Index

1. Definitions

2. Personal data that we enter

3. Use of personal data

4. Sharing of your personal data

5. Their live performances

6. How we protect your personal data

7. How long do we keep your data?

8. Links to other sites

9. Change to our privacy policy

10. How to enter your contact information

1. Definitions

This privacy policy applies to your data when we insert:

• yours or someone else's, search for a reservation
• When you stay, it involves hiring event services.
• when you enter our site
• to all communication with you.

The following sections of the privacy policy describe the types of personal data we collect; how and for what purposes we collect it; with whom we share it; and the options and rights available to you regarding your data. We also describe the measures we take to protect the personal data we collect and how to contact us about our privacy practices and how to exercise your rights.

• Personal data we collect
• Use of data
• Exchange of personal data
• their rights;
• How we protect your data
• How long do we keep your data?
• Links to other sites
• Update to our privacy policy
• How to enter our contact information

2. Personal data we collect

2.1 Personal data that you voluntarily enter on our sites.

We collect and store the data entered into our forms available on our site.

2.1.1 OTHON.COM.BR

• Contact:

Name; email and phone number

• Events:

Name, surname, email, telephone and social rations

• Reservation:

The data collected is the responsibility of an external service provider who collects the first name, last name, email address, travel document, date of birth, credit card and cardholder name.

• Work with us:

The data collected is the responsibility of an external service provider who collects the name, surname, email, telephone, date of birth, CPF and full address.

2.1.2 CIAHOTEISOTHON.COM.BR 

• Talk to RI:

Full name, email address, and phone number of the company.

2.2 Personal data that we collect automatically when you enter our site.

When you visit othon.com.br, we may collect certain data using cookies and other automated means. Cookies are small data files stored by your browser on your computer's hard drive. This collected data is the responsibility of a third-party service provider and may include the following information:

• Date and time
• IP address
• domain name
• Browser type (if provided by the browser)
• URL of the query page (if provided by the browser)
• Requested item
• Status of completion of the request
• geographical location
• language references

To learn more about cookies and how to exercise your choice regarding the collection of information, access the management tool available on the websites.

2.3 Personal data that you voluntarily provide, through different means, in accordance with the service offered by Othon hotels.

• Sales and Reservations:

Full name, nationality, date of birth, email address, telephone number, marital status, sex, identification document (CPF for Brazilians and passport for foreigners), full address (postal code, city, state and country), copy of identification document, CNPJ, company name and copy of the articles of association.

• Events:

Full name, email address, telephone number, CNPJ (Brazilian tax identification number) and responsible position, company name and copy of social contact information.

• Company registration:

Full name, email address, phone number, CNPJ (Brazilian tax ID number) and responsibility of the person responsible for completing the registration.

• Reception:

Adult - full name, nationality, date of birth, email address, marital status, gender, identification document (CPF for Brazilians and passport/cnr for foreigners), full address, copy of identification document.

Under 18 years of age - full name, nationality, identification document (CPF/RG/birth certificate for Brazilians), full name of father, full name of mother, address, full address of the responsible person, full name of the responsible person, telephone number of the responsible person, identity document of the responsible person (CPF for Brazilians and passport for foreigners), copy of the identity document of the responsible person, authorization legalized by a notary or by the competent judicial authority (for the unaccompanied minor).

• KIDS Space:

Full name of the responsible parties, telephone number of the responsible parties, and name of the child.

• WI-FI access:

The data collected is the responsibility of an external service provider, who collects the full name, email address and date of birth.

2.4 Personal data collected by third parties.

We may receive your Personal Data through exchange with a third party acting as an intermediary between you and Othon Hotels to process bookings. In this process, these third parties use their own means to collect and share your personal data with us and are responsible for obtaining your consent and authorizations.

2.5 Sensitive Personal Data.

We do not collect sensitive data (e.g., genetic data, biometric data, data revealing racial or ethnic origin, political opinions, sex life, sexual orientation, religion or other beliefs, health-related data, criminal record or trade union membership) unless you voluntarily provide it to us.

We will only use sensitive personal data when you provide it with your explicit consent, to better meet your needs.

Examples of sensitive personal data that we may collect and process include:

• Food allergies;
• Dietary requirements that may involve or suggest your religion and/or health;
• Mobility needs; and
• Medical conditions.

