Privacy Policy

1. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal information processed in connection with:

• visits to the official Brazil Trip website;
• requests for information;
• participant registration;
• package reservations;
• accommodation arrangements;
• payment administration;
• airport-transfer coordination;
• official transportation;
• event and activity organization;
• participant assistance;
• Carioca21 Concierge services;
• communications related to the Brazil Trip;
• children and family registrations;
• optional experiences requested through Carioca21; and
• other activities reasonably necessary to organize and deliver the Brazil Trip.

Third-party websites, payment providers, airlines, accommodation providers and other independent services may maintain their own privacy policies.

2. WHO MAY PROCESS YOUR INFORMATION

Personal information may be processed by the entities involved in organizing and delivering the Brazil Trip, according to their respective roles and responsibilities.

This may include the Brazil Trip organizers, Carioca21 Hospitality & Tourism Experiences, Nova Geração BJJ and service providers involved in delivering confirmed services.

Depending on the relevant processing activity, an entity may act as a controller, joint controller, operator/processor or independent service provider under applicable law.

3. INFORMATION WE MAY COLLECT

Identification Information

• full name;
• date of birth;
• nationality;
• country of residence;
• passport or travel-document information when operationally necessary;
• information required for identification or reservation purposes.

Contact Information

• email address;
• telephone number;
• WhatsApp number;
• country and other contact information voluntarily provided.

Booking Information

• selected package;
• accommodation category;
• occupancy configuration;
• roommate information;
• participant composition;
• complimentary-child information where applicable;
• additional-night requests;
• optional-service requests;
• booking status;
• Booking ID;
• Booking Confirmation Date.

Payment & Transaction Information

• Total Package Value;
• selected payment option;
• amounts paid;
• outstanding balances;
• installment schedule;
• payment status;
• transaction references;
• refunds where applicable.

Payment-card or other financial credentials may be processed directly by the applicable payment provider and may not be stored directly by the Brazil Trip organizers.

Travel Information

Where required for operational purposes, we may collect:

• airline;
• flight number;
• arrival airport;
• arrival date and time;
• departure airport;
• departure date and time;
• information necessary for official airport-transfer coordination.

Participant Requirements

Where voluntarily provided or operationally necessary, information may include:

• dietary requirements;
• allergies;
• accessibility requirements;
• relevant physical or participation-related information;
• emergency-related information; and
• other information reasonably necessary to provide requested assistance.

Some of this information may constitute sensitive personal data under applicable law and will receive appropriate protection.

Communications

We may retain communications relating to:

• reservations;
• payments;
• accommodation;
• cancellations;
• refunds;
• participant assistance;
• Concierge requests;
• program coordination;
• complaints or requests; and
• other operational matters.

Website & Technical Information

Subject to applicable requirements and the technologies used on the website, certain technical information may be collected, including:

• IP address;
• browser or device information;
• website interactions;
• cookies or similar technologies;
• referral information;
• analytics information.

Where required, optional cookies or similar technologies will be subject to the applicable consent or preference mechanism.

4. WHY WE USE PERSONAL INFORMATION

Personal information may be processed for purposes including:

• responding to inquiries;
• creating and managing registrations;
• processing reservations;
• confirming accommodation;
• managing rooming arrangements;
• administering payments and installment schedules;
• issuing booking confirmations;
• providing included services;
• coordinating airport transfers;
• coordinating official transportation;
• organizing BJJ activities;
• organizing tours and experiences;
• managing family and child registrations;
• providing participant support;
• providing Carioca21 Concierge assistance;
• communicating program information;
• managing schedule or operational changes;
• handling cancellations, refunds and No-Shows;
• maintaining appropriate booking and financial records;
• complying with applicable legal or regulatory requirements;
• protecting participants and supporting safety-related operations;
• preventing fraud or misuse;
• establishing, exercising or defending legal rights; and
• improving the operation of the Brazil Trip and its participant experience.

Personal information will not be intentionally collected or used for purposes incompatible with the purposes for which it was obtained without an appropriate legal basis or other measure required by applicable law.

5. LEGAL BASES FOR PROCESSING

Depending on the particular processing activity, personal information may be processed under one or more legal bases available under applicable law.

These may include, where applicable:

• performance of a contract or steps requested before entering into a contract;
• compliance with legal or regulatory obligations;
• consent;
• legitimate interests, where legally permitted and appropriately assessed;
• protection of life or physical safety;
• exercise of rights in judicial, administrative or arbitration proceedings; and
• other lawful grounds available under applicable data-protection legislation.

Consent will not be represented as the legal basis for every processing activity where another lawful basis is more appropriate.

Where processing is based on consent, the participant will be provided with the information required for an informed decision and may exercise applicable rights concerning that consent.

6. CHILDREN & MINORS

The Brazil Trip welcomes families and may therefore process personal information relating to children and adolescents.

Information relating to minors will be collected only to the extent reasonably necessary for purposes such as:

• participant identification;
• age verification;
• accommodation arrangements;
• application of the applicable child policy;
• transportation;
• activity organization;
• safety;
• emergency coordination; and
• compliance with applicable requirements.

Processing involving children and adolescents will take into consideration their best interests and the protections required by applicable law.

Where legally required, specific and highlighted consent or authorization from a parent or legal guardian will be obtained.

The person registering a minor represents that they are the minor’s parent, legal guardian or otherwise legally authorized to provide the information and make the applicable booking arrangements.

Information concerning children should not be submitted by an unauthorized person.

7. SENSITIVE PERSONAL INFORMATION

Certain information voluntarily provided by a participant may qualify as sensitive personal data, particularly information relating to health, allergies, physical conditions or other protected categories.

Such information should be requested only where reasonably necessary for a specific operational, safety, accessibility or participant-support purpose.

