Skip to content
ForLogic

Privacy Notice

ForLogic seeks to surprise with technology and relationships that simplify quality.

Controller identification

Controller of personal data:

Legal name: ForLogic Software Ltda.
CNPJ: 06.266.932/0001-67

Addresses:

R. Antônio Registro, 165 - Jardim Europa, Cornélio Procópio - PR, 86300-124
Avenida Angélica, 2529, 4º andar, sala 104 – Consolação, São Paulo - SP, 01227-200.
Av. Pres. Castelo Branco, 2075 - Jardim Presidente, Londrina - PR, 86061-335

Website: www.forlogic.net

Email to contact the Data Protection Officer (DPO): compliance@forlogic.net

Note: whenever this Notice mentions "ForLogic", it refers to the legal entity identified above as the controller of personal data.

01. What is the purpose?

FORLOGIC'S PURPOSE IS:

To surprise with technology and relationships that simplify quality. To surprise in a positive, not invasive, way! We want to be transparent with our customers and partners. That's why we will clarify how we process the personal data collected through our digital channels.

ForLogic's processing of personal data follows the principles of purpose, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination and accountability, set forth in Article 6 of Brazil's General Data Protection Law (LGPD) and reflected in our Information Privacy Management System (SGPI) certified under ISO/IEC 27701.

This PRIVACY NOTICE applies to all of ForLogic's digital presence channels, including its social media:

  • Websites
  • Facebook
  • Instagram
  • LinkedIn
  • YouTube
  • QualiCast
  • Quality Blog
  • WhatsApp Groups
  • LinkedIn Groups

At ForLogic, we want to spread the culture of #QualidadeReal (Real Quality) and, therefore, through our digital channels we may collect information from individuals and companies interested in the topics we cover, in order to offer our products and services and talk about quality.

02. How do we collect it?

ForLogic Website Contact Form

ForLogic will collect personal data when the contact form available on our website is filled out. In that case, the data collected is:

  • Full name
  • Email
  • Company name?
  • Job title

→ Forms on ForLogic Product Websites

On ForLogic's product websites, the data subject is invited to request more information about our solutions. On that occasion, we will process personal data for the purpose of initiating contact with our sales team to present quotes and contracting terms. These terms apply to the following websites

  • www.qualiex.com
  • www.metroex.com.br
  • www.forlogic.net

→ Event registrations

ForLogic frequently hosts events, such as webinars and talks, opening registrations on its digital platforms. Typically, the data requested for registration is:

  • Full name
  • Phone number
  • Email

Other data may occasionally be requested depending on the event, always in compliance with the LGPD.

→ Availability of downloadable materials

The ForLogic team is always studying and developing materials of exceptional quality, and we often make these materials available for free download. To do so, we ask users to fill out a form so we can understand which audience we are reaching with the publication. These forms typically request:

  • Full name
  • Email
  • Company name
  • Job title
  • Company segment

→ Certificate issuance

Data subjects who participate in events hosted by ForLogic and wish to request a Certificate of Participation must fill out a form or attendance list made available during the broadcast. The data requested to register the participant and issue the certificate is:

  • Full name
  • Corporate email
  • Phone/WhatsApp

Cookies and tracking technologies

ForLogic's websites use cookies and similar technologies (e.g., HubSpot) to enable essential functionality, measure audience, and personalize content. Cookies are classified as:

(i) necessary, essential to the operation of the website;

(ii) performance/analytics, which measure usage and navigation; and

(iii) marketing, used for targeted advertising. Non-essential cookies are only activated upon consent of the data subject, expressed through a cookie banner, and can be managed or revoked at any time in the cookie settings of the website or browser.

Consent

By reading and agreeing to this Privacy Notice, the data subject freely and unequivocally expresses their consent in the context of one of the processing activities mentioned in this document.

Whenever the data subject's consent is the legal basis to be adopted by ForLogic for the processing of personal data, consent will be obtained digitally, through an unchecked checkbox, which the data subject must click to check and authorize the processing.

