PRIVACY POLICY

1. MOTIVATION

The General Data Protection Law – LGPD (Law 13.709/2018) is the norm that provides for the processing of personal data in order to protect fundamental rights of freedom and privacy. According to this law, personal data is information related to an identified or identifiable natural person (article 5, I of the LGPD). Your personal data are valuable assets and must be preserved. With respect to your privacy and self-determination of information, you can find out here how your data is collected and how it can be used by VIVÁ RESORT.

2. DEFINITION

VIVÁ RESORT's Privacy and Personal Data Protection Policy aims to ratify its commitment to the privacy and confidentiality of its guests, employees, family members of employees and suppliers. It recognizes the importance of the rights now provided for in the Law, but highlights that all were already the subject of the VIVÁ RESORT administrative model, since, it is repeated to establish, privacy, security and protection of personal data is an old commitment of this Company to each and every holder whose personal data may have been handled either by physical means or processed through computer systems, websites or applications, employing the best means and efforts to provide adequate protection in all its operations by implementing consistent, robust and rigorous procedures through its code of conduct approved and revised frequently.

3. PRIOR CONSENT

This policy describes the processing of personal data by VIVÁ RESORT for the specific purpose of accommodation and its related activities inherent to the operation, encompasses the collection, processing and storage of personal data of its customers, employees, family members of employees and suppliers. By accepting and agreeing to this privacy policy, you declare and approve that VIVÁ RESORT can treat your personal data in accordance with the terms established herein and in the legislation of the kind. All Personal Data that you put under the responsibility of VIVÁ RESORT will only be used with your consent in a specific document, for the specific purpose and during the agreed period of time.

4. DATA COLLECTED

Basic personal data is collected when accessing the website and application, electronically or in person at the hotel, when the reservation is made or during the stay. This information is indispensable in achieving the purpose of the hotel, which is accommodation. It is possible to track IP addresses for system administration purposes, to report aggregated information, for site tracking and to prevent our servers from being invaded by malicious third parties. It is possible to collect sensitive data related to health in order to provide the best service and guarantee prompt medical attention in case of solitary accommodation, for example. As well as dietary restrictions, allergies, specific requests, predilections, dislikes and habits, exclusively to record preferences in your hotel history, however, it is the sole responsibility of the guest to provide information about their dietary and health needs for adequate care.

The data collected may be kept to meet the legitimate commercial purposes of the hotel, including with regard to advertising and marketing passed on to you in exclusive conditions of loyal customers, or even to comply with legislation and business regulations, always considering all the principles of goodwill. faith described in this Privacy Policy. VIVÁ RESORT reiterates that it does not collect or request any personal data that is not strictly necessary for the operation acquired or the legislation pertinent to the matter, always valuing excellence in the offer of its hotel services, aiming to provide an increasingly differentiated, efficient and personalized service, emphasizing that the Company uses technologies compatible with the market, respecting the reasonable state of the art and its constant updates to register and process the personal data under its responsibility.

5. PURPOSE OF COLLECTION

VIVÁ RESORT values excellence in the provision of its hotel services. To provide an increasingly efficient and personalized service. VIVÁ RESORT collects, stores and uses personal data of its guests regarding the characteristics, preferences and history of each guest. For example: name, RG, CPF, address, e-mail, IP, mac address, telephone number, credit card number, images and sounds, passports, personal data on past incidents at the hotel, in addition to dietary restrictions, allergies, specific requests, likes, predilections, dislikes, habits and sensitive data related to health in order to better serve and guarantee prompt medical care. In this regard, it is reiterated to establish that it is the sole responsibility of the guest to provide information about their dietary and health needs for adequate care. The collected data can be kept for a period of 12 months, respecting other legal requirements, to meet the legitimate commercial purposes of the hotel. You may exercise, in accordance with applicable law and this policy, your rights in relation to personal data collected during your stay, including the right to erasure, except for those necessary to meet legal, regulatory and judicial obligations.

