Paradas na Estrada
EN
Near me

Privacy policy

Last updated: September 29, 2026

1. Who the controller is

Paradas na Estrada is published by HAOYU ZUO, a sole proprietor established in France (see the Legal notice). The publisher is the controller (controlador) of the personal data processed on this site within the meaning of Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados Pessoais, LGPD, Lei nº 13.709/2018, art. 5º, VI), and the controller within the meaning of the European Union’s General Data Protection Regulation (GDPR, Regulation (EU) 2016/679). Contact: [email protected].

2. Applicable laws

The site is aimed at people in Brazil, so it follows the LGPD (art. 3º). Because the publisher is established in the European Union, the GDPR also applies (art. 3(1)). We apply both laws to all visitors.

3. Data protection officer

The data protection officer (encarregado; LGPD, art. 41) is HAOYU ZUO, at [email protected]. Resolução CD/ANPD nº 2/2022, issued by Brazil’s National Data Protection Agency (ANPD), exempts small-scale processing agents from appointing a data protection officer, provided they maintain a channel of communication with data subjects (art. 11); we have chosen to appoint one anyway. This email address is the channel for any request about your data.

4. What data we process, why, and on what legal basis

  • Messages you send us (email address, name and content), to reply to questions, corrections and proposals. Legal basis: legitimate interest in replying (LGPD, art. 7º, IX; GDPR, art. 6(1)(f)).
  • Technical server logs (IP address, date and time, page visited and browser), kept by the hosting provider for the security and operation of the site. Legal basis: legitimate interest in keeping the site protected and online (LGPD, art. 7º, IX; GDPR, art. 6(1)(f)).
  • Your location, only if you tap “Stops near me” and allow it in your browser. It is used in your own browser to sort the nearest stops and is never sent to us.
  • Map display: when a map appears, your browser loads the map tiles from OpenFreeMap, which receives your IP address. Legal basis: legitimate interest in showing the map (LGPD, art. 7º, IX; GDPR, art. 6(1)(f)).
  • Google AdSense ads and cookies, only after you accept in the privacy banner (section 5). Legal basis: your consent (LGPD, arts. 7º, I, and 8º; GDPR, art. 6(1)(a)), which you can withdraw at any time (LGPD, art. 8º, § 5º; GDPR, art. 7(3)).
  • Your cookie choice, stored in your browser’s local storage so that the banner does not appear again on every page. It is not sent to us. Legal basis: legitimate interest in respecting and recording your choice (LGPD, art. 7º, IX; GDPR, art. 6(1)(f)).

We do not sell personal data, we do not use audience analytics tools and we do not create visitor profiles.

5. Cookies, ads and the privacy banner

The site is free and supported by Google AdSense ads. On your first visit, the “Your privacy” banner offers two equally prominent buttons: Accept all and Reject all. The Google AdSense code is only loaded after you accept. If you reject, the site works just the same, without these ads. With the “Settings” button, you can accept ads without personalization.

Your choice is stored in your browser for 12 months. You can change it at any time with the Privacy settings link in the footer of every page. Apart from the Google AdSense cookies, which only exist after you consent, and the record of your choice, the site does not use cookies or similar technologies.

When you accept:

  • Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites.
  • Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
  • You can opt out of personalized advertising in Google’s Ads Settings. You can also opt out of third-party vendors’ use of cookies for personalized advertising at www.aboutads.info.
  • See how Google uses information from sites that use its services at policies.google.com.

Even non-personalized ads use cookies, to limit how many times an ad appears, produce aggregated reports and fight fraud. That is why we ask for your consent before loading any ad. Depending on your region and your Google settings, ads may or may not be personalized. Google processes this data as an independent controller, under its own privacy policy.

6. Service providers and sharing

  • Hosting and email: Cloudflare, Inc. (United States) hosts the site, processes the technical logs and forwards messages sent to [email protected] to the publisher’s mailbox, which is kept by an email provider.
  • Maps: the map tiles come from OpenFreeMap, which receives your IP address when a map appears. The fonts and the site’s other files are served from our own domain.
  • Advertising: Google AdSense (Google Ireland Limited and Google LLC) displays the ads and, after you consent, receives your IP address and browser data and uses cookies (section 5).
  • Navigation links: the directions buttons open Google Maps, Waze, Apple Maps or OpenStreetMap. From then on, the privacy policy of the service you choose applies.

We only share personal data with these providers, to the extent necessary for each purpose, or when the law requires it.

7. International transfers

The publisher is in France, and the providers above may process data in other countries, including the United States. The LGPD only allows international data transfers in the cases set out in art. 33. The ANPD has recognized the European Union as having an adequate level of data protection (Resolução nº 32/2026, adequacy decision). For other destinations, we use the mechanisms of art. 33 and of the International Data Transfer Regulation (Resolução CD/ANPD nº 19/2024) available in each case: Google’s data protection terms, for example, include the standard contractual clauses approved by the ANPD. Under the GDPR, transfers outside the European Economic Area follow Chapter V (arts. 44 to 49), based on an adequacy decision of the European Commission or on standard contractual clauses, depending on the provider.

8. How long we keep data

  • Messages: for as long as needed to reply and follow up on the matter and, after that, for up to 3 years from the last contact, unless the law requires a longer period or you ask us to delete them sooner.
  • Technical logs: for a short period, set by the hosting provider for security purposes.
  • Your cookie choice: 12 months, in your browser; after that, we ask again.
  • Google AdSense cookies: for the periods set by Google; you can delete them at any time in your browser settings.
  • Location: not stored.

9. Your rights

Under the LGPD (art. 18), you can request at any time: confirmation that we process your data; access to it; correction of incomplete, inaccurate or out-of-date data; anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law; portability; deletion of data processed with your consent; information about whom we share your data with; information about the option of not giving consent and the consequences of refusing; and withdrawal of consent. You can also object to processing carried out without consent if it breaches the law (art. 18, § 2º).

Under the GDPR, you have the rights of access, rectification, erasure, restriction of processing, portability and objection (arts. 15 to 18, 20 and 21), and you can withdraw your consent at any time (art. 7(3)).

How to exercise your rights: write to [email protected]. We may ask for information to confirm your identity. This is free of charge (LGPD, art. 18, § 5º). We reply as soon as possible, within the legal time limits, such as the LGPD’s 15 days for the full access statement (art. 19, II) and the GDPR’s one-month time limit (art. 12(3)).

Complaints: if you are not satisfied with our reply, you can file a petition with the National Data Protection Agency (Agência Nacional de Proteção de Dados, ANPD) (LGPD, art. 18, § 1º) through the Abrir requerimento relacionado à LGPD service (“open a request related to the LGPD”). The ANPD asks data subjects to contact the controller first. This right can also be exercised before consumer protection bodies (art. 18, § 8º). In the European Union, you can lodge a complaint with the data protection authority of the country where you live or work, or with the CNIL in France (GDPR, art. 77).

10. Security

The site is served only over an encrypted connection (HTTPS), and we process the minimum personal data necessary. Only the publisher reads the messages received.

11. Children and teenagers

The site is not directed at children and does not knowingly collect data from children or teenagers. If a parent or guardian learns that a child has sent us personal data, they can request its deletion at the email address above (LGPD, art. 14; GDPR, art. 8).

12. Changes to this policy

We may update this policy; the date of the last update appears at the top of the page. If a change affects something we asked for your consent to, we will let you know and ask for your choice again.

This is a translation. If the versions differ, the Portuguese version prevails.