This Notice governs your access and use of the website, within Brazil, made available, controlled and operated by CARACOL PARK - NOVO CARACOL E TAINHAS S/A. (“CARACOL” or “CARACOL PARK”), based at Rua Batista Luzardo, 167 – Loja 02, Centro – Canela/RS, CEP: 95.680-000.

This Privacy Notice aims to inform our Users, whether in the digital environment (website) or the physical environment (CARACOL’s dependencies), how we treat your personal data so that you can move around our spaces in peace and know that your privacy is one of our concerns.

Your privacy is important to us at CARACOL PARK. Therefore, we protect your personal data. We have produced this privacy notice, which sets out how CARACOL PARK handles personal data of employees, customers, suppliers, and other stakeholders. This data can be stored physically in offices or digitally in information systems..

This Notice describes how CARACOL PARK processes and protects your Personal Data, whether collected directly by us, sent by third parties and/or sent to third parties.

There is a commitment to act with transparency and ethics in all operations, extending to public bodies and entities with which CARACOL PARK interacts.

This Notice applies to customers, suppliers, visitors, and other stakeholders of CARACOL PARK, and must be applied on the Platform and can be read by all customers, partners and interested third parties.

Reading and agreeing with this Notice can be done using a checkbox. This will show that you are aware of the way we treat and use your data and information. This document must be read along with our Terms and Conditions of Use.

3.1. Personal data: Information related to the identified or identifiable visitor, that is, any information that directly or indirectly identifies the visitor, such as: CPF, address, voice, image, license plate and fingerprint. According to the Brazilian General Data Protection Law (LGPD), personal data are legally protected, and their holders also hold the rights over them and what to do with them. If you provide your personal data to CARACOL PARK, it is our duty to treat them properly and ensure that they are stored safely.

3.2. Data Holder: This is a natural person to whom the personal data refer. This is: You. It may also be an applicant for a job, a website visitor, Park visitors, etc.

3.3. Sensitive Personal Data: Refers to personal data related to religious conviction, racial or ethnic origin, political opinions, union membership or organization of religious, philosophical or political nature, data referring to health or sex life, genetic or biometric data, when linked to a natural person.

3.4. Controller: It is the natural or legal person, public or private, who is responsible for decisions regarding Personal Data Processing, which in this case is us, the CARACOL PARK.

3.5. Operator: These are our partners, suppliers, and service providers, who process personal data on behalf of CARACOL PARK, assisting in the processing of the personal data we collect to offer our services and offer the best experience to our user.

3.6. Person in charge for the Processing of Personal Data: The person appointed by the controller and operator to act as a communication channel between the controller, data holders and the National Data Protection Authority (ANPD).

3.7. Treatment: Any and all operations carried out with Personal Data, such as those referring to the collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, evaluation or information control, modification, communication, transfer, diffusion or extraction.

3.8. Platforms: That’s the website, e-commerce, social media, and all communication channels of the CARACOL PARK.

3.9. Cookies: Cookies are small text files that, through the internet browser, record access information and location of visitors who access our website. Such information is stored on the visitors' devices (mobile or not), which may make the experience and access faster.

3.10. Third parties: These include, but are not limited to, customers, suppliers, job applicants, visitors, and general users of the CARACOL PARK (such parties are herein referred to individually as "Third Party" or collectively as "Third Parties").

3.11. Database: Structured set of Personal Data, established in one or several places, in electronic or physical support.

3.12. “International Data Transfer”: That's the transfer of personal data to a foreign country or international body of which the country is a member.

3.13. Brazilian General Data Protection Law (LGPD): Law 13.709 of August 14, 2018, also known as the General Data Protection Law, or LGPD, legally provides for the processing of Personal Data in Brazil, both by digital and physical means, by a natural person or legal person governed by public or private law, intending to protect the fundamental rights of freedom and privacy and the free development of the natural person’s personality.

4.1. The Personal Data provided will be used to enable the provision of the service, offer benefits, and comply with the obligations set forth in specific laws or regulations, and when necessary, after the end of the treatment, or as designated by current regulations, the disposal will be made with specific care.

