This Privacy Policy explains what personal data we collect through this website and in connection with our services, why we use it, who we share it with, how long we keep it and how you can exercise your rights.
This Policy is designed to comply with the Brazilian General Data Protection Law (Law No. 13,709/2018 — LGPD) and, where applicable to individuals in the European Economic Area and the United Kingdom, with the General Data Protection Regulation (GDPR / UK GDPR).
01Who is responsible for your data
The data controller is:
Brasil Vida Táxi Aéreo Ltda.CNPJ 06.234.656/0001-55Av. Santos Dumont, nº 1.000, Hangares Norte, Hangar Brasil VidaGoiânia – GO, CEP 74672-420, BrazilThis Policy also covers the branches of Brasil Vida Táxi Aéreo Ltda. in Brazil.
Data Protection Officer (Encarregado)
Diego Pereira Firmino — Email: dpo@brasilvida.com.br
You can contact our Data Protection Officer about any question related to this Policy or to the processing of your personal data.
02Who this Policy applies to
- visitors of this website;
- representatives of insurers, assistance companies, hospitals, brokers and other partners who contact us or request a quote;
- patients and their companions or legal representatives whose data is shared with us to plan and carry out an air or ground medical transport.
03What data we collect
3.1 Data you give us
Through the forms on this website:
- Request a Quote: your name, company or organisation (optional), email address and phone number; the city and country where the patient is; the destination city and country; the preferred date of the transport; and your consent confirmation.
- International Operations contact form: your name, company or organisation, email address, phone number (optional), the message you write to us and your consent confirmation.
- Request Additional Credentials (Safety & Credentials): your name, company or organisation, email address, team, the documentation you request and your consent confirmation.
The forms do not accept attachments.
By email, WhatsApp or phone: anything you choose to send us, which may include identification data of the patient and companions (name, date of birth, nationality, passport or ID details), clinical information (medical reports, diagnosis, clinical condition, equipment and oxygen requirements), insurance and case references, and the contact details of the treating physician or receiving facility.
Clinical information is sensitive personal data under the LGPD (art. 5, II) and special category data under the GDPR (art. 9). We only request what is necessary to assess and safely perform the transport.
3.2 Data collected automatically
When you browse the website we and our partners may collect technical data such as IP address, browser and device type, pages visited, referring page, date and time of access and approximate location derived from the IP address. Part of this data is collected through cookies and similar technologies — see section 9.
3.3 Data about minors
Patients may be children or adolescents. In these cases their data is provided by, and processed in the best interest of, the child, with the involvement of a parent or legal guardian, as required by art. 14 of the LGPD.
04Why we use your data and on what legal basis
| Purpose | Data | Legal basis — LGPD | Legal basis — GDPR |
|---|---|---|---|
| Respond to quote requests and case submissions; prepare proposals | Contact data, transport details | Preliminary procedures to a contract (art. 7, V) | Steps prior to a contract (art. 6(1)(b)) |
| Plan and perform the medical transport, including medical assessment, crew and equipment planning | Identification and clinical data of the patient | Protection of health by health professionals or services (art. 11, II, "f"); protection of life (art. 11, II, "e"); performance of contract (art. 7, V) | Vital interests (art. 9(2)(c)); provision of health care (art. 9(2)(h)); contract (art. 6(1)(b)) |
| Coordinate with insurers, assistance companies, hospitals, airports, handling agents and authorities | Identification, clinical and travel data strictly needed | Same as above; compliance with legal or regulatory obligations (arts. 7, II and 11, II, "a") | Same as above; legal obligation (art. 6(1)(c)) |
| Comply with aviation, health, tax and accounting rules; keep medical and flight records | Records of the service | Legal or regulatory obligation (arts. 7, II and 11, II, "a") | Legal obligation (art. 6(1)(c)) |
| Defend our rights in legal, administrative or arbitration proceedings | Records of the service and communications | Regular exercise of rights (arts. 7, VI and 11, II, "d") | Legal claims (arts. 6(1)(f) and 9(2)(f)) |
| Operate, secure and prevent abuse of the website and forms | Technical data | Legitimate interest (art. 7, IX) | Legitimate interest (art. 6(1)(f)) |
| Measure website audience and performance (analytics) | Technical and browsing data | Consent (art. 7, I) | Consent (art. 6(1)(a)) |
| Show relevant advertising and measure campaigns (advertising cookies and pixels) | Technical and browsing data | Consent (art. 7, I) | Consent (art. 6(1)(a)) |
| Send institutional or commercial communications to business contacts | Business contact data | Legitimate interest (art. 7, IX), with an easy way to opt out | Legitimate interest (art. 6(1)(f)) |
We do not sell personal data, and we do not use clinical information for marketing.
