PRIVACY POLICY
ABOUT US
We go beyond beautiful views. More than one of the most beautiful tourist spots in Brazil, our mission is to transport people to a world of enchantment, leisure and entertainment, creating happy, sustainable, unforgettable experiences that value Brazilian culture. We constantly invest in safety, comfort and innovation. We arose from a visionary and uncontrollable desire to connect people to this spectacle of nature. We are the combination of teamwork: nature and man together in perfect harmony. We are a natural, geological, historical and tourist landmark in the city of Rio de Janeiro. A natural landmark, because it is a reference point for navigators who come to Guanabara Bay. A geological landmark, because it is a geological site with precise dates from the planet’s history. A historical landmark, because on March 1st, 1565, Estácio de Sá founded the city of São Sebastião do Rio de Janeiro at its feet. And, a tourist landmark, because the inauguration of the Sugar Loaf cable car projected Brazil's name abroad. We were the first cable car to be installed in Brazil and the third in the world.
1. PURPOSE
This Notice governs your access to and use of the website, in Brazil, made available, controlled and operated by PARQUE BONDINHO PÃO DE AÇÚCAR®, COMPANHIA CAMINHO AÉREO PÃO DE AÇÚCAR S/A (“CCAPA” or “PARQUE BONDINHO”) with registered office at Avenida Pasteur 520, Urca, City and State of Rio de Janeiro, CEP: 22.290-240.
The purpose of this Privacy Notice is to report our Users, whether in the digital environment (website) or in the physical environment (PARQUE BONDINHO premises), on how we treat their personal data, so that they can move around with peace of mind and know that their privacy is one of our concerns.
Your privacy is important to us at BONDINHO PARK. Therefore, we protect your personal data. We have produced this privacy notice, which sets out how BONDINHO PARK handles personal data of employees, customers, suppliers, and other stakeholders. This data can be stored physically in offices or digitally in information systems.
This Notice describes how BONDINHO PARK processes and protects your Personal Data, whether collected directly by us, sent by third parties and/or sent to third parties.
We are committed to acting transparently and ethically in all our operations, and this extends to the public bodies and entities with which PARQUE BONDINHO interacts.
Corporate Name | CNPJ |
ITER PARTICIPAÇÕES S.A. | 43.697.470/0001-69 |
TRAVEL ACTIVITIES HOLDING. | 44.317.977/0001-02 |
C2RIO VIAGENS E TURISMO LTDA | 05.873.416/0001-38 |
DESTINOW VIAGENS E TURISMO LTDA. | 44.743.360/0002-30 |
DESTITECH TECNOLOGIA DA INFORMAÇÃO LTDA. | 45.759.751/0001-24 |
PÃO DE AÇÚCAR EMPREENDIMENTOS TURÍSTICO LTDA. | 42.274.233/0001-22 |
NOVO CARACOL E TAINHAS S.A. | 48.255.552/0001-77 |
2. SCOPE
This Notice applies to PARQUE BONDINHO´s clientes, suppliers, visitors and other stakeholders. It must be implemented on the Platform and can be read by all clinets, partners and interested thir parties.
You can check the box to read and acknowledge this Notice. This indicates that you are aware of how we process and use your data and information. This document should be read in conjunction with our Terms and Conditions of Use.
3. ACRONYMS AND DEFINITIONS
3.1. Personal data: Information related to an identified or identifiable natural person, that is, information that directly or indirectly identifies the natural person, such as: CPF, address, voice, image, car license plate and fingerprint. According to the General Personal Data Protection Law – LGPD –, the personal data is legally protected, and its owners have rights over it and what to do with it. If you provide your personal data to PARQUE BONDINHO it is our duty to treat it appropriately and ensure that it is stored securely.
3.2. Data Subject: it is an individualwho the personal data refers to. That is: You. It may also be an applicant to the vacancy, a visitor to our website, a visitor to our Park, etc.
3.3. Sensitive Personal Data: Means Personal Data that deals with racial or ethnic origin, religious belief, political opinion, union membership or organization of a religious, philosophical or political nature, data related to health or sexual life, genetic or biometric data, when linked to a natural person.
