Mundo Ticket Privacy Policy.

1. General Information and Definitions.

(Website: https://www.mundo-ticket.com/; https://www.credenciamento.mundo-ticket.com)

Mundo Ticket values the privacy of its users and has created this Privacy Policy to demonstrate its commitment to protecting your privacy and personal data, in accordance with the General Data Protection Law (Lei Geral de Protecao de Dados) and other laws on the subject (Brazilian Civil Rights Framework for the Internet, Law No. 12,965/14 (“Marco Civil”) and other legal provisions in accordance with national law, as well as the General Data Protection Regulation (“GDPR”) (EU) 2016/679 and/or any legislation that regulates, amends, or replaces said legislation), as well as to transparently describe how your privacy is protected when collecting, processing, and storing your personal information related to the services it provides.

1.1 Definitions

User:

all natural persons who will use the Mundo Ticket platform, over 18 (eighteen) years of age or emancipated and fully capable of performing acts of civil life, or those who are absolutely or relatively incapable and duly represented or assisted, or children and adolescents whenever necessary with the specific consent of their respective father, mother, or legal guardian.

Personal Data:

means any information processed by Mundo Ticket, by any means, even if public, that: (I) identifies, or when used in combination with other information, identifies an individual; or (II) through which the identification or contact information of a natural person can be derived. Personal Data may be in any media or format, including electronic or computerized records, as well as paper-based files. Personal Data, however, does not include business phone numbers, business cell phone numbers, business addresses, or business email addresses.

Data Processing:

any operation performed with personal data, such as those related to collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination, or extraction.

Purpose:

the objective or goal that Mundo Ticket wishes to achieve through each act of processing personal information.

Necessity:

the justification for why it is strictly necessary to process personal data to achieve the purpose, avoiding excessive collection.

Legal Bases:

the legal foundation that makes the processing of personal data legitimate for a given prior purpose by Mundo Ticket.

Consent:

express and unambiguous authorization given by the User who is the holder of the personal data for Mundo Ticket to process their personal data for a previously described purpose, in which the legal basis required for the act demands the express authorization of the holder.

Websites:

The internet page or interface administered by Mundo Ticket to which this Privacy Policy applies, such as https://www.mundo-ticket.com and https://www.credenciamento.mundo-ticket.com.

This policy applies, in general, to all Users and potential Users of the services offered by Mundo Ticket, including Users of Platforms, interfaces, apps, websites, or other means operated by Mundo Ticket, and summarizes how Mundo Ticket, through such channels, may collect, produce, receive, classify, use, access, reproduce, transmit, distribute, process, archive, store, delete, evaluate or control information, modify, communicate, transfer, disseminate, or extract collected data, including personal identification information, in accordance with applicable legal bases and all privacy and data protection laws in force.

By accessing and/or using Mundo Ticket channels, the User declares to be at least 18 (eighteen) years old and to have full and express capacity for the acceptance of the terms and conditions of this Privacy Policy and any Consent Terms for all legal purposes, or to be authorized by a legal guardian to do so.

If the User does not fit the description above and/or does not agree, even in part, with the terms and conditions contained in this Privacy Policy, they should not access and/or use the services offered by Mundo Ticket.

2. Collection and Use of Personal Information.

Mundo Ticket clarifies that it is a ticket sales and access management Platform that provides services for event organizers, whether for third parties or companies within its group. As such, it may at times receive personal data directly from users, or in some cases act as a Data Processor for data shared by clients' users in order to fulfill contractual obligations.

Any and all specific rules regarding the event itself or interference with other data that has not been shared or collected directly by Mundo Ticket are not its responsibility.

The User is aware that they provide information consciously and voluntarily through the registration process, or that their data was received from related third parties in effective compliance with legal terms.

When the User registers on the Mundo Ticket platform, certain requested Personal Data will be kept confidential and will be used only for the purpose that motivated the registration, as outlined in the Purpose Table below:

Purpose Table:

Automatic Data Collection:

When accessing our platform, some information may be collected automatically for the purpose of improving the browsing experience and flow, conducting market intelligence and risk analysis, such as the city of origin of the access, system used, referral site, pages visited, time and duration of the visit, devices used, among other behavioral information, to enable specific advertising targeting based on user interest, as well as to analyze event quality, areas of greatest interest, and other data that enable improvements to the features offered to users.

