This Notice governs your access to and use of the website, within Brazil, made available, controlled and operated by C2RIO VIAGENS E TURISMO S.A., (“C2RIO” or “We”/ “us”) headquartered at Praia de Botafogo, nº 501, Bloco 01 – Sala 701 – Botafogo, Rio de Janeiro/RJ, CEP [Zip Code]: 22.290-240.
With that in mind, we have prepared this Privacy Notice (“Notice”) to explain how we process your Personal Data, who we share it with, and what your rights are as the Data Subject.
We ask you to read this document carefully before providing us with any personal information. By using the C2RIO Platform, You agree to the use of your personal information by C2RIO and the Payment Platform. If you do not agree with the terms of this Privacy Notice, we ask you not to use the C2RIO Platform.
If you have any questions about any of the terms used, you can consult the Acronyms and Definitions at the end of this document or click here and consult the Brazilian General Data Protection Law (“LGPD”), which, in art. 5, provides several definitions and necessary concepts.
With years of experience, the operator C2Rio Tours & Travel has consolidated its leadership in the inbound segment in Rio de Janeiro, and strengthened its operation with a wide variety of products and services designed to meet the needs of travel agencies, thus facilitating their sales relationship with the end customer.
With its own platform, exclusive technology and a positive reputation in the tourism market for quality service, comfort and convenience for customers, the company provides city tours and regular and private transfers, offering technological support and, above all, safety in its operations. Since 2017, the operator has been recognized annually by the travel website TripAdvisor, with the TripAdvisor Traveller’s Choice award, in addition to other mentions of excellence in service by other important players.
Incorporated by Grupo Iter in 2022, a tourism and experiences holding company that manages Parque Bondinho Pão de Açúcar, in Rio de Janeiro; and Parques do Caracol and Tainhas, in Rio Grande do Sul. Therefore, the data you share with us may be processed by another company in the Group. Data sharing between companies in the group will occur in accordance with our contractual and legal demands, due to economic and logistical needs, as well as the centralization of administrative, financial and human resources activities. This does not mean that there will be a deviation from the purpose of the processing, that you will be harmed in any way or that you will not be able to exercise your rights. Regardless of which company processes your personal data, we always observe the purpose of the processing, the privacy of your data, and all your rights in relation to them.
In relation to the Processing of your Personal Data, on certain occasions we define the respective purposes and means, that is, we act as CONTROLLERS.
Below is our identification and structure information, in case you wish to contact us:
| COMPANY NAME | National Register of Legal Entities (CNPJ) |
| ITER PARTICIPAÇÕES S.A. | 43.697.470/0001-69 |
| C2RIO VIAGENS E TURISMO S.A. | 05.873.416/0001-38 |
| COMPANHIA CAMINHO AÉREO PÃO DE AÇÚCAR S.A. | 33.229.410/0001-68 |
| PÃO DE AÇÚCAR EMPREENDIMENTOS TURÍSTICO LTDA. | 42.274.233/0001-22 |
| NOVO CARACOL E TAINHAS S.A. | 48.255.552/0001-77 |
The purpose of this Privacy Notice is to inform our Users how we process their personal data, so that they can use it with peace of mind and know that their privacy is one of our concerns. This data may be stored physically in offices or digitally in information systems.
The commitment to act with transparency and ethics in all operations is effective, extending to public bodies and entities with which C2RIO interacts.
We ask you to read this document carefully before providing us with any personal information. By using the C2RIO Platform, You agree to the use of your personal information by C2RIO and the Payment Platform. If you do not agree with the terms of this Privacy Notice, we ask you not to use the C2RIO Platform. By registering or making a purchase on the C2RIO Platform, You agree to provide certain information to C2RIO, including Your Personal Data and Tax Data.
This data will be stored in an automated data file in a cloud database and will be used for the purpose of providing the services requested by You on the C2RIO Platform. So, this information will be processed by C2RIO and sent to the Suppliers of the Tourist Services booked by You through the C2RIO Platform, when necessary, so that the Tourist Services are effectively provided to You.
