Index

1. Definitions

2. Personal data that we insert

3. Use of personal data

4. Sharing your personal data

5. Their live shows

6. How we protect your personal data

7. How long we keep your data

8. Links to other sites

9. Change in our privacy policy

10. How to enter contact with us

1. Definitions

This privacy policy applies to your data when we insert:

• yours or others to make a search for a reservation
• When you stay, you do so by hiring event services
• when you enter our site
• to all communication with you.

The following sections of our privacy policies describe the types of personal data we collect; how and for what purposes; with whom we share it; and the options and rights available to you regarding your data. We also describe the measures we put in place to protect the personal data you collect and how to contact us about our privacy practices and how to exercise your rights.

• Personal data we collect
• Use of data
• Exchange of personal data
• your rights;
• How we protect your data
• How long we keep your data
• Links to other sites
• Update to our privacy policy
• How to enter contact with us

2. Personal data we collect

2.1 Personal data that you voluntarily enter on our sites.

We collect and store the data entered into our sheets available on our site.

2.1.1 OTHON.COM.BR

• Contact:

Name; email and phone number

• Events:

Name, surname, email, phone number and social rations

• Reservation:

The data collected is the responsibility of a third-party service provider who collects the first name, last name, email address, travel document, date of birth, credit card and cardholder name.

• Work with us:

The data collected is the responsibility of a third-party service provider who collects the first name, last name, email address, telephone number, date of birth, CPF (Tax Identification Number), and full address.

2.1.2 CIAHOTEISOTHON.COM.BR 

• Talk to RI:

Full name, email and company phone number.

2.2 Personal data that we collect automatically when you enter our site.

When you visit othon.com.br, we may collect certain data through the use of "cookies" and other automated means. Cookies are small data files stored by your browser on your computer's hard drive. This collected data is the responsibility of a third-party service provider and may include the following information:

• Date and time
• IP address
• domain name
• Browser type (if provided by the browser)
• URL of the query page (if provided by the browser)
• Requested object
• Status of completion of the request
• geographic location
• language references

To learn more about cookies and how to exercise your choice regarding the collection of information, access the management tool available on the websites.

2.3 Personal data that you voluntarily provide, through various means, in accordance with the service offered by Othon Hotels.

• Sales and Reservations:

Full name, nationality, date of birth, email address, telephone number, marital status, gender, identification document (CPF for Brazilians and passport for foreigners), full address (postal code, city, state, and country), copy of identification document, CNPJ (National Identity Document), company name, and copy of the bylaws.

• Events:

Full name, email address, phone number, CNPJ (National Identity Document) and position, company name, and a copy of your contact information.

• Company registration:

Full name, email, phone number, CNPJ (National Identity Document) and responsibility of the person responsible for completing the registration.

• Reception:

Adult - full name, nationality, date of birth, email address, marital status, gender, ID (CPF for Brazilians and passport/CNR for foreigners), full address, copy of ID.

Under 18 years of age - full name, nationality, identification document (CPF/RG/birth certificate for Brazilians), full name of father, full name of mother, address, full address of the person responsible, full name of the person responsible, telephone number of the person responsible, identity document of the person responsible (CPF for Brazilians and passport for foreigners), copy of the person responsible's identity document, authorization legalized by a notary or by the competent judicial authority (for unaccompanied minors).

• KIDS Space:

Full name of those responsible, phone number of those responsible, and name of the child.

• WI-FI access:

The data collected is the responsibility of a third-party service provider, who collects the full name, email address, and date of birth.

2.4 Personal data collected by third parties.

We may receive your Personal Data through exchange with a third party acting as an intermediary between you and Othon Hotels to process reservations. In this process, third parties use their own means to collect and share your personal data with us, and they are responsible for the consents and authorizations.

2.5 Sensitive Personal Data.

We do not collect sensitive data (e.g., genetic data, biometric data, data revealing racial or ethnic origin, political opinions, sex life, sexual orientation, religion or other beliefs, data relating to health, criminal record or trade union status) unless you voluntarily provide it to us.

We will only use sensitive personal data when you provide it with your explicit consent, to better meet your needs.

Examples of sensitive personal data that we may collect and process include:

• Food allergies;
• Dietary requirements that may involve or suggest your religion and/or health;
• Mobility needs; and
• Medical conditions.

