Privacy Policy and Personal Data Protection

At Reserva Paulista, we are dedicated to protect and care for the personal data provided and used in our platforms.

For you to enjoy the experience we provide, learn a little more about what we do for your safety:

You may have heard of the acronym LGPD, but you may not know what it means. So, before we continue, we need to clarify a few things so that we can have a smooth conversation.

LGPD is the acronym for Lei Geral de Proteção de Dados Pessoais (Brazilian General Law of Personal Data Protection), identified as Law No. 13,709/2018, which aims to protect your personal data, based on principles such as respect for privacy, by establishing conditions for the collection and processing of personal data.

Its importance is linked directly to the need to take care of personal information that is shared daily and can cause some kind of damage when improperly used.

For instance, you should know that when you buy a ticket on our website, the data you provide will be processed with the purpose of fulfilling our obligations in delivering the service and forwarding information of interest to you. Also, when you access our website, please be aware that we use cookies to measure and improve your experience with us.

Since we care about you and want to provide the best possible experience for our customers, employees and partners, we are mindful of how your data is handled.

For this reason, we have created this information sheet for you to feel more secure and aware of what we do, so that we can ensure the excellence we value for the proper functioning of our attractions.

Therefore, this document will describe the specificities and procedures that your data goes through when it is collected and submitted to our website, so that we can offer our services and provide a pleasant experience to everyone, since we value the importance of protecting the data of our customers, partners and collaborators at all levels. For this reason, please read it carefully.

DEFINITIONS

Below are the main definitions that will help you read this Privacy Policy and Personal Data Protection Statement:

Your data on our facilities:

We are happy to have you with us. When you register on our website and purchase tickets, you provide information and generate a user in this website that allows your identification in all our facilities, which are: the Zoo, Zoo Safari and Botanical Garden.

Why do we need your data?

Your data is necessary to us because from that we are able to offer you a personalized experience so that you can enjoy our services and our attractions. By providing your data, we are able to develop and improve new services, show you advertisements and promotions that may interest you if you wish to receive them, contact you, prevent fraud, ensure a better security in our ecosystem, protect your rights and ours, as well as comply with legal obligations and requirements requested by competent authorities.

In addition, your name, CPF, date of birth, cell phone number, ZIP code, e-mail, and credit card details are necessary for us to provide you with access to our services, link the tickets you have purchased, bill you, process payment, issue invoices, and use them internally by our commercial and financial department, respecting the legal basis for the execution of the contract throughout the entire process.

Your device data is collected and processed in order for us to collect information about user interaction with our platforms and to guide your navigation according to your interests, respecting the legal basis of legitimate interest.

What personal data do we collect and process?

RESERVA PAULISTA ADMINISTRADORA DE PARQUES S.A. receives or otherwise gathers the following information from the users who register on this platform (website):

How do we share your data?

Reserva Paulista does not sell or share data that can be used to identify you. Your personal information is not shared with third parties, with the exception of the cases in which it is necessary to forward it to our service providers, commercial partners, companies of the same group, competent authorities, among others, through a legitimate purpose and need. In performing such transfers, we always comply with legislation on both our part and on the part of those who receive your data so that we can ensure the safety and privacy to which you are entitled.

Your data may be shared with third parties in instances where such sharing is essential for us to perform the services you are requesting.

We will share your personal data with the other businesses in our group, such as the Zoo, Zoo Safari and Botanical Garden.

We will share your personal registration data with third parties who provide services to us, such as our IT technicians or the support team of our platform for purchases made by our customers.

We will share your personal payment information with the platform responsible for charging you for the tickets you purchase from us.

We will share your personal registration data and device details with judicial authorities or any other authorities to whom we are required by law to provide such information.

What are your rights?

As the owner of your personal data, you have rights regarding your personal data that are explicitly stated in the General Law of Personal Data Protection and, upon request, include: the possibility to confirm the handling of personal data; access to your personal data; the correction of personal data that are incomplete, inaccurate or out of date; the blocking, anonymization or deletion of data that are unnecessary, excessive or processed in violation of the law; the portability of data, upon express request, according to the regulations of the national authority, respecting commercial and industrial confidentiality; the deletion of personal data processed with your consent, as well as the withdrawal of consent and the possibility of not providing consent and what would be the negative consequences of such an act; and information on public and private entities with which we share data.

You can exercise the rights described above by sending an email to [email protected] / [email protected]

Please be aware that we may request some personal information from you in order to confirm your identity.

However, in the case of deletion, please be aware that it may be necessary to store some of the information that you have asked to be deleted. This is because, as you can imagine, some data is essential to comply with legal obligations. Please rest assured that when the legal storage period expires, we will proceed with the deletion of your personal data.

Help us take care of your privacy and protect your personal data:

In order for us to provide the best possible care for your privacy, in addition to our daily efforts, you, as the owner of your personal data, must also take care of your privacy and be attentive to the information you provide to third parties on a daily basis. Remember: your data is very important!

How do we store and protect your data?

The way we handle and protect your data is very important to us. Therefore, our system relies on technical and administrative practices to protect your data from unauthorized access, destruction attempts, alteration, loss or any other form of illicit treatment or not

consistent with the legal requirements and purposes for which your information is intended.

If you access another website or platform with third-party services, please be aware that our policy does not apply to such channels. Always be sure to read the privacy policy of the website you are browsing and accessing. We are not responsible for third-party content and mechanisms.

If you suspect the occurrence of any incident (loss, deletion or unwanted or unauthorized exposure) involving your data, we request that you contact us IMMEDIATELY at the following emails: [email protected] / [email protected], so that we can investigate the situation.

The use of our platforms by minors

Our services are available only to those who have the legal capacity to contract according to the prevailing regulations. Therefore, if you do not meet this requirement, you should not provide your personal information and data on our platforms.

Cookies

By using our platforms and services, the user is aware that we may use a behavior monitoring system through the use of “cookies”, “web beacons” and/or other similar monitoring technologies

The mechanism mentioned above consists of small data units that are stored on the hard disk of the user’s computer from the browser by websites that you visit. Their function is to allow a digital platform to store, for example, information about users’ visits, preferred language, their location and the recurrence of sessions, serving as mechanisms to aid the performance, functionality and efficiency of our platforms, as well as to enable a personalized user experience and provide information to website owners.

Such features do not contain specific personal information such as sensitive personal data or bank data.

Cookies can be disabled via the “Help” or “Cookie Management” section of your browser of choice.

Changes to the privacy policy

We would like to inform you that any changes in the way we collect and handle your data will be communicated through updates to our Privacy Policy and Personal Data Protection Statement or other usual means, such as email. In cases where your consent is essential, we will ask you to analyze it, and you will be free to accept it or not. In situations in which your consent is essential and you choose not to provide it, we inform you that our association may be compromised, which may result in the inability to provide our services.

Information about the handler

The HANDLER of the personal data for the purposes intended by this Privacy Policy and Personal Data Protection Statement is RESERVA PAULISTA ADMINISTRADORA DE PARQUES S.A., a private corporation, registered with the CNPJ under no. 42.768.967/0001-68, located at Miguel Estefano Avenue, 4241, Saúde, in the city of São Paulo/SP, CEP 04.301-002.

Do you have any questions or want to talk to us about your data?

It will be a pleasure to talk to you and understand how we can improve our communication!

You can reach us via email at: [email protected] / [email protected]

Date and duration of the term of validity

This Privacy and Personal Data Protection Statement was last updated on 11/11/2021 and remains valid indefinitely.