When You make a reservation through the C2RIO Platform, You will be providing Your Tax Data to the Payment Platform to provide the Payment Services, which may request additional personal information to carry out security checks, if necessary.
This Notice applies to customers, suppliers, visitors, and other stakeholders of C2RIO, and must be implemented on the Platform and may be read by all customers, partners, and interested third parties.
The reading and acknowledgement of this Notice may be done through checkbox. This will indicate that you are aware of how we treat and use your data and information. This document must be read in conjunction with our Terms and Conditions of Use.
4.1. Personal Data: Information related to an identified or identifiable natural person, that is, any information that identifies the individual directly or indirectly, such as: CPF, address, voice, image, license plate, and fingerprint. According to the General Personal Data Protection Law – LGPD – personal data has legal protection, and its holders are the holders of the rights over it and what to do with it. If you provide your personal data to C2RIO it is our duty to treat it appropriately and ensure that it is stored securely.
4.2. Data Subject [Holder]: This is the natural person whom the personal data refers to. That is: You. That may also be a Travel Agent (affiliate), a purchaser of products on the website, or a visitor to our website.
4.3. Sensitive Personal Data: This refers to personal data related to religious beliefs, racial or ethnic origin, political opinions, membership of a trade union or organization of a religious, philosophical or political nature, data relating to health or sexual life, genetic or biometric data, when linked to a natural person;
4.4. Controller: The natural or legal person, under public or private law, responsible for decisions regarding the Processing of Personal Data, which in this case is us, C2RIO.
4.5. Operator: Our partners, suppliers and service providers, who process personal data on behalf of C2RIO, assisting in the processing of the personal data we collect to offer our services and provide the best experience to our users.
4.6. Person in Charge of Personal Data Processing or DPO (Data Protection Officer): This is the person appointed by the controller and operator to act as a communication channel between the controller, the data subjects and the Brazilian National Data Protection Authority (ANPD).
4.7. Processing: This is any and all operations carried out with Personal Data, such as those related to collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation or control of information, modification, communication, transfer, dissemination or extraction.
4.8. Platforms: The website, e-commerce, totems, social media and communication channels, and any and all digital sales channels of C2RIO.
4.9. Point of Sale [PoS] (PDV): The place where C2Rio physically sells its products or services.
4.10. Cookies: Cookies are small text files that, through the internet browser, record access and location information of visitors who access our website. This information is stored on visitors’ devices (mobile or otherwise), which can make the experience and access faster.
4.11. Third Parties: Include, but are not limited to, customers, suppliers, job applicants and visitors and users in general of the C2RIO website (such parties are referred to herein individually as “Third Parties” or collectively as “Third Parties”).
4.12. Database: structured set of Personal Data, established in one or more locations, in electronic or physical format;
4.13. “International Data Transfer”: This is the transfer of personal data to a foreign country or international organization of which the country is a member.
4.14. Brazilian General Data Protection Law (LGPD):Law No. 13.709 of August 14, 2018, also known as the Brazilian General Data Protection Law, or LGPD, legally provides for the processing of Personal Data in Brazil, both by digital and physical means, by a natural person or by a legal entity under public or private law, with the aim of protecting the fundamental rights of freedom and privacy and the free development of the natural person’s personality.
5.1. We request and collect your Personal Data and Tax Data when You use the C2RIO Platform. Personal Data and Tax Data are necessary for the proper execution of the contract between You and us and to enable us to comply with our legal obligations. Without this information, we may not be able to provide the services requested by You through the C2RIO Platform.
5.2 The Personal Data provided will be used to facilitate the intermediation of tourism services, to offer benefits and to comply with the obligations set forth in specific laws or regulations, and when necessary, after the end of the processing, or as designated by current regulations, it will be discarded with specific care.
