This translation is provided for convenience. The official version is the Portuguese one.
This policy explains, in plain language, which personal data the Brazilian Red Cross Rio de Janeiro website processes, what it is used for, who receives it, how long it is kept and how you exercise your rights. It follows Brazil's General Personal Data Protection Law (Law No. 13,709/2018, the LGPD).
It covers cruzvermelhariodejaneiro.org and all its pages, including news, the archive and the English and Spanish versions, and the Impacto das Cores project page (projetocores.cruzvermelhariodejaneiro.org). The Venipuncture course has its own website and privacy policy, in Portuguese.
Who looks after your data
The controller, which decides how the data is processed, is the branch below.
Brazilian Red Cross — Rio de Janeiro State Branch (Cruz Vermelha Brasileira — Filial do Estado do Rio de Janeiro)
CNPJ (Brazilian company number) 08.560.973/0001-97
Praça da Cruz Vermelha, 10 — Centro, Rio de Janeiro, RJ, 20230-130, Brazil
Privacy channel: for anything about your data, write to contato@cruzvermelhariodejaneiro.org with the subject “Privacy”, in English, Spanish or Portuguese. Until a data protection officer is appointed, this is the channel for data subjects and for Brazil's National Data Protection Authority (ANPD), as Article 11 of ANPD Resolution CD/ANPD No. 2/2022 allows for small data processing agents.
What data we process, why, and on what legal basis
Each form asks only for what it needs. The legal basis is the provision of the LGPD (Article 7) that authorises each use.
Enrolment in in-person courses
Data
Full name, CPF (the Brazilian individual taxpayer number), e-mail, phone number, chosen course, payment method, payment status and, for cards, only the card brand and the last four digits.
Purpose
To register the enrolment, issue the charge, send the receipt, arrange the class and schedule by e-mail and, once paid, create your enrolment on the school platform.
Legal basis
Performance of a contract and of the steps that precede it, at your request (Art. 7, V); compliance with a legal obligation, for keeping payment records (Art. 7, II).
The “Fale com a gente” contact chat
Data
Subject, course (when the subject is enrolment, a course or payment), name, e-mail, phone number (optional), your message and the page you wrote from.
Purpose
To answer you by e-mail, with a reference number, and keep a record of the exchange.
Legal basis
Handling a request of yours (Art. 7, V) and legitimate interest in answering and keeping a record of the exchange (Art. 7, IX).
Document requests
Data
Full name, e-mail, phone number (optional), on whose behalf you are asking (and the body or person represented, if any), the document requested, the reason for the request and the proof you attach (photo ID and, where applicable, a power of attorney or an official letter).
Purpose
To check who you are, decide what can be sent and reply by e-mail, with a reference number. The proof is not stored on the site: it is attached only to the e-mail sent to the team that reviews the request; the site keeps the record of the request, with the names and sizes of the files.
Legal basis
Handling your request (art. 7, V), compliance with a legal obligation when answering requests for access to personal data (art. 7, II, and art. 18) and legitimate interest in protecting the personal data of third parties contained in the documents (art. 7, IX).
Newsletter
Data
Name, e-mail and the record of consent: the text accepted, the date, the IP address and the browser identification.
Purpose
To send news, campaigns and course information, only after you confirm the subscription through the link sent to your e-mail (valid for 72 hours). Every e-mail has a one-click unsubscribe link.
Legal basis
Consent (Art. 7, I), which you can withdraw at any time.
Visit statistics with cookies (Google Analytics), only with your permission
Data
Pages viewed, where the visit came from, technical data about the browser and device, approximate city and the cookie identifier.
Purpose
To count visits and understand which pages are read, so we can improve the site.
Legal basis
Consent (Art. 7, I), given in the cookie notice.
Visit statistics without cookies (Google Analytics), on every visit
Data
Without statistics permission (before you answer the cookie notice, or after you refuse), the site loads Google Analytics in Google's advanced consent mode: it stores no cookies and keeps no identifier of yours, and only sends Google signals about each page viewed and about actions on the page (such as clicks and steps of an enrolment or the volunteer form). As with any request to a server, it carries your IP address and technical data about the browser and device; that is why we do not call these signals anonymous. If you arrived through a Google ad, the click identifier (gclid) may be carried in the address of the following pages instead of being kept in a cookie.
