Privacy and Cookies Policy

Baoba Pousada Buzios LTDA, a private legal entity registered under CNPJ number 09.271.928/0001-85, with headquarters at Rua G IV - Lote 20 - Ferradura - Armação de Búzios - RJ - Brazil (“POUSADA”), considers the electronic records and personal data left by you (“User”) when using the various websites and services (“Pages”) of the POUSADA to be sensitive and relevant. This Privacy Policy (“Policy”) serves to regulate, in a simple, transparent and objective manner, what data and information will be obtained, as well as when they may be used. To better illustrate how we process data, we present a summary of our Privacy and Personal Data Protection Policy (“Policy”):

Summary table

Treatment Agent

Baoba Pousada Buzios LTDA 09.271.928/0001-85 Rua G IV - Lote 20 - Ferradura - Armação de Búzios - RJ - Brasil

Role in Treatment

Predominantly responsible for treatment

Nature of the Data Processed

Personal data provided by the user and/or collected automatically for purposes within legal regulations.

Purpose as a Controller

Using personal data for hiring purposes, advertising purposes, such as sending information, promotions, campaigns and discounts, for the dissemination of events and programs or for conducting satisfaction surveys, for allocation to eventual Operators, exclusively for the purpose of fulfilling the obligation of the POUSADA with the guest. Legal basis: Consent of the data subject.

Sharing

Sharing is only permitted to comply with contractual rules or legal requirements.

Data Protection

Appropriate safety, technical and administrative measures.

Your Rights

Confirmation of the existence of treatment, access, correction, etc.

Contact

reservas@villabaoba.com.br

This Policy may be updated at any time, with notice posted on the website and/or by email, if the User has opted to receive communications from POUSADA.


1. What Data Do We Use?

The guesthouse may collect information actively entered by the User during registration, as well as information automatically collected when using the pages and the network, such as, for example, identification of the commercial establishment used, IP address with date and time of connection, among others. Thus, two types of personal data are processed:

a) User-Provided Information: The INN collects all information actively entered by the User on the Pages, such as full name, email, gender, date of birth, city, and state, when the User fills out forms on the Pages. The INN may use this information to promote advertising material, promotions, discounts, events, and loyalty programs, as well as to conduct satisfaction surveys. b) Data may be automatically collected, such as characteristics of the access device, browser, IP address (with date and time), IP origin, information about clicks, pages accessed, subsequent pages accessed after leaving the Pages, or any search term typed on the site or in reference to it, among others. For this collection, standard technologies such as cookies, pixel tags, beacons, and local shared objects may be used, which are used for the purpose of improving the User's browsing experience on the Pages, according to their habits and preferences. It is possible to disable the automatic collection of information through certain technologies, such as cookies and caches, via your internet browser settings, as well as on our own website, specifically regarding cookies. However, the User should be aware that if these technologies are disabled, some features offered by the site, which depend on the processing of said data, may not function correctly. Furthermore, satisfaction surveys may be conducted, collecting this information to continuously improve our services, to better understand your preferences and evaluate the quality and your impressions of our tools, as well as for statistical and advertising purposes. The collected information may be shared by the INN with: a) other partner companies, when necessary for the proper provision of services related to its activities; b) to protect the interests of the INN in any type of conflict; c) by court order or request from a competent authority. We also clarify that your information may also be shared with companies providing the technological and operational infrastructure necessary for the INN's activities, such as payment intermediaries and information storage service providers. The User may access, update, and add their data, as well as request the deletion of their data collected from the INN, which is obligated to provide the service and notify any Data Operators that may be part of the reservation chain. The Controller is responsible for ensuring that the Data Operators fulfill the obligation to delete the data. It is understood that deletion will only not occur if there is a legal obligation that prevents the request from being fulfilled. If there is no request for data deletion or updates, the INN is responsible for respecting the retention periods established by law.


2. How We Use the Data

The information collected by POUSADA is intended for the establishment of a contractual relationship or the management, administration, provision, expansion and improvement of the Pages to the User, adapting them to their preferences and tastes, as well as the creation of new services and products to be offered to Users. If the User no longer wishes to receive advertising information from POUSADA, they may contact POUSADA at any time through its customer service channels, and the User is solely responsible for informing any Data Operators operating throughout the reservation chain. Legal Basis: In these cases, data processing is authorized by item I of article 7 of Law No. 13.709/2018, the General Data Protection Law (“General Data Protection Law - LGPD”).

 

3. How We Use Cookies

Cookies are files or pieces of information that may be stored on your devices when you visit the POUSADA website. Generally, a cookie contains the name of the website that originated it, its lifespan, and a value that is randomly generated. POUSADA uses cookies to facilitate use and better adapt the pages to your interests and needs, as well as to compile information about the use of our websites and services, helping to improve their structure and content. Cookies may also be used to speed up your future activities and experiences on the pages.

