CCXP Privacy Policy.

(Websites: https://www.ccxp.com.br/; https://ingressos.ccxp.com.br/; https://store.ccxp.com.br/; https://www.mundo-ticket.com/; https://inscricoes.ccxp.com.br/; https://credenciamento.mundo-ticket.com/)

General Information & Definitions.

CCXP and Omelete Company value the privacy of their users and created this Privacy Policy in order to demonstrate their commitment to protect their users’ privacy and personal data in compliance with Brazil’s General Data Protection Law and other federal laws in effect related to this matter, as well as describe with transparency how your data is secured by CCXP and Omelete Company when gathering, processing and storing their personal data regarding the CCXP event.

1.1 Definitions

User: all natural persons over 18 (eighteen) years of age or emancipated who will use or visit the Website(s) and/or Applications and/or access the CCXP event, capable of performing civil life acts or those who are absolutely or relatively incapable but duly represented or assisted.

Personal Data: any information provided and/or gathered by CCXP, Omelete Company group, and/or any of the group companies by any means, even public ones, that: (I) identifies or that, when used in combination with other processed information by CCXP and Omelete Company group, is able to identify an individual; or (II) through which an individual's identification or contact information may be derived. Personal Data can be stored in any medium or format, including digital files, as well as paper-based files. Personal Data, however, does not include business phone, business mobile number, business address or business e-mail.

Data Processing: any operation performed using personal data, such as those relating to the gathering, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation or control of information, modification, distribution, transfer, broadcast or extraction.

Purpose: the objective, the purpose that CCXP and Omelete Company intend to achieve from each act of personal information processing.

Justification: justification as to why it is strictly necessary to gather personal data to achieve the purpose hereby stated, avoiding unnecessary gathering of information.

Legal Basis: legal basis on what makes the processing of personal data legitimate for a specific purpose stated by CCXP and Omelete Company group.

Consent: express and unambiguous authorization given by the User holder of the personal data for CCXP and Omelete Company to process his/her personal data for a previously described purpose, in which the necessary legal basis for the act requires the express authorization of the holder.

Websites: These are the web pages managed by Omelete Company or CCXP to which this Privacy Policy applies, namely: (Websites: https://www.ccxp.com.br/; https://ingressos.ccxp.com.br/; https://store.ccxp.com.br/; https://www.mundo-ticket.com/; https://inscricoes.ccxp.com.br/; https://credenciamento.mundo-ticket.com/).

This policy applies, in general, to all Users and potential Users of the services offered by CCXP and the Omelete Company group, including Users of WEBSITES or other means operated by CCXP and Omelete Company group and summarizes how CCXP and Omelete Company group, through such websites, may gather, produce, receive, classify, use, access, reproduce, transmit, distribute, process, archive, store, delete, evaluate or control information, modify, communicate, transfer, disseminate or extract the gathered data, including the personally identifiable information, in accordance with applicable legal bases and all applicable privacy and data protection laws.

By accessing and/or using the website and the event of CCXP and Omelete Company, the User declares to be at least 18 (eighteen) years old and to have full and express capacity to accept the terms and conditions of this Privacy Policy and any Consent Term for all legal purposes, or to be authorized by a responsible person to do so.

If the User does not fit the above description and/or does not agree, even in part, with the terms and conditions contained in this Privacy Policy, he/she shall not access and/or use the services offered by CCXP and Omelete Company group as well as the websites and services operated by them.

2. Gathering and use of personal information.

CCXP and Omelete Company clarify that during the event entitled CCXP, the User will have access to booths, websites and features of several other participants of the event, such as studios, stores, content generators, artists, among others. CCXP and Omelete Company clarify that they do not carry out and have no interference or responsibility for the gathering, treatment, storage and protection of data gathered by such companies, which must present their respective privacy policy, given that CCXP and Omelete Company will only gather the data mentioned hereunder for the specific purposes and environments specified in this Privacy Policy.

The User is aware that he/she provides information consciously and voluntarily by completing the registration, or through the websites operated by CCXP and the Omelete Company group.

