comScore
CASACOR

Privacy Policy

CASA COR PROMOÇÕES E COMERCIAL LTDA.

1. Introduction

1.1. This Privacy Policy ("Policy") aims to establish the rules for the processing of your collected data and to make clear the commitment of Casa Cor Promoções e Comercial Ltda. ("CASACOR" or "Company") to ensure the privacy and protection of personal data of the people with whom it relates. This Policy aims to inform, in a clear and transparent manner, how Personal Data are collected, used, shared, stored and protected in the context of CASACOR's activities, in compliance with Brazilian Law No. 13.709/2018 (General Personal Data Protection Law – hereinafter referred to as "LGPD") and other applicable regulations.

1.2. This Policy applies to the sites https://www.casacor.com.br and https://casacor.abril.com.br/pt-BR ("CasaCor Site"); to the CASACOR application available on the App Store and Google Play ("CasaCor App"); CasaCor Digital System available at https://casacordigital.com.br ("CasaCor Digital System"); to CASACOR events, exhibitions and shows ("Events"); as well as to the Company's other institutional, commercial, promotional and operational activities and to other sites, applications and systems that may be developed and/or adopted by the Company.

2. Scope

2.1. This Policy applies to:

  • visitors and users of the Casa Cor Site, CasaCor App and CasaCor Digital System;
  • ticket buyers and Event participants;
  • architects, designers, exhibitors, shareholders, sponsors and commercial partners and franchisees;
  • guests, suppliers, service providers and employees;
  • other Data Subjects whose personal data are processed by CASACOR in the context of its activities.

2.2. For the processing of Personal Data specifically related to the provision or sale of tickets (box office) for Events and the CasaCor App, the terms of the policy available at https://appcasacor.com.br/ and/or https://www.iubenda.com/privacy-policy/84558789 apply additionally.

2.3. Browsing the CasaCor Site, App and Digital System, as well as other sites, applications and systems of the Company, represents the user's free and express agreement to the terms set forth herein, including the rules and conditions regarding data collection and storage, even if the user is not a subscriber to products and services offered by the Company.

2.4. If you access partner features or sites, you will be in another environment and subject to those partners' own practices and policies.

3. Relevant concepts

3.1. For the purposes of this Policy, the concepts set out in this document and those provided in the LGPD apply, including:

  • TREATMENT AGENTS – Controller and Processor;
  • ANONYMIZATION – Use of reasonable technical means available at the time of processing, by which data loses the possibility of association, direct or indirect, with an individual;
  • NATIONAL DATA PROTECTION AUTHORITY or ANPD – Public administration body responsible for ensuring, implementing and supervising compliance with the LGPD throughout the country;
  • DATABASE – Structured set of personal data, established in one or more locations, in electronic or physical form;
  • CONSENT – Free, informed and unambiguous manifestation by which the Data Subject agrees to the processing of their personal data for a specific purpose;
  • CONTROLLER – Natural or legal person, governed by public or private law, who is responsible for decisions regarding the processing of personal data;
  • ANONYMIZED DATA – Data whose Data Subject cannot be identified, considering the use of reasonable technical means available at the time of its processing;
  • PERSONAL DATA – Information related to an identified or identifiable natural person;
  • SENSITIVE PERSONAL DATA – Personal data on racial or ethnic origin, religious conviction, political opinion, trade union membership, health or sex life, and genetic or biometric data when linked to a natural person;
  • DATA PROTECTION OFFICER or DPO – Person appointed by the Controller and Processor to act as a communication channel between the Controller, Data Subjects and the National Data Protection Authority (ANPD);
  • PROCESSOR – Natural or legal person who processes personal data on behalf of the Controller;
  • RESEARCH BODY – Body or entity of direct or indirect public administration or non-profit private legal entity duly established under Brazilian law, with headquarters and jurisdiction in the country, which includes in its institutional mission or social objective basic or applied research of a historical, scientific, technological or statistical nature;
  • DATA SUBJECT – Natural person to whom the personal data that are the subject of processing refer;
  • INTERNATIONAL DATA TRANSFER – Transfer of personal data to a foreign country or international organization of which the country is a member;
  • PROCESSING – Any operation performed with Personal Data, such as collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, elimination, evaluation or control of information, modification, communication, transfer, dissemination or extraction;
  • SHARED USE OF DATA – Communication, dissemination, international transfer, interconnection of personal data or shared processing of personal databases by public bodies and entities in the fulfillment of their legal competences, or between them and private entities, reciprocally, with specific authorization, for one or more processing modalities permitted by such public bodies or between private entities.

