Your data

Privacy Policy

1. Data Controller

MICHAEL HEHN CONSULTORIA EM TECNOLOGIA LTDA
Av. Jarbas de Carvalho 355, Apto. 305
Recreio dos Bandeirantes
Rio de Janeiro – RJ, CEP 22795-445
Brazil
CNPJ: 67.941.777/0001-21
Represented by: Michael Hehn
Email: hello@crovantus.com

2. EU Representative

In accordance with Article 27 GDPR:
Marius Hehn
Nördliche Ringstr. 20
74889 Sinsheim
Germany

Privacy-related requests may be sent to hello@crovantus.com.

3. Website Access and Hosting

When you access this website, technically necessary information such as your IP address, time of access, requested page and browser information may be processed in order to provide, secure and maintain the website. Where the GDPR applies, this processing is based on our legitimate interest in the secure and reliable operation of the service pursuant to Article 6(1)(f) GDPR.

The website application and database are hosted using DigitalOcean infrastructure.

4. Free Resources and Email Registration

If you request a free Crovantus resource or register for email content, we process information such as your email address, name where provided, registration and confirmation information, consent records, source and the resource requested.

Where the GDPR applies, marketing emails are sent on the basis of your consent pursuant to Article 6(1)(a) GDPR. Where required by our signup process, registration is confirmed using double opt-in. You may withdraw your consent at any time with effect for the future by using the unsubscribe link contained in our emails.

5. Email Service Provider

We use Twilio SendGrid for the technical delivery of emails. In this context, information such as your email address, sender and recipient information and message content may be processed by the service provider on our behalf.

Where personal data is transferred internationally, applicable transfer safeguards under Articles 44 et seq. GDPR are used where required.

6. Website Analytics

We use our own cookie-free website measurement system to understand howCrovantus is used and to improve our content. This may include the requested URL path, time of access, referring domain where available and campaign parameters such as UTM parameters.

The analytics system does not use cookies to create persistent visitor profiles and does not store an IP address, complete referrer URL or browser identifier in the analytics dataset. Where applicable, this processing is based on our legitimate interest in privacy-conscious measurement and improvement of our website pursuant to Article 6(1)(f) GDPR.

7. Cookies and Similar Technologies

We currently do not use non-essential cookies or comparable persistent identifiers on Crovantus. Therefore, no consent banner is currently displayed for such technologies. If technologies requiring consent are introduced in the future, appropriate consent will be obtained before they are activated and this Privacy Policy will be updated accordingly.

8. Purchases through Digistore24

Paid Crovantus products are purchased through Digistore24. During the checkout process, Digistore24 processes the information required to complete the transaction under its own applicable privacy information.

We receive information required to identify and administer a purchase and provide the associated product or service. Depending on the transaction, this may include your email address, name, order identifier, purchased product, transaction status and transaction amount.

9. Purchase and Customer Records

We process purchase information received from Digistore24 to associate purchases with customers, maintain purchase records, determine access to purchased offers, handle transaction status changes such as refunds and avoid sending irrelevant promotional messages for products already purchased.

10. Access from Brazil

The data controller is established in Brazil. Where access from Brazil to personal data stored or processed elsewhere is necessary for the operation of Crovantus, such access is limited to what is required for operating and administering the service and is handled subject to applicable data-protection requirements and safeguards.

11. Data Retention

Personal data is retained only for as long as necessary for the respective purpose, applicable legal retention obligations, transaction documentation, security requirements or documentation of consent. Unsubscribed email addresses may be retained to the extent necessary to ensure that no further marketing emails are sent.

12. Your Rights

Where the GDPR applies, you may have rights including access, rectification, erasure, restriction of processing, data portability and objection in accordance with Articles 15 to 21 GDPR. Where processing is based on consent, you may withdraw that consent with effect for the future.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

To exercise your rights or ask a privacy question, contact hello@crovantus.com.

Last updated: September 2026