Purpose
To estimate the total number of visits and campaign results, including from people who did not allow statistics cookies, without recognising the same person from one visit to the next. Google uses these signals to calculate estimates in Google Analytics and Google Ads.
Legal basis
Legitimate interest (Art. 7, IX, and Art. 10), with the minimum necessary: no cookie, no identifier and no link to your name. If you do not want even these signals to be sent, you can block Google Analytics in your browser (for example, with Google's own Google Analytics opt-out add-on) or object at the e-mail at the end of this page.
Marketing (Meta Pixel and Conversions API), only with your permission
Data
Pages viewed and steps such as opening the chat, starting an enrolment or completing a payment, with the subject or course and the amount. Our server also sends Meta a copy of these events (Conversions API), with your IP address, the browser identification, the _fbp and _fbc cookies (or the fbclid in the page address) and, when you send a chat message or enrol, your name, e-mail and phone number, turned into a code (SHA-256 hash), and, for enrolments, a code of the enrolment itself. So that Meta can be told about a payment confirmed after you close the page, your marketing choice, your IP address, the _fbp and _fbc cookies and the browser identification are stored with the enrolment. Hashing is not anonymisation: it is what lets Meta recognise you among its users. Your CPF, chat message and card details are never sent.
Purpose
To measure the reach and results of our outreach campaigns on Facebook and Instagram: to learn which ads brought enrolments and to help Meta show them to people more likely to be interested.
Legal basis
Consent (Art. 7, I), given in the cookie notice, which you can withdraw at any time under “Cookie preferences”. Without it, none of this happens, and refusing changes nothing in your enrolment.
Where the visit came from, only with statistics permission
Data
The campaign parameters in the page address (utm, fbclid and gclid), stored with the enrolment, the message or the volunteer form.
Purpose
To know where enrolments, messages and volunteer forms come from.
Legal basis
Consent (Art. 7, I).
Form security
Data
IP address, date and time of each enrolment, message or volunteer form sent.
Purpose
To limit repeated attempts and protect the forms against bots and fraud.
Legal basis
Legitimate interest (Art. 7, IX) and fraud prevention.
Donations
Data
Name, CPF, e-mail, phone number, amount, payment method (PIX or card), whether the donation is one-off or monthly, whether it is anonymous, whether the donor covered the processing costs, where the visit came from (campaign parameters in the URL) and the IP address. For cards, we keep only the card brand and the last four digits.
Purpose
To issue the donation charge (and, for monthly donations, each month's charge), send the PIX code and the receipt by e-mail, notify the branch team, resend receipts and meet legal and accounting obligations.
Legal basis
Performance of a contract, the donation (Art. 7, V), compliance with a legal obligation (Art. 7, II) and the regular exercise of rights (Art. 7, VI).
Volunteer registration
Data
Name, date of birth, e-mail, phone number, city, neighbourhood and state, CPF, education, occupation, training in the health field, experience and skills, areas of interest, available days and periods, motivation, how you heard about us, a selfie and, from the submission, the IP address, the page and the campaign parameters. Details in the Volunteering section.
Purpose
To select and organise volunteering: review the form, invite you to the interview and to the Basic Institutional Training Course (CBFI) and issue the volunteer service agreement for those accepted.
Legal basis
Consent (Art. 7, I) and steps prior to the volunteer service agreement, at your request (Art. 7, V).
Headquarters time clock: volunteers, board and staff
Data
Name, CPF, relationship with the organisation, role, e-mail and phone number (optional), the date of the volunteer service agreement, the check-in and check-out times, the device used and, on a phone, the distance to the headquarters. The phone's location only confirms that the person is at the headquarters and is not stored.
Purpose
For volunteers and board members: to recognise the hours donated, issue the hours statement and account for volunteer work, including in the accounts. For employees, contractors and other relationships: to know who is at the headquarters, for safety, without adding up hours. The record is never used to demand hours from a volunteer.
Legal basis
Performance of the volunteer service agreement (Art. 7, V); compliance with legal and regulatory obligations, in the accounts (Art. 7, II); legitimate interest in the safety of the headquarters (Art. 7, IX); regular exercise of rights (Art. 7, VI).
