LGPD Annex (Brazil)
BRLast updated: 2026-08-20
Applies to processing subject to the Brazilian General Data Protection Law (Law no. 13,709/2018), where there are users in Brazil.
Template document, aligned with the UK GDPR, the Data Protection Act 2018 and the Online Safety Act 2023. Have it reviewed by UK legal counsel before official publication.
Controller and DPO
Controller: GOMO CAPITAL MANAGEMENT LTD. LGPD / DPO channel: [email protected].
Legal bases
Performance of contract, consent, legitimate interest, compliance with a legal obligation, regular exercise of rights and protection of life or safety, as applicable.
Data subject rights
- Confirmation and access
- Correction
- Anonymisation, blocking or deletion
- Portability
- Information on sharing
- Withdrawal of consent
- Review of automated decisions
Centralisation in HZION and international transfer
You use ParLocal, but your account and identity are held on HZION's central infrastructure, operated by the same controller. That infrastructure is globally distributed and mostly outside Brazil, so the processing involves an INTERNATIONAL TRANSFER of data (LGPD, articles 33 to 36).
The transfer takes place to perform the contract with you and under the other legal bases stated above, with the same safeguards applied in the United Kingdom and the European Union. A right exercised through [email protected] applies to every brand of the group at once.
ANPD
You may contact the Brazilian Data Protection Authority where you believe your rights have not been respected. In case of conflict, the mandatory rule applicable to the data subject in Brazil prevails.