5.3 Therefore, Personal Data is collected by different means, depending on which service offered by C2RIO will be used. Below, we indicate which operations collect personal data, as well as what types of data are collected through them:
a) TOURIST SERVICE RESERVATIONS: Full name, date of birth, nationality, ID, CPF [ITIN, Individual Taxpayer Identification Number] or passport, telephone number, address, e-mail, and, if applicable, personal data contained in the articles of association and powers of attorney of the organization or company that You represent.
C2RIO does not authorize minors under the age of 18 to register or make purchases through our platforms.
b) AGENCY REGISTRATION: Full name, date of birth, nationality, landline and cell phone number, address, e-mail, copy of ID, copy of CPF or passport, personal data contained in the articles of association and/or Power of Attorney (in the case of a Legal Entity), of the organization or company you represent;
c) RESERVATION PAYMENTS (digital and physical means): Credit card, name of the credit card holder, billing address, credit card number, credit card expiration date and CVV, which will be used by the Payment Platform to process the payment for your reservation;
d) NEWSLETTER: Name, email, WhatsApp, birthday and purchase history;
e) RESERVATION CANCELLATION: reservation number and email and telephone number;
f) CONTACTS VIA WHATSAPP AND OTHER SOCIAL NETWORKS: Name, email, and telephone number, when you contact us through our networks, including WhatsApp.
6.1 The information listed above is provided to C2RIO, but there is data that may be collected automatically, when using the services, for example:
a) Usage Data: We collect information about your interactions with the C2RIO Platform, such as the pages or content you view, your searches for Tourist Services, the reservations you have made and other actions in the context of using the C2RIO Platform.
b) Geolocation Data: When you use the C2RIO Platform, we may collect information about your exact or approximate location, determined from data such as your IP address or your mobile device’s GPS, to offer you an optimized user experience and allow greater security when paying for your reservation. You can control or disable the use of application location services in the settings menu of your mobile device. C2RIO may also collect this information even when you are not using the application if the connection is enabled in your device settings or permissions.
c) Log Data and Device Information: We collect log data and device information automatically when you access and use the C2RIO Platform, even if you have not registered for a C2RIO Account or logged in to it. This information includes details about how you used the C2RIO Platform (including whether you clicked on links to third-party applications), IP address, dates and times of access, hardware and software information, device information, device event information, unique identifiers, crash data, cookie data, and the pages you accessed or were viewing before or after using the C2RIO Platform, among others.
d) Cookies: When you use the C2RIO Platform, we collect cookies on your computer. Cookies allow us to operate and provide the services available on the C2RIO Platform, improve your experiences and understand how C2RIO Services are used by you. Cookies also allow us to recognize you when you use the C2RIO Platform, provide a personalized experience and detect certain types of fraud. Most browsers automatically accept cookies, but you have the possibility to configure your browser to be notified when you receive cookies and to prevent cookies from being installed on your computer. If you choose to remove or reject cookies or clear local storage, this may affect the features, availability, and functionality of the C2RIO Platform, as described in the Cookie Policy.
e) Profile Additional Information: You may choose to provide us with additional Personal Data to provide you with a better user experience when using the C2RIO Platform. This additional information will be processed based on our legitimate interest or, where applicable, your consent. You may choose to provide additional Personal Data such as gender, preferred language(s), city, and a personal description. Some of this information, as indicated in your C2RIO Account settings, is part of your public profile page and will be publicly visible to others.
f) Other Technologies. We use other technologies similar to cookies when you access and use the C2RIO Platform. Third parties may use cookies and other storage technologies to collect or receive information from the C2RIO Platform and use that information to measure and select advertisements. We may collect certain information by automated means using technologies such as cookies, web beacons, pixels, browser analysis tools, server logs, and mobile identifiers. In some cases, we associate the information we collect using cookies and other technologies with your personal information.. You may opt out of the collection and use of information for this purpose by contacting https://portaldotitular.c2rio.travel/titular_c2rio, and describing your request.
g) OTHER INFORMATION. You may also choose to provide us with information when you fill out a form, update or add information to your C2RIO Account, respond to surveys, communicate with our team, share your experiences with us, such as when leaving your Comment and Rating on the C2RIO Platform about Suppliers and Tourism Services or using other features of the C2RIO Platform.