Attendance at in-person classes
Data
CPF, and the name and e-mail the school platform holds for the student, the course, the day and time of the class, the arrival time and the device used or, on a phone, the distance to the headquarters.
Purpose
To issue the attendance certificate and send it by e-mail when the class ends. Whoever receives the certificate can check that it is genuine with the printed code: the check shows the name, the masked CPF, the course, the class and the place.
Legal basis
Performance of a contract (Art. 7, V).
Time clock reminders, announcements and survey
Data
From volunteers, board members and staff: what each person chose to receive (by e-mail or WhatsApp, the days they usually come to the headquarters, the missed check-out reminder and the announcements), the date, author and form of the WhatsApp authorisation, who chose the days, and the check-out time the person reports afterwards. From students: name, e-mail, mobile number, whether they authorised WhatsApp on the school platform and the next day's classes, which the school platform provides the day before. From everyone: a record of each message (to whom, through which channel, when it went out, whether it was delivered, whether it was read (on the official WhatsApp) and whether the link was opened) and the answers to the feedback survey, with name and contact details only from those who authorise it. For volunteers, the two-week announcement includes a summary of the days and hours they recorded.
Purpose
To remind people to check in and out on the days they chose and to confirm attendance at the next day's class, to announce the time clock, to review check-out times reported afterwards and to learn what to improve. For volunteers, the reminder is a courtesy, never a demand for hours. For employed staff, the reminder only goes out on working days and only if the person asks for it. Messages go out only between 8 a.m. and 8 p.m., and each one ends with a link to choose what to receive or to stop receiving.
Legal basis
Reminders: performance of the volunteer service agreement and of the course contract (Art. 7, V) and, for employees and other relationships, legitimate interest in the security of the headquarters (Art. 7, IX). Announcements, click counts and the survey: legitimate interest in introducing and improving the time clock (Art. 7, IX), with the option to opt out at any time. WhatsApp and the name and contact details in the survey: consent (Art. 7, I).
Enrolment payments are processed by ÚnicoPag. For donations, PIX is processed by Donaty and cards (one-off or monthly) by ÚnicoPag. Card details pass through our server only on their way to ÚnicoPag, at the moment of payment, and are never stored; for monthly donations, ÚnicoPag keeps the card for the following charges. PIX donations made up to 21 October 2026 were processed by ÚnicoPag.
We do not ask for sensitive data (such as health, religion or racial origin) in any form on the site: the volunteer registration question about training in the health field is about your occupation, not your health. The selfie in the volunteer registration does not go through facial recognition or any other automated processing: only the team looks at the photo. We make no automated decisions based on your data. The forms are not aimed at children: if a teenager enrols, it should be done with a parent or legal guardian; volunteer registration is open only to people aged 18 or over.
Volunteering
Anyone who wants to volunteer registers at cruzvermelhariodejaneiro.org/voluntariado/cadastro/, a form on our own website, in Portuguese. The external form we used before (Spotform) is no longer in use, and the branch no longer collects data through it.
What we ask for: name, date of birth, e-mail, phone number, city, neighbourhood and state, CPF (it is used to prepare the volunteer service agreement and the time clock registration of those accepted), education, occupation, whether you have training in the health field and which (a question about your occupation, not your health), experience and skills, the areas you want to work in, the days and periods you are available, your motivation and how you heard about us. Stored with the form are the date and time you accepted this policy and declared the information true, the version of the policy accepted and the technical data of the submission: the IP address, the page you sent it from and, only with your statistics permission, the campaign parameters in the address (utm, fbclid and gclid). We also ask for a selfie (required to submit the form): it is used only so the team can recognise you at the interview and at the CBFI. The photo is resized and saved again without the camera metadata (such as location), is kept in the site's database and appears only on your form, in the team's portal; it does not go into e-mails, the PDF copy of the form or the spreadsheet, and it is never published.
Purpose: to select and organise volunteering. The team reviews the form, contacts you by e-mail or by the phone number given to arrange the interview and the Basic Institutional Training Course (CBFI) and, if you are accepted, issues the volunteer service agreement (Law No. 9,608/1998) and registers you on the headquarters time clock. The form is not used for any other purpose. Those accepted receive an approval code, as a QR code: anyone holding the code can check, at cruzvermelhariodejaneiro.org/conferir, the name, the CPF with only the middle digits shown, the approval date and whether it is still valid. Only show the code to whoever needs to check it.
