy of the requester.
© 2026 Michele Pita & Advogados Associados. All rights reserved.
Michele Pita & Advogados Associados | Privacy and Personal Data Protection Policy