MUANA TURISMO PRIVACY POLICY

MUANA TURISMO is committed to transparency, privacy, and the security of its customers' data throughout the entire process of interacting with our website, application, and physical locations. To help you better understand what information we collect and how we use, store, or delete it, we provide our Privacy Policy below.

Customers' registration data is not disclosed to third parties, except when necessary for delivery processes, billing, or participation in promotions requested by customers. Your personal data is essential to ensure that your order reaches you safely and within the established delivery timeframe.

To make our Privacy Policy easier to understand, here is a summary:

Data Controller: MUANA TURISMO

MUANA TURISMO's role in data processing: Predominantly Data Controller

Types of personal information collected: MUANA TURISMO collects information provided by the Customer when staying with us, and this data is stored in the hotel management system without external intervention.

What do we use your personal data for?

• Guest registration as required by the Brazilian Ministry of Tourism;

• To keep you informed about promotions;

• To provide information about decrees, new rules, and laws that affect the relationship between customers and the agency;

• To send communications about services and provide a better Customer experience, making MUANA TURISMO even more relevant in your daily life.

Your Rights

The Brazilian General Data Protection Law (LGPD) gives Customers the right to request information from MUANA TURISMO regarding stored personal data at any time by submitting a formal request.

For this Privacy Policy to be fully understood, it is important to clarify some key concepts:

Customer – Any individual who purchases products or services in person or makes a reservation electronically, including through booking websites, WhatsApp, telephone, or any other accommodation booking method.

Personal Data – Any information related to an individual that identifies them or that, when combined with other stored information, can identify an individual. It also includes any information through which it is possible to identify or contact a person.

Processing of Personal Data – Personal data processing includes the collection, production, receipt, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, evaluation or control of information, communication, transfer, dissemination, or extraction of data relating to individuals.

Data Subject – Any individual whose personal data is processed by MUANA TURISMO.

Purpose – What we intend to achieve through the processing of personal data.

Necessity – Personal data processing must be limited to the minimum amount necessary to achieve the intended purpose. In other words, it must be relevant, proportionate, and not excessive.

Consent – Clear and objective authorization given by the data subject for their personal data to be processed for a previously specified purpose. After providing consent, you may revoke it at any time. Revocation does not invalidate processing carried out before consent was withdrawn.

Who Does This Privacy Policy Apply To?

This policy applies to all MUANA TURISMO customers, including those interacting through our website, application, and physical locations, whose personal data is processed by us in any way.

What Types of Personal Information Do We Collect and Use?

MUANA TURISMO collects and stores the following types of information:

Information you provide to us: MUANA TURISMO collects Customer information in several ways, including when you provide your name to request or confirm a reservation. Information that may be requested includes your full name, email address, telephone number, and credit card details.

Information automatically collected by MUANA TURISMO: We collect and store certain information whenever a Customer interacts with us. For example, we use cookies and obtain information when your browser accesses our website or when you click on advertisements, partner emails, and other content provided by us on other websites.

Information collected through mobile devices: When a Customer downloads or uses our application, we may receive information about their location and mobile device. We may use this information to provide personalized content, such as advertisements and search results. Most mobile devices allow Customers to disable location services.

Information Collected from Other Sources

We may collect information from:

• Public sources, such as demographic data;

• Credit agencies or institutions, such as credit or check reports;

• Data providers, such as demographic information related to online advertising and Customer interests.

Why Do We Request Your Personal Data?

Personal data is necessary to:

• Deliver purchased products or contracted services;

• Optimize your interaction with us;

• Ensure the security of our website, application, and the data we process;

• Inform Customers about offers and promote our services;

• Comply with legal obligations;

• Fulfill administrative and management purposes.

Providing this information allows us to:

• Deliver purchased products or services;

• Process exchanges or returns of products within the timeframe established by the Brazilian Consumer Protection Code (CDC);

• Send updates about order status and service communications;

• Provide services appropriate to the Customer's needs;

• Improve Customers' purchasing experience with MUANA TURISMO;

• Conduct analyses and market research;

• Keep Customers informed about the products and services we offer;

• Carry out targeted online advertising;

• Prevent, detect, and investigate activities that violate our Code of Conduct or that are prohibited or illegal;

• Improve our website, products, and services.

MUANA TURISMO uses legal bases that may vary depending on the purpose for which personal data is collected and processed. The storage period may also vary according to the legal basis applicable to each situation and its purpose.

Marketing Services

Marketing services are provided through free communications regarding offers, services, and products directed to Customers based on their profile on the website and previous purchases.

These communications may include email, SMS, and WhatsApp.

Customers may unsubscribe from these communications at any time by notifying us.

Who Do We Share Your Data With?

Information collected will only be shared when necessary:

1. To properly provide services related to our activities through partner companies;

2. For protection in the event of a dispute;

3. In compliance with a court order or request from a competent authority;

4. With companies providing technological and operational infrastructure, such as payment processing companies and information storage service providers.

International Data Transfers

Because the internet is a global environment, certain services offered by MUANA TURISMO may require your data to be transferred to other countries.

In these cases, data is processed in accordance with the Brazilian General Data Protection Law (LGPD) and other applicable data protection legislation.

We adopt security measures in accordance with our policies and use standard contractual clauses in agreements with suppliers and service providers.

By browsing our website or application, purchasing from our physical locations, and/or communicating with us, you agree to the processing of your information, including international data transfers when necessary.

We take measures to ensure that all information collected is handled securely, in accordance with data protection standards and this Privacy Policy.

How Long Do We Store Personal Information?

We store Customer information in accordance with the limitation periods established under Brazilian law.

What Are the Rights of Data Subjects?

Under the LGPD, data subjects have the right to obtain information regarding their personal data from MUANA TURISMO at any time by submitting a formal request.

MUANA TURISMO will have 15 days to respond to requests from data subjects.

Requests will be analyzed in accordance with applicable legislation and, for legal reasons, some requests may not be fulfilled.

Under the LGPD, data subjects may exercise the following rights:

I – Confirmation of whether data processing is taking place;

II – Access to personal data;

**