When the User registers and/or fills in forms made available by CCXP and the Omelete Company group, or browses their platforms and Websites, certain Personal Data requested will be kept confidential and will be used only for the purpose that motivated the registration, as per the Purposes List below:

Purposes List:

Environment	Personal Data Category	Purpose	Legal Basis
CCXP’s homepage https://www.ccxp.com.br	E-mail	In order to access content and receive information and/or promotional material, CCXP and/or Omelete Company will need the User to provide his/her e-mail. CCXP and/or Omelete Company will send e-mails to Users who provide this information. The Personal Data gathered will not be used to send any type of SPAM, only for targeted marketing.	Sole interests of the data holder.
Website for product selection and purchase https://www.mundo-ticket.com	Full name, ID, CPF (Individual Taxpayer Identification Number), Passport (when not Brazilian), Date of birth, Gender, Half Price for PwD, Language, E-mail, Full billing address, Full delivery address (when there is delivery), Password and password confirmation	Data needed to create personalized tickets that will identify and validate each participant in the event, issuing tax documents and shipping products. Such data will be used internally by the financial, commercial and logistics areas for issuing tax documents, processing payments and shipping the products and will be shared with a payment means company and a third party in charge of transport and also issuing tax and accounting documents.	Contract performance
Payment section	Credit card details and confirmation of registration data	Data required to process payments. For this, payment data will be registered with the third-party company responsible for processing the payment	Contract performance
Badge Registration Info (Mundo Ticket) https://credenciamento.mundo-ticket.com	Full name, Taxpayer Registry No., Passport (if you're not Brazilian), Avatar/ID Picture, Email, Date of birth, Company Name, Position/Function	Necessary data to enable the accredited person(s) to participate and access the event.	Contract Period
Artist registration to apply for Artists’ Valley: https://www.inscricoes.ccxp.com.br/	Full name or company name, Stage Name, Date of birth, E-mail, Individual Taxpayer Identification Number / National Registry of Legal Entities, Cell Phone Number, Country, Address (Number/ Complement/ District/ City/ State), What gender do you identify with?, Among the following alternatives, what color or race do you recognize or identify as (source IBGE)?, Considering your sexual orientation and gender, are you an LGBTQIAPN+ person?, Other dissertative questions related to the artist and the event, Are you a person with disabilities (PWD)? If yes, please attach a medical report and describe your disability so we can review your request., Select the type(s) of disability.	Data necessary for disclosure in communication materials and to register and identify each artist and analyze their portfolio for participation and approval in the selection process of artists who will perform at the event. Informational and/or marketing e-mails with information about the specific event, other events and promotions will also be sent.	Contract Performance or preliminary procedures related to the contract and Sole interest of the data holder
Cosplayers Registration for the Cosplay Contest: https://www.inscricoes.ccxp.com.br/pt/cospplayers	Full name, Stage Name, Date of birth, E-mail, E-mail confirmation, CPF (Individual Taxpayer Identification Number), ID Phone numbers, mobile phone and landline phone (optional), Gender, Full address/ State/ City/ Country, Password and Password Confirmation, Character's Name Theme (which movie/game the character is part of), Description, Category, Reference photos (of the character he/she was inspired by), Pictures of your cosplay, Link to your cosplay introduction video, What gender do you identify with?, Are you a person with disabilities (PWD)? If yes, please attach a medical report and describe your disability so we can review your request., Select the type(s) of disability.	Data needed to register and identify each cosplayer and analyze their portfolio for participation and approval in the selection process of cosplayers who will attend the event’s Cosplay Contest. Informational and/or marketing e-mails will also be sent with information about the event itself, other group events and promotions.	Contract Performance and Sole interest of the data holder

Automatic Data Gathering: When accessing our website, some information is automatically gathered in order to improve the browsing and flow experience, perform market intelligence analysis, such as city of origin of access, system usage, visit origin, pages visits, time and duration of the visit, equipment used, among other information on the user behavior so that specific advertisements can be targeted according to the user's interest, as well as so that the quality of the event, areas of greatest interest and other data that enable the improvement of functionalities to be offered to users.