6. PERSONAL DATA COLLECTED DURING CHECK-IN

During check-in, we will collect data such as: name, RG, CPF, postal address, electronic address (e-mail), credit card number, telephone number, passport. These data are mandatory for the accommodation and tax proofs. Also, we may collect additional information, if it is of interest to you regarding health, dietary needs or restrictions, etc., as stated above.

7. PERSONAL DATA COLLECTED FOR WI-FI ACCESS

To access the hotel's internet service, you must provide your email address during check-in or the mac address of your equipment. this information will be necessary to authenticate on the network, guaranteeing internet access. During use, it will be possible to track your internal IP address, provided through our server, either by your need or to adopt protective measures in case of suspicious activities.

8. ADVERTISING AND MARKETING

We will use your email address and unique telephone specifically to communicate with you during your stay, to offer or publicize promotional campaigns, as well as to carry out quality research with the intention of improving our services, if you have authorized these activities in your Term of Consent for the use of personal data with VIVÁ RESORT. Announcements can be made at regular or irregular intervals. You can unsubscribe from communications at any time via email marketing@vivaportodegalinhas.com.br or via the link in the messages themselves.

9. COOKIES

We use Cookies that we define here as small files transferred to your browser or mobile device, cell phone or tablet, which allow us to better understand how You interact with our website. They are useful for, for example, adapting the size of your cell phone or computer screen, saving some access preferences and offering you a more efficient service. There are advertising Cookies that are used to target content according to your profile and preferences, indicating the most relevant and interesting advertisements; performance ones that serve to collect information about traffic on our website and how users navigate; session ones, which expire after you close your browser, and persistent ones, which remain on your computer until you delete them, to provide you with a more personal and interactive experience on our website. Persistent cookies can be removed by following the instructions in your internet browser's help file. you can choose to limit, refuse or disable. It should be noted that the information collected does not particularly identify any user. We use this information to improve and monitor the activity on our website and the option to accept or not will be available when accessing the VIVÁ RESORT website.

10. DATA COLLECTED BY THIRD PARTIES

In order to meet the commercial demand produced by tourism agencies, commercial hotel platforms such as OTAs (Online Tourism Agency), Booking and Despegar for example, and others, VIVÁ RESORT receives personal data provided there for the acquisition of accommodation, since, they use their own means to collect data. In this case and in this sense, they have a legal obligation to obtain the respective consents for the transfer of data. VIVÁ RESORT relies on the content and scope of these Consents to adequately handle the personal data received. VIVÁ RESORT disclaims any liability arising from the eventual inadequacy of these Consents. In this context, VIVÁ RESORT's commitment to personal data obtained through third parties is limited, in principle, to providing the Holder with the greatest possible transparency regarding the way in which VIVÁ RESORT accesses, stores and uses their Personal Data. VIVÁ RESORT does not control, endorse or offer any guarantee about the processing of data by third parties and their privacy practices, in this sense, it also encourages a careful reading of the privacy policies of the company where you purchase your accommodation.

11. DATA ON CHILDREN AND ADOLESCENTS

VIVÁ RESORT collects, processes and stores data from children and adolescents with the consent of parents or guardians and strictly for the purpose of hosting the accommodation, considering the legal provisions and the consent of Parents or Guardians, in its own and specific term, in addition to the declarations of this privacy policy, doing so in your best interest at all times. Personal data of children and adolescents may be collected without consent when necessary to contact the parents or legal guardian or for their protection, used only once and without storage and under no circumstances will it be passed on to third parties. Absolute priority is ensured in the protection of data of children and adolescents, in addition to the primacy of receiving protection and help in any circumstances. At VIVÁ RESORT, the right to inviolability of the physical, mental and moral integrity of children and adolescents, including the preservation of their image, is everyone's duty, as well as preventing the occurrence of threats or violations of their rights. It is prohibited to sell alcoholic beverages to children or teenagers and lodging without being accompanied by a parent or guardian.

