PRIVACY POLICY

WHO WE ARE

RIO KJ TOUR is the data controller for this website and values transparency over how its clients' personal data is handled. Our contact channel is kjriotour@hotmail.com.

PURPOSE

This Privacy Policy demonstrates our commitment to information security and the privacy of the owners of Personal Data, as well as our commitment to providing clarity to owners about how their data is processed in our online environment.

For this reason, we kindly ask you.

First of all, PLEASE READ THIS PRIVACY POLICY CAREFULLY so that you are fully aware of how we treat your personal data.

This Privacy Policy provides clear, complete and accurate information on the collection, use, storage, processing and protection of data subjects' personal data.

TERMS AND DEFINITIONS

USERS: natural persons who use the platform.

PRIVACY POLICY: Document that informs users how their data is processed.

CONTROLLER: Person, natural or legal, who is responsible for decisions regarding the processing of your personal data.

PERSONAL DATA: Any information or set of information relating to an identified or identifiable person.

SENSITIVE PERSONAL DATA: Information relating to racial or ethnic origin, religious conviction, political opinion, membership of a trade union or religious, philosophical or political organisation, data relating to health or sex life, genetic or biometric data, when linked to a natural person.

DATA PROCESSOR or DPO: Person who liaises between the Controller and the data subjects.

LGPD: General Data Protection Law (Law No. 13,709/2018).

DATA SUBJECT: You, the user, the natural person to whom the personal data being processed relates.

DATA PROCESSING: Any operation carried out with your personal data, such as collection, production, reproduction, classification, use, distribution, archiving, deletion, modification, transfer, extraction, etc.

WHAT PERSONAL DATA WE COLLECT AND FOR WHAT PURPOSES

We collect your data:

- Through our website, when you register as a user, for the following purposes: (a) so that you can use the platform, make payment for our services, receive our communications and marketing newsletters about our products, fulfil a legal or regulatory obligation, and enjoy our services during your trip, in the most appropriate and comfortable way possible; (b) so that we can draw up general statistics that do not identify the user, communicate with you, as well as improve the experience while browsing the website. We collect the following data: full name, date of birth, gender, ID, CPF, passport, home, work and mobile telephone numbers, home address, e-mail address and credit card details. In addition to your data, we also collect data from third parties, who will be the companions who will also be using our services.

- By telephone, when our employees register you. In this case, the same data is collected as above, for the same purposes.

Additional information may be collected to validate certain contact procedures. The personal data collected will be strictly necessary, accurate and complete for the purposes described in the following section of this policy.

No additional personal data is required for us to be able to contact you again or to provide services, but if you provide it, you agree to the collection of this information freely and spontaneously.

The request for services is intended exclusively for people over the age of 18. If you request services from someone under the age of 18, your data will be deleted immediately. However, anyone can use the services, regardless of their age.

We will not process data from criminal organisations, which advocate crimes or autocratic regimes, or which promote any kind of discrimination against human beings.

The data subject is aware that the personal data provided will be collected, processed and stored in order to fulfil the purposes described here and to enable us to contact you.

Some personal data may be processed for the fulfilment of legal and/or regulatory obligations, for the development of internal studies, to improve services and promotions, or for the regular exercise of rights in judicial, administrative or arbitration proceedings.

Any change in the purpose for which your personal data is used will be communicated by the website by means of updates to this Privacy Policy.

Finally, we inform you that the information collected and safeguarded will only be disclosed if the company is obliged to do so by law.

PERSONAL DATA OF CHILDREN AND ADOLESCENTS

The collection of data from children and adolescents, when it occurs, will be proportional and not excessive, limited to the minimum necessary for the realisation of the intended purpose, described in the sequence of this policy, and in their best interests.

We collect data from children and adolescents:

- Through the website: at the time of user registration, if there is a minor accompanying the user, when they will be asked for their full name, date of birth, ID and CPF, for the purpose of providing tourism services and complying with legal or regulatory obligations.

- By telephone, when our employees complete your registration for you. In this case, the same data mentioned above is collected for the same purpose.

Some personal data may be processed for the fulfilment of legal and/or regulatory obligations, or for the regular exercise of rights in judicial, administrative or arbitration proceedings.

Any change of purpose for the use of your personal data will be communicated by the website by means of updates to this Privacy Policy.

When the collection refers exclusively to children, we emphasise compliance with current legislation by requesting, on our website, the specific and highlighted consent that must be given by the parents or legal guardian of the minor when confirming the booking.

WHO WE SHARE YOUR DATA WITH

The data you provide is shared with the following service providers:

(i) with those responsible for maintenance, website hosting and cloud data storage. In the event of international data transfer, this will only occur for storage purposes, in a country with a level of protection equal to or greater than that established by Brazilian law.