We emphasize that no personal data, i.e., data that identifies or allows the identification of users, is collected automatically or without user consent. Automatically collected data does not allow user identification and will not be used for that purpose. Automatically collected information is generally stored in the user's browser in the form of cookies.

There is the possibility of rejecting or blocking cookies on your device through your browser settings. Limiting cookies does not prevent access; however, it may impair the user experience or reduce website functionality when using it.

3. Sharing and Processing of Personal Information.

At some events, the User may be given an access credential. It may contain a barcode or QR Code that can be read at any point requiring flow control, at the discretion of the Event organizers. This barcode or QR Code stores some of the User's personal data (e.g., full name, email, phone, city, gender, date of birth). It is important to note that no banking information or sensitive personal data is capable of being shared through the reading of your credential.

It is possible that, in order to participate in activities within booths at events, some third-party exhibitors may request personal data and signature of liability terms from the User. To facilitate this process, at some booths the User may directly use the credential to provide the data stored therein, as mentioned above.

Thus, the User may directly share their personal data with exhibitors by authorizing the reading of their credential. As this is not a data sharing by Mundo Ticket but directly by the User, Mundo Ticket is not responsible for the data processing that will be carried out by the exhibitor.

Mundo Ticket will not make Personal Data collected on its websites available to email list brokers without your express consent.

Mundo Ticket may disclose collected Personal Data to third parties in the following situations and within the limits required and authorized by law:

1. With its clients and partners when necessary and/or appropriate for the provision of related services;
2. With companies and individuals contracted for the performance of certain activities and services on behalf of Mundo Ticket;
3. With group companies;
4. With suppliers and partners for the execution of services contracted with Mundo Ticket (such as information technology, accounting, among others);
5. For administrative purposes such as: research, planning, service development, security, and risk management.
6. When necessary due to legal obligation, determination by a competent authority, or court order.

In cases of sharing Personal Data with third parties, all parties mentioned in items I through VI shall use the shared Personal Data in a manner consistent with and in accordance with the purposes for which they were collected and in accordance with what was determined by this Privacy Policy, other website or country privacy statements, and all applicable privacy and data protection laws.

Mundo Ticket may act solely as a Data Processor for data collected by third parties (Controllers). This scenario applies in cases where the company contracting Mundo Ticket receives data from its respective users and forwards it so that Mundo Ticket can perform its service provision.

In these cases, Mundo Ticket is committed to acting in accordance with the determinations of the Controllers of the collected data, respecting them and acting in accordance with applicable legislation.

4. Legal Reasons for Disclosure of Your Data.

In certain circumstances, to the extent necessary or appropriate, Mundo Ticket may disclose Personal Data to government agencies, consultants, and other third parties in order to comply with applicable legislation or a court order or subpoena, or if Mundo Ticket believes in good faith that such action is necessary to:

1. Comply with legislation that requires such disclosure;
2. Investigate, prevent, or take action related to suspected or actual illegal activities, or to cooperate with government agencies, or to protect national security;
3. Execute its contracts;
4. Investigate and defend against any claims or allegations by third parties;
5. Protect the security or integrity of the services (for example, sharing with companies facing similar threats);
6. Exercise or protect the rights, property, and security of Mundo Ticket and its affiliated companies;
7. Protect the rights and personal safety of its employees, users, or the public;
8. In the event of sale, purchase, merger, reorganization, liquidation, or dissolution of Mundo Ticket.

Mundo Ticket will notify the respective Users or their contractors about any legal demands that result in the disclosure of personal information, as set forth in item 4, unless such notification is prohibited by law or by court order, or if the request is an emergency. Mundo Ticket may contest these demands if it deems the requests to be excessive, vague, or made by incompetent authorities.

