PRIVACY POLICY

WHO WE ARE

ROSANETUR is the data controller on this site and values transparency about how personal data of its clients is handled. Our contact channel is reizen@rosanetur.com.

OBJECTIVE

This Privacy Policy demonstrates our commitment to the security of information and the privacy of Personal Data holders, as well as our commitment to clarify to holders how their data is handled in our online environment.

For this reason, we kindly ask you.

First of all, PLEASE READ THIS PRIVACY POLICY CAREFULLY, so that you are fully aware of how we handle your personal data.

This Privacy Policy presents clear, complete, and accurate information about the collection, use, storage, processing, and protection of personal data of data holders.

TERMS AND DEFINITIONS

USERS: natural persons who use the platform.

PRIVACY POLICY: Document that informs users how their data is handled.

CONTROLLER: Person, natural or legal, responsible for decisions regarding the processing of your personal data.

PERSONAL DATA: Any information or set of information related to an identified or identifiable person.

SENSITIVE PERSONAL DATA: Information related to racial or ethnic origin, religious belief, political opinion, union membership or membership in a religious, philosophical, or political organization, data related to health or sexual life, genetic or biometric data, when linked to a natural person.

DATA PROTECTION OFFICER or DPO: Person who communicates between the Controller and the data holders.

LGPD: General Data Protection Law (Law No. 13.709/2018).

DATA HOLDER: You, user, natural person to whom the personal data subject to processing refers.

DATA PROCESSING: Any operation performed with your personal data, such as collection, production, reproduction, classification, use, distribution, filing, deletion, modification, transfer, extraction, etc.

WHAT PERSONAL DATA WE COLLECT AND FOR WHAT PURPOSES

We collect your data:

- Through our website, at the time of your registration as a user, for the following purposes: (a) so that you can use the platform, make payments for our services, receive our communications and marketing information about our products, comply with legal or regulatory obligations, and enjoy our services during your trip in the most suitable and comfortable way possible; (b) so that we can prepare general statistics that do not identify the user, communicate with you, and improve the experience while browsing the site. We collect the following data: full name, date of birth, gender, ID, CPF, passport, home, work, and mobile phone numbers, home address, email, and credit card data. In addition to your data, data from third parties will also be collected, which will be the companions who will also enjoy our services.

- By phone, when our employees register you. In this case, the same data mentioned above will be collected for the same purposes.

Additional information may eventually be collected to validate certain contact procedures. The personal data collected will be strictly necessary, accurate, and complete for the purposes described in the sequence of this policy.

No additional personal data is required for us to return your contact or enable the provision of services, but if you provide them, you will accept the collection of this information freely and spontaneously.

The request for services is intended exclusively for individuals over 18 years old. In the case of a service request made by individuals under 18 years old, the data will be immediately deleted. However, the use of services can be done by anyone, regardless of age.

We will not process data from criminal organizations, that promote crimes or autocratic regimes, or that promote any type of discrimination against a human being.

The holder is aware that the personal data provided will be collected, processed, and stored to enable achieving the purposes described here and for us to contact you.

Some personal data may be processed to comply with legal and/or regulatory obligations, for the development of internal studies, to improve services and promotions, or for the regular exercise of rights in judicial, administrative, or arbitral proceedings.

Any change in the purpose for using your personal data will be communicated through the site by means of updates to this Privacy Policy.

Finally, we inform you that the information collected and safeguarded will only be disclosed if the company is required to do so by law.

PERSONAL DATA OF CHILDREN AND ADOLESCENTS

The collection of data from children and adolescents, when it occurs, will be proportional and not excessive, limited to the minimum necessary to achieve the intended purpose, described in the sequence of this policy, and in compliance with their best interests.

We collect data from children and adolescents:

- Through the website: at the time of user registration, in case there is a minor companion, when full name, date of birth, ID, and CPF will be requested for the purpose of providing tourism services and complying with legal or regulatory obligations.

- By phone, when our employees register you. In this case, the same data mentioned above will be collected for the same purpose.

Some personal data may be processed to comply with legal and/or regulatory obligations, or for the regular exercise of rights in judicial, administrative, or arbitral proceedings.

Any change in the purpose for using your personal data will be communicated through the site by means of updates to this Privacy Policy.

When the collection refers exclusively to children, we highlight compliance with and adherence to current legislation through the request, on our website, for specific and highlighted consent that must be given by the parents or legal guardian of the minor at the time of confirming the reservation.

WITH WHOM WE SHARE YOUR DATA

The provided data is shared with the following service providers:

(i) with those responsible for maintaining, hosting the site, and storing data in the cloud. In the event of international data transfer, this will only occur for storage purposes, in a country with a level of protection equal to or greater than that established by Brazilian legislation.

