PRIVACY NOTICE TO CLIENTS
This Privacy Notice is intended for users of the website and online store of the São Paulo Aquarium and Cidade da Criança.
For the purposes of this Privacy Notice, website users are defined as “Clients.”
Through this Privacy Notice, Clients are informed:
- What personal data is processed by the São Paulo Aquarium and Cidade da Criança;
- For what purposes and how long personal data is processed by the São Paulo Aquarium and Cidade da Criança;
iii. With whom personal data may be shared;
- What are the Clients’ rights in relation to the processing of their personal data; and
- About the channel to be used by Clients to exercise their rights as personal data subjects.
Other policies, notifications, and information may be provided to Clients regarding the processing activities involving their personal data.
In general, the São Paulo Aquarium and Cidade da Criança are the controllers of personal data and make decisions regarding personal data processing according to this Privacy Notice.
– Client
Definitions– Data
Collection and Storage– Purpose and Duration of Processing
– Sharing of Personal
Data– Security and Location of Processing
– Rights of Personal
Data Subjects– Exercise of the Subject’s
Rights– Updates to the Privacy Notice
- Client definitions
For the purposes of this Privacy Notice, the following terms and expressions, when written in capital letters, shall have the meanings defined below: - a) CLIENT: an individual who accesses and/or registers his/her own profile or a commercial profile on the online stores of the São Paulo Aquarium or Cidade da Criança;
- Data Collection and Storage
The São Paulo Aquarium and Cidade da Criança may collect the following personal data from their Clients:
– Full name;
– RG (Identity Card);
– CPF (Individual Taxpayer Registration);
– CNPJ (Corporate Taxpayer Registration);
– Full address;
– Date of birth;
– Nationality;
– Landline and mobile phone numbers;
– Marital status;
– Number of children;
– Level of education;
– Email address;
– Technical information such as IP address, device identification, location data (based on your IP), cookie information when the Client accesses the website;
- Purpose and Duration of Processing
The São Paulo Aquarium and Cidade da Criança carry out Client data processing activities transparently and for lawful and specific purposes, as outlined below:
– Create and identify client profiles;
– Notify clients about their purchase order status;
– Organize client purchases made on the website;
– Facilitate information filling;
– Provide technical support when necessary;
– Identify exclusive promotions;
– Allow navigation on the Platform, including aggregated or non-aggregated analyses of Client behavior, problem identification, improvements on the Platform, feature personalization, and security monitoring;
– Manage relationships with Clients through communication via available means, direct marketing, advertising, and promotional actions;
– For marketing and advertising purposes regarding services from the São Paulo Aquarium and Cidade da Criança, including targeted advertising based on behavior profile, consumption, and/or location;
– To conduct satisfaction surveys or other types;
– To enable service provision offered by the São Paulo Aquarium and Cidade da Criança, registration completion, transaction facilitation, permission for contract execution;
– To respond to requests and contacts, receive complaints, investigate reports or respond to inquiries from Clients and other parties involved in operations;
– To establish contact between the São Paulo Aquarium and Cidade da Criança and Clients to ensure compliance with obligations;
– To provide assistance and ancillary services related to contracts established with Clients;
– For legal exercise of rights by the São Paulo Aquarium and Cidade da Criança, including in contracts and legal proceedings (judicial, administrative or arbitration), as well as for compliance with legal obligations;
– To carry out activities to prevent fraud and illegal activities, including measures to protect the São Paulo Aquarium and Cidade da Criança from Clients and/or third parties;and
– To protect credit.
São Paulo Aquarium and Cidade da Criança commit to maintaining personal data as necessary to fulfill the abovementioned purposes and to dispose of personal data whenever possible and as reasonably required, in compliance with national data protection legislation.
If the Client has questions about the retention and disposal practices of personal data by the São Paulo Aquarium and Cidade da Criança, they can contact the communication channel for personal data holders at the email address: lgpd@aquariodesaopaulo.com.br.
- Sharing of Personal Data
The São Paulo Aquarium and Cidade da Criança will not share your personal data with third parties.
If the third party in question is an official public body or entity, regulatory, police, or governmental authority, legitimately requesting information in the context of inspections, audits, legal proceedings, or procedures that constitute binding legal obligations for the São Paulo Aquarium and Cidade da Criança, or when reasonably necessary to protect the rights of the São Paulo Aquarium and Cidade da Criança, Clients, and/or third parties;
When the São Paulo Aquarium and Cidade da Criança have obtained the Client’s free, unequivocal, and express consent for data sharing.
- Security and Processing
The São Paulo Aquarium and Cidade da Criança are responsible for adopting and maintaining reasonable security measures, both technical and administrative, to prevent irregular or unlawful processing of Clients’ personal data, including unauthorized access, destruction, loss, alteration, or communication of data. All employees of the São Paulo Aquarium and Cidade da Criança are subject to confidentiality obligations. In addition, the São Paulo Aquarium and Cidade da Criança update and test their security systems in accordance with good practices to protect your personal data.
THE CLIENTS’ PERSONAL DATA PROCESSING ACTIVITIES MAY BE CARRIED OUT OUTSIDE THE NATIONAL TERRITORY. ALTHOUGH THESE COUNTRIES MAY HAVE DIFFERENT LEVELS OF DATA PROTECTION THAN BRAZIL, THE São Paulo Aquarium and Cidade da Criança WILL ADOPT SAFEGUARDS, INCLUDING CONTRACTUAL ONES, TO MAINTAIN CLIENTS’ RIGHTS, CONFIDENTIALITY, INTEGRITY, AND SECURITY OF INFORMATION.
- Rights of Personal Data Subjects
The following rights of the personal data subject may be exercised at any time, in accordance with the applicable legislation, by the Clients, upon request:
Access to personal data;
Correction of incomplete, inaccurate, or outdated personal data;
Anonymization, blocking, or deletion of unnecessary, excessive data or processed in non-compliance with LGPD provisions;
Portability of personal data to another service or product provider, subject to regulation by the national authority;
Deletion or anonymization of personal data processed based on consent unless the law allows for maintaining such data on another basis;
Information about public and private entities with which the São Paulo Aquarium and Cidade da Criança have shared your personal data;
Information about the possibility of not consenting to the processing of your personal data and about the consequences of such action; Revocation of your consent, when processing has been based on the consent of the subject.
- Exercise of the subject’s rights
The São Paulo Aquarium and Cidade da Criança will facilitate the exercise of the subjects’ rights whenever possible and according to the law. The São Paulo Aquarium and Cidade da Criança have a specific communication channel to manage communications with subjects and enable the exercise of rights. Clients can make any complaints, requests, or inquiries related to the processing of their personal data, including exercising their rights as indicated in this Privacy Notice and guaranteed by national legislation, via email at lgpd@aquariodesaopaulo.com.br or at the following address, attention to the company’s Data Protection Officer (DPO):
Rua Huet Bacelar, nº 612, Ipiranga, São Paulo – SP, 04275-000
When a Client contacts the São Paulo Aquarium and Cidade da Criança to exercise his/her subject rights, the São Paulo Aquarium and Cidade da Criança may collect information for identity verification purposes concerning the subject’s interest and security.
- Updates to the privacy notice
This Privacy Notice may be updated periodically. All changes must be considered to be immediately applicable and effective unless otherwise communicated by the São Paulo Aquarium and Cidade da Criança to the data subjects. The São Paulo Aquarium and Cidade da Criança will take reasonable measures to inform Clients about updates to the terms of the Privacy Notice.