3.2. Other terms in capital letters not defined in this Policy shall have the meanings set forth in Article 5 of the LGPD.

3.3. If you are under 18 (eighteen) years of age, whenever this Policy refers to "you", it shall be understood that the statements were made by and refer to you and your legal guardian.

4. Personal Data Collected

4.1. CASACOR may collect different categories of Personal Data, according to the relationship established with the Data Subject, including, but not limited to:

  • registration and identification data: full name, CPF, ID, date of birth, image;
  • contact data: email, phone, address;
  • professional data: profession, company, position, portfolio, professional social networks;
  • browsing and device data: IP address, date and time of access, browser and device information;
  • image and voice data: photographs, videos and recordings made during Events, pursuant to adequate legal basis;
  • data necessary for participation in Events, promotional actions, credentialing, prizes and CASACOR experiences;
  • data provided in communications, forms, registrations, surveys and institutional interactions.

4.2. Personal Data may be collected directly from the Data Subject, through physical or digital forms; Event credentialing; use of CasaCor Site, App or Digital System; institutional interactions, including with partners who have obtained authorization to share them with the Company; as well as automatically, through cookies and similar technologies.

4.3. The accuracy of the information provided by the Data Subject is their responsibility, and the accuracy of such information is of the utmost importance so that CASACOR may carry out the Processing adequately in their interest. It is through such data that the Company will contact and provide its products and services to the Data Subject.

4.4. CASACOR does not process sensitive personal data in a discriminatory manner, limiting itself to legally permitted and strictly necessary cases.

4.5. CASACOR does not intentionally process personal data of children and adolescents without observance of applicable legal bases and the best interest of the minor, in accordance with current legislation. When applicable, processing will be carried out through specific consent and in compliance with the LGPD.

5. Cookies and similar technologies

5.1. The CasaCor Site, App and Digital System may use cookies and similar technologies to improve user experience, enable functionality, evaluate performance, enhance security and, when applicable, support communication and marketing actions.

5.2. The user may manage cookies and other technologies through browser settings and/or consent management tools made available on the site, when applicable, as described in item 5.1 below.

5.3. The Company uses cookies and anonymous identifiers for audience control, browsing, security and advertising, and you agree to this use by accepting this Policy. Cookies used by CASACOR may be classified in various ways:

(i) By validity:

a. Session: they are temporary and remain until the web page or browser is closed. They may be used in e-commerce (allowing you to continue browsing our sites and apps without losing what you put in the cart, for example), to analyze internet traffic patterns and to provide you with a better experience and contextualized content.

b. Permanent: they persist even after the browser has been closed. They may be used to remember your login and password information, for example, or to ensure a better experience across different sessions.

(ii) By ownership:

a. First-party: they are owned by CASACOR, which has full control over the cookies.

b. Third-party: they are owned by third parties but included on your device through the sites, applications and services offered by the Company.

(iii) By purpose:

  • a. Strictly necessary: essential to allow you to use the sites, applications and services we offer, which could not be correctly offered without these cookies. They are usually Session and First-party.
  • b. Performance: they collect anonymous information about how you use and interact with the sites, applications and services offered by the Company, allowing recognition of your preferences and counting of visits and interactions. They are usually First-party.
  • c. Functionality: they allow remembering your choices (such as login and location) and provide more personal experiences, as well as enabling customizations (when available). This information may be anonymized (becoming Anonymized Data) and does not track activity outside the sites, applications and services offered by the Company. They are usually First-party and Permanent.
  • d. Analytics and Advertising: they allow the Company's advertisers to deliver more relevant ads and information to you. They are also used to limit the number of times you view certain ads and to measure the effectiveness of advertising campaigns. They remember your certain preferences and are used to help map your preferences to improve your experience. They are usually Permanent and may be Third-party.
  • e. Social media: they allow you to connect with social media such as LinkedIn, Twitter, Facebook, Pinterest and Instagram. They are usually Permanent and Third-party.
  • f. Security: they help CASACOR monitor fraudulent activity and protect your data from unauthorized access. They are usually Permanent and Third-party.