6.2. The purpose of using this data is to improve the performance, security and functionality of our platforms, display advertisements in digital environments and keep a record of access to websites.
7.1. As already mentioned, all personal data collection is carried out to fulfill a specific purpose. You can check the cases in which we collect your data in the list below:
(i) provide, improve and develop the C2RIO Services offered to You through the C2RIO Platform;
(ii) manage your reservation of Tourist Services;
(iii) enable the processing of payments and invoices or other tax documents;
(iv) create and maintain a reliable and secure environment;
(iv) provide, personalize, evaluate, and improve our advertising and marketing; and
(v) comply with our legal obligations and ensure compliance with local laws and regulations.
(vi) We process this personal information for these purposes due to our legitimate interest in protecting the C2RIO Platform, to assess the proper performance of our Contract and for any other purpose that You authorize at the time of data collection.
(vii) Personal information collected to provide, improve and develop the C2RIO Platform, allows You to access, use and communicate with the C2RIO Platform and allows us to operate, protect, personalize, model, improve and optimize your experience and the C2RIO Platform, conduct evaluations based on your interactions with the C2RIO Platform and your history of searches and reservations for Tourist Services, facilitate and resolve your complaints, provide service to You and send service or support messages, updates, security alerts and other notifications related to your C2RIO Account.
(viii) The personal information provided by You will be used to send You confirmations and updates about a reservation made through the C2RIO Platform, as well as any relevant information related thereto. This information may be sent via email, SMS or WhatsApp to the mobile phone number You have provided to us. These messages may contain (without limitation, information about C2RIO Services, as well as contact details of service providers who could assist You with your reservation).
(ix) We may use personal information to create and maintain a reliable and safe environment, such as to: (a) verify or authenticate information or identification provided by You; (b) conduct security investigations and risk assessments; (c) detect and prevent fraud, spam, abuse, security incidents and other harmful activities; (d) resolve any disputes with You or any third parties; (e) enforce our agreements with third parties; (f) enforce our Terms of Service and other policies; (g) comply with our legal obligations; and (h) in connection with the above activities, perform profiling based on your profile information, your interactions with the C2RIO Platform, other content that You submit to the C2RIO Platform and information obtained from third parties.
(x) We may use your personal information to provide, personalize, measure and improve our advertising and marketing, such as to: (a) send you promotional messages, marketing, advertising and other information that may be of interest to you based on your preferences, including information about C2RIO or the services of a Supplier or business partner of C2RIO, and advertisements on social media platforms, (b) personalize, measure and improve our advertising, (c) administer referral programs, prizes, surveys, sweepstakes, contests or other promotional activities or events sponsored or managed by C2RIO or our business partners, (d) determine your characteristics and preferences (based on the information you provide to us, your interactions with the C2RIO Platform, information obtained from third parties, and your search and booking history for Tourist Services) to send you promotional messages, marketing, advertisements and other information that we think may be of interest to you.
(xi) By consenting to receive promotional messages, marketing, advertisements and other information that we think may be of interest to you, you also consent to receive them via text message on your mobile device (“SMS”). To revoke any permissions you may have given to receive promotional SMS from C2RIO, please contact us at https://portaldotitular.c2rio.travel/titular_c2rio.
(xiv) To opt-out of marketing emails, simply click on the ‘unsubscribe’ link at the bottom of any marketing email we send you.
(xv) Please note that even if you opt out of receiving marketing communications, we may still contact you with important transactional information about your C2RIO Account. For example, even if you opt out of marketing communications-related emails, we may still send you booking confirmations or fraud alerts.