3.4. Controller: Means a natural person or legal entity, governed by public or private law, who is responsible for decisions concerning the Processing of Personal Data who, in this case, are we, PARQUE BONDINHO.
3.5. Operator: These are our partners, suppliers and service providers, who process personal data on behalf of PARQUE BONDINHO, helping to process the personal data we collect in order to offer our services and provide the best experience for our users.
3.6. Data Protection Officer (DPO): Is the person appointed by the controller and operator to act as a communication channel between the controller, data subjects and the National Data Protection Authority (ANPD).
3.7. Processing: Any operation carried out with Personal Data, such as those related to the collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, evaluation or control of the information, modification, communication, transfer, diffusion or extraction.
3.8. Platforms: This is the website, e-commerce, social media and communication channels of PARQUE BONDINHO.
3.9. Cookies: Cookies are small text files that, through the Internet browser, record access and location information of visitors to our website. This information is stored on visitors' devices (mobile or not) and can make the experience and access faster.
3.10. Third parties: Include, but are not limited to, customers, suppliers, job applicants and visitors and users in general of the PARQUE BONDINHO website (such parties are referred to herein individually as "Third Party” or collectively as "Third Parties").
3.11. Database: Structured set of personal data, established in one or more locations, in electronic or physical format;
3.12. “International Transfer of Data”: This is the transfer of personal data to a foreign country or international agency of which the country is a member.
3.13. General Personal Data Protection Law (LGPD): Law No. 13,709,of August 14, 2018, also known as the General Personal Data Protection Law, or LGPD, legally regulates the processing of personal data in Brazil, both by digital and physical means, by natural persons or legal entities governed by public or private law, with the purpose of protecting the fundamental rights of freedom and privacy and the free development of the personality of natural persons.
4. DATA PROVIDED TO PARQUE BONDINHO
4.1. The Personal Data provided will be used to enable the provision of the service, offer benefits, and comply with the obligations set forth in specific laws or regulations, and when necessary, after the end of the treatment, or as designated by current regulations, the disposal will be made with specific care.
4.2. Personal Data is collected by different means, depending on the service offered by PARQUE BONDINHO. Below are the operations that collect personal data, as well as the types of data collected through them:
a) REGISTRATION: E-mail, name, Country, State, CPF, Passport, telephone;
b) ONLINE TICKETS PURCHASE: Email, CPF, Passport, Country, State, telephone, credit card details;
c) BUYING OF TICKETS AT THE SELF-SERVICE TOTEM: Name and email address;
d) BUYING TICKETS IN THE PHYSICAL ENVIRONMENT: ID, credit card details, e-mail, proof of residence, student card and other documents required to prove the benefit;
e) NEWSLETTER: Name, e-mail;
f) EDUCA BONDINHO: Name, email and telephone number of the teacher or director in charge, photo and video of the student;
g) EXCLUSIVE CABLE CAR: Name, email address, telephone number;
h) PHYSICAL VISITS TO THE TOURIST PARK (MOUNTAINEERS): Name, CPF and telephone number;
i) BUSINESS AND PARTNERSHIPS: Name, email address, telephone number;
j) TESTIMONIALS: Email, name, image
k) CONTACT US: Name, email address, telephone number;
l) EXCHANGES AND RETURNS: invoice, full name, CPF/RG (ID);
m) CONTACTS VIA WHATSAPP: name, email address and cell phone number
n) CONTACT VIA SOCIAL MEDIA: name and email address.
o) SIG (Integrated Management System): email, CPF, passport, country, state, telephone, address and cell phone.
p) WORK WITH US: Name, date of birth, email, CV;
q) AGENCY MODULE : Corporate name, fictitious name, CNPJ, company email, company telephone number, municipal and/or state registration, representative's name, representative's email, representative's cell phone, CPF, ID and legal representative's date of birth.
r) CANCELLATION OF TICKETS AND/OR RESERVATION: Name, email, CPF/Passport, bank, branch, bank account;
s) CONDUCT AND ETHICS CHANNEL (in the event the data subject chooses to identify themselves): Name, CPF, email, date of birth, telephone number, cell phone number
t) SUBJECT PORTAL (LGPD): Name, email and CPF.