4.2. Thus, the collection of Personal Data is carried out by different means, depending on which service offered by CARACOL PARK will be used. Below, it is pointed out which operations collect personal data, as well as what types of data are collected through them:

a) REGISTRATION: E-mail, name, Country, State, CPF, Passport, telephone;

b) ONLINE TICKETS PURCHASE: E-mail, CPF, Passport, Country, State, telephone, credit card data, PIX data;

c) PURCHASE OF TICKETS AT THE SELF-SERVICE TOTEM: Email, CPF, Passport, Country, State, telephone, credit card data, PIX data;

d) TICKETS PURCHASE AT THE PARK: ID, credit card details, e-mail, proof of residence, student card and other documents required to prove the benefit;

e) NEWSLETTER: Name, e-mail;

f) SIG (INTEGRATED MANAGEMENT SYSTEM): E-mail, CPF, Passport, Country, State, telephone

g) WI-FI: E-mail

h) BUSINESS AND PARTNERSHIPS: Name, e-mail, telephone;

i) TESTIMONIALS: E-mail, name, image;

j) CUSTOMER SERVICE: Name, e-mail, telephone;

k) EXCHANGES AND RETURNS: Invoice, full name, CPF/ID;

l) CONTACTS VIA WHATSAPP AND OTHER NETWORKS: Personal data may be collected when you contact us through our networks, including WhatsApp.

5.1. The above listed information is provided to the CARACOL PARK, but there is data that can be collected automatically when using the services, for example:

a) Data from mobile devices from accesses to the digital platform and other information such as the type and version of the browser used;

b) Log data;

c) The IP address;

d) Other data collected through Cookies, as described in the Cookie Policy.

5.2. The purpose of using this data is to improve the performance, security and functionality of our platforms, to serve advertisements in digital environments and to keep track of access to websites.

6.1. CARACOL PARK processes your personal information to comply with legal, contractual obligations and provide you with our products and services. We will never collect unnecessary personal data and will not process your information in any ways other than as specified in this Notice.

6.2. CARACOL PARK collects Personal Data entered by Third Parties on the CARACOL PARK website, through cookies, as specified in the Cookies Policy, or provided in any other way, such as: verbal, written or phone calls/ WhatsApp, during any commercial, administrative, or promotional operation.

6.3. If the Data Subject makes a purchase of tickets on the CARACOL PARK website, use communication channels such as “Customer Service”, “Chat”, “Register”; “Work with Us”, social networks, and other means of contact available on the Website, the types of Personal Data and the way in which we collect them may vary. In addition, we have the following purposes hypotheses:

a) For the sale of discount tickets from CARACOL PARK the cancellation and/or rescheduling of tickets, as well as for checking and granting benefits provided for by law;

b) To identify and/or send relevant content about a particular preference or interest expressed by you to CARACOL PARK, including newsletters, events, invitations, promotions, posts on social networks, messages via digital platforms, reminders, thank you notes, among others;

c) To provide you and our business partners with a more consistent experience when interacting with the company, mainly learning from the way you use and interact with websites, applications (Apps) and other technological solutions. This may include: (i) customizing them to your preferences and interests, making them more compatible with your technology or making them easier to use; (ii) maintain their security and protect them; and (iii) develop new CARACOL PARK websites, applications (Apps), products and services;

d) For the processing and storage of data of employees, interns and third party service providers in CARACOL PARK. We will only process the personal data necessary to meet the purpose required by the employment relationship and to make the execution of the employment or service contract possible, considering current legislation;

e) For the defense and administration of CARACOL PARK interests, of its partners and business partners, including to comply with legal determinations, regulations of government agencies, tax authorities, the Judiciary and/or other competent authority;

f) For treatment and storage of data from customers, suppliers and service providers of CARACOL PARK as well as for entering into related contracts;

g) To provide services or carry out transactions requested by you or a business partner; providing information about CARACOL PARK products, services and transactions;

h) For compliance with legislation applicable to tourism, environment, intellectual property, among other sectors. This may include: (i) complying with our obligations to retain certain records for minimum periods; (ii) establish, exercise or act in legal proceedings and judicial or other claims; (iii) comply with laws, regulations, court orders or other legal procedures; (iv) detect, prevent and respond to fraud, breaches of our contracts or agreements, other misuse of the company's websites, applications (Apps), products or services; and (v) protect the rights or property of CARACOL PARK or the health, safety, well-being, rights or property, yours or from any third party;

i) For the fulfillment of any other demand requested by you to CARACOL PARK, whether by answering your queries, including customer support requests, or inviting you to participate in or inform you of satisfaction survey or market research results;

j) CARACOL PARK may also use your personal information for other purposes, consistent with the context in which the information was collected, or with your express consent.