3. Use of personal data

Hotéis Othon, as a provider of hospitality experiences, has a legitimate business interest in using and processing your personal data. Rest assured, we will only use your personal data if such processing does not adversely affect your interests, rights, and freedoms.

Your personal data may be processed by automated and manual means for:

• Comply with legal and/or regulatory provisions;
• To guarantee the safety and security of our guests and visitors;
• To provide the products or services you have requested, including the provision of personalized services;
• Help us create content that is relevant to our guests and visitors;
• Making improvements to our websites and social media to ensure that your content is presented in the most effective way for you;
• To provide you with information, products or services that you request or that we believe may be of interest to you;
• To evaluate and help us understand the general trends and patterns related to our business.

We may use them in other ways, always with prior and specific notice, and requesting, where appropriate, your consent at the time of collection.

We may also use your personal data to prevent and avoid fraud, claims, and other liabilities, and to comply with or enforce legal requirements applicable to the company. We use personal data for these purposes when necessary to protect, exercise, or defend our legal rights.

We will only process your personal data for marketing purposes when you give us your prior and specific consent. You have the right to withdraw your consent at any time.

Providing us with personal data (including sensitive personal data) is voluntary. However, if you do not provide such personal data, you may not be able to benefit from our services.

4. Sharing personal data

We only disclose or share the data we collect and maintain about you in the situations described below:

• Sharing with other members of Othon Hotels, who may use this data to comply with legal requirements and offer you products and services, respecting the purposes established in this Privacy Policy;
• Third-party service providers who have been designated as data processors to perform functions and services on our behalf, and who will only receive the personal data necessary to perform the services on our behalf; and who are not authorized to use this data for other contracted purposes;
• Third-party providers of any holiday package, excursion, transfer, concierge-organized activity/experience, or other service that we arrange at your request;
• To our advisors and insurers in case of a claim, dispute or whenever necessary; and
• If we are required to do so by law or in accordance with a legal process or to comply with applicable rules or regulations, or in response to a request from law enforcement or other government officials.

5. Your rights

If you are a "data subject", you have the following rights in relation to your personal data processed by us:

• Right of access: to request confirmation of the processing of your personal data and, if so, to request a copy of such personal data;
• Right of correction: to request that we rectify or update any personal data that is inaccurate, incomplete or outdated;
• Right to erasure: request that we delete your personal data in certain circumstances. Except where processing is based on law or government regulation;
• Right to withdraw your consent: when you have given us your consent to process your personal data and you decide to withdraw your consent. If you withdraw your consent, we may not be able to provide certain services; and
• Right to data portability: request the transfer of your personal information to another service provider.

To help protect your privacy and maintain information security, we may take steps to verify your identity before processing your request.

6. How we protect your personal data

Hotéis Othon adopts administrative, technical and physical measures to protect personal data against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.

Service providers and contractors who may have access to your data to provide services on our behalf will be contractually obligated to keep such data confidential, provide appropriate information security measures, and may not use such data for any other purpose.

7. How long do we keep your personal data?

We only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, unless the law requires or permits us to retain it for a longer period.

8. Links to other sites

Our sites may provide links to other sites for your convenience and information. These sites are not affiliated with Othon Hotels. Therefore, we are not responsible for the content, usage, or privacy practices of these sites. Since we do not own or control them, we suggest that you review their terms of use and policies before browsing.

9. Changes to our privacy policy

This Privacy Policy may be updated periodically without prior notice to reflect changes in how we handle your personal data and our privacy practices. We will post a notice on our website to notify you of any significant changes to our Privacy Policy, indicate at the top of the Privacy Policy when it was last updated, and provide a link to previous versions.

10. How to contact us

Hotéis Othon provides you with an exclusive channel for matters related to data protection.

If you have any questions or comments about this Privacy Policy or the use of cookies, if you would like us to update your personal data or preferences, or to exercise your rights, please email our data protection officer.

Data Protection Officer / DPO of Hoteles Othon:

• Name: Roberto Razuck
• Location: Av. Atlântica, 3264 / Room 526 - Copacabana - Rio de Janeiro - RJ, 22070-001
• Opening hours: Monday to Friday, from 9 a.m. to 6 p.m.
• Initial care form: E-mail
• Contact email: dpo@othon.com.br

After receiving your email, we will provide you with a protocol number so we can jointly monitor the progress of your request. We will keep you informed via your registered email address or phone while we review your request.

To establish contact, please quickly and accurately provide your full name, phone number, email address, and a detailed description of the reason for contact.