WHO WE ARE

GRANDTOUR (TV RUGONI TOUR OPERATOR) is the data controller on this site and values transparency regarding how personal data of its clients is handled. Our contact channel is grandtour@grandtour.tur.br.

OBJECTIVE

This Privacy Policy demonstrates our commitment to the security of information and the privacy of Personal Data subjects, as well as our commitment to providing clarity to subjects about how their data is handled in our online environment.

For this reason, we kindly ask you.

First of all, PLEASE READ THIS PRIVACY POLICY CAREFULLY, so that you are fully aware of how we handle your personal data.

This Privacy Policy presents clear, complete, and accurate information about the collection, use, storage, processing, and protection of the personal data of data subjects.

TERMS AND DEFINITIONS

USERS: natural persons who use the platform.

PRIVACY POLICY: Document that informs users how their data is handled.

CONTROLLER: Person, natural or legal, responsible for decisions regarding the processing of your personal data.

PERSONAL DATA: Any information or set of information related to an identified or identifiable person.

SENSITIVE PERSONAL DATA: Information related to racial or ethnic origin, religious belief, political opinion, union membership, or membership in a religious, philosophical, or political organization, data related to health or sexual life, genetic or biometric data, when linked to a natural person.

DATA PROTECTION OFFICER or DPO: Person who communicates between the Controller and the data subjects.

LGPD: General Data Protection Law (Law No. 13.709/2018).

DATA SUBJECT: You, user, natural person to whom the personal data that is the subject of processing refers.

DATA PROCESSING: Any operation performed with your personal data, such as collection, production, reproduction, classification, use, distribution, filing, elimination, modification, transfer, extraction, etc.

WHAT PERSONAL DATA WE COLLECT AND FOR WHAT PURPOSES

We collect your data:

- Through our website, at the time of your registration as a user, for the following purposes: (a) so that you can use the platform, make payments for our services, receive our communications and marketing information about our products, comply with legal or regulatory obligations, and enjoy our services during your trip in the most appropriate and comfortable way possible; (b) so that we can prepare general statistics that do not identify the user, communicate with you, and improve the experience during navigation on the site. We collect the following data: full name, date of birth, gender, ID, CPF, passport, home, work, and mobile phone numbers, home address, email, and credit card details. In addition to your data, data from third parties will also be collected, which will be the companions who will also enjoy our services.

- By phone, when our employees register you. In this case, the same data mentioned above will be collected for the same purposes.

Additional information may eventually be collected to validate certain contact procedures. The personal data collected will be strictly necessary, accurate, and complete for the purposes described in the sequence of this policy.

No additional personal data is required for us to return your contact or enable the provision of services, but if you provide them, you will accept the collection of this information freely and spontaneously.

The request for services is exclusively for individuals over 18 years old. If the request for services is made by individuals under 18 years old, the data will be immediately deleted. However, the use of services can be made by anyone, regardless of their age group.

We will not process data from criminal organizations, that advocate crimes or autocratic regimes, or that promote any type of discrimination against a human being.

The data subject is aware that the personal data provided will be collected, processed, and stored to enable achieving the purposes described herein and for us to contact you.

Some personal data may be processed to comply with legal and/or regulatory obligations, for the development of internal studies, to improve services and promotions, or for the regular exercise of rights in judicial, administrative, or arbitration processes.

Any change in purpose for the use of your personal data will be communicated by the site through updates to this Privacy Policy.

Finally, we inform you that the information collected and safeguarded will only be disclosed if the company is obliged to do so by law.

PERSONAL DATA OF CHILDREN AND ADOLESCENTS

The collection of data from children and adolescents, when it occurs, will be proportional and not excessive, limited to the minimum necessary to achieve the intended purpose, described in the sequence of this policy, and in compliance with their best interests.

We collect data from children and adolescents:

- Through the website: at the time of user registration, in case there is a minor companion, when full name, date of birth, ID, and CPF will be requested, for the purpose of providing tourism services and complying with legal or regulatory obligations.

- By phone, when our employees register you. In this case, the same data mentioned above will be collected for the same purpose.

Some personal data may be processed to comply with legal and/or regulatory obligations, or for the regular exercise of rights in judicial, administrative, or arbitration processes.

Any change in purpose for the use of your personal data will be communicated by the site through updates to this Privacy Policy.

When the collection refers exclusively to children, we highlight compliance with and adherence to current legislation through the request, on our website, for specific and highlighted consent to be given by the parents or legal guardian of the minor at the time of confirming the reservation.

WITH WHOM WE SHARE YOUR DATA

The data provided is shared with the following service providers:

(i) with those responsible for the maintenance, hosting of the site, and cloud data storage. In the event of international data transfer, this will only occur for storage purposes, in a country with a level of protection equal to or greater than that established by Brazilian legislation.

