|

CCXP and Omelete Company Privacy Policy

1. General information and definitions.

(Websites: https://www.omeletecompany.com/; https://www.omelete.com.br/; https://www.theenemy.com.br/; https://www.gaules.gg/; https://www.gamexp.com.br/; https://www.ccxp.com.br/; https://ingressos.ccxp.com.br/; https://ccxpworlds.com/; https://www.mundo-ticket.com/)

CCXP and Omelete Company value the privacy of their users and created this Privacy Policy in order to demonstrate their commitment to protect their privacy and personal data in compliance with Brazil’s General Data Protection Law as well s other federal laws in effect related to this matter, as well as describe with transparency how your data is secured by CCXP and Omelete Company whenever it is gathered, processed, and stored.

1.1 Definitions

User: Persons over 18 (eighteen) years of age or emancipated accessing the website(s) and/or using application(s) to visit CCXP Worlds’ platform, capable of performing civil life acts or or relatively incapable but duly represented or assisted.

Personal Data: Any information provided and/or gathered by CCXP, Omelete Company group, and/or any of the group companies by any means that: (I) identifies or that, when used in combination with other processed information by CCXP and Omelete Company group, is able to identify an individual; or (II) through which an individual's identification or contact information may be derived. personal data can stored in any medium or format, including digital files, as well as paper-based files. personal data, however, does not include business phone, business mobile number, business address or business e-mail.

Data Processing: any operation performed using personal data, such as those relating to the gathering, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation or control of information, modification, distribution, transfer, broadcast or extraction.

Purpose: CCXP and Omelete Company group’s main purpose when processing personal information.

Justification: justification as to why it is strictly necessary to gather personal data to achieve the purpose hereby stated, avoiding unnecessary gathering of information.

Legal Basis: legal basis on what makes the processing of personal data legitimate for a specific purpose stated by CCXP and Omelete Company group.

Consent: express and unambiguous authorization given by the User holding personal data for CCXP and Omelete Company group to process their personal data for a previously described purpose, in which the necessary legal basis for the act requires the express authorization of the holder.

Sites: These are the websites managed by CCXP or the Omelete Company group to which this Privacy Policy applies, namely: (Websites:https://www.omeletecompany.com/; https://www.omelete.com.br/; https://www.theenemy.com.br/; https://www.gaules.gg/; https://www.gamexp.com.br/; https://www.ccxp.com.br/; https://ingressos.ccxp.com.br/; https://ccxpworlds.com/; https://www.mundo-ticket.com/)

This policy applies, in general, to all Users and potential Users of the services offered by CCXP and the Omelete Company group, including Users of WEBSITES or other means operated by CCXP and Omelete Company group and summarizes how CCXP and Omelete Company group, through such websites, may gather, produce, receive, classify, use, access, reproduce, transmit, distribute, process, archive, store, delete, evaluate or control information, modify, communicate, transfer, disseminate or extract the gathered data, including the personally identifiable information, in accordance with applicable legal bases and all applicable privacy and data protection laws.

By accessing and/or using the CCXP and Omelete Company group website, the User declares to be at least 18 years old and to be capable of understanding and accepting the terms and conditions mentioned in this Privacy Policy and the Consent Term for all purposes of law, or be authorized by a responsible person to do so.

If the User does not fit the above description and/or does not agree, even in part, with the terms and conditions contained in this Privacy Policy, he/she shall not access and/or use the services offered by CCXP and Omelete Company group as well as the websites and services operated by them.

2. Gathering and use of personal information.

CCXP and Omelete Company clarify that during the event entitled CCXP, be it its regular edition (CCXP) or digital edition (CCXP Worlds), the User will have access to booths, websites and features of several other participants of the event, such as studios, stores, content generators, artists, among others. CCXP and Omelete Company clarify that they do not carry out and have no interference or responsibility for the gathering, treatment, storage and protection of data gathered by such companies, which must present their respective privacy policy, given that CCXP and Omelete Company will only gather the data and for specific purposes and in those websites as described in this privacy policy.