7.1. In compliance with the applicable regulations, with regard to the processing of Personal Data, CARACOL PARK respects and guarantees to the holder, upon request, the following rights, as provided for in Art. 18 of Law 13,709/2018:

a) Right of Confirmation and Access: This right allows you to confirm if CARACOL PARK uses your personal data, and if so, have access to a copy of the data used;

b) Right of Rectification: This right allows you to request correction and/or rectification of your personal information that is incomplete, inaccurate or out of date, if you consider it necessary;

c) Right to request Anonymization, Blocking or Deletion:This right allows you to ask us: (i) anonymization of your personal data, so that they can no longer be related to the individual, and thus ceasing to be Personal Data; (ii) blocking your personal data, suspending them temporarily; and (iii) deletion of your personal data, if you objected to the use of your data, CARACOL PARK will delete all your data, without the possibility of reversal, unless there is any other reason for its maintenance, such as a possible legal obligation to retain data or the need to preserve them to safeguard the application's rights;

d) Right to Portability: The data subject has the right to obtain from CARACOL PARK the transmission of your data to another person in charge or even to the interested party, through a structured format of usual use and mechanical reading, depending on the regulation of the National Data Protection Authority;

e) Right to the Possibility of Not Providing Consent and its Consequences: This right allows you to have clear and complete information about the possibility and consequences of not providing consent. In the event that the requested consent is denied, there may be a limitation of access to the services offered by CARACOL PARK;

f) Right to revoke your Consent: You have the right to withdraw your consent to the terms of this Privacy Notice. However, this will not affect the lawfulness of any processing previously carried out. If you withdraw your consent, we may not be able to provide you with certain CARACOL PARK services;

g) Right to Oppose Processing: The data subject has the right to object to the processing of their data for reasons related to their particular situation. In this case, you will be able to contest where and in what context we are processing your personal data for different purposes, and oppose, requesting the interruption, through the Data Protection Officer (DPO) contact channel informed in the specific session;

h) Submit a petition to the National Data Protection Authority (ANPD): The data subject may directly demand the ANPD to guarantee their Rights.

7.2. To validate the rights of personal data holders, it will be necessary to request your specific information to help us confirm your identity and guarantee your right and security of your personal data. In these cases, we request direct contact with the person responsible for data processing, through the following email: [email protected].

7.3. CARACOL PARK will respond to all legitimate requests, within a reasonable time, except in cases where it will not be possible to respond due to compliance with legal or regulatory obligations, as well as to exercise or safeguard rights or prevent fraud.

7.4. CARACOL PARK clarifies that if your personal data is required by court, we reserve the right to provide your data and information about you in accordance with national laws.

7.5. We may request some additional Personal Data to prove your identity, in order to avoid incidents and fraud and always ensure the privacy of our customers.

7.6. Users may exercise any other right provided by law, even if not listed here. As an exception, it is possible that your request will not be granted, but if this happens, we will explain the reason. However, we inform you in advance that this will only occur if there is a legal basis.

8.1. We share personal data under our control in a lawful and transparent manner. Please note that all operators acting on our behalf only process your data in accordance with our instructions and fully comply with this Privacy Notice, as well as data protection legislation and any other appropriate confidentiality and security measures.

8.2. It is important for you to keep in mind that we do not share your personal data with third parties as a rule. Some personal data may be shared with other companies from CARACOL PARK group, to carry out our daily business operations and to allow us to maintain a proper relationship with you. Under no circumstances do we sell the data and information you provide us. In some cases, your personal data is provided to our suppliers or partners to make a certain service provision possible or to improve the experience of customers and shopkeepers, such as, for example, for companies that process ticket purchase payments so that you use our services; advertising companies/agencies, to develop websites, select and produce ads that match your profile, as authorized.