5. DATA COLLECTED BY PARQUE BONDINHO
5.1. The information listed above is provided to PARQUE BONDINHO, but there is data that may be collected automatically when using the services, such as for example:
a) Mobile device data from accesses to the digital platform and other information such as the type and version of browser used;
b) Log data;
c) The IP address;
d) Other data collected through Cookies, as described in the Cookie Policy.
5.2. The purpose of using this data is to improve the performance, security and functionality of our platforms, to serve advertisements in digital environments and to keep track of access to websites.
6. PURPOSE OF PROCESSING
6.1. PARQUE BONDINHO processes your personal information to fulfill legal and contractual obligations and to provide you with our products and services. We will never collect unnecessary personal data and we will not process your information in any way other than that specified in this Notice.
6.2. PARQUE BONDINHO collects Personal Data entered by Third Parties on the PARQUE BONDINHO website, by means of cookies, as specified in the Cookies Policy, or provided by any other means, such as: verbal, written or telephone/WhatsApp calls, during any commercial, administrative or promotional operation.
6.3. If the Data Subject buys a ticket on the website of PARQUE BONDINHO, using communication channels such as "Contact Us", "Customer Service", "Chat", "Register"; "Work with Us", social media, and other means of contact available on the website, the types of Personal Data and the way in which we collect them may vary. In addition, we have the following purpose assumptions:
a) For the selling of tickets of PARQUE BONDINHO, the canceling and/or rescheduling of tickets, as well as checking and granting the benefits provided for by law;
b) To identify and/or send relevant content about a particular preference or interest expressed by you to PARQUE BONDINHO, including newsletters, events, invitations, promotions, social media posts, messages via digital platforms, reminders, thank-you notes, among others;
c) To provide you and our business partners with a more consistent experience when interacting with the company, mainly by learning from the way you use and interact with the websites, applications (App) and other technological solutions. This may include: (i) customizing them according to your preferences and interests, making them more compatible with your technology or otherwise facilitating their use; (ii) maintaining their security and otherwise protecting them; and (iii) developing new websites, applications (App), products and services of PARQUE BONDINHO;
d) For processing and storing the data of employees, trainees and third-party service providers in PARQUE BONDINHO. We will only process the personal data necessary to fulfill the purpose required by the employment relationship and or the execution of the employment or service contract to be possible, taking into account the legislation in force;
e) To protect and manage the interests of PARQUE BONDINHO, of its members and business partners, including to comply withlegal stipulations, regulations by government bodies, fiscal authorities, Judiciary and/or other relevant authority;
f) For processing and storage of data of customers, suppliers and service providers of PARQUE BONDINHO as well as to enter into related agreements;
g) To provide services or carry out transactions requested by you or a business partner; providing information about products, services and transactions of PARQUE BONDINHO;
h) To comply with legislation applicable to the tourism, environmental and intellectual property sectors, among others. This may include: (i) complying with our obligations to retain certain records for minimum periods; (ii) establishing, exercising or acting on legal proceedings and legal or other claims; (iii) complying with laws, regulations, court orders or other legal proceedings; (iv) detecting, preventing and responding to fraud, breaches of our contracts or agreements, other misuse of the Company's websites, applications (App), products or services; and (v) protecting the rights or property of PARQUE BONDINHO or the health, safety, well-being, rights or property of the data subject or third parties;
i) For the fulfillment of any other demand made by you to PARQUE BONDINHO, either by answering your questions, including customer support requests; or by inviting you to participate in or informing you about the results of satisfaction surveys or market research;
j) PARQUE BONDINHO may also use your personal information for other purposes, in a manner consistent with the context in which the information was collected, or with the consent expressed by you.
