Last updated: October 4, 2026. This text explains, in plain language, what the CS Engenharia website (ces.eng.br) does with information about you: what it collects, why, who else takes part, how long it keeps it, and how you exercise your rights. It follows Brazil's General Data Protection Law (Law No. 13,709/2018, the LGPD) and describes what the site's code does today. If the site changes, this page changes with it. The legal references below are to the Portuguese text of the law, which is the one that prevails.
CS Engenharia (Construction, Engineering and Consulting), a company of the InnCorporate group, is the controller of the personal data handled on this site. For anything about personal data, write to contato@ces.eng.br with the subject "LGPD".
When you fill in the contact form (Contact section of the home page), we send to our system:
The form also has a hidden field that only an automated program would fill in. If it arrives filled, the submission is discarded in your own browser.
When you accept visit measurement (bar on the home page), we send the browsing data described in section 4. If you choose "Essentials", none of it is sent.
On every visit, even if you accept nothing, your IP address and browser data reach the servers that deliver the pages, as happens on any internet connection. The site's code does not read or store your IP.
When you talk through WhatsApp, the button opens the app or WhatsApp Web with a ready first message. From there, the conversation takes place between your device and the WhatsApp number shown on the site, under WhatsApp's own rules.
We follow the principles of purpose (art. 6, I), suitability (II) and necessity (III): we collect only what fits the purpose stated here, which is why only name and e-mail are required.
Consent applies to these specific purposes. We do not use it for others (art. 8, paragraph 4).
Measurement exists only on the home page. It belongs to the group, with no advertising and no tracking across sites. When the page opens, a bar appears at the bottom of the screen with two options (its text is in Portuguese):
While you have not chosen, we send nothing either. Your choice is kept in the browser. To change it, clear the site's data in your browser settings; the bar will show again on your next visit.
The site's code does not set cookies. What exists is the browser's local storage, which stays on your device:
Clearing the site's data in your browser removes all of them.
Your data is not sold or rented. Some companies take part in the site's technical operation, and you are entitled to know which (art. 9, V):
Links to other addresses (social networks, group company sites, public bodies and the Restricted Area) take you out of this site. From there on, each one's own rules apply, and this policy does not cover them. If we ever need to pass your data to another controller, we will ask for your specific consent for that (art. 7, paragraph 5).
What you send through the form is kept for as long as needed to handle your contact. Once processing ends, the law requires the data to be deleted, with the exceptions in art. 16, such as keeping it to comply with a legal or regulatory obligation. You can ask for deletion sooner, as section 9 explains. Visit measurements are aggregated and carry no name or e-mail.
The pages and every submission from the site travel over an encrypted connection (HTTPS). We ask for the minimum in the form, use a hidden field against automated submissions and limit the pace of repeated submissions. No measure removes all risk, but security is one of the principles we follow (art. 6, VII).
You may ask, at any time and at no cost (art. 18, main provision and paragraph 5):
How to ask. The request is an express request, made by you or by your legal representative (art. 18, paragraph 3). Write to contato@ces.eng.br with the subject "LGPD" and say what you want. You can also stop visit measurement yourself by clearing the site's data in your browser.
Deadlines. Confirmation that processing exists, and access, are provided in a simplified format, immediately, or through a clear and complete statement, within 15 days of the request (art. 19). If we cannot act right away, we reply giving the reasons or, where we are not the processing agent, saying who is (art. 18, paragraph 4). When we correct, delete, anonymize or block data we have shared, we immediately tell those who received it (art. 18, paragraph 6).
If you do not consent. You can browse without accepting measurement, and you can talk to us on WhatsApp or by e-mail without using the form (art. 18, VIII).
Automated decisions. The site's code does not classify or assess visitors. If a decision about you is ever made solely through automated processing, you may ask for it to be reviewed (art. 20). Exercising your rights cannot be used against you (art. 21).
Other routes. You may petition against the controller before the national data protection authority (art. 18, paragraph 1), turn to consumer protection bodies (art. 18, paragraph 8) and defend your rights in court, individually or collectively (art. 22).
This policy may be revised. The date at the top shows the version in force. If the purpose of processing changes in a way incompatible with the consent you gave, we will tell you beforehand, and you may withdraw it (art. 9, paragraph 2).
The photographs that illustrate the site are reference images under free licences. Author, licence and source of each one are in the credits table, in the Portuguese version of this page: image credits.
← Back to the home page