Legal basis: your consent, recorded with the date, time and version of this policy (Art. 7, I), and the steps prior to the volunteer service agreement, at your request (Art. 7, V).
Who receives it: the volunteering team and the branch office, through the internal portal and through Palácio Virtual, the branch's internal management system, where the coordinators review and approve the forms. As processors, handling the data only on our behalf and under our instructions: Hostinger, which hosts the site and the database; Google, in the branch's Google Workspace (Drive and Sheets), where we keep a PDF copy of the form and the office's exports; Vercel and Supabase, which host Palácio Virtual (the form, with the selfie and the CPF, goes there); and Resend, which sends the confirmation to you and the notice to the team.
Transfers outside Brazil: the copy in Drive and in the spreadsheet is held by Google LLC, in the United States; the e-mails go out through Resend servers outside Brazil, and Palácio Virtual runs on Vercel and Supabase servers that may be outside Brazil. These transfers follow Article 33 of the LGPD and the ANPD's regulations, relying on Google's standard contractual clauses and the contractual safeguards of Resend, Vercel and Supabase, as well as the security measures of those services and restricted access to the branch's accounts.
How long: a form not accepted, declined or unanswered, for 12 months after submission; it is then deleted, together with the PDF copy and the spreadsheet row. An accepted form, for as long as the volunteering lasts and for up to 5 years after it ends, like the time clock records, to prove the voluntary nature of the service. The selfie follows the form and is deleted with it; if you ask, the team deletes just the selfie before that.
Your rights: you can ask for access to the form (we send the PDF copy), correction, deletion and withdrawal of consent by writing to contato@cruzvermelhariodejaneiro.org with the subject “Privacy”. We reply within 15 days. Once consent is withdrawn, the form is deleted, except for what the law requires us to keep. See also Your rights.
Who receives the data
Only those who need it for the service to work, and each receives only the part it needs:
ÚnicoPag, which processes enrolment payments and card donations (including monthly ones): name, CPF, e-mail and phone number and, for cards, the card details.
Donaty, which processes PIX donations: name, CPF, e-mail and phone number, the amount, whether the donation is anonymous, whether the donor covered the processing costs and the origin of the visit (campaign). We do not send it the IP address or card details.
The school platform (escola.cursoscruzvermelha.org), for paid enrolments: name, CPF, e-mail and phone number, to create the enrolment and the course access; at the headquarters time clock, the CPF and the date, to find the student's classes that day.
Hostinger, which hosts the site, the forms and their database.
Resend, which sends the e-mails (receipts, chat reference numbers, the volunteer form confirmation, the newsletter and the time clock reminders and announcements). If it is unavailable, enrolment, chat and volunteering e-mails go out through the hosting server; the time clock reminders and announcements wait for Resend to come back.
Meta, through WhatsApp, only for people who agreed to receive messages there: the number and the text of each reminder or announcement. If the institution uses an intermediary to send WhatsApp messages (Make, or the server of the Palácio Virtual WhatsApp, run by the branch), it receives the same, only for sending. Students only receive WhatsApp messages if their authorisation is recorded on the school platform.
Vercel and Supabase, which host the branch's internal system (Palácio Virtual), which publishes the news, keeps the newsletter list and receives the volunteer registration forms.
Google and Meta, through the statistics and marketing tools: their cookies and the Meta Pixel only with your permission; Google Analytics without cookies, on every visit, as described above. Meta also receives from our server a copy of the marketing events, with the data described above (Conversions API). Google also serves the site's fonts (Google Fonts) and, for that, receives the IP address of whoever opens the page, without cookies.
Google, through the branch's Google Workspace, as a processor: Drive and Sheets hold the PDF copies of the volunteer forms, the office's daily exports (without CPF) and the database backups; the branch's e-mail receives the messages you send us and the internal notices from the forms.
Public authorities, when the law or a court order requires it.
We do not sell personal data, to anyone, under any circumstances.
