Data Protection Officer (DPO)

1. DPO identity

EtiquetaChef’s Data Protection Officer (DPO) is Jonas R G Filho. The role is held by the founder while the operation remains at early scale; a transition to a dedicated DPO will happen when growth warrants it. The DPO is appointed by the data controller, ETIQUETACHEF DESENVOLVIMENTO DE SOFTWARE CUSTOMIZÁVEL LTDA (CNPJ 69.380.362/0001-51, Rua Pais Leme, 215, Conj. 1713, Pinheiros, São Paulo/SP, CEP 05424-150, Brasil).

2. Contact channels

The preferred channel for anything related to personal data is our contact page. Requests sent there are routed with priority to the DPO — mention "DPO" in your message for prioritization.

Reach the DPO via the contact page

3. Responsibilities (Article 41 §2 LGPD)

The DPO acts as a single point of contact for data subjects and authorities, with these legal duties:

• Receive complaints and communications from data subjects, provide clarifications and take action.
• Receive communications from the Brazilian Data Protection Authority (ANPD) and take action.
• Train EtiquetaChef staff and contractors on personal data protection practices.
• Carry out other duties set by the controller or by complementary regulation.
• Maintain an up-to-date Record of Processing Activities (RoPA).
• Evaluate and respond to Data Subject Access Requests within the agreed SLA.

4. How to contact the DPO

You can reach the DPO in two ways — pick whichever fits best:

• In-app self-service: "Account & Privacy" section (route /privacy) — automated export, correction and deletion.
• Via our contact page (mention "DPO" in your message for prioritization).

5. Response SLA

Data subject requests are answered within 15 (fifteen) calendar days from the date of the request (Article 19(II) LGPD). If a request cannot be fulfilled within that period, the data subject is informed within it of the reasons and next steps (Article 18, §4, LGPD).

6. DPO history

Jonas R G Filho — since 5 May 2026 (formal role created alongside Sprint 13 LGPD compliance).