(xvi) The Payment Platform may use your personal information, as part of the Payment Services, to: (a) to enable You to access and use the Payment Services; (b) to detect and prevent fraud, abuse, security incidents and other harmful activities; (c) to conduct security investigations and risk assessments; (d) to comply with legal obligations, such as anti-money laundering regulations; and (e) to enforce payment terms and other policies. The Payment Platform processes this personal information because of its legitimate interest in improving the Payment Services and the experience of its users, and where necessary for the proper performance of the Agreement with You and to comply with applicable laws.
(xvii) To help create and maintain a trustworthy environment, the Payment Platform may access and use certain areas or features of the Payment Services, such as completing a verification process or meeting certain eligibility criteria in order to provide You with the Payment Services and comply with applicable laws. In that sense, the Payment Platform may require information to verify your identity or other authentication information, such as your CPF, date of birth, address, email address, telephone number and other information to verify your identity.
8.1. The Payment Platform needs to collect your Tax Data for the proper performance of the contract between you and us, to enable us to comply with our legal obligations and to comply with applicable legislation, such as anti-money laundering regulations.
You may only use the Payment Services by providing the following information:
| Payment Information | When providing the Payment Services, the Payment Platform needs to request your Tax Data, such as credit or debit card information (“Payment Method”), in order to process payments related to reservations made through the C2RIO Platform and comply with applicable laws. You authorize the Payment Platform to store your Tax Data, including your Payment Method, and to charge the amounts related to your reservation on the C2RIO Platform, as described in the Terms. You must provide current, accurate and complete information when adding your Tax Data, including your Payment Method, and it is your obligation to always provide updated information every time you make a reservation through the C2RIO Platform. |
| Other Information | C2RIO or the Payment Platform may ask any questions they deem necessary to help verify or confirm your identity or to prevent fraud. To this end, You authorize C2RIO and the Payment Platform to cross-reference your information with third-party databases or other sources, as well as to request reports from service providers and collect identity information to comply with anti-money laundering regulations, if required by local law. This may include (i) asking You to provide government-issued identification, Your date of birth, Your address, and other information, (ii) asking You to take certain steps to verify ownership of Your email address and Payment Method, or (iii) attempting to verify Your information with third-party databases. The Payment Platform reserves the right to close, suspend, or limit access to the Payment Services if You are unable to provide or verify any of this information. |
| Payment Platform | The Payment Platform collects information related to payment transactions for bookings made through the C2RIO Platform, including the payment instrument used, date and time, payment amount, payment instrument expiration date, IBAN information, address and other details related to the transaction. This information is necessary for the proper performance of the contract between You and the C2RIO Platform and to enable the provision of the Payment Services. These Payment Services are subject to different terms and conditions and privacy practices, established and made available directly by the Payment Platform, and users of the C2RIO Platform should review them separately. C2RIO is not responsible for the availability or accuracy of said Payment Services, nor for the content, privacy practices, products or services offered on the Payment Platform. |
| Billing Data | To make a reservation through the C2RIO Platform, You must provide the Payment Platform with certain information about Your credit or debit card, such as the name of the credit or debit card holder, billing address, credit or debit card number, credit or debit card expiration date and the CVV or pix key, which will be used by the Payment Platform to process the payment for Your reservation. |
| Data Disclosed by Third Parties | C2RIO may collect personal information about You provided by third parties when You use the C2RIO Platform, such as personal information You have provided to third parties that provide social networking services. We have no influence over or responsibility for the way in which these third parties store or process Your personal information. If You connect or log in to Your C2RIO Account with a third-party service, the third-party service may send Us information such as Your registration, friends list, and profile information on that service. This information varies and is controlled by that service or as authorized by You in the privacy settings of that service. You may be invited by a person to use the C2RIO Platform. The person who invited you may send personal information about You, such as your email address or other contact information. |
| Third Party Service Providers | The C2RIO Platform works with third-party service providers to help us operate, run, improve, understand, customize, support, and advertise the C2RIO Services. We may work with other companies to build and improve our infrastructure systems, distribute our applications, advertise the C2RIO Services, provide map and location information, process payments, and help us understand how You use the C2RIO Services. These service providers may provide us with information about You in certain circumstances, such as by sending us reports to help us diagnose and fix problems with the C2RIO Platform. |
| Other Information | We may receive additional information about You, such as information that helps detect fraud and security tools, from business partners and/or third party service providers, and combine this information with the information we have about You. We may receive information about You and Your activities on the C2RIO Platform and outside of it through our business partners, or about Your experiences and interactions with C2RIO Affiliates or the Tourism Service Providers used by You. |
(i) If You consent, we may share Your information, including personal information, when You authorize a third-party website or application to access Your C2RIO Account or when You participate in promotional activities conducted by C2RIO partners or third parties.
