How this site handles data and cookies, in accordance with the LGPD (Brazil's General Data Protection Law, Law 13.709/2018) and, for visitors in Europe, the GDPR (EU General Data Protection Regulation, 2016/679), and for visitors in California, the CCPA/CPRA.
This site is operated by Carlos Trilha, music producer and artist, based in Florianópolis, Santa Catarina, Brazil. For any matter related to personal data or to this policy, the contact channel is the email below.
privacidade@carlostrilha.com.brThis is a static site, with no forms, login, or account registration area. We do not collect, store, or process personal data directly through the site's pages.
The only direct point of contact is an email link (mailto), which opens the visitor's own email application. Any data sent this way (name, email, message content) is treated as ordinary personal correspondence, under the responsibility of the visitor themselves when choosing to write.
Separately, this site loads third-party advertising tools (Google and Meta) on every page, described in sections 03 and 04, which collect browsing data through cookies.
This site uses third-party cookies for two purposes: displaying embedded video content and enabling advertising campaigns (see section 04).
Some pages embed video players from YouTube and Vimeo, which may set their own cookies in your browser to display content and measure audience, in accordance with those platforms' privacy policies. To reduce this, YouTube videos are embedded in privacy-enhanced mode (via youtube-nocookie.com) and Vimeo videos are loaded with the Do Not Track parameter (dnt=1), both of which limit cookie use mainly to when a visitor actively plays a video.
The site also carries links to external platforms (Spotify, Apple Music, Instagram, Facebook, YouTube, Twitter). These links lead to third-party services with their own privacy and cookie policies, which are not controlled by Carlos Trilha.
Carlos Trilha runs paid traffic campaigns on Google Ads and Meta Business (Facebook and Instagram), at times together with show and event production partners. To measure and optimize these campaigns, two third-party tools are loaded on every page of this site:
When preparing a campaign for a specific show or event, existing customer and ticket-buyer contact lists may be uploaded to Google and/or Meta, always in encrypted (hashed) form. These platforms never receive the original plain-text data (name, email, or phone number), only the hashed version, used solely to match against their own registered users, forming a "custom audience" or a "lookalike" audience. Anyone who would rather not be included in this kind of audience, or wants to know whether their contact was used this way, can write to the email address in section 01.
Because Google and Meta process data outside Brazil, this involves an international data transfer, carried out under the contractual and compliance safeguards adopted by those companies.
A visitor whose browser indicates a location in Europe (the EU, the UK, or Switzerland) sees a cookie banner before these cookies are loaded, with the option to accept or decline. The choice is saved in the browser and can be revisited at any time using the "Cookie Preferences" link in the footer of each page. For anyone who doesn't see the banner, or who prefers to control the platforms directly, each visitor can also adjust their own preferences:
These third-party tools have their own policies: Google's privacy policy and Meta's data policy.
The processing described in sections 03 and 04 relies on legitimate interest (LGPD, art. 7, IX) as its legal basis, in order to promote shows, albums, and projects to people who have already shown interest (site visitors, customers, and ticket buyers), and, where applicable, on the data subject's consent.
Under the LGPD, any personal data subject may request, at any time and by contacting the email address given in section 01:
For visitors located in the European Economic Area, the United Kingdom, or Switzerland, this site's data handling is also intended to meet the requirements of the GDPR (General Data Protection Regulation, EU 2016/679). Beyond the third-party cookies from video players (section 03), this site loads Google and Meta advertising cookies on every page (section 04). For this audience, a banner asks for consent before these cookies are loaded, with the option to accept or decline, and the choice can be revisited at any time using the "Cookie Preferences" link in the footer of each page or by contacting the email address in section 01.
In addition to the rights listed above, the GDPR also grants:
Requests can be made using the same email address given in section 01.
For visitors located in California, this section addresses the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). This site does not collect personal information through forms or accounts. However, the use of Google Ads and Meta Pixel described in section 04 may qualify as "sharing" of personal information for cross-context behavioral advertising, as defined under the CCPA/CPRA.
California residents have the right to know what personal information is collected, the right to delete personal information, the right to correct inaccurate personal information, the right to opt out of the sharing of personal information for targeted advertising, the right to limit the use of sensitive personal information (not applicable, since none is collected), and the right to non-discrimination for exercising any of these rights.
To opt out of sharing with Google and Meta, use the ad preference links in section 04, or request by email in section 01 that the opt-out be handled manually. This site does not yet automatically process the browser's Global Privacy Control (GPC) signal.
Since this site has no forms, login, or user database, the way to request deletion of any personal data related to you is to write directly to the email below, stating what you'd like deleted — for example, a message sent by email, a contact included in an advertising audience (sections 03 and 04), or any other data you believe we hold.
privacidade@carlostrilha.com.brOnce we receive your request, we confirm receipt and complete the deletion within 15 business days, notifying you once it's done. If the data is held by a third party (such as Google or Meta, under section 04), we also request removal from those platforms, within the timeframes and processes they follow.
This policy may be updated to reflect changes to the site or to applicable legislation. The date of the last update appears below.
Last updated: September 25, 2026