The User is aware that he/she provides information consciously and voluntarily by completing the registration, or through the websites operated by CCXP and the Omelete Company group.

When the User registers and/or fills in forms made available by CCXP and the Omelete Company group, or browses their platforms and Websites, certain personal data requested will be kept confidential and will be used only for the purpose that motivated the registration, according to list of information and its purposes below:

WebsitePersonal Data CategoryPurposeLegal Base
CCXP’s homepage https://www.ccxp.com.br/E-mailIn order to access content and receive information and/or promotional material, CCXP and/or Omelete Company will need the User to provide his/her e-mail. CCXP and/or Omelete Company will send e-mails to Users who provide this information. The personal data gathered will not be used to send any type of SPAM, only for targeted marketing.Sole interests of the data holder.
Registration for the Free Experience ticket at the event website https://www.ccxp.com.br/ CCXP Worlds platform.Name, E-mailPage to fill in the aforementioned data in order to access the free part of the event, receive news and ad material from partners/sponsors. CCXP and/or Omelete Company group will send e-mails to Users who provide this information. The personal data gathered will not be used to send any type of SPAM, but only for targeted marketing.Contract compliance e sole interest of the data holder
Website for product selection and purchase https://www.mundo-ticket.comFull name, ID, CPF, Passport (when not Brazilian), Date of birth, E-mail, Full billing address, Full delivery address (when there is delivery), Password and password confirmationData needed to create personalized tickets that will identify and validate each participant in the event, issuing tax documents and shipping products . Such data will be used internally by the financial, commercial and logistics areas for issuing tax documents, processing payments and shipping the products and will be shared with a payment means company and a third party in charge of transport and also issuing tax and accounting documents.Contract Performance
Payment section of the websiteCredit card details and confirmation of registration dataData required to process payments. For this, payment data will be registered with the third-party company responsible for processing the payment.Contract Performance
Website browsing and CCXP Worlds platformBehavior dataThere are cookies gathering user browsing information for the development of advertising aimed at the user's interest according to their browsing and profile. Google Analytics and Facebook tools are used for this.Sole interest of the data holder
Registration and browsing through CCXP Worlds platformFull name, Genre, Date of birth, E-mail, Password registration and password confirmation, Geolocation data (City and State) and Badge numberData necessary for the user to have access to the platform and features part of a specific ticket the user has bought. Part of the gathered data will be used in Data Layer for monitoring and mapping the user's activities on the platform so later e-mails can be directed to the user's interests, with offers and partner/sponsor promotional material, and news.Contract performance and Sole interest of the data holder
Artist Application Process – Artist's ValleyFull name or company name, Artistic name, Date of birth, E-mail, TIN, Phone, What gender do you identify with?, Among the following alternatives, you recognize or identify yourself as of color or race (source IBGE), Do you fall under the acronym LGBTQIAPN+?, Full address/State/City/Country, Artist's website URL, Work Theme, Biography, Profession, Profile and Job Image, Social media link, Other questions related to the artist and the eventData necessary for advertising the event and using it as a filter for searching artists on the event’s platform (filter by name, genre, work theme, location). It will also be used to release ad materials and to register and identify each artist and analyze their portfolio for participation and approval in the selection process of artists who will present themselves at the event. Information and/or e-mails related to the main event, side events, and advertising will also be sent.Contract Performance or preliminary procedures related to the contract. and Sole interest of the data holder
Cosplayer RegistrationFull name, Alias, Birth date, E-mail, E-mail confirmation, CPF, ID, Phone numbers (optional), Genre, Full address/State/City/Country, Password and Password Confirmation, Character's Name, Movie/game/series genre, Description, Reference photos (of the character he was inspired by), Pictures of your cosplay, link to your cosplay introduction videoData needed to register and identify each cosplayer and analyze their portfolio for participation and approval in the selection process of cosplayers who will attend the event’s cosplay contest. Informational and/or e-mails will also be sent with information about the event itself, other group events and promotions.Contract Performance and Sole interest of the data holder

Automatic Data Gathering: When accessing our website, some information is automatically gathered in order to improve the browsing experience, perform market intelligence analysis, such as city of origin of access, system usage, visit origin, pages visits, time and duration of the visit, equipment used, among other information on the user behavior so that specific advertisements can be targeted according to the user's interest, as well as so that the quality of the event, areas of greatest interest and others can be analyzed data that enable the improvement of functionalities to be offered to users.

