Privacy and GDPR

Articles

Preparing Your Wix Site for the LGPD

About the LGPD

The Lei Geral de Proteção de Dados (LGPD) - which came into force in August, 2020 - aims to protect the fundamental right to privacy and the protection of the personal data of Brazilian citizens.

This regulation affects any entity (including websites) that processes Brazilian citizens' personal data. Whether or not you, or your business, is located in Brazil; if you have Brazilian site-visitors or, if your marketing campaigns target Brazilian citizens, this affects you.

Important:

As stated in our Terms of Use, it is your responsibility to ensure that Wix services are permitted and abiding by local laws. Any information contained herein is not legal advice and you should not rely upon it as such. The LGPD can require several actions from site owners, depending on how you plan to use site-visitors’ data. If you are uncertain about your responsibilities, it is always wise to get legal advice from an expert.

Building an LGPD-Compliant Website with Wix

You can build a stunning LGPD-compliant website at Wix. Be aware that there are steps you must take to ensure your site is LGPD-compliant.

Wix is a DIY (do-it-yourself) platform. We aim to make it easy to use our platform to comply with privacy and data protection laws like the LGPD. Wix provides you with specific tools to help you give your site-visitors control over their personal data. These tools implement technical and security measures to ensure that your customers’ personal data is protected as it crosses borders.

Learn more about your role as a site owner

As a site owner, you are considered the Controller of your site-visitors’ data. This means that you are the one who is choosing what data to collect from your site-visitors and you decide how it will be handled.
Wix.com is a Processor for your site-visitors’ data. This means that Wix will only process your site-visitors’ data following your instructions and on your behalf. Wix.com will not process your site-visitors’ data for our own benefit. For more information about Wix’s obligations as a data processor for your customer data, see our Data Processing Agreement
Wix.com gives you tools to be LGPD compliant. However, there are multiple and essential steps you will need to take on your side. Compliance with the LGPD is the responsibility of each site owner. You are the one who is deciding what data will be collected and how it is handled.

Helping Your Wix Site Meet LGPD Requirements

Use the following information and recommendations to prepare your site for the LGPD:

Create a Privacy Policy

Transparency and communication with your site visitors are key elements of the LGPD. As part of the regulation, you must let your site visitors know how you collect, store and use their data - in a clear and transparent way. In addition, you must comply with your site-visitors' requests to receive a copy of their data that is processed on your site.

A privacy policy is a statement that discloses the ways in which your website gathers, uses, discloses and manages your site visitors' data. Wix cannot provide you with legal advice on how to write a privacy policy. However, we do recommend that you maintain a clear and comprehensive privacy policy for your website, in accordance with both the LGPD and local privacy regulations. Learn how to create a Privacy Policy.

For information on how Wix handles your site visitors' data, please review sections 4, 12, and 13 of Wix's Privacy Policy.

About Data Storage and Data Transfers

Wix can store your site visitors' data in a number of locations.

Your site visitors ́ personal information may be stored in data centers located in the United States of America, Ireland, South Korea, Taiwan and Israel. We may use other jurisdictions as necessary for the proper delivery of our services and/or as may be required by law. Wix is a global company that respects the laws of the jurisdictions it operates within.

The security of sensitive data is of extreme importance to Wix and we are 100% committed to data protection. See all the security certifications received by Wix.com.

About Cookies and Cookie Banners

The LGPD does not explicitly require that you get affirmative consent from site visitors before placing cookies (and similar technologies) on their device.

However, you are required to provide complete information about which cookies you are using (you can use your privacy policy to provide such information to your visitors) Learn more about which cookies are placed on your site-visitors' browsers.

You can use the Wix Privacy Center to add a cookie banner to your site. With a cookie banner, your visitors can give their consent to non-essential cookies to be placed on their device. Learn more about Privacy and Cookies.

Request Consent to Process Your Site Visitors’ Data

The LGPD establishes ways in which you can lawfully process your site visitors’ data. Requesting your site visitors’ consent is just one of the ways to lawfully process data. Sometimes consent will not be the best method for your business.

Learn more about the principal bases for processing data

Under the LGPD, you may process data:

With the consent of the data subject
To comply with a legal or regulatory obligation of the controller
To execute public policies provided in laws or regulations, or based on contracts, agreements, or similar instruments
To carry out studies by research entities that ensure, whenever possible, the anonymization of personal data
To execute a contract or preliminary procedures related to a contract of which the data subject is a party, at the request of the data subject
To exercise rights in judicial, administrative or arbitration procedures
To protect the life or physical safety of the data subject or a third party
To protect health, in a procedure carried out by health professionals or by health entities
To fulfill the legitimate interests of the controller or a third party
To protect credit (referring to a credit score)

Choose the best and most appropriate data processing method for your business. If you want to receive affirmative consent from your site visitors before processing their data, you can do so by:

To ensure regulatory compliance, we recommend reviewing details of the regulation, as well as seeking legal advice.

Use Wix Tools to Access and Delete Your Site Visitors' Data

In accordance with the LGPD, site visitors have the right to access their data or to be permanently deleted from your databases. Wix has developed two main tools to assist you in becoming LGPD compliant:

Need A Professional Website?
Contact Us Today!

I'm a paragraph. I'm connected