(ii) We may use certain limited personal information about You, such as Your email address, to share with social media platforms to generate leads, drive traffic to the C2RIO Platform, or otherwise promote our products and services or the C2RIO Platform.
(iii) The social media platforms with which we may share your personal information are not controlled or supervised by C2RIO. Therefore, any questions about how your social media platform service provider processes your personal information should be directed to that provider.
(iv) Please note that you may, at any time, request that C2RIO stop processing your data for direct marketing purposes by sending the channel https://portaldotitular.c2rio.travel/titular_c2rio.
(i) In order to enable the provision of Tourist Services by the C2RIO Platform Suppliers, we may need to share some of your personal information with the Tourist Service Suppliers, as strictly necessary for the adequate performance of the Contract between You and the Tourist Service Suppliers booked through the C2RIO Platform.
(ii) When You make a reservation request for a Tourist Service through the C2RIO Platform, You consent to C2RIO having the prerogative to share some information about You with the Suppliers of the Tourist Services that You have booked, including your full name, telephone number and dates selected for the provision of the Tourist Services, after confirmation of your reservation, to assist in coordinating the provision of the Tourist Services by the Suppliers.
(iii) The Suppliers of the Tourist Services may need to use third party services to assist in the management of the Tourist Services or to provide additional services requested by You and, to this end, may share information about You with such third parties for the purposes of adequately providing the Tourist Services. The Suppliers are responsible for the third party service providers they use and ensure that such service providers will process the information provided by You securely and in compliance with applicable law, including data privacy and data protection laws.
(iv) The C2RIO Platform may contain links to third-party websites or services, such as third-party integrations, co-branded services, or third-party branded services (“Partners”). C2RIO does not own or control these Partners, and when You interact with them, You may provide information directly to that Partner, C2RIO, or both. These Partners will have their own rules regarding the collection, use, and disclosure of information. We encourage You to review the privacy policies of the other websites You visit.
(v) The Payment Platform will not share your Tax Data or any other payment and billing information with the Suppliers of the Tourist Services booked by You through the C2RIO Platform.
(vi) C2RIO and the Payment Platform use various third-party service providers to help us provide services related to the C2RIO Platform and the Payment Services. For example, service providers may help us: (a) to verify or authenticate your identification documents and registration; (b) to verify information against public databases; (c) to carry out fraud prevention checks and risk assessment; (d) to perform product development and maintenance; (e) to enable the provision of C2RIO Services through third-party platforms and software tools; (f) in data hosting and asset security; or (g) to perform customer service, advertising or Payment Services. These providers have limited access to your personal information to perform these tasks on our behalf, and are contractually obligated to protect your personal information and only use your personal information in accordance with our instructions. C2RIO and the Payment Platform may need to share your information, including personal information, to ensure the proper performance of our Contract with You.