5.3.1. During browsing on the CasaCor Site, App and Digital System, information about you may be collected through cookies. You may choose not to accept cookies, but in these situations the Company cannot guarantee the correct functioning of these sites and applications. Cookies may be accepted, deleted or rejected through the management tools of the browser you use or through your browser settings in anonymous mode. In this way, your browser will not store your browsing history, cookies from sites and applications, or information provided in forms.

5.3.2. If you wish to know how to manage cookies in popular browsers, access the following links:

5.3.3. The Company uses Google Analytics for data collection and processing, in accordance with Google's policies available at https://www.google.com/intl/pt-BR/policies/privacy/partners/, https://policies.google.com/privacy and https://policies.google.com/terms, with which the user fully agrees by accepting this Privacy Policy. For more information, you may consult the Google policies available at the links above. Any use by Google or its partners of user data collected through these tools is the sole and exclusive responsibility of Google, and the Company is exempt from any liability resulting from such use.

5.3.4. The Company uses market DMP solutions for audience personalization based on cookies that may be accepted, deleted or rejected through the management tools of the browser used by the user.

6. Purposes of processing

6.1. The collection of Personal Data is carried out to legitimize administrative, commercial and customer experience relationships, such as, but not limited to: security and performance management; contact information; human resources; business enablement and service delivery; and other purposes as stipulated by CASACOR.

6.2. In this regard, Personal Data are processed for legitimate and specific purposes, such as:

  • enabling access, browsing and use of the CasaCor Site;
  • promoting, organizing, executing and publicizing Events;
  • conducting credentialing, access control and audience management;
  • selling tickets, products, experiences and services and proceeding with payment orders made by users;
  • complying with legal, regulatory and contractual obligations, safeguarding the Company as to its rights and obligations related to the use of CASACOR sites, applications and systems and services provided by the Company;
  • protecting CASACOR's rights in judicial, administrative or arbitral proceedings and cooperating and/or complying with court orders or administrative authority requests, as well as fulfilling obligations to report certain activities preventively to competent authorities;
  • responding to requests, questions and contacts from Data Subjects;
  • consulting data in private and public bureaus to verify accuracy, update them or request complementary data;
  • maintaining updated records for contact by phone, email, SMS, direct mail, WhatsApp, Telegram or other means of communication and instant messaging tools;
  • carrying out institutional, promotional, marketing and relationship actions, including sending newsletters and information on events, promotions and contests and promoting the Company's and its partners' services, as well as providing information on news, features, content, news and other information relevant to maintaining the relationship with the Company;
  • improving user experience and operational security;
  • managing risks and detecting, preventing and/or remediating fraud or other potentially illegal or prohibited activities, as well as violations of applicable policies or terms of use;
  • conducting statistics, studies, research, project planning and surveys relevant to user activities and behavior when using the sites, applications, systems and services provided by the Company.

6.3. By voluntarily registering on CASACOR sites, applications and systems and/or becoming a client of the Company's products and services, you grant authorization for the Company to send newsletters, offers and information by email, WhatsApp, Telegram or other instant messaging tools for an indefinite period, but you may unsubscribe at any time by following the procedures set out in items 11 and 12 of this Policy or by selecting the unsubscribe option in the emails you receive.

6.4. The use, access and sharing of the database formed under this Policy will be carried out within the limits and purposes of the Company's activities, and the Company may access it, consult it and/or provide and make it available for access and/or consultation by business partners, suppliers, service providers, subcontractors, authorities or third parties in general, provided that the provisions of this Policy, applicable legislation or court order are observed.

6.5. CASACOR is authorized to request, and you are required to provide, documents and additional information necessary for the Company to comply with its obligations arising from legislation related to the identity of its clients and the origin of the funds it operates, including for know-your-customer and anti-money laundering procedures. Information obtained by the Company in response to such inquiries will be treated as confidential. The Company is authorized to share data required by applicable legislation with competent authorities and with third parties who need access to the data to prepare/validate reports on the Company's activities under such legislation.