8.3. It is good for you to know that we only work with partners who can guarantee an adequate level of protection for your personal data. These shares are protected by the contracts we have with these partners. There are cases where we are obliged, by law or regulation, to share your personal data with third parties, for example: for the provision of personal information to government bodies, tax authorities, the Judiciary and/or other competent authority to fulfill existing obligations in law.

8.4. It is possible that, in some situations, we need to disclose your personal data to third parties. But rest assured, the sharing of Personal Data with third parties will only occur to achieve some legitimate and specific purpose previously informed to you. The important thing is for you to know that we will always be transparent with you regarding your data.

9.1. CARACOL PARK does not practice International Data Transfers, as a rule. No personal data will be transferred to third parties located outside the country, except through the express consent of the holder or to comply with a legal, regulatory, or contractual obligation, previously informed to the holder.

9.2. In order to be transparent and guarantee a quality service to you and our partners, we contract some information systems that host personal data in clouds located outside Brazil. Thus, there are cases of hosting personal data in other countries so that we can fulfill our mission, as is the case with Google and Microsoft companies.

10.1. All information or Personal Data provided will observe the security standards necessary to comply with legal provisions, in addition, efforts are made to ensure that this information is not subject to destruction, loss, alteration or dissemination. We only store your personal information to the extent that we need it in order to be able to use it in accordance with the purpose for which it was collected and in accordance with the legal basis for its treatment.

10.2. We will keep your personal information as long as your user on our platform is active, as long as it is necessary to complete transactions with you, as long as there is a contractual, commercial or institutional relationship, or as long as you do not exercise your right to suppress, cancel or limit the processing of your data.

10.3. If your user is deactivated on our platforms, your data will be deleted from our systems, since there is no reason to store them for legitimate purposes, as defined by law, to comply with legal or regulatory obligations, as well as to exercise or safeguard rights or prevent cheats.

10.4. In order to ensure that information and Personal Data are retained only for the necessary time, the necessary requirements and regulations of deadlines in legal and contractual provisions are attended. Therefore, in addition to the constant observance and updating of these regulations, regardless of your consent or request for deletion, the General Data Protection Law allows the retention of Personal Data in the following situations:

a) Compliance with legal or regulatory obligations;

b) Transfer to a third party, respecting their rights and provisions in data protection and privacy laws;

c) For exclusive use, access by third parties is prohibited, and provided that the data is anonymized.

10.5. However, you always have the right to request data deletion. We guarantee that we will review this request in accordance with legal requirements.

11.1. The user is exclusively responsible for the use of the application and must respect the rules of this Privacy Notice, as well as the applicable legislation.

11.2. The user guarantees the veracity of all data provided, being responsible for keeping their personal information up to date.

11.3. CARACOL PARK shall not be liable for direct or indirect damages resulting from or in connection with access, use or the inability to access or use the application.

11.4. It is the user's responsibility to keep their login and password safe and out of reach of third parties. In this way, the user is responsible for all actions performed on their account.

11.5. According to the inherent characteristics of the internet environment, the application is not responsible for connection interruptions or suspensions, incomplete or failed computer transmissions, as well as for technical failure of any kind, including, but not limited to, malfunctions of any network, hardware, or software.

11.6. It is the user's responsibility to keep the environment of their device (computer, cell phone, tablet, among others) safe, using the available tools to ensure security.

12.1. In case of doubts, to exercise your rights or any communication, CARACOL PARK, in compliance with article 41 of the General Data Protection Law, indicates the contact of the Data Protection Officer, Louana Costa, through the following email: [email protected].

13.1. This Privacy Notice is governed and interpreted in accordance with the Laws of the Federative Republic of Brazil

13.2. The Jurisdiction of the Judicial District of Rio Grande do Sul is hereby elected as competent to resolve any issues that may arise from this document, with express waiver of any other, however privileged it may be.

14.1. CARACOL PARK saves the right to change this Cookies Policy whenever necessary, to guarantee the functionality, improvements, and updates of the offered services, not being obliged to maintain an application structure.

Our Cookies Policy will always show the last update date or current version.

Version	Modified item	Reason	Date
01	Original version	N/A	01/18/2023