(ii) with information technology companies to manage our services.

(iii) with marketing partner companies, for the purposes of communication and offering promotions.

(iv) with transfer service providers, tour operators, sightseeing tours, hotels and other tourism service providers, for the purposes of identifying clients who will be using the respective services.

(v) with means of payment companies, for the purposes of making financial payment transactions.

The data shared will only be that which is strictly necessary for the purposes listed to be realised

STORAGE OF YOUR DATA

For users who register on our site, we store personal information throughout our business relations.

The site may also keep information in accordance with legal obligations and applicable regulations, as well as to fulfil the purposes described in this policy, for the exercise of our company's legitimate interest and for the regular exercise of rights, where applicable.

WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

You can exercise your rights by sending a message clearly detailing your request to kjriotour@hotmail.com.

As provided for in the LGPD, you have the right to:

(i) confirmation that your data is being processed.

(ii) access to your data.

(iii) to correct data that is incomplete, inaccurate or out of date.

(iv) to request anonymisation, blocking or deletion of personal data that is unnecessary, excessive or processed in breach of the LGPD or other laws.

(v) the portability of data to another service or product provider, in accordance with the regulations of the National Authority and observing commercial and industrial secrets.

(vi) the deletion of personal data that has been processed on the basis of the data subject's consent, except in legal cases that allow the data to be kept, such as those provided for in art. 16 of the LGPD.

(vii) information on which public and private organisations the data has been shared with.

(viii) the possibility of withholding consent when data processing is carried out with your consent, and being informed of the consequences of withholding consent.

(ix) the revocation of consent, when processing is carried out based on the assumption of the data subject's consent. In this case, you can also ask for the data to be deleted.

(x) to object to processing that is contrary to the LGPD, when consent is not involved

After submitting your request, it will be evaluated and may be rejected on legal grounds. Our company will make every effort to fulfil the request in the shortest possible time and may reject requests that are unreasonable or not required by law, such as those that are impractical, may require disproportionate technical effort or may expose us to operational risks such as fraud.

The e-mail address used at the time of registration will be used for all communications between our company and the owner. It is recommended that our company's default e-mail address be added as a trusted sender to avoid being blocked by ANTI-SPAM.

COOKIES POLICY

Cookies are small units of data that can be stored on a user's computer or mobile device while they are browsing a website. Among other things, they allow the website to recognise the user's previous activity, making use more efficient and enjoyable by, for example, keeping track of the user's preference settings.

We collect cookies to check who you are and improve your browsing experience. Cookies do not harm the user's computer and are usually deleted automatically after a certain period.

We use cookies to make the user experience easier, which enables us to identify that the user has returned to the platform, remember their login details, as well as perform statistical analysis for remarketing.

Our website uses so-called necessary cookies and analytical cookies.

Necessary cookies are those used for the proper functioning of the website, enabling security, accessibility and network management. They allow our website to store information that has already been entered by the user so that we can offer better and more customised functions. We use session cookies, which allow your browser to identify you when you access the platform again, speeding up your shopping experience.

We also use cookies that collect information about the user's browsing activities, including the IP address and the page accessed, data that is used for statistical purposes and to measure the services offered. These records may be shared with third parties in the event of investigations by our company into unlawful acts committed or in the event of a court order.

Analytical cookies are used by us to improve your experience on our website and for marketing purposes. They collect information about the use of the site, allowing us to improve the browsing experience, as well as to carry out marketing, market analysis and user profiling.

We use Google Analytics cookies in order to collect statistical data to improve user presentation and navigation. Google may supplement the aggregated data with demographic data and other information of interest so that we can better understand our users. We also use Facebook cookies for market analysis, marketing and user profiling.

HOW WE PROTECT YOUR DATA

Your data is stored in secure and reliable locations, either in our own systems or those of cloud storage and management service providers, marketing management, among others.

We have implemented security, technical and administrative measures to ensure that only authorised persons can access your data, as well as to prevent unauthorised access and processing other than for the purposes stated in this document.

Access to sensitive data, if collected, is restricted to authorised employees.

CONTACT

You can access clear, complete and accurate information on the collection, use, storage, processing and protection of your personal data and, if you have any questions about this Policy, you should contact the Data Controller at kjriotour@hotmail.com

To request a change, removal or copy of your personal data, or to exercise any of your rights, simply send an e-mail to kjriotour@hotmail.com and we will get back to you within 15 days.

UPDATES

This Privacy Policy may be amended at any time in order to meet legislative changes, regulatory requirements or operational needs.

When changes are made, you will be notified by pop-up notification when you access the site.

By continuing to access our services after changes have been made, you agree to be bound by the new version of the Policy.