Any data processing based on the data subject's consent may be discontinued upon revocation of consent by the data subject.

The content developed by ForLogic, including its structure and visual effects, is not intended to attract or engage individuals under 18 years of age. We do not intend to collect or process personal data from this audience. When interacting with ForLogic, we assume that the data subject is of legal age. Therefore, in compliance with the principle of necessity, we will not request a date of birth, except when strictly necessary.

In all forms, users must indicate that they are aware of and agree to this Privacy Notice before sharing their data.

ForLogic does not make automated decisions that produce legal effects or significant impacts on the data subject without the possibility of review. Where applicable, the data subject may request a review of decisions made solely on the basis of automated processing of personal data, pursuant to Article 20 of the LGPD.

Legitimate Interest Assessment

ForLogic adopts the legal basis of Legitimate Interest when, in its interactions with social media users, prospects and qualified leads, it determines that sending emails is necessary to achieve its goal of effectively informing them about new products and offers.

Whenever this action is taken, ForLogic adopts measures to minimize any negative impact on these recipients, such as allowing them to opt out of receiving new emails at any time.

Whenever the legal basis of Legitimate Interest is adopted, the data processing activity has been previously submitted to a Legitimate Interest Assessment (LIA), and ForLogic has concluded that the impact on recipients would be minimal compared to the benefits of keeping them informed about relevant topics and offers.

03. Retention of your data

Quality and the other topics we address in our publications are living subjects, and we want to keep the community always up to date with the best practices and innovations related to these topics, just as we keep our products always up to date.

With this goal, and adopting all applicable security measures, ForLogic processes data for as long as necessary to fulfill the purposes stated in this Notice, always providing the data subject with a simplified option to request that this communication be discontinued. The main purpose of ForLogic's processing of personal data is to keep the community informed and up to date.

Retention criteria and periods:

  • Data processed based on consent: kept for as long as the consent and the communication purpose remain in effect. Once consent is revoked or unsubscription is requested, the data is deleted or anonymized.
  • Data processed based on legitimate interest (leads/prospects): kept for as long as the legitimate interest and the intended commercial relationship persist, with processing ceasing if the data subject opts out.
  • Data necessary to comply with a legal or regulatory obligation or for the regular exercise of rights in legal proceedings: kept for the applicable legal periods, even after the other purposes have ended.

Once the purposes have been fulfilled and the legal periods have elapsed, the data is deleted or anonymized, except in cases of retention authorized by law.

To maintain transparency with data subjects, in all of ForLogic's communications the data subject will have the option to request revocation of their consent and stop receiving our messages by clicking the unsubscribe option in the footer of the message or by replying to request cancellation of future messages.

What is the purpose of the processing?

ForLogic will process personal data exclusively to send information about its products, events, publications, promotions and other materials related to the topics covered on our digital channels.

04. Security guarantee

How does ForLogic guarantee the security and privacy of your data?
ForLogic adopts strict information security and data privacy controls, is certified under the ABNT NBR ISO/IEC 27001:2022, ABNT NBR ISO/IEC 27701:2020 and ABNT NBR ISO/IEC 27018:2021 standards, and carefully selects and audits its business partners.

ForLogic maintains an Information Security Management System (ISMS/SGSI) and an Information Privacy Management System (SGPI), with appropriate technical and administrative measures, such as encryption, least-privilege access control, event logging and monitoring, privacy risk assessments for data subjects, and incident management. In the event of a security incident that may cause relevant risk or harm to data subjects, ForLogic will notify the National Data Protection Authority (ANPD) and the affected data subjects, pursuant to Article 48 of the LGPD.

ForLogic conducts Data Protection Impact Assessments (DPIA) for processing activities that present a higher risk to data subjects, and adopts secure disposal procedures for personal data at the end of the retention period. Security incidents involving personal data are reported to the ANPD and affected data subjects within a reasonable time, taking into account the nature and severity of the incident, pursuant to Article 48 of the LGPD.