Transfers outside Brazil
Some of these providers store or process data outside Brazil, such as in the United States, Canada and the European Union (Google, including the branch's Google Workspace, Meta, including WhatsApp, Resend, Vercel, Supabase and, if used for WhatsApp, Make). These transfers follow Article 33 of the LGPD and the ANPD's regulations: they rely on the contractual safeguards offered by the providers (for Google Workspace, Google's standard contractual clauses and the service's security measures) and, for the statistics and marketing tools, also on your consent, given in the cookie notice.
Cookies
We use cookies the site needs in order to work and, only with your permission, statistics and marketing cookies. Without that permission, Google Analytics works without cookies, as described above. The full list, with how long each one lasts, is in the Cookie Policy. You can change your choice at any time:
Enrolment and payments: during the enrolment and the course and then for the retention period the law requires for tax and consumer records (generally 5 years).
Donations: for the legal retention period for accounting and tax records.
Chat: for as long as it is useful to follow up the exchange. You can ask for deletion at any time.
Document requests: the record of the request, for the same period as the chat; the proof you attach, only for as long as needed to review the request and record the reply. You can ask for deletion at any time.
Newsletter: until you unsubscribe. After that, only a record that you left is kept, so you are not subscribed again by mistake, and it is also deleted if you ask.
Security records (IP): together with the submission they relate to; the attempt limits of the time clock, the personal pages and the relay of page views to Meta keep the IP (and, for the time clock's code of the day, a code derived from the CPF that does not reveal it) for 2 days, and the record of robots blocked on the forms, for 30 days.
Headquarters time clock, for volunteers and board members: while the volunteering lasts and for up to 5 years after it ends, to prove the hours donated and the voluntary nature of the service.
Volunteer registration: a form not accepted or unanswered, 12 months after submission; an accepted form, for as long as the volunteering lasts and for up to 5 years after it ends, like the time clock records (Volunteering section).
Presence of employees, contractors and other relationships at the headquarters: 90 days. After that, it is deleted automatically.
Class attendance and attendance certificates: for the same period as the enrolment.
Time clock reminders, announcements and survey: the record of messages and the survey answers are deleted automatically after 1 year; one month after the announcement, the answers are no longer linked to whoever gave them. Choices about what to receive are kept while the person remains registered on the time clock. For people who asked to receive nothing more, we keep only a code generated from the e-mail address or number (not the address or number itself), for as long as needed to honour the request.
Marketing on the enrolment: your IP address, the _fbp and _fbc cookies and the browser identification, stored with the enrolment only with your permission, are deleted once the payment is reported to Meta or, at the latest, after 8 days (Meta only accepts events up to 7 days old), and also when the enrolment records that you withdrew your permission. Your marketing choice and its date stay with the enrolment for as long as the enrolment record, as proof of consent.
Cookies: for the period of each one, listed in the Cookie Policy.
When the period ends, the data is deleted or anonymised, unless the law requires it to be kept.
Security
Form data is kept in databases with access restricted to the team responsible for each subject, and the site only works over a secure connection (HTTPS). No system is infallible: if a security incident occurs that may cause significant risk or harm, we will notify you and the ANPD, as Article 48 of the LGPD requires.
Your rights
The LGPD (Article 18) guarantees that you can ask, at any time, for:
confirmation that we process your data, and access to it;
correction of incomplete, inaccurate or outdated data;
anonymisation, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
portability of your data to another provider;
deletion of data processed on the basis of your consent, and withdrawal of that consent;
information about who we share your data with, and about the possibility of not giving consent and what happens if you do not;
objection to processing that breaches the law.
To stop receiving the time clock reminders and announcements, use the link at the end of any message or ask the office; on messages from the institution's official WhatsApp, you can also reply STOP (PARAR). Through the same link, volunteers, board members and staff choose the days and channels. The WhatsApp authorisation can be withdrawn at any time, with no consequences.
To exercise any of them, write to contato@cruzvermelhariodejaneiro.org with the subject “Privacy”. We may ask for some information to confirm the request is yours. Confirmation and access, as a complete statement, are provided within 15 days (Art. 19 of the LGPD). Some data may have to be kept even after a deletion request, to comply with a legal obligation, such as payment records.
If you feel your request has not been met, you can complain to Brazil's National Data Protection Authority at gov.br/anpd.
Changes to this policy
When this policy changes, the date at the top changes with it. Significant changes are announced on the site and, for newsletter subscribers, by e-mail.