3. Use of personal data

Hotéis Othon, as a provider of hospitality experiences, has a legitimate business interest in using and processing your personal data. Rest assured, we will only use your personal data if the processing does not harm your interests, rights, and freedoms.

Your personal data may be processed by automated and manual means to:

• Comply with legal and/or regulatory provisions;
• Ensure the safety and security of our guests and visitors;
• Provide the products or services you have requested, including the provision of personalized services;
• Help us create content that is relevant to our guests and visitors;
• Make improvements to our websites and social media to ensure that content is presented in the most effective manner for you;
• Provide you with information, products or services that you request or that we believe may be of interest to you;
• Evaluate and help us understand general trends and patterns related to our business.

We may use them in other ways, always with prior and specific notice, and requesting, where appropriate, your consent at the time of collection.

We may also use your personal data to prevent and avoid fraud, claims, and other liabilities, and to comply with or apply legal requirements applicable to the company. We use personal data for these purposes when necessary to protect, exercise, or defend our legal rights.

We will only process your personal data for marketing purposes if you give us your prior, specific consent. You have the right to withdraw your consent at any time:

The decision to provide us with personal data (including sensitive personal data) is voluntary. However, if you do not provide such personal data, you may not be able to benefit from our services.

4. Sharing personal data

We only disclose or share the data we collect and maintain about you in the situations described below:

• Share with other members of Othon Hotels, who may use this data to comply with legal requirements and offer you products and services, respecting the purposes set out in this Privacy Policy;
• Third-party service providers who have been appointed as data processors to perform functions and services on our behalf, and who will receive only the personal data necessary to perform the services on our behalf; and who are not authorized to use this data for any other contracted purposes;
• Third party providers of any holiday package, excursion, transfer, concierge-organized activity/experience or other service we arrange at your request;
• To our advisors and insurers in the event of an accident, dispute, or whenever necessary; and
• If we are required to do so by law or pursuant to legal process, or to comply with applicable rules or regulations, or in response to a request from law enforcement or other government officials.

5. Your rights

If you are a "data subject", you have the following rights in relation to your personal data processed by us:

• Right of access: request confirmation of the processing of your personal data and, if so, request a copy of such personal data;
• Right to rectification: to request that we rectify or update any personal data that is inaccurate, incomplete or outdated;
• Right to erasure: You can request that we delete your personal data in certain circumstances. Except where processing is based on law or government regulation;
• Right to withdraw your consent: where you have given us your consent to process your personal data and you have decided to withdraw your consent. If you withdraw your consent, we may not be able to provide certain services; and
• Right to data portability: request the transfer of your personal information to another service provider.

To help protect your privacy and maintain information security, we may take steps to verify your identity before processing your request.

6. How we protect your personal data

Othon Hotels adopts administrative, technical, and physical measures to protect personal data against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use.

Service providers and contractors who may have access to your data to perform services on our behalf are contractually obligated to keep such data confidential, provide appropriate information security measures, and may not use such data for any other purpose.

7. How long we retain your personal data

We only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, unless we are required or permitted to retain it for a longer period by law.

8. Links to other sites

Our sites may provide links to other sites for your convenience and information. These sites are not affiliated with Othon Hotels. Therefore, we are not responsible for the content, use, or privacy practices of these sites. Since we do not own or control them, we suggest that you review their terms of use and policies before browsing.

9. Changes to our privacy policy

This Privacy Policy may be updated periodically and without prior notice to you to reflect changes in our handling of your personal data and privacy practices. We will post a notice on our website to notify you of any significant changes to our Privacy Policy, indicate at the top of the Privacy Policy when it was last updated, and provide a link to previous versions.

10. How to contact us

Othon Hotels offers you an exclusive channel for matters related to data protection.

If you have questions or comments about this Privacy Policy or the use of cookies, if you would like us to update your personal information or preferences, or to exercise your rights, please email our Data Protection Officer.

Data Protection Officer / DPO of Hoteles Othon:

• Name: Roberto Razuck
• Location: Atlantic Avenue, 3264 / Room 526 - Copacabana - Rio de Janeiro - RJ, 22070-001
• Opening Hours: Monday to Friday, 9 a.m. to 6 p.m.
• Initial care form: Email
• Contact email: dpo@othon.com.br

After receiving your email, we will provide you with a protocol number so we can jointly monitor the progress of your request. While we review your communication, we will keep you informed via registered email or phone.

To contact us, please provide your full name, phone number, email address, and a detailed description of the reason for contacting us promptly and accurately.