DATA PROTECTION AND INFORMATION SECURITY

TERESA PEREZ declares that it complies with all Brazilian legislation on privacy, including the Federal Constitution, the Consumer Protection Code, the Civil Code, the Internet Civil Rights Framework (Federal Law No. 12,965/2014), its regulatory decree (Decree No. 8,771/2016), the General Data Protection Law (Law No. 13,709/2018) and other sectoral standards on the protection of privacy and personal data.

For the purposes of this action, “personal data” is considered to be any data related to an identified or identifiable natural person, including identification numbers, location data, logs, records or electronic identifiers transacted between the Parties under this Agreement.

The data provided by the PARTICIPANT through a previously completed form, such as name and email, will be collected and processed by the company based on the consent provided by the PARTICIPANT.

The data will be used exclusively for communication purposes between event participants. The user has the right to cancel the sharing of their personal data at any time by directly contacting the TERESA PEREZ Marketing department. The company undertakes to protect the user’s personal data and store it in accordance with the provisions of the General Data Protection Law.

These provisions are applicable to all procedures involving the processing of personal data, understood as operations related to the collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation or control of information, modification, communication, transfer, dissemination or extraction.

TERESA PEREZ undertakes to process the personal data to which it has access and only for this purpose and shall not perform any type of act involving the personal data transmitted through this Agreement without the prior and express authorization of the PARTICIPANT or in violation of the law.

TERESA PEREZ is not authorized to transfer and/or share other personal data to which it has had access by virtue of this Agreement, unless sharing is necessary for the fulfillment of the purpose of the Agreement.

In the event of a data leak incident that has been transferred by the PARTICIPANT to TERESA PEREZ, TERESA PEREZ must send a written communication to the PARTICIPANT, certifying receipt, within a maximum period of 24 (twenty-four) hours from the date of notification of the leak, containing, at least, the following information: (i) date and time of the incident; (ii) date and time of notification by TERESA PEREZ (iii) list of the types of data affected by the incident; (iv) list of data subjects affected by the leak; and (v) indication of measures that are being taken to repair the damage and prevent new incidents.