6.6. You are responsible for the confidentiality, use and all acts related to the use of your credentials on CASACOR sites, applications and systems (such as, but not limited to, login, password and authentication token). If you identify or suspect that a third party has access to such credentials, you must change them directly on the relevant sites, applications and systems, or request assistance from the Company through the contact details indicated in item 11. Voluntary sharing of your credentials resulting from your action constitutes a risk to the security of your information and a violation of this Policy.

6.6.1. CASACOR values the security and inviolability of your credentials. For this reason, it constantly searches and monitors the internet at its various layers in order to identify, collect and process for validation purposes (authentication tests) logins and passwords potentially belonging to users that have been improperly published on the internet by third parties.

6.6.2. If through authentication tests CASACOR finds that your credentials have been compromised (made accessible to third parties), the Company – for security and to prevent inappropriate third-party access to your account and data – will preventively block your credentials. If you have any questions – including on how to unblock credentials – you may consult the terms of use on the sites, applications, systems and services provided by the Company, or contact the support center.

6.7. CASACOR may (i) anonymize Personal Data, making it Anonymized Data; (ii) enrich its database by adding information from other legitimate sources; and (iii) process Personal Data based on the Company's legitimate interest, as provided for in applicable legislation.

6.8. CASACOR may use your Personal Data to profile you in order to improve its services or comply with applicable legislation, including, but not limited to, know-your-customer obligations. The user profile will be shared exclusively in accordance with this Policy or applicable legislation.

6.9. Internally, Personal Data will only be accessed by professionals duly authorized by CASACOR, respecting the principles of purpose, adequacy and necessity, among others provided for in applicable legislation, for the Company's objectives, in addition to the commitment of confidentiality and preservation of privacy under this Policy.

6.10. Anonymized Data may be collected, processed, stored, used, transferred and disclosed for any purpose, regardless of your authorization, under the LGPD.

6.11. CASACOR has commercial partners that may offer services through features or sites accessed from the sites, applications, systems and services provided by the Company. Data provided by you to these partners will be the responsibility of the partners, and thus subject to their own data collection and use practices, with no liability on the Company regarding such data.

7. Legal bases for processing

7.1. The processing of personal data by CASACOR is carried out based on the legal bases provided in the LGPD, including, as the case may be:

  • consent of the Data Subject;
  • performance of a contract or preliminary procedures;
  • compliance with a legal or regulatory obligation;
  • exercise of rights;
  • legitimate interest of CASACOR, respecting the Data Subject's fundamental rights and freedoms.

7.2. The applicable legal bases may vary according to the specific processing activity, observing the purposes and rights of the Data Subjects.

8. Sharing of personal data

8.1. CASACOR may share Personal Data with:

  • directly or indirectly controlled companies, controlling or under common control and associations to which CASACOR is associated, when necessary for administrative, operational and governance purposes;
  • suppliers, partners, franchisees, shareholders, sponsors and service providers, strictly for the performance of contracted activities;
  • technology platforms, payment means, box office and credentialing;
  • public authorities and regulatory bodies, when required by law.

8.2. When applicable, such third parties will act as Personal Data Processors under the LGPD and will be contractually required to adopt security and data protection measures compatible with this Policy and applicable legislation.

8.3. Sharing of your data may be done with entities located outside your country of residence. In such cases, the processing, treatment, use and sharing of data will be done in accordance with applicable legislation and this Policy, in particular item 9.

8.3.1. When there is transfer of data originating from the European Economic Area to countries that have not been recognized by the competent authorities as offering an adequate level of protection, the Company will ensure the use of appropriate tools and measures (such as the European Commission Standard Contractual Clauses).

8.4. Sharing always occurs in observance of the principles of necessity, purpose and security.

9. International transfer of data

9.1. If there is international transfer of personal data, CASACOR will adopt the legally provided mechanisms, ensuring an adequate level of protection, in compliance with the LGPD, ANPD Resolution No. 19 and other specific regulations.

