Privacy Policies

At Pousada Aquarela, privacy and security are priorities and we are committed to transparency in the processing of personal data of our users/clients. Therefore, this Privacy Policy establishes how the collection, use and transfer of information from customers or other people who access or use our website is carried out. When using our services, you understand that we will collect and use your personal information in the ways described in this Policy, under Data Protection standards (LGPD, Federal Law 13,709/2018), the consumerist provisions of Federal Law 8078/1990 and other applicable standards of the Brazilian legal system. Thus, Adrian Cesar Toledo - Pousada Aquarela, hereinafter simply known as “Pousada Aquarela”, registered with the CNPJ under nº 40.748.785-0001/08, in the role of Data Controller, is obliged to comply with the provisions of this Privacy Policy.

1. What data do we collect about you and for what purpose? Our website collects and uses some of your personal data in order to enable the provision of services and improve the user experience.1.1. Personal data provided by the reservation holder• Name and surname, date of birth, CPF, address, email, telephone are used to make reservations, maintain communication with guests and issue the NFSe.• Payment method or card data credit are necessary to guarantee payment for the service,

2. What are your rights? Pousada Aquarela assures its users/clients of their rights as holders set out in article 18 of the General Data Protection Law. This way, you can, free of charge and at any time:• Confirm the existence of data processing, in a simplified way or in a clear and complete format.• Access your data, being able to request it in a legible copy in printed form or by electronic, secure and suitable means.• Correct your data, when requesting its editing, correction or updating.• Limit your data when unnecessary, excessive or treated in non-compliance with legislation through anonymization, blocking or deletion.• Request portability of your data, through a report of registration data that Pousada Aquarela processes about you.• Delete your data processed based on your consent, except in the cases provided for by law.• Revoke your consent, deauthorizing the processing of your data. • Find out about the possibility of not providing your consent and the consequences of refusal.

3. How can you exercise your rights as a holder?To exercise your rights as a holder, you must contact Pousada Aquarela through the following available means:• Cell phone 55(75)9 9830-9711 • E-mail reservasaquarela@ gmail.comIn order to guarantee your correct identification as the holder of the personal data subject to the request, we may request documents or other evidence that can prove your identity. In this case, you will be informed in advance.

4. How and for how long will your data be stored? Your personal data collected by Pousada Aquarela will be used and stored for as long as necessary to provide the service or for the purposes listed in this Privacy Policy to be achieved, considering the rights of data holders and controllers. In general, your data will be kept as long as the contractual relationship between you and Pousada Aquarela continues. After the period of storage of personal data, they will be deleted from our databases or anonymized, except in the cases legally provided for in article 16 general data protection law, namely:I – compliance with legal or regulatory obligations by the controller;II – study by a research body, ensuring, whenever possible, the anonymization of personal data;III – transfer to a third party, provided that the data processing requirements set out in this Law are respected; orIV – exclusive use by the controller, access by third parties is prohibited, and as long as the data is anonymized. That is, personal information about you that is essential for complying with legal, judicial and administrative determinations and/or for exercising the right to defense in judicial and administrative proceedings will be maintained, despite the deletion of other data. The storage of data collected by Pousada Aquarela reflects our commitment to the security and privacy of your data. We employ technical protection measures and solutions capable of guaranteeing the confidentiality, integrity and inviolability of your data. In addition, we also have security measures appropriate to the risks and control access to stored information.

5. What do we do to keep your data safe?To keep your personal information safe, we use physical, electronic and managerial tools aimed at protecting your privacy.We apply these tools taking into account the nature of the personal data collected, the context and the purpose of the processing and the risks that possible violations would generate for the rights and freedoms of the holder of the data collected and processed. Among the measures we adopt, we highlight the following:• Only authorized people have access to your personal data• Access to your personal data is only done after a commitment to confidentiality• Your personal data is stored in a safe and suitable environment. Pousada Aquarela is committed to adopting the best postures to avoid security incidents. However, it is necessary to highlight that no virtual page is entirely safe and risk-free. It is possible that, despite all our security protocols, problems that are solely the fault of third parties may occur, such as cyber attacks by hackers, or also as a result of the negligence or recklessness of the user/client themselves. In the event of security incidents that may generate relevant risk or damage to you or any of our users/clients, we will communicate to those affected and the National Data Protection Authority about what happened, in accordance with the provisions of the General Data Protection Law.

6. Who can your data be shared with? In order to preserve your privacy, Pousada Aquarela will not share your personal data with any unauthorized third party.

7. Cookies or navigation data Pousada Aquarela uses Cookies, which are text files sent by the platform to your computer and stored there, containing information related to website navigation. In short, Cookies are used to improve the user experience. By accessing our website and consenting to the use of Cookies, you acknowledge and accept the use of a navigation data collection system with the use of Cookies on your device You can, at any time and at no cost, change permissions, block or refuse Cookies. However, revoking consent for certain Cookies may prevent the correct functioning of some features of the platform. To manage your browser's cookies, simply do so directly in the browser settings, in the Cookies management area. You can access tutorials on the topic directly from the links below: If you use Internet Explorer, or Firefox, or Safari, or Google Chrome, or Microsoft Edge, or Opera.

8. Changes to this Privacy Policy The current version of the Privacy Policy was formulated and last updated on: 02/17/2022. We reserve the right to modify this Privacy Policy at any time, mainly depending on the adaptation to any changes made on our website or in legislation. We recommend that you review it frequently. Any changes will come into force as soon as they are published on our website and we will always notify you of the changes that have occurred. By using our services and providing your personal data after such changes, you consent to them.

9. Responsibility Pousada Aquarela provides for the responsibility of agents who act in data processing processes, in accordance with articles 42 to 45 of the General Data Protection Law. We are committed to keeping this Privacy Policy updated, observing its provisions and ensuring for its compliance. In addition, we are also committed to seeking technical and organizational conditions that are safely capable of protecting the entire data processing process. If the National Data Protection Authority requires the adoption of measures in relation to the data processing carried out by the Pousada Aquarela, we commit to following them.

9.1 Disclaimer As mentioned in Topic 5, although we adopt high security standards in order to avoid incidents, no virtual page is entirely risk-free. In this sense, Pousada Aquarela is not responsible for: I – Any consequences resulting from the negligence, imprudence or incompetence of users in relation to their individual data. We guarantee and are only responsible for the security of the data processing processes and the fulfillment of the purposes described in this instrument. We emphasize that the responsibility in relation to the confidentiality of access data lies with the user. II – Malicious actions by third parties, such as hacker attacks , unless culpable or deliberate conduct by Pousada Aquarela is proven. We emphasize that in the event of security incidents that may generate significant risk or damage for you or any of our users/clients, we will communicate to those affected and the National Data Protection Authority about what happened and we will comply with the necessary measures.III – Inaccuracy of the information entered by the user/client in the records necessary for the use of Pousada Aquarela services; Any consequences arising from false information or information entered in bad faith are the sole responsibility of the user/client.

10. Data Protection OfficerA provides the following means for you to contact us to exercise your rights: E-mail reservasaquarela@gmail.com. If you have questions about this Privacy Policy or the personal data we process , you can contact our Personal Data Protection Officer, through the following channels: Adrian Cesar Toledo CPF 867.929.065-30, email reservasaquarela@gmail.com