(ii) with information technology companies, for the management of our services.

(iii) with marketing partner companies, for communication and promotion purposes.

(iv) with transportation service providers, tour operators, tourist excursions, hotels, and other tourism service providers, for the identification of clients who will use the respective services.

(v) with payment service companies, for the purpose of carrying out financial transactions for payment.

The shared data will only be those strictly necessary for the listed purposes to be fulfilled.

STORAGE OF YOUR DATA

For users who register on our site, we store personal information throughout our commercial relationships.

The site may also maintain information in accordance with applicable legal obligations and regulations, as well as to meet the purposes described in this policy, for the exercise of our legitimate interest and for the regular exercise of rights, when applicable.

WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA

You can exercise your rights by sending a message detailing your request clearly via email to grandtour@grandtour.tur.br.

As provided in the LGPD, you have the right to:

(i) confirmation of the existence of processing of your data.

(ii) access to your data.

(iii) correction of data that is incomplete, inaccurate, or outdated.

(iv) request anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed personal data.

(v) data portability to another service or product provider, in accordance with regulations from the National Authority and observing trade and industrial secrets.

(vi) deletion of personal data that has been processed based on the consent of the data subject, except in legal cases that allow the maintenance of the data, such as those provided for in art. 16 of the LGPD.

(vii) information about which public and private entities the data has been shared with.

(viii) the possibility of denying consent when data processing is carried out requiring your consent, being informed of the consequences of the denial.

(ix) revocation of consent when processing is carried out based on the consent of the data subject. In this case, you may also request that the data be deleted.

(x) opposition to processing that is contrary to the LGPD, when it is not a case of consent.

After submitting your request, it will be evaluated and may be rejected with legal justification. Our company will make every effort to respond to the request as soon as possible and may reject requests that are unreasonable or not required by law, such as those that are impractical, that may require a disproportionate technical effort, or that may expose us to operational risks, such as fraud.

The email address used at the time of registration will be used for all communications between our company and the data subject. It is recommended that our company's standard email be added as a trusted sender to avoid being blocked by ANTI-SPAM.

COOKIE POLICY

Cookies are small units of data that can be stored on the user's computer or mobile device while browsing a website. They allow, among other things, the site to recognize the user's previous activity, making usage more efficient and pleasant by, for example, keeping track of user preference settings.

We collect cookies to verify who you are and improve your browsing experience. Cookies do not harm the user's computer and are usually automatically deleted after a certain period.

We use cookies to make users' experience easier, which allows us to identify that the user has returned to the platform, remember their login details, as well as conduct statistical analysis for remarketing.

Our site uses so-called necessary cookies and analytical cookies.

Necessary cookies are those used for the proper functioning of the site, enabling security, accessibility, and network management. They allow our site to store information that has already been entered by the user so that we can offer better and more customized functions. We use session cookies, which allow your browser to identify the user when accessing the platform again, speeding up their shopping experience.

We also use cookies that collect information about the user's browsing activities, including IP address and accessed page, data that is used for statistical purposes and metrics of the services offered. These records may be shared with third parties in case of investigations by our company due to illegal acts committed or in case of a court order.

Analytical cookies are used by us to improve your experience on our site and for marketing purposes. They collect information about the use of the site, allowing us to enhance the browsing experience, as well as conduct marketing, market analysis, and user profiling.

We use Google Analytics cookies to collect statistical data to improve user presentation and navigation. Google may complement aggregated data with demographic data and other information of interest, so that we can better understand our users. We also use Facebook cookies for market analysis, marketing, and user profiling.

HOW WE PROTECT YOUR DATA

Your data is stored in secure and reliable locations, whether in our own systems or those of service providers for management and cloud storage, marketing management, among others.

We have implemented security measures, both technical and administrative, so that only authorized persons can access your data, as well as to prevent unauthorized access and various treatments of the purposes that are informed to you in this document.

Access to sensitive data, if collected, is restricted to authorized employees.

CONTACT

You can access clear, complete, and precise information about the collection, use, storage, processing, and protection of your personal data. If you have any questions about this Policy, please contact the Data Protection Officer at grandtour@grandtour.tur.br

To request changes, removal, or a copy of your personal data, or to exercise any of your rights, simply send an email to grandtour@grandtour.tur.br, and we will respond within 15 days.

UPDATES

This Privacy Policy may be changed at any time to meet legislative changes, regulatory agency requirements, or operational needs.

When there is a change, you will be notified by a notification (pop-up) when accessing the site.

By continuing to access our services after the changes are made, you agree to be bound by the new version of the Policy.