k) For registration and/or reporting in the Conduct and Ethics Channel;
7. USER’S RIGHTS
7.1. In compliance with applicable regulations regarding the processing of Personal Data, PARQUE BONDINHOrespects and guarantees the following rights to the data subject, upon request, as provided for in Article 18 of Law 13.709/2018:
a) Right of Confirmation and Access: This right allows you to confirm ifPARQUE BONDINHO uses your personal data and, if so, to have access to a copy of the data used;
b) Right of Rectification: This right allows you to request the correction and/or rectification of your personal information that is incomplete, inaccurate or outdated, if you identify this need;
c) Right to request Anonymization, Blocking or Deletion:This right allows you to request from us: (i) anonymization of your personal data, so that they can no longer be related to the individual, and thus cease to be Personal Data; (ii) the blocking of your personal data, temporarily suspending them; and (iii) the deletion of your personal data, if you have objected to the use of your data, at which point PARQUE BONDINHO will delete all your data, with no possibility of reversal, unless there is any other reason for maintaining them, such as any legal obligation to retain data or the need to preserve them to safeguard the rights of the application;
d) Right to Portability: The data subject has the right to obtain from PARQUE BONDINHO the transmission of their data to another responsible party or even to the interested party, by means of a structured format of habitual use and mechanical reading, depending on the regulations of the National Data Protection Authority;
e) Right to the Possibility of Not Providing Consent and its Consequences: This right allows you to have clear and complete information about the possibility and consequences of not providing such consent. In the event that the requested consent is denied, access to the services offered by PARQUE BONDINHO may be limited;
f) Right to Withdraw your Consent: You have the right to withdraw your consent in relation to the terms of this Privacy Notice. This, however, will not affect the lawfulness of any processing carried out previously. If you withdraw your consent, we may not be able to provide certain PARQUE BONDINHO services;
g) Right to Object to Processing: The data subject has the right to object to the processing of their data on grounds relating to their particular situation. In this case, you will be able to contest where and in what context we are processing your personal data for different purposes, and object by requesting the interruption, through the contact channel of the DPO informed in the specific session;
h) Submit a petition to the National Data Protection Authority (ANPD): The data subject may directly demand the ANPD to guarantee their Rights.
7.2. In order to validate the rights of personal data subjects, it will be necessary to request specific information from them to help us confirm their identity and guarantee their rights and the security of their personal data. In such instance, we ask you to contact the data controller directly by the following channel: https://portaldotitular.bondinho.com.br/titular_bondinho.
7.3. PARQUE BONDINHO will respond to all legitimate requests within a reasonable time, except in cases where it will not be possible to respond due to compliance with legal or regulatory obligations, as well as to exercise or safeguard rights or prevent frauds.
7.4. PARQUE BONDINHO clarifies that in the event of a court request for your personal data, we reserve the right to provide your data and information about you in compliance with the national laws.
7.5. We may request some additional Personal Data to prove your identity, in order to prevent incidents and fraud and always ensure the privacy of our customers.
7.6. Users may exercise any other right provided for by law, even if not listed here. As an exception, it is possible that your request will not be met, but if this happens, we will explain why. However, we would like to point out that this will only happen if there are any legal grounds.
8. SHARING PERSONAL DATA
8.1. We share personal data under our control in a lawful and transparent manner. Please note that all operators acting on our behalf only process your data in accordance with our instructions and fully comply with this Privacy Notice, as well as data protection legislation and any other appropriate confidentiality and security measures.
8.2. Some personal data may be shared with other group companies or partner companies and service providers to carry out our day-to-day business operations and to enable us to maintain a proper relationship with you. Under no circumstances do we market the data and information you provide to us. In some cases, your personal data is provided to our suppliers or partners to make a certain service possible or to improve the experience of customers and shopkeepers, for example, to companies that process payments for the purchase of the ticket for you to enjoy our services; advertising companies/agencies, to, among others, develop websites, select and produce ads consistent with your profile, as authorized.
8.3. You should know that we only work with partners who can guarantee an appropriate level of protection for your personal data. This sharing is protected by the contracts we have with these partners. There are cases in which we are compelled by law or regulation to share your personal data with third parties, for example: for the provision of personal information to government agencies, tax authorities, the Judiciary and/or other relevant authority for the fulfillment of existing legal obligations.
8.4. It is possible that, in some situations, we may need to disclose your personal data to third parties. But rest assured, the sharing of Personal Data with third parties will only take place in order to achieve some legitimate and specific purpose that has been previously informed to you. The important thing for you to know is that we will always be transparent with you regarding your data.