5. Security of Personal Information.

All Personal Data will be stored in the Mundo Ticket database or in databases maintained “in the cloud” by employees of specific internal departments and/or service providers contracted by Mundo Ticket, who are duly in compliance with current data legislation.

Mundo Ticket and its suppliers use various security procedures to protect the confidentiality, security, and integrity of your Personal Data, including through encryption of data in transit, preventing the occurrence of possible damages resulting from the processing of such data.

Although Mundo Ticket uses security measures and monitors its system to check for vulnerabilities and attacks to protect your Personal Data against unauthorized disclosure, misuse, or alteration, the User understands and agrees that there are no guarantees that information cannot be accessed, disclosed, altered, or destroyed by a breach of any physical, technical, or administrative protections.

6. Data Retention.

Mundo Ticket has a Personal Data retention policy aligned with applicable law. Personal Data is stored only for as long as necessary to fulfill the purposes for which it was collected, unless there is any other reason for its retention, such as compliance with any legal, regulatory, contractual obligations, among others permitted under law.

A technical analysis is always performed to determine the appropriate retention period for each type of Personal Data collected, considering its nature, necessity of collection, and the purpose for which it will be processed, as well as any retention needs for compliance with obligations or the safeguarding of rights.

7. Legal Bases for Processing.

Mundo Ticket only processes Personal Data in situations where it is legally authorized or with the express and unambiguous consent of the User.

As described in this Policy, Mundo Ticket has legal bases to collect, produce, receive, classify, use, access, reproduce, transmit, distribute, process, archive, store, delete, evaluate or control information, modify, communicate, transfer, disseminate, or extract data about the User.

The legal bases include your consent, contracts and preliminary contractual procedures (where processing is necessary to enter into the contract with the User), and legitimate interests, provided that such processing does not violate your rights and freedoms, as can be verified in the Purpose Table.

Such interests include protecting the User and Mundo Ticket from threats, complying with applicable legislation, the regular exercise of rights in judicial, administrative, or arbitration proceedings, enabling the conduct or administration of business, including quality control, reports, and services offered, managing business transactions, understanding and improving business and customer relationships, and allowing users to find economic opportunities.

The User has the right to deny or withdraw consent provided to Mundo Ticket when this is the legal basis for processing personal data, and Mundo Ticket may discontinue the provision of its services to this user in the event of such a request.

If you have questions about the legal bases for the collection, processing, and storage of your personal data, please contact Mundo Ticket and its Data Protection Officer via email at dpo@omeletecompany.com.

8. Right to Access and Control Your Personal Data.

Mundo Ticket offers the User various options for what to do with their collected, processed, and stored Personal Data, including its deletion and/or correction. The User may:

• Delete data: the User may request the deletion of some of their Personal Data (for example, if they are no longer necessary to provide the services).
• Modify or correct data: the User may edit or request the editing of some of their Personal Data. The User may also request updates, modifications, or corrections of their data in certain cases, especially if they are incorrect.
• Raise objections, limits, or restrictions on data use: the User may request the cessation of the use of all or some of their Personal Data (for example, if we do not have the right to continue using it), or limit our use of such data (for example, if your Personal Data is incorrect or illegally stored), noting that Mundo Ticket may process Personal Data in accordance with the legal bases listed in the Purpose Table.
• The User has the right to access or take their data: the User may request a copy of their Personal Data and the data that the User provided in a readable format in printed form or electronically.

The User may make the requests listed above by contacting our Data Protection Officer via email at dpo@omeletecompany.com and these requests will be considered in accordance with applicable laws.

The Data Controller may retain data, not fully complying with requests for modifications or deletions when there are, pursuant to Article 16 of the LGPD, reasons for retention, such as the need to comply with legal, contractual, regulatory obligations, or for statistical purposes or to safeguard the Controller's rights.

9. Policy Revisions.

If Mundo Ticket modifies this Privacy Policy, such changes will be published visibly on the Mundo Ticket platform or website. This Policy is effective as of 08/11/2023. If the User has any questions regarding the website's privacy policies, please contact Mundo Ticket through the addresses below/Data Protection Officer service channel.