We emphasize that no personal data, that is, that which identifies or allows the identification of users, is gathered automatically or without the user's consent. The data gathered automatically does not allow the identification of the user present on the website and will not be used for this purpose. The information gathered automatically is usually stored in the user's browser in the form of cookies.

Blocking cookies can impair the user experience when using our website.

3. Sharing and handling personal information.

Users will be given their badge of access to the Event on the day of the Event. It contains a QR Code that can be read at any point requiring flow control, at the discretion of the organization of the Event. This QR Code holds some of the User's personal data (e.g., name, e-mail, phone number, city, gender, date of birth). It is important to point out that there is no banking information or sensitive personal data that can be shared when reading your credential.

Certain third-party exhibitors may ask the User for some personal data and to sign terms of responsibility in order to participate in activities inside the booths. In order to simplify this process, the User may use the credential in some booths directly to provide the data stored there, as mentioned above.

Thus, the User can directly share his personal data with the exhibitors by consenting to the reading of his/her credential. Since this is not a sharing of data by CCXP, but directly by the User, CCXP is not responsible for the treatment of data that will be carried out by the exhibitor.

CCXP and Omelete Company group will not make Personal Data gathered on their websites available to mailing list agencies without the User’s consent.

CCXP and/or Omelete Company group may disclose the User’s personal data gathered to third parties in the following situations and within the limits required and authorized by law:

With its customers and business partners when necessary and/or appropriate to the provision of related services;
With companies and individuals contracted to perform certain activities and services on behalf of CCXP and/or Omelete Company group;
With group companies;
With suppliers and partners to carry out the services contracted with CCXP and/or Omelete Company group (such as information technology, accounting, among others);
For administrative purposes such as: research, planning, service development, security and risk management.
When necessary as a result of a legal obligation, determination of a competent authority, or court decision.

In the event of sharing personal data with third parties, all subjects mentioned in items I to VI must use the shared personal data consistently and in accordance with the purposes for which they were gathered and in accordance with what has been determined by this Privacy Policy, other website or country privacy statements, and all applicable privacy and data protection laws.

4. Legal reasons to release your data

In certain circumstances, CCXP and/or Omelete Company group may disclose personal data, to the extent necessary or appropriate, to government agencies, consultants and other third parties for the purpose of complying with applicable law or with a court order or subpoena, or if CCXP and/or Omelete Company group believes in good faith that such action is necessary to:

Comply with legislation that requires such disclosure;
Investigate, deter or take action related to suspected or actual illegal activities or to cooperate with public bodies or to protect national security;
Performing of your contracts;
Investigate and defend against any claims or allegations of third parties;
Protect the security or integrity of services (for example, sharing with companies that are experiencing similar threats);
Exercise or protect the rights, property and safety of CCXP and/or Omelete Company group and its related companies;
Protect the rights and personal safety of its employees, users or the public;
In case of sale, purchase, merger, reorganization, liquidation or dissolution of CCXP and/or Omelete Company group.

CCXP and/or Omelete Company group makes their Users aware of any legal demands that result in the disclosure of past personal information, in accordance with what has been set out in item 4, unless such awareness is prohibited by law or prohibited by court order, or, if the request is an emergency. CCXP and/or Omelete Company group may contest these claims if they deem the requests to be excessive, vague or made by incompetent authorities.

5. Security of personal information.

All personal data will be stored in the CCXP and/or Omelete Company group database or in a cloud database handled solely by employees of specific departments and/or service providers hired by CCXP and/or Omelete Company group, which are duly in accordance with current data legislation.

CCXP and/or Omelete Company group and its suppliers use various security procedures to protect the confidentiality, security and integrity of your personal data, including through encryption of data in transit, preventing the occurrence of any damages arising from the processing of such data.

Although CCXP and/or Omelete Company group use security measures and monitor your system to check for vulnerabilities and attacks to protect your personal data against unauthorized disclosure, misuse or alteration, the User understands and agrees that there is no guarantee that the information will not may be accessed, disclosed, altered or destroyed for breach of any of the physical, technical or administrative protections.