9. INTERNATIONAL TRANSFER OF DATA
9.1. PARQUE BONDINHO does not make international data transfers as a rule. No personal data will be transferred to third parties located outside the country, except through the express consent of the data subject or for compliance with a legal, regulatory or contractual obligation, duly informed to the data subject.
9.2. In order to be transparent and ensure a quality service to you and our partners, we have contracted some information systems that host personal data in clouds located outside Brazil. Thus, there are cases where personal data is hosted in other countries so that we can fulfill our mission, as is the case with Google and Microsoft.
10. DATA STORAGE AND DISPOSAL
10.1. All information or Personal Data provided will comply with the security rules necessary to comply with legal provisions and, in addition, efforts are made to ensure that this information is not subject to destruction, loss, alteration or dissemination. We only store your personal information to the extent that we need it to be able to use it in keeping with the purpose for which it was collected and in keeping with the legal basis for its processing.
10.2. We will keep your personal information for as long as your user on our platform is active, for as long as it is necessary for the completion of transactions with you, for as long as there is a contractual, commercial or institutional relationship, or for as long as you do not exercise your right to suppress, cancel or limit the processing of your data.
10.3. Once your user is made inactive on our platforms, the corresponding data will be deleted from our systems, provided that there is no basis for storing it for legitimate purposes, as defined by law, to comply with legal or regulatory obligations, as well as to exercise or safeguard rights or prevent fraud.
10.4. In order to ensure that information and Personal Data are retained for as long as necessary only, the necessary requirements and regulations of the time limits in legal and contractual provisions are complied with. Therefore, in addition to the constant observance and updating of these regulations, regardless of your consent or request for deletion, the General Personal Data Protection Law allows Personal Data to be retained in the following situations:
a) Compliance with legal or regulatory obligations;
b) Transfer to a third party, respecting their rights and provisions in data protection and privacy laws;
c) For exclusive use, access by third parties is prohibited, and provided that the data is anonymized.
10.5. However, you always have the right to request data deletion. We guarantee that we will review this request in accordance with legal requirements.
11. USER RESPONSIBILITY
11.1. The user is exclusively responsible for the use of the application and must respect the rules of this Privacy Notice, as well as the applicable legislation.
11.2. The user assures the truthfulness of all data reported, and is responsible for keeping their personal information up to date.
11.3. PARQUE BONDINHO shall not be held liable for any direct or indirect damages resulting from, or in connection with, access to, use of, or the inability to access or use the Application.
11.4. It is the user responsibility to keep their login and password secure and out of reach of third parties. In this way, the user is responsible for all actions carried out on their account.
11.5. In view of the characteristics inherent in the Internet environment, the application is not responsible for interruptions or suspensions of connection, incomplete or failed computer transmissions, as well as technical failure of any kind, including, but not limited to, electronic malfunction of any network, hardware or software.
11.6. It is under the user responsibility to keep the environment of their device (computer, cell phone, tablet, among others) secure, using the tools available to ensure security as well as to use reliable Internet networks.
11.7. The user declares that they are civilly capable. In the event of access by a user under the age of eighteen (18), with or without the authorization of their legal guardian, the latter will be responsible for all actions taken by the user, as stipulated by law.
12. COMMUNICATION CHANNEL
12.1. If you have any questions, wish to exercise your rights or wish to make any communication, PARQUE BONDINHO, in compliance with Article 41 of the General Data Protection Law, will contact the Personal Data Officer, Louana Costa, at the following email address: [email protected].
13. APPLICABLE LAW / JURISDICTION
13.1. This Privacy Notice is governed and interpreted in accordance with the Laws of the Federative Republic of Brazil
13.2. The Jurisdiction of Rio de Janeiro is hereby elected as the competent venue to settle any issues arising from this document, expressly waiving any other, however privileged this might be.
14. UPDATES OF THIS NOTICE
14.1. PARQUE BONDINHO reserves the right to change this Privacy Notice whenever necessary to ensure functionality, enhancements and updates to the services offered, and is not obliged to maintain the application structure.
Our Cookies Policy will always show the last update date or current version.
Version | Modified item | Reason | Date |
01 | Original version | N/A | 07/27/2021 |
02 | Original version | Update | 12/28/2023 |