PRIVACY POLICY

This Privacy Policy refers to the platform www.bilheteria.masp.org.br (“Platform”), operated by the São Paulo Museum of Art Assis Chateaubriand, a private non-profit association, headquartered in the city of São Paulo, State of São Paulo, at Avenida Paulista, nº 1578, Cerqueira César, 01310-200, registered with the CNPJ/ME under nº 60.664.745/0001-87 (“MASP”), and addresses the security and privacy of personal data (“Data”) owned by users who browse and register on the Platform (“Holder” or “User”), in accordance with the conditions also provided in our “Terms of Use” available at the link: www.bilheteria.masp.org.br/pt-BR/terms-of-use.

Whenever there is a mention of the terms “we” or “our”, we are referring to MASP, and whenever we mention the terms “you”, “Holder”, “User”, “your”, “yours”, we are referring to you, the user of the Platform, who is consenting to this Privacy Policy.

The privacy of your information is of great importance to us. We have a policy to respect the confidentiality of information and the privacy of Users. Therefore, this Privacy Policy explains, in a simple, objective, and transparent manner, which Data is collected, how it is used and processed, and for what purposes, in addition to indicating the resources available to Holders to manage Data, in accordance with the General Data Protection Law (Federal Law nº 13.709/2018) and other data protection legislation in force in the country.

1. Introduction

The Platform allows the offering of tickets for exhibitions and events promoted or hosted by MASP, enabling the purchase of such tickets by the User. The provisions of this Privacy Policy apply solely and entirely to the Platform.

By browsing the Platform, your browsing data is collected as explained in this Policy. In addition, to register on the Platform (“Registration”), necessary to complete the purchase of tickets, we need some of your personal data (“Personal Data”) to enable the operation.

All information is processed in accordance with the provisions of the General Data Protection Law and its legal bases, including, but not limited to: execution of a contract (“Terms of Use”); compliance with legal obligations; legitimate interest of MASP or third parties; and, when necessary, with your consent.

The technical and organizational procedures in force will be constantly reviewed according to legislative, jurisprudential, or best practice updates on the subject. For your convenience, the date of the last review is included at the top of this page. As part of the measures adopted, we monitor and provide training to raise awareness among our employees about the importance of privacy and personal data protection.

If, after reading this Privacy Policy, you have any questions, or for any reason need to contact us regarding matters involving your Data, please contact us via email at privacidade@masp.org.br

2. What Data is collected by MASP and for what purpose?

To enable your Registration on the Platform, necessary for the purchase of tickets, as explained in the Terms of Use, as well as other actions resulting from these activities, such as sending tickets by email and customer service, we collect and process the Personal Data indicated below:

The purposes mentioned do not prejudice other purposes that meet the legal bases of the General Data Protection Law, including compliance with legal obligations and legitimate interest of MASP, being certain that, whenever a use fits exclusively in the legal basis of consent, it will be duly collected from the User.

3. Storage and security of personal data

MASP stores Users' Personal Data securely, in data centers, by contracting specialized services that employ the best techniques to protect your Personal Data.

Your Personal Data will be maintained throughout the period you keep your Registration active on the Platform, as explained in the Terms of Use, with the possibility of extending the period for audit purposes or to enable compliance with legal or regulatory obligations.

4. Cookies and monitoring technologies

We may use monitoring technologies to collect information about activities performed on the Platform automatically. The information collected through such technologies is used to perform performance metrics, identify usage problems, capture user behavior in general, and collect content impression data.

5. Your rights as the holder of personal data

We value the security of your Personal Data, respect your privacy, and are transparent with you. In this sense, in addition to the information provided in this Privacy Policy, you can also exercise the rights provided in the General Data Protection Law; among them:

All requests will be treated free of charge and will be subject to a prior evaluation of your identity and the feasibility of meeting them, in order to comply with any obligations that prevent the complete fulfillment of the rights holders' requests.

6. Retention and deletion of your personal data

All your Personal Data will be treated with security and privacy throughout the period you remain in our database or our service providers.

If you wish us to no longer process your personal information, please contact us at the email: privacidade@masp.org.br

The User understands and agrees that, by requesting the cessation of the processing of their Data, they waive the use of the registration and purchase functionalities on the Platform, since the processing of the Data is a requirement to enable these functionalities. They also declare that they understand that MASP may keep the data necessary to comply with legal/regulatory/judicial obligations.

7. Disclaimer

MASP is not responsible for the misuse or loss of Personal Data over which it has no access or control. We are also exempt from liability for the illegal and unauthorized use of Personal Data as a result of misuse or diversion of your access credentials; or negligent or malicious conduct as a result of acts or omissions on your part or someone authorized on your behalf, as explained in the Terms of Use.

8. Changes to this Privacy Policy

Any changes to this document will be valid, effective, and binding after the new version is published on our website. Any material changes or updates that imply the need to collect User consent will be sent to your email.

For your convenience, the publication date of the most recent version is at the top of this Privacy Policy.

9. Contact us

Any clarifications or questions about this Privacy Policy can be made via email at privacidade@masp.org.br.

10. SMS Communications

By accepting these Terms and Conditions and/or the Privacy Policy, you agree to receive text messages (SMS) sent by MASP to the registered phone number. These messages may include purchase confirmations, updates about your order, customer support and promotional communications. If at any time you wish to unsubscribe from receiving messages, you may send STOP in response to any SMS received or update your preferences in your account. After unsubscribing, you will no longer receive text messages unless you provide new consent.