PRIVACY POLICY

WHO WE ARE

MIRACEU TURISMO is the data controller on this site and values transparency regarding how the personal data of its clients is handled. Our contact channel is contato@miraceu.com.br.

OBJECTIVE

This Privacy Policy demonstrates our commitment to the security of information and the privacy of Personal Data subjects, as well as our commitment to providing clarity to the subjects regarding how their data is handled in our online environment.

For this reason, we kindly ask you.

First of all, PLEASE READ THIS PRIVACY POLICY CAREFULLY, so that you are fully aware of how we handle your personal data.

This Privacy Policy presents clear, complete, and accurate information about the collection, use, storage, processing, and protection of the personal data of data subjects.

TERMS AND DEFINITIONS

USERS: natural persons who use the platform.

PRIVACY POLICY: Document that informs users how their data is handled.

CONTROLLER: Individual or legal entity responsible for decisions regarding the processing of your personal data.

PERSONAL DATA: Any information or set of information related to an identified or identifiable person.

SENSITIVE PERSONAL DATA: Information related to racial or ethnic origin, religious belief, political opinion, affiliation to a union or religious, philosophical, or political organization, data related to health or sexual life, genetic or biometric data, when linked to a natural person.

DATA PROTECTION OFFICER or DPO: Person who communicates between the Controller and the data subjects.

LGPD: General Data Protection Law (Law No. 13.709/2018).

DATA SUBJECT: You, user, natural person to whom the personal data being processed refers.

DATA PROCESSING: Any operation performed with your personal data, such as collection, production, reproduction, classification, use, distribution, filing, deletion, modification, transfer, extraction, etc.

WHAT PERSONAL DATA WE COLLECT AND FOR WHAT PURPOSES

We collect your data:

- Through our website, at the time of your registration as a user, for the following purposes: (a) so that you can use the platform, make payments for our services, receive our communications and marketing information about our products, comply with legal or regulatory obligations, and enjoy our services during your trip in the most appropriate and comfortable way possible; (b) so that we can prepare general statistics that do not identify the user, communicate with you, and improve the experience while browsing the site. We collect the following data: full name, date of birth, gender, ID number, CPF, passport, home, work, and mobile phone numbers, home address, email, and credit card details. In addition to your data, we also collect data from third parties, who will be the companions who will also enjoy our services.

- By phone, when our employees register you. In this case, the same data mentioned above is collected for the same purposes.

Additional information may eventually be collected to validate certain contact procedures. The personal data collected will be strictly necessary, accurate, and complete for the purposes described in the following sections of this policy.

No additional personal data is required for us to return your contact or enable the provision of services, but if you provide them, you will accept the collection of this information freely and voluntarily.

The request for services is intended exclusively for individuals over 18 years old. If the request for services is made by individuals under 18 years old, the data will be immediately deleted. However, the use of services can be made by anyone, regardless of their age group.

We will not process data from criminal organizations, that advocate for crimes or autocratic regimes, or that promote any type of discrimination against a human being.

The data subject is aware that the personal data provided will be collected, processed, and stored to enable the achievement of the purposes described herein and for us to contact you.

Some personal data may be processed to comply with legal and/or regulatory obligations, for the development of internal studies, to improve services and promotions, or for the regular exercise of rights in judicial, administrative, or arbitration proceedings.

Any change in the purpose for using your personal data will be communicated by the website through updates to this Privacy Policy.

Finally, we inform you that the information collected and safeguarded will only be disclosed if the company is required to do so by law.

PERSONAL DATA OF CHILDREN AND ADOLESCENTS

The collection of data from children and adolescents, when it occurs, will be proportional and not excessive, limited to the minimum necessary to achieve the intended purpose, described in the following sections of this policy, and in compliance with their best interests.

We collect data from children and adolescents:

- Through the website: at the time of user registration, in the case of a minor companion, when full name, date of birth, ID number, and CPF will be requested, for the purpose of providing tourism services and complying with legal or regulatory obligations.

- By phone, when our employees register you. In this case, the same data mentioned above is collected for the same purpose.

Some personal data may be processed to comply with legal and/or regulatory obligations, or for the regular exercise of rights in judicial, administrative, or arbitration proceedings.

Any change in the purpose for using your personal data will be communicated by the website through updates to this Privacy Policy.

When the collection refers exclusively to children, we highlight compliance with and adherence to current legislation through the request, on our website, for specific and prominent consent that must be given by the parents or legal guardians of the minor at the time of reservation confirmation.

WITH WHOM WE SHARE YOUR DATA

The provided data is shared with the following service providers:

(i) with those responsible for the maintenance, hosting of the website, and cloud data storage. In the event of international data transfer, this will only occur for storage purposes, in a country with a level of protection equal to or greater than that established by Brazilian legislation.