We emphasize that no personal data, that is, that which identifies or allows the identification of users, is gathered automatically or without the user's consent. The data gathered automatically does not allow the identification of the user present on the website and will not be used for this purpose. The information gathered automatically is usually stored in the user's browser in the form of cookies.

Blocking cookies can impair the user experience when using our website.

3. Sharing and handling personal information.

CCXP and Omelete Company group will not make personal data gathered on their websites available to mailing list agencies without the User’s consent.

CCXP and/or Omelete Company group may disclose the User’s personal data gathered to third parties in the following situations and within the limits required and authorized by law:

I. With its customers and business partners when necessary and/or appropriate to the provision of related services; such as when filtering artists during the event;

II. With companies and individuals contracted to perform certain activities and services on behalf of CCXP and/or Omelete Company group;

III. With group companies;

IV. With suppliers and partners to carry out the services contracted with CCXP and/or Omelete Company group (such as information technology, accounting, among others);

V. For administrative purposes such as: research, planning, service development, security and risk management.

VI. When necessary as a result of a legal obligation, determination of a competent authority, or court decision.

In the event of sharing personal data with third parties, all subjects mentioned in items I to VI must use the shared personal data consistently and in accordance with the purposes for which they were gathered and in accordance with what has been determined by this Privacy Policy, other website or country privacy statements, and all applicable privacy and data protection laws.

4. Legal reasons to release your data.

In certain circumstances, CCXP and/or Omelete Company group may disclose personal data, to the extent necessary or appropriate, to government agencies, consultants and other third parties for the purpose of complying with applicable law or with a court order or subpoena, or if CCXP and/or Omelete Company group believes in good faith that such action is necessary to:

I. Comply with legislation that requires such disclosure;

II. Investigate, deter or take action related to suspected or actual illegal activities or to cooperate with public bodies or to protect national security;

III. Performing of your contracts;

IV. Investigate and defend against any claims or allegations of third parties;

V. Protect the security or integrity of services (for example, sharing with companies that are experiencing similar threats);

VI. Exercise or protect the rights, property and safety of CCXP and/or Omelete Company group and its related companies;

VII. Protect the rights and personal safety of its employees, users or the public;

VIII. In case of sale, purchase, merger, reorganization, liquidation or dissolution of CCXP and/or Omelete Company group.

CCXP and/or Omelete Company group makes their Users aware of any legal demands that result in the disclosure of personal information, in accordance with what has been set out in item 4, unless such awareness is prohibited by law or prohibited by court order, or , if the request is an emergency. CCXP and/or Omelete Company group may contest these claims if they deem the requests to be excessive, vague or made by incompetent authorities.

5. Security of personal information.

All personal data will be stored in the CCXP and/or Omelete Company group database or in a cloud database handled solely by employees of specific departments and/or service providers hired by CCXP and/or Omelete Company group, which are duly in accordance with current data legislation.

CCXP and/or Omelete Company group and its suppliers use various security procedures to protect the confidentiality, security and integrity of your personal data, including through encryption of data in transit, preventing the occurrence of any damages arising from the processing of such data.

Although CCXP and/or Omelete Company group use security measures and monitor your system to check for vulnerabilities and attacks to protect your personal data against unauthorized disclosure, misuse or alteration, the User understands and agrees that there is no guarantee that the information will not may be accessed, disclosed, altered or destroyed for breach of any of the physical, technical or administrative protections.