05. Who we share your data with and where it stays

ForLogic may share personal data exclusively to fulfill the purposes described in this Notice, and always after prior assessment of these partners' maturity regarding information security and privacy controls. No provider is authorized to use personal data for any purpose other than the one disclosed to the data subject.

Categories of recipients (processors) with whom data may be shared:

  • Infrastructure and cloud providers (hosting and storage);
  • Marketing automation and email-sending platforms;
  • Customer relationship management (CRM) platforms;
  • Audience analysis and measurement tools;
  • Event/webinar providers and certificate issuance services.

List of the main processors currently used:

[to be completed/kept up to date according to the providers actually contracted, for example: Microsoft Corporation (Microsoft Azure/365), email marketing platform, CRM platform, analytics tool, webinar platform.]

Responsibilities of the processing agents:

  • ForLogic, as the CONTROLLER, defines the purposes and means of processing and is responsible for compliance with the LGPD.
  • PROCESSORS process data on behalf of ForLogic, limited to contractual instructions and the stated purposes, and are contractually required to adopt compatible security and privacy measures.

06. International data transfer

Part of the technological infrastructure used by ForLogic is provided by cloud providers that may store and process personal data on servers located outside Brazil, including in the United States of America.

When contracting these services, ForLogic adopts safeguards to ensure an adequate level of protection, such as:

  • Data protection contractual clauses with processors;
  • Standard contractual clauses approved by the ANPD, when applicable;
  • Encryption of data in transit and at rest;
  • Selection of providers certified under international security and privacy standards (for example, ISO/IEC 27001 and ISO/IEC 27018).

In accordance with ISO/IEC 27018, the contracted cloud providers disclose the countries or regions where the data may be stored, and ForLogic does not authorize the use of this data for marketing or advertising by processors without a legal basis and consent, when required.

07. Legal basis for each processing activity

  • Contact form / products: performance of preliminary procedures related to a contract at the request of the data subject (Art. 7, V) and/or consent.
  • Event registration and certificate issuance: performance of a requested contract/service (Art. 7, V) and/or consent (Art. 7, I).
  • Downloadable materials: consent (Art. 7, I).
  • Sending marketing communications to leads/prospects: legitimate interest (Art. 7, IX), preceded by a Legitimate Interest Assessment (LIA), always with an opt-out option.
  • Compliance with legal/regulatory obligations: legal obligation (Art. 7, II).

08. Your rights as a data subject

As a data subject, you may, at any time, exercise the rights provided for in Article 18 of the LGPD, including:

  • Confirmation of the existence of processing of your data by ForLogic;
  • Access to information about which data is being processed;
  • Correction of incomplete, inaccurate or outdated personal data;
  • Anonymization, blocking or deletion of unnecessary or excessive data, or data processed in non-compliance with the LGPD;
  • Portability of data to another service provider, upon express request;
  • Deletion of personal data processed based on consent;
  • Information about the public and private entities with which ForLogic has shared data;
  • Information about the possibility of not giving consent and the consequences of refusal;
  • Revocation of consent.

Requests related to the exercise of these rights will be answered by ForLogic in a simplified format and, when requested, in a complete format, within up to 15 (fifteen) days of receipt of the request, pursuant to Article 19 of the LGPD.

You also have the right to file a complaint regarding your data with the National Data Protection Authority (ANPD).

Contact and questions

Requests and any communications related to Privacy and the LGPD should be sent to ForLogic's Data Protection Officer (DPO), Rodrigo Paiva de Oliveira Ferreira Braga, via email: privacidade@forlogic.net

Validity and updates to this Notice

Version: 2.0
Effective date: 08/17/2026

This Notice may be updated at any time to reflect changes in our practices, in legislation, or in applicable standards. The current version will always be available on our digital channels, along with its respective update date.

Changes that involve a change of purpose incompatible with the original consent will be communicated to the data subject in advance, who may revoke their consent.

The history of previous versions of this Notice, including substantial changes, may be requested from the Data Protection Officer (DPO) via the email provided in this document.