12. SAFETY AND PROTECTION

VIVÁ RESORT adopts the usual procedures and standards of physical, electronic and managerial security, including cryptography and passwords, in an effort to protect your personal data against unauthorized access and disclosure, as well as to prevent nuisance or unwanted communication (spam). However, it is important to point out, for the knowledge of our guests, that no company, including VIVÁ RESORT, can completely eliminate the security risks associated with the processing of personal data.

13. HOW DATA PROCESSING OCCURS

VIVÁ RESORT basically uses personal data for the specific and primary purpose of the contract, which is accommodation, as well as, and as a result of it, to offer other related products and services aimed at making the guest experience exclusive, in the present and in the future. .

14. SHARING AND TRANSFER OF PERSONAL DATA

VIVÁ RESORT, as a general rule, does not share personal data with third parties, except if previously authorized by specific consent, following legal or judicial determination. parts of its operations. In this case, such service providers may be located in Brazil or in other countries and may provide services such as data hosting, IT services, cloud computing, debt collection, fraud management, customer support and advertising and marketing activities. However, service providers are contractually obliged to adequately safeguard any personal data they receive from VIVÁ RESORT and are prohibited from using Personal Data for any purpose other than the performance of services under their responsibility in accordance with instructions given by VIVÁ RESORT. Further clarifying possible sharing of personal data, it is also necessary to inform that the following data can be shared in good faith, in the face of legal, judicial or administrative governmental determination: (1) respond to requests for information made by a regulatory body, police authority and other public authorities, including in cases relating to national security; (2) enforce and/or protect VIVÁ RESORT's property or rights, including to investigate fraud and help prevent security threats, including information security, or other criminal or malicious activities; or (3) protect the legitimate interests of others, including the personal safety of VIVÁ RESORT employees. VIVÁ RESORT may also share your Personal Data with: (1) credit assessment and fraud prevention agencies; (2) debt collection agencies (for outstanding debts to us); (3) and other third parties, including our business partners, in this case upon prior notice and after the respective consent. It should be noted that the Official Research Bodies indicated by the hotel legislation are provided, when legally required, with anonymized data, that is, data that do not identify their holders.

15. EXERCISE OF YOUR RIGHTS

VIVÁ RESORT respects the rights of the holder of personal data and enables its exercise in accordance with the General Data Protection Law (Law 13,709/2018) through appropriate channels on the Company's website. To exercise your rights as holder of personal data under the possible responsibility of VIVÁ RESORT, simply click on the link on the hotel's website, where a form will be available to complete your request. If you have any questions or concerns about this Privacy Policy, about our treatment practices, about a possible violation, breach of confidentiality or privacy, you should contact us at privacy@vivaprotodegalinhas.com. br. VIVÁ RESORT will promptly respond to your rights and requests, taking the necessary measures so that your issue is evaluated and resolved in the shortest possible time. Your request will generate a Protocol and, in possession of this, you can follow the progress of your request within the legal period of 15 days.

16. WHAT IS LGPD AND WHAT IS IT FOR?

LGPD number 13.709/2018 means: General Data Protection Law, which regulates the processing of personal data of natural persons, making companies use it correctly and for a specific purpose.Link of the law: http://www .planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm.

17. WHAT RIGHT DOES THE DATA HOLDER HAVE?

The data subject has full rights over their data, thus making it possible to request from the controller, at any time, the anonymization, blocking or deletion of the data as long as it is considered unnecessary or does not meet the purpose of the collection.

18. HOW DO I REQUEST THE DELETION OF MY DATA?

Every company processing personal data must have a channel so that data subjects can make deletion requests. To apply to our company, send an email to privacy@vivaportodegalinhas.com.br or fill out the form by clicking here. We will have a period of 15 days to complete the deletion. Remembering that by force of law there is information that can only be deleted after 5 years.