6. Data Retention.

CCXP and/or Omelete Company group have a personal data retention policy in line with applicable law. Personal data is stored only for as long as necessary to fulfill the purposes for which it was gathered, unless there is any other reason for its maintenance, such as, for example, compliance with any legal, regulatory, contractual, among others permitted under the law.

A technical analysis is always carried out to determine the appropriate retention period for each type of personal data gathered, considering its nature, gathering need and purpose for which it will be treated, as well as any retention needs to fulfill obligations or the protection of rights.

7. Legal basis for data processing. CCXP and/or Omelete Company group only handle personal data in situations where it is legally authorized or with the express and unequivocal consent of the User.

As described in this Policy, CCXP and/or Omelete Company group have legal bases to gather, produce, receive, classify, use, access, reproduce, transmit, distribute, process, archive, store, delete, evaluate or control information, modify , communicate, transfer, disseminate or extract data about the User.

Such interests include protecting the User and CCXP and/or Omelete Company group from threats, complying with applicable law, regular exercise of rights in judicial, administrative or arbitration proceedings, enabling the execution or administration of business, including quality control, reporting and services offered, manage business transactions, understand and improve business and customer relationships, and enable users to find cost-effective opportunities.

The User has the right to deny or withdraw the consent provided to CCXP and/or Omelete Company group, when this is the legal basis for processing personal data, and CCXP and/or Omelete Company group may terminate the provision of its services for this user on hypothesis of such request.

The legal bases include your consent (expressly and unambiguously gathered in the Consent Form), contracts and preliminary contractual procedures (in which processing is necessary to enter into the contract with the User) and legitimate interests, provided that such processing does not violate your rights and freedoms, as shown in the Table of Purposes.

If you have any questions about the legal bases for the gathering, processing and storage of your personal data, please contact CCXP and/or Omelete Company group and your Data Protection Officer via email at dpo@omeletecompany.com.

8. Right to access and control your personal data.

CCXP and/or Omelete Company group offers the User several options of what to do with his personal data gathered, processed and stored, including its deletion and/or correction. The User can:

Delete data: the User may request the deletion of some of his personal data (for example, if they are no longer needed to provide him with the services).
Change or correct data: the User may edit or request the editing of some of his personal data. The User may also request updates, changes or corrections to their data in certain cases, especially if they are incorrect.
Objections, limits or restrictions on the use of data: the User may request the interruption of the use of all or some of his personal data (for example, if we do not have the right to continue using them), or limit our use of such data (for example, if your personal data is incorrect or illegally stored), noting that CCXP and/or Omelete Company group may handle the personal data in accordance with the legal bases listed in the Table of Purposes.
The User has the right to access or take his data: the User may request a copy of his personal data and the data that the User has provided in a readable format in printed form or by electronic means.

The User may make the requests listed above by contacting our Data Protection Officer via email dpo@omeletecompany.com and these requests will be considered in accordance with applicable laws.

In accordance with Article 16 of the LGPD (Brazilian General Data Protection Act), the Data Controller may retain the data and refuse to fully comply with requests for changes or deletions when there are reasons for retention, such as the need to comply with legal, contractual, regulatory obligations or even for statistical purposes or to protect the Data Controller's rights.

9. Policy Revisions.

If CCXP and/or Omelete Company group modifies this Privacy Policy, such changes will be posted visibly on the website of CCXP and/or Omelete Company group. This Policy is valid from 10/09/2019 on. If the User has any questions regarding the website's privacy policies, please contact CCXP and/or Omelete Company group, through the addresses below/the Data Protection Officer's service channel.

10. Contacting Us.

The User may contact the Data Protection Officer (“DPO”) via the following e-mail dpo@omeletecompany.com.

11. Mediation and Choice forum.

This policy is subject to the Law of the Federative Republic of Brazil and the Judicial District Court of São Paulo is competent to settle any dispute in connection therewith.

In the event of an incident with personal data, CCXP and/or Omelete Company group, from now on, reserve to appoint the company JUSPRO – Justiça Sem Processo Mediação e Conciliação S/S Ltda., as the Mediation Chamber able to resolve issues involving users data holders, pursuant to article 52, §7 of Brazil’s General Data Protection Law.