Types of cookies and what they do.

Required

These cookies help us understand how visitors interact with the POUSADA's pages, providing information about the areas visited, the time spent on the site, and any problems encountered, such as error messages.

Functional

These cookies allow the POUSADA website to remember your choices, providing a more personalized experience. They also enable users to watch videos and use social tools, comment sections, forums, and more.

Marketing

These cookies are used to provide more relevant content of interest to Users. They can also be used to present more targeted advertising and allow the measurement of the effectiveness of an advertising campaign by the INN. Furthermore, these cookies can be used to indicate to the INN's Pages the websites that the User has visited, and the INN may share this information with third parties, such as contracted advertising agencies or data operators.

After the User consents to the use of cookies when using the POUSADA Pages, a cookie may be stored on their device to remember this for the next session. At any time, the User may revoke their consent regarding cookies, in which case they must delete the cookies from the POUSADA Pages using the settings of their preferred browser. For more information on how to manage cookies in browsers:

Internet Explorer: https://support.microsoft.com/pt-br/help/17442/windows-internetexplorer-delete-manage-cookies

Mozilla Firefox: https://support.mozilla.org/pt-BR/kb/ative-e-desative-os-cookies-queos-sites-usam

Google Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform=Desktop& hl=pt-BR

Safari: https://support.apple.com/pt-br/guide/safari/sfri11471/mac


Finally, we remind you that if the User does not accept some cookies from the POUSADA Pages, certain services may not function optimally.


4. With Whom We Share the Data

The guesthouse works with partners who offer solutions for the tourism and hotel market, as well as operating in the corporate segment, and may share the information collected through the Pages in the following circumstances:

a) With other companies in the Group, incorporated or operating in any country, that undertake to use the information for the same purposes indicated in this Policy; b) With partner companies, in the development of the POUSADA's commercial activities, including connections and distribution of reservations, servers, etc.; c) To protect the POUSADA's interests in any type of conflict, including legal actions; d) In the case of corporate transactions and changes involving the POUSADA, in which case the transfer of information will be necessary for the continuity of services; or, e) By court order or at the request of administrative authorities that have legal competence to request it.


5. How We Keep Data Secure

The guesthouse will store the collected information on its Data Operator Pages or those contracted by it.


The INN uses reasonable market and legally required means to preserve the privacy of data collected on its Pages. Therefore, it adopts the following precautions, in accordance with the guidelines on security standards established in Decree No. 8.771/2016, and relates to Data Operators with the same guidelines. Data Operators are only responsible for any data that passes through their database for the full fulfillment of reservations; they are not responsible for managing or overseeing how the INN conducts its Internal Policies, conduct, or security practices.


The guesthouse makes every effort to preserve the privacy of User data. However, no website is completely secure, and the guesthouse does not fully guarantee that all information transmitted on the Pages will not be subject to unauthorized access perpetrated through methods developed to obtain information improperly. For this reason, we encourage Users to take appropriate measures to protect themselves, such as allowing third parties to use their data, credit cards, or passwords.


6. Retention of Collected Information

The information collected by POUSADA, through the Pages, will generally be automatically deleted from its servers when it is no longer useful for its intended purpose, after compliance with legal obligations, or when the user requests the deletion of their personal data. Notwithstanding the foregoing, the information may be retained to comply with legal or regulatory obligations, and transfer to third parties may occur. POUSADA is responsible for verifying the reliability of its Data Operators, holding them liable only if it is proven that any damages were caused by the Data Operators.


7. Your Rights

In compliance with applicable regulations regarding the processing of personal data, POUSADA is responsible to the User for the possibility of submitting requests based on the following rights: a) confirmation of the existence of processing; b) access to data; c) correction of incomplete, inaccurate or outdated data; d) blocking or deletion of unnecessary, excessive or unlawfully processed data; e) deletion of data processed with the User's consent; f) obtaining information about the public or private entities with which POUSADA has shared their data; g) information about the possibility of not providing their consent, as well as being informed about the consequences in case of refusal; h) revocation of consent. If you need any assistance to exercise your rights, the User can contact POUSADA, as per the guidelines in this Policy. The User is aware that the deletion of essential information for managing their account with POUSADA will imply the termination of their registration, with the consequent cancellation of the services then provided. Contact us by email: Please email reservas@villabaoba.com.br with the subject line "Privacy Policy".

The guesthouse will make every effort to fulfill such requests in the shortest possible time. However, even in the case of a deletion request, the minimum storage period for user information from internet applications, as determined by Brazilian law, will be respected.


8. Consumer Relationship

The guesthouse is directly responsible for all consumer relations with the guest, and any Data Operators are not responsible for such obligations.


9. Legislation

This Policy shall be governed, interpreted and enforced in accordance with the Laws of the Federative Republic of Brazil, especially Law No. 13.709/2018.