6. Data Retention.

CCXP and/or Omelete Company group have a personal data retention policy in line with applicable law. Personal data is stored only for as long as necessary to fulfill the purposes for which it was gathered, unless there is any other reason for its maintenance, such as, for example, compliance with any legal, regulatory, contractual, among others permitted under the law.

A technical analysis is always carried out to determine the appropriate retention period for each type of personal data gathered, considering its nature, gathering need and purpose for which it will be treated, as well as any retention needs to fulfill obligations or the protection of rights.

7. Legal basis for data processing.

CCXP and/or Omelete Company group only handle personal data in situations where it is legally authorized or with the express and unequivocal consent of the User.

As described in this Policy, CCXP and/or Omelete Company group have legal bases to gather, produce, receive, classify, use, access, reproduce, transmit, distribute, process, archive, store, delete, evaluate or control information, modify , communicate, transfer, disseminate or extract data about the User.

The legal bases include your consent (expressly and unambiguously gathered in the Consent Form), contracts and preliminary contractual procedures (in which processing is necessary to enter into the contract with the User) and legitimate interests, provided that such processing does not violate your rights and freedoms, as shown in the Table of Purposes.

Such interests include protecting the User and CCXP and/or Omelete Company group from threats, complying with applicable law, regular exercise of rights in judicial, administrative or arbitration proceedings, enabling the execution or administration of business, including quality control, reporting and services offered, manage business transactions, understand and improve business and customer relationships, and enable users to find cost-effective opportunities.

The User has the right to deny or withdraw the consent provided to CCXP and/or Omelete Company group, when this is the legal basis for processing personal data, and CCXP and/or Omelete Company group may terminate the provision of its services for this user on hypothesis of such request.

If you have any questions about the legal bases for the gathering, processing and storage of your personal data, please contact CCXP and/or Omelete Company group and your Data Protection Officer via e-mail at dpo@omeletecompany.com

8. Right to access and control your personal data.

CCXP and/or Omelete Company group offers the User several options of what to do with his personal data gathered, processed and stored, including its deletion and/or correction. The User can:

I. Delete data: the User may request the deletion of some of his personal data (for example, if they are no longer needed to provide him with the services).

II. Change or correct data: the User may edit or request the editing of some of his personal data. The User may also request updates, changes or corrections to their data in certain cases, especially if they are incorrect.

III. Objections, limits or restrictions on the use of data: the User may request the interruption of the use of all or some of his personal data (for example, if we do not have the right to continue using them), or limit our use of such data (for example, if your personal data is incorrect or illegally stored), noting that CCXP and/or Omelete Company group may handle the personal data in accordance with the legal bases listed in the Table of Purposes.

IV. The User has the right to access or take his data: the User may request a copy of his personal data and the data that the User has provided in a readable format in printed form or by electronic means.

The User may make the requests listed above by contacting our Data Protection Officer via e-maildpo@omeletecompany.com and these requests will be considered in accordance with applicable laws.

9. Policy Revisions.

If CCXP and/or Omelete Company group modifies this Privacy Policy, such changes will be posted visibly on the website of CCXP and/or Omelete Company group. This Policy is valid from 10/09/2019. If the User has any questions regarding the website's privacy policies, please contact CCXP and/or Omelete Company group, through the addresses below/the Data Protection Officer's service channel.

10. Contacting Us

The User may contact the Data Protection Officer (“DPO”) via the following e-mail dpo@omeletecompany.com

11. Mediation and choice forum.

This policy is subject to the Law of the Federative Republic of Brazil and the Judicial District Court of São Paulo is competent to settle any dispute in connection therewith.

In the event of an incident with personal data, CCXP and/or Omelete Company group, from now on, reserve to appoint the company JUSPRO – Justiça Sem Processo Mediação e Conciliação S/S Ltda., as the Mediation Chamber able to resolve issues involving users data holders, pursuant to article 52, §7 of Brazil’s General Data Protection Law.