(i) The C2RIO Platform allows You to publish information, including personal information, visible to the general public. After using a Tourist Service, You may use Your public profile on the C2RIO Platform to write Comments and Reviews about the Suppliers and the Tourist Services used by You. Part of Your public profile page, such as Your first name, description and city are publicly available to other users of the C2RIO Platform. Comments and Reviews are a part of Your public profile page and may also appear in other parts of the C2RIO Platform.
(ii) If You submit content to a community, discussion forum, blog or social media post, or use a similar feature on the C2RIO Platform, the content will be publicly visible.
(i) C2RIO and the Payment Platform may disclose your information, including personal information, to the judiciary or law enforcement or government authorities, or authorized third parties, if and to the extent necessary or permitted to comply with the law, or if such disclosure is reasonably necessary to: (a) comply with our legal obligations, (b) comply with a valid legal request and respond to allegations made against C2RIO, (c) detect, investigate, prevent and address fraudulent and illegal activities or security or technical issues, (d) respond to a valid legal request related to criminal investigations or allegations or suspicions of illegal activity or any other activity that may expose us, You or any other user of the C2RIO Platform, of the Payment Services or Tourist Services to legal liability, (e) to enforce our Terms and other applicable terms and policies, including investigations into potential violations, or (f) to protect the rights, property or information security of C2RIO, its employees and representatives.
(ii) This information may be necessary to comply with our legal obligations, to protect your vital interests or those of another person, or for the purposes of our or a third party’s legitimate interest in keeping the C2RIO Platform secure, preventing harm or crime, enforcing or defending legal claims, facilitating tax collection and preventing tax fraud, or preventing damages.
(iii) Where necessary or appropriate, we may attempt to notify You of these legal requests, except in the case of: (a) prohibition by legal process, court order, or applicable law, or (b) risk of injury or physical harm to a person or group, or potential increased risk of fraud.
You may link your C2RIO Account with your account on a third-party social networking service. When you create such links: (i) some information that You provide to us through the linking of Your accounts may be published on Your profile on the C2RIO Platform; (ii) Your activities on the C2RIO Platform may be displayed on that third party’s website; (iii) a link to Your public profile on that third party’s social networking service may be included in Your public profile on the C2RIO Platform; (iv) the information You provide to us through the linking of your accounts may be stored, processed and transmitted for fraud prevention and risk assessment purposes; and (v) the publication and display of information You provide to C2RIO through such linking is subject to your settings and authorizations on the C2RIO Platform and on the third party website. We only collect your information from linked third-party accounts to the extent necessary to ensure the proper performance of our contract with you or to ensure that we comply with applicable laws or with your consent.
You can access and update some of your information through your C2RIO Account settings.
You are responsible for keeping your personal information up to date. You have the right to ask us to correct incorrect or incomplete personal information about you that you cannot change yourself in your C2RIO Account.
In general, we retain your personal information for as long as necessary to perform the Contract between us and you and to comply with our legal obligations. If you no longer want us to use your information to provide you with C2RIO Services through the C2RIO Platform, you can request that we delete your personal information and your C2RIO Account through the channel https://portaldotitular.c2rio.travel/titular_c2rio.
It is important to note that if you request the deletion of your personal information, we may: (i) retain some of your personal information as necessary for our legitimate business interests, such as detecting and preventing fraud and improving security (such as, for example, preventing a user who has been suspended for fraud or security reasons from opening a new account on the C2RIO Platform), (ii) keep visible on the C2RIO Platform the Comments and Reviews published with your public profile on the C2RIO Platform, even after your Account on C2RIO is cancelled, without such information being attributed to You, and (iii) retain and use your personal information to the extent necessary to comply with our legal obligations.
Because we maintain the C2RIO Platform to protect against accidental or malicious data loss and destruction, residual copies of your personal information may not be removed from our backup systems for a limited period of time.