10. Storage and security

10.1. CASACOR adopts technical and administrative security measures to protect Personal Data against unauthorized access, loss, alteration or improper disclosure, including access controls, internal policies, training and incident management.

10.2. Your collected data will be stored in a secure and controlled environment. However, eventual damage and/or loss resulting from failures, viruses or intrusions of the database of the sites, applications, systems and services offered by us may occur, so that CASACOR will spare no effort to ensure the security of your data, adopting appropriate security measures. Should such events occur, we will notify affected users and all appropriate measures will be taken.

10.3. Your data obtained may be stored on CASACOR's own servers or on those of third parties contracted for this purpose, whether located in Brazil or abroad, and may also be stored through cloud computing technology and/or others that may emerge in the future, always aiming at the improvement of CASACOR's activities. Where the Company keeps its database on third-party servers, it will require that data be stored in accordance with applicable legal standards of security and control.

10.4. Personal Data are stored only for the time necessary to fulfill the purposes for which they were collected, in accordance with retention and disposal criteria defined in internal policies and applicable legal obligations.

11. Data Protection Officer

11.1. Our DPO (Data Protection Officer) is Mr. André Secchin de Almeida. If you have any questions about this Privacy Policy or wish to exercise any of your rights listed in item 12 below, you may contact us at privacidadecasacor@abril.com.br.

12. Rights of Data Subjects

12.1. Under the LGPD, the Personal Data Subject may exercise, at any time, the following rights:

  • confirmation of the existence of processing: you have the right to receive confirmation of the existence of processing of your personal data;
  • access and rectification of data: you may request access to your Personal Data, as well as the correction of incomplete, inaccurate or outdated data;
  • anonymization or deletion of data: you may request the anonymization of your Personal Data and also the deletion of your data (i) where the data is no longer necessary or is excessive for the purpose for which it was collected, (ii) where you have withdrawn your consent, when this is the legal basis for Processing, or (iii) where there is a legal obligation to erase your personal data.
  • portability: you have the right to request the transmission of your Personal Data to another Controller or to a third party of your choice, in a structured format;
  • information: you have the right to be informed, in a clear and accessible manner, about the collection and use of your Personal Data, including information such as (i) the purpose of Processing, the retention period, and with whom the information will be shared; (ii) the possibility of not providing consent and the consequences of refusal; and (iii) the public or private entities with which the Controller has shared your Personal Data;
  • revocation of consent: you have the right to request the revocation of consent, when data processing is based on the legal basis of consent;
  • review of automated Processing: request the review of decisions made solely on the basis of automated Processing of Personal Data that affect your interests, including decisions intended to define your personal, professional, consumer and credit profile or aspects of your personality.

12.2. Requests must be sent to the Data Protection Officer through the channels indicated in item 11 of this Policy.

13. Use of image, voice and audiovisual content

13.1. During Events, image, voice and audiovisual recordings may be made for institutional, promotional and commercial purposes, pursuant to specific authorization terms and applicable legal bases.

14. Changes to this Policy

14.1. This Policy may be updated at any time to reflect improvements, legal changes or changes in CASACOR's activities. The updated version will always be available on the CasaCor Site.

14.2. You should review this Policy regularly to ensure you are always aware of the changes implemented. Continued use of CASACOR's sites, applications and systems after the publication of any change will imply your agreement to the new terms. If you do not agree with any condition, you must not access and/or use the Company's sites, applications and systems.

15. General provisions

15.1. If you consider that CASACOR has violated any legal provision or this Policy, you have the right to file a complaint through the channels provided in item 11, as well as to petition the competent authority if you deem it necessary.

15.2. Third-party companies that process any data collected by CASACOR must comply with the conditions set forth herein and the Company's Information Security standards.

15.3. If any provision of this Policy is deemed illegal or invalid by the competent authority of the locality in which the user resides or of their internet connection, the remaining provisions will remain in full force and effect.

15.4. This Policy shall be interpreted in accordance with Brazilian law, in the Portuguese language, and the jurisdiction of the city of São Paulo is elected to resolve any dispute or controversy involving this document, save for specific reservation of personal, territorial or functional jurisdiction by applicable legislation.