(ii) with information technology companies, for managing our services.

(iii) with marketing partner companies, for communication and offering promotions.

(iv) with transportation service providers, tour operators, sightseeing tours, hotels, and other tourism service providers, for the purpose of identifying customers who will use the respective services.

(v) with payment processing companies, for the purpose of carrying out financial payment transactions.

The shared data will only be those strictly necessary for the listed purposes to be carried out.

STORAGE OF YOUR DATA

For users who register on our site, we store personal information throughout our business relationships.

The site may also retain information in accordance with applicable legal obligations and regulations, as well as to meet the purposes described in this policy, for the exercise of our legitimate interest and for the regular exercise of rights, when applicable.

WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA

You can exercise your rights by sending a message detailing your request clearly to the email reizen@rosanetur.com.

As provided in the LGPD, you have the right:

(i) to confirm the existence of processing of your data.

(ii) to access your data.

(iii) to correct data that is incomplete, inaccurate, or outdated.

(iv) to request anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed personal data.

(v) to data portability to another service or product provider, in accordance with regulations from the National Authority and observing trade and industrial secrets.

(vi) to the deletion of personal data that has been processed based on the holder's consent, except in legal cases that allow the maintenance of the data, as provided in art. 16 of the LGPD.

(vii) to information about which public and private entities the data was shared with.

(viii) to the possibility of denying consent when data processing is carried out requesting your consent, being informed of the consequences of the denial.

(ix) to revoke consent when processing is carried out based on the holder's consent. In this case, you may also request that the data be deleted.

(x) to oppose processing that is contrary to the LGPD, when it is not a case of consent.

After sending your request, it will be evaluated and may be rejected with legal justification. Our company will make every effort to respond to the request as soon as possible and may reject requests that are unreasonable or not required by law, such as impractical ones, that may require a disproportionate technical effort or that may expose us to operational risks, such as fraud.

The email address used at the time of registration will be used for all communications between our company and the holder. It is recommended that our company's standard email be added as a trusted sender to avoid being blocked by ANTI-SPAM.

COOKIE POLICY

Cookies are small units of data that can be stored on the user's computer or mobile device while browsing a website. They allow, among other things, the site to recognize the user's previous activity, making use more efficient and pleasant by, for example, keeping track of user preference settings.

We collect cookies to verify who you are and improve your browsing experience. Cookies do not harm the user's computer and are usually automatically deleted after a certain period.

We use cookies to make the user experience easier, which allows us to identify that the user has returned to the platform, remember their login details, as well as perform statistical analysis for remarketing.

Our site uses so-called necessary cookies and analytical cookies.

Necessary cookies are those used for the proper functioning of the site, enabling security, accessibility, and network management. They allow our site to store information that has already been entered by the user so that we can offer better and more customized functions. We use session cookies, which allow your browser to identify the user when accessing the platform again, speeding up their shopping experience.

We also use cookies that collect information about the user's browsing activities, which includes IP address and accessed page, data that is used for statistical purposes and metrics of the services offered. These records may be shared with third parties in case of investigations by our company due to illicit acts committed or in case of a court order.

Analytical cookies are used by us to improve your experience on our site and for marketing purposes. They collect information about the use of the site, allowing us to improve the browsing experience, as well as carry out marketing, market analysis, and user profiling.

We use Google Analytics cookies to collect statistical data to improve user presentation and navigation. Google may complement the aggregated data with demographic data and other information of interest, so that we can better understand our users. We also use Facebook cookies for market analysis, marketing, and user profiling.

HOW WE PROTECT YOUR DATA

Your data is stored in secure and reliable locations, whether in our own systems or in cloud management and storage service providers, marketing management, among others.

We have implemented security measures, technical and administrative, so that only authorized persons can access your data, as well as aiming to prevent unauthorized access and various treatments of the purposes that are informed to you in this document.

Access to sensitive data, if collected, is restricted to authorized employees.

CONTACT

You can access clear, complete, and accurate information about the collection, use, storage, processing, and protection of your personal data, and in case of any doubts about this Policy, contact the Data Protection Officer at the email reizen@rosanetur.com.

To request changes, removal, or a copy of your personal data, or even to exercise any of your rights, just send an email to reizen@rosanetur.com, and we will respond within 15 days.

UPDATES

This Privacy Policy may be changed at any time to meet legislative changes, regulatory agency requirements, or operational needs.

When there is a change, you will be notified by a notification (pop-up) when accessing the site.

By continuing to access our services after the changes made, you agree to be bound by the new version of the Policy.