C2RIO is responsible for controlling the information shared by You with C2RIO and has tools that allow You to confirm the Personal Data we have about You, as well as allow You to access such Personal Data upon request. Our Privacy Notice provides information about how we share your data with third parties. To contact C2RIO’s data protection officer or request more information about our data practices or your personal data, please contact us through the channel https://portaldotitular.c2rio.travel/titular_c2rio. You also have the right to submit a request to the National Data Protection Authority (“ANPD”) by contacting the ANPD directly.
If C2RIO is processing your personal information based on your consent, you may withdraw your consent at any time by changing your Account settings on C2RIO or by sending a communication to C2RIO specifying which consent you are withdrawing. Please, note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal.
When your personal information is processed for direct marketing purposes, You can request at any time that C2RIO stops processing your data for these purposes by contacting us through the channel https://portaldotitular.c2rio.travel/titular_c2rio.
We are continually implementing and updating administrative, technical and physical security measures to help protect your information from unauthorized access, loss, destruction or alteration. Among the safeguards we use to protect your information are firewalls, data encryption and information access controls. If you know or have reason to believe that your C2RIO Account credentials have been lost, stolen, misappropriated or compromised, or in the event of actual or suspected unauthorized use of your C2RIO Account, you must change your password immediately and contact us through official channels.
Although C2RIO is headquartered in Brazil and its products and services are mostly intended for people located in Brazil, and therefore Brazilian laws related to the protection of Personal Data apply, the Personal Data we collect may be transferred to other countries, such as the United States of America. These transfers may occur to service providers and technology suppliers used by C2RIO located abroad to ensure a higher level of security in the preservation of data processed by C2RIO, as well as due to C2RIO‘s relationship with certain service providers and suppliers, such as providers of technological data storage structures, which may be physically located in such regions.
You consent to our data practices, including the collection, use, processing, and sharing of your data as described in this Privacy Policy, as well as the transfer to and processing of your data in other countries where we have or use facilities, service providers, or partners. You acknowledge that the laws, regulations, and standards of the country in which your information is stored or processed may be different from those in your own country.
All of our rights and obligations under this Privacy Notice may be assigned by us to any of our affiliates as a result of a merger, acquisition, restructuring or sale of assets, by operation of law or otherwise, and we may transfer your information to any of our affiliates, successor entities or new owners.
You have the right to complain about our activities by registering a complaint with our data protection team, which can be accessed at the link https://portaldotitular.c2rio.travel/titular_c2rio.
If you have any questions or complaints about this Privacy Notice or about C2RIO‘s information handling practices, please contact us through the contact channel https://portaldotitular.c2rio.travel/titular_c2rio.
In case of doubts, to exercise your rights or any communication to C2RIO in compliance with article 41 of the General Data Protection Law, indicate the contact of the Personal Data Officer, Louana Costa, via e-mail: [email protected] or through the channel https://portaldotitular.c2rio.travel/titular_c2rio.
This Privacy Notice is governed by and interpreted in accordance with the Laws of the Federative Republic of Brazil.
The Court of the Judicial District of Rio de Janeiro is elected as the competent court to resolve any issues that may arise from this document, with express waiver of any other, however privileged it may be.
We may change or update our Privacy Notice at any time in accordance with this provision. If we make changes to this Privacy Notice, we will notify You at least 30 (thirty) days before the effective date of the changes, as necessary, and update the last modified date at the top of this Privacy Notice. We will also send You, by email, notification of the change to our Privacy Notice. If You do not agree with the revised Privacy Notice, You may cancel Your Account with C2RIO. Your continued use of the C2RIO Platform ratifies your acceptance of our Privacy Policy and subsequent changes. If you do not agree with the revised Privacy Notice, please stop using the C2RIO Platform. We ask you to consult our Privacy Notice periodically.
C2RIO reserves the right to change this Privacy Notice whenever necessary to ensure the functionality, improvements and updates of the services offered, without being obliged to maintain a structure of the application.
Our Privacy Notice will always include the date of update or current version.
| Version | Modified item | Reason | Date |
| 01 | Original version | N/A | 10/30/2024 |