(ii) with information technology companies, for the management of our services.

(iii) with partner marketing companies, for communication and promotional offers.

(iv) with transfer service providers, tour operators, sightseeing tours, hotels, and other tourism service providers, for the purpose of identifying clients who will use the respective services.

(v) with payment processing companies, for the purpose of carrying out financial payment transactions.

The shared data will only be those strictly necessary for the listed purposes to be fulfilled.

STORAGE OF YOUR DATA

For users who register on our website, we store personal information throughout our business relationships.

The website may also retain information in accordance with applicable legal obligations and regulations, as well as to meet the purposes described in this policy, for the exercise of our legitimate interest and for the regular exercise of rights, when applicable.

WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA

You can exercise your rights by sending a message detailing your request clearly to the email contato@miraceu.com.br.

As provided in the LGPD, you have the right to:

(i) confirmation of the existence of processing of your data.

(ii) access to your data.

(iii) correction of data that is incomplete, inaccurate, or outdated.

(iv) request anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed personal data.

(v) data portability to another service or product provider, in accordance with regulations from the National Authority and respecting trade and industrial secrets.

(vi) deletion of personal data that has been processed based on the consent of the data subject, except in legal cases that allow the maintenance of data, such as those provided in art. 16 of the LGPD.

(vii) information about which public and private entities your data has been shared with.

(viii) the possibility of denying consent when data processing is carried out requiring your consent, being informed of the consequences of the denial.

(ix) revocation of consent when processing is based on the consent of the data subject. In this case, you may also request that the data be deleted.

(x) opposition to processing that is contrary to the LGPD when it is not a case of consent.

After submitting your request, it will be evaluated and may be rejected with legal justification. Our company will make every effort to respond to the request as soon as possible and may reject requests that are unreasonable or not required by law, such as impractical requests that may require disproportionate technical effort or expose us to operational risks, such as fraud.

The email address used at the time of registration will be used for all communications between our company and the data subject. It is advisable to add our company's standard email as a trusted sender to avoid being blocked by ANTI-SPAM.

COOKIE POLICY

Cookies are small units of data that can be stored on the user's computer or mobile device while browsing a website. They allow, among other things, the website to recognize the user's previous activity, making usage more efficient and pleasant by, for example, keeping track of user preference settings.

We collect cookies to verify who you are and improve your browsing experience. Cookies do not harm the user's computer and are usually automatically deleted after a certain period.

We use cookies to make the user experience easier, which allows us to identify that the user has returned to the platform, remember their login details, as well as perform statistical analysis for remarketing.

Our website uses so-called necessary cookies and analytical cookies.

Necessary cookies are those used for the proper functioning of the site, enabling security, accessibility, and network management. They allow our site to store information that has already been entered by the user so that we can offer better and more customized functions. We use session cookies, which allow your browser to identify the user when accessing the platform again, streamlining their shopping experience.

We also use cookies that collect information about the user's browsing activities, including IP address and accessed page, data that is used for statistical purposes and metrics of the services offered. These records may be shared with third parties in the event of investigations by our company due to illegal acts committed or in the event of a court order.

Analytical cookies are used by us to improve your experience on our site and for marketing purposes. They collect information about the use of the site, allowing us to enhance the browsing experience, as well as carry out marketing, market analysis, and user profiling.

We use Google Analytics cookies to collect statistical data to improve user presentation and navigation. Google may complement aggregated data with demographic data and other information of interest, so that we can better understand our users. We also use Facebook cookies for market analysis, marketing, and user profiling.

HOW WE PROTECT YOUR DATA

Your data is stored in secure and reliable locations, whether in our own systems or those of service providers for management and cloud storage, marketing management, among others.

We have implemented security measures, both technical and administrative, so that only authorized persons can access your data, as well as to prevent unauthorized access and various treatments of the purposes that are informed to you in this document.

Access to sensitive data, if collected, is restricted to authorized employees.

CONTACT

You can access clear, complete, and accurate information about the collection, use, storage, processing, and protection of your personal data. If you have any questions about this Policy, please contact the Data Protection Officer at contato@miraceu.com.br

To request changes, removal, or a copy of your personal data, or to exercise any of your rights, simply send an email to contato@miraceu.com.br, and we will respond within 15 days.

UPDATES

This Privacy Policy may be changed at any time to meet legislative changes, regulatory agency requirements, or operational needs.

When there is a change, you will be notified by a notification (pop-up) when accessing the site.

By continuing to access our services after the changes are made, you agree to be bound by the new version of the Policy.