05Who we share data with
We only share personal data when necessary for the purposes above and with parties bound by confidentiality:
- Insurers, assistance companies and the party that requested the transport, to authorise and coordinate the case;
- Hospitals, physicians and receiving facilities at origin and destination;
- Airports, handling agents, ground ambulance providers, fuel and flight-support providers, limited to the data needed for the operation;
- Public authorities such as ANAC, ANVISA, customs, immigration and health authorities in Brazil and abroad, when required by law;
- Technology providers acting on our behalf (processors), such as email and productivity services (Google Workspace), website hosting, messaging (WhatsApp) and — only with your consent — analytics and advertising platforms (Google Analytics, Google Ads, Meta);
- Legal and professional advisers, and courts or authorities when required.
06International transfers
Because our work is international, personal data may be transferred to or accessed from countries other than Brazil — for example, the country where the patient is, the destination country, or the countries where our technology providers operate (including the United States and the European Union).
We carry out these transfers under the mechanisms of arts. 33 to 36 of the LGPD and, where the GDPR applies, chapter V of the GDPR — in particular when the transfer is necessary for the protection of life or physical safety of the patient, for the performance of the contract or preliminary procedures, or under standard contractual clauses and adequacy decisions adopted by the competent authorities.
07How long we keep your data
We keep personal data only for as long as necessary for the purpose for which it was collected, and then for the periods required by law or needed to protect our rights. In summary:
- quote requests that do not become a transport: for up to 2 years after the last contact, unless a longer period is needed to defend our rights;
- records of transports performed, including medical records: for the periods set by Brazilian health and aviation regulations, which may be as long as 20 years for medical records;
- tax, accounting and contractual records: for the periods set by applicable law;
- analytics and advertising data: according to the retention settings of each tool, and for no longer than 14 months where we control that setting;
- security logs of the website: for up to 6 months, in line with Law No. 12,965/2014 (Marco Civil da Internet).
After these periods, data is deleted or anonymised.
08How we protect your data
We apply technical and organisational measures appropriate to the sensitivity of the data, including encrypted connections (HTTPS/TLS) on the website and for email delivery, access restricted to people who need it, confidentiality obligations for staff and providers, and form handling that does not store submissions on the web server. No system is completely secure; if an incident occurs that may create a relevant risk to you, we will notify you and the Brazilian National Data Protection Authority (ANPD) as required by law.
09Cookies and similar technologies
Cookies are small files stored on your device. We use them as follows:
| Category | What it does | Examples | Needs your consent? |
|---|---|---|---|
| Strictly necessary | Keeps the website working and secure, and remembers your cookie choices | Consent preference, security and anti-spam controls | No |
| Analytics | Helps us understand how visitors use the website so we can improve it | Google Analytics, Google Tag Manager | Yes |
| Advertising | Measures our campaigns and shows relevant ads on other platforms | Google Ads, Meta Pixel | Yes |
| Third-party content | Loads embedded content such as maps, videos or chat buttons, whose providers may set their own cookies | Google Maps, YouTube, WhatsApp | Yes — content loads only after you allow it |
Non-essential cookies are only set after you accept them in our cookie banner. You can change or withdraw your choice at any time through the "Cookie settings" link at the bottom of every page, and you can also block or delete cookies in your browser settings. Blocking some cookies may affect how the website works.
10Your rights
Under the LGPD (art. 18) — and, where applicable, the GDPR (arts. 15 to 22) — you have the right to:
- confirm whether we process your personal data and access it;
- correct incomplete, inaccurate or outdated data;
- request anonymisation, blocking or deletion of unnecessary or excessive data, or of data processed unlawfully;
- request portability of your data to another provider;
- request deletion of data processed on the basis of consent, except where the law allows us to keep it;
- know the public and private entities with which we share your data;
- be informed about the possibility of not giving consent and its consequences;
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
- object to processing based on legitimate interest;
- request a review of decisions taken solely on the basis of automated processing (we do not make such decisions).
To exercise your rights, contact our Data Protection Officer at dpo@brasilvida.com.br. We may ask for information to confirm your identity before answering. We will reply within the deadlines set by law.
You also have the right to file a complaint with the Brazilian National Data Protection Authority (ANPD) — www.gov.br/anpd — and, if you are in the European Economic Area or the United Kingdom, with your local data protection supervisory authority.
11Links to other websites
This website may contain links to websites of third parties. We are not responsible for their privacy practices; please read their own policies.
12Changes to this Policy
We may update this Policy to reflect changes in our services or in the law. The date of the latest version is shown at the top of this page. Material changes will be highlighted on the website.
13Contact
Data Protection Officer: Diego Pereira Firmino — dpo@brasilvida.com.br
Brasil Vida Táxi Aéreo Ltda. — Av. Santos Dumont, nº 1.000, Hangares Norte, Hangar Brasil Vida, Goiânia – GO, CEP 74672-420, Brazil