Sensitive information will not be requested merely for general marketing purposes.

Where sensitive personal information is processed, an appropriate legal basis and additional protections required by applicable law will be considered.

8. PAYMENT INFORMATION

Payments may be processed through third-party payment providers.

Depending on the payment method selected, the payment provider may independently collect information such as payment-card details, billing information or transaction-authentication information.

The Brazil Trip organizers may receive transaction-related information necessary to identify and administer the booking without necessarily receiving or storing complete payment-card credentials.

Participants should review the applicable payment provider’s privacy and security information where appropriate.

9. SHARING OF PERSONAL INFORMATION

Personal information may be shared only where reasonably necessary for legitimate operational, contractual, safety or legal purposes.

Recipients may include, as applicable:

• accommodation providers;
• transportation providers;
• tour and activity operators;
• attractions and ticketing providers;
• payment providers;
• technology and website providers;
• communication providers;
• professional advisers;
• governmental or regulatory authorities where legally required;
• emergency or safety-related services where appropriate; and
• other suppliers necessary to deliver confirmed services.

Only information reasonably necessary for the relevant purpose should be shared.

Personal information is not intended to be sold as a commercial database to unrelated third parties.

10. INTERNATIONAL PARTICIPANTS & DATA TRANSFERS

The Brazil Trip is an international experience and participants may reside outside Brazil.

Some technology, communication, payment or other service providers may process information in countries other than the participant’s country of residence.

Where personal information is transferred internationally, appropriate measures will be adopted where required under applicable data-protection legislation.

11. DATA RETENTION

Personal information will be retained only for as long as reasonably necessary for the purposes for which it was collected or as required for legitimate legal, contractual, accounting, tax, regulatory, dispute-resolution or record-keeping purposes.

Different categories of information may therefore have different retention periods.

When personal information is no longer required and no legal or legitimate basis requires continued retention, it may be securely deleted, anonymized or otherwise appropriately disposed of.

A request for deletion does not necessarily require deletion of information that must lawfully be retained.

12. DATA SECURITY

Reasonable technical, administrative and organizational measures will be used to protect personal information against unauthorized access, loss, misuse, alteration, disclosure or destruction.

Such measures may include, where appropriate:

• access controls;
• password protections;
• restricted administrative access;
• secure technology providers;
• appropriate backup procedures;
• secure payment processing;
• system updates;
• staff or provider access limitations; and
• other reasonable information-security practices.

No online system or electronic transmission can be represented as completely risk-free, but reasonable measures will be adopted according to the nature of the information and processing involved.

13. PARTICIPANT RIGHTS

Subject to applicable law and the circumstances of the processing, participants may have rights concerning their personal information.

These may include the right to request:

• confirmation of whether personal information is being processed;
• access to personal information;
• correction of incomplete, inaccurate or outdated information;
• information regarding certain sharing of personal information;
• anonymization, blocking or deletion where legally applicable;
• portability where applicable;
• information concerning consent;
• withdrawal of consent where processing relies on consent;
• opposition to certain processing where legally applicable; and
• review or information regarding certain automated decisions, where applicable.

Some rights may be subject to legal limitations or retention requirements.

Requests may require reasonable identity verification before being processed.

14. COMMUNICATIONS RELATED TO THE BOOKING

Email and WhatsApp may be used to communicate information necessary for the participant’s booking and participation.

Operational communications may include:

• payment information;
• booking status;
• accommodation information;
• airport-transfer coordination;
• flight-information requests;
• schedule information;
• meeting points;
• activity updates;
• payment reminders;
• action-required notices;
• safety information;
• Concierge assistance; and
• other information reasonably related to the confirmed booking.

Operational communications necessary to perform the booking should not be confused with optional promotional marketing communications.

15. MARKETING COMMUNICATIONS

Where legally required, promotional or marketing communications will be sent only under an appropriate legal basis.

Participants may be given the opportunity to separately choose whether they wish to receive future promotional communications concerning future Brazil Trip editions, Carioca21 experiences or other relevant offers.

Refusing optional marketing communications will not prevent the participant from receiving operational communications necessary for an existing booking.

Where applicable, participants may withdraw from optional marketing communications using the available unsubscribe or contact mechanism.

16. PHOTOS, VIDEO & EVENT MEDIA

Photography and video may occur during the Brazil Trip.

The treatment and use of identifiable participant images, voice or other personal information for promotional or commercial purposes will be subject to applicable law and any authorization or consent required for the intended use.

Where separate authorization is appropriate or legally required, acceptance of this Privacy Policy or the Terms & Conditions will not automatically replace that authorization.

Separate image/media authorization may therefore be requested from participants.

Special care will be taken regarding images and personal information relating to minors.

17. COOKIES & SIMILAR TECHNOLOGIES

The official website may use cookies or similar technologies for purposes such as:

• essential website functionality;
• security;
• session management;
• booking functionality;
• language preferences;
• analytics; and
• performance measurement.

Where required, users will be provided with appropriate choices regarding non-essential cookies.

Essential technologies necessary for website or booking functionality may operate according to applicable legal requirements.

Additional information may be provided through a dedicated Cookie Notice or cookie-preference interface.

18. THIRD-PARTY WEBSITES & SERVICES

The website or participant communications may contain links to third-party services.

Third-party services operate under their own terms, privacy policies and security practices.

Participants should review the applicable policies before voluntarily providing information directly to an independent third party.

19. ACCURACY OF PARTICIPANT INFORMATION

Participants are responsible for providing accurate information and for notifying the responsible team of relevant changes.

Incorrect information relating to names, dates of birth, flights, accommodation or other operational matters may affect the ability to deliver a requested service.

20. PRIVACY REQUESTS

Participants wishing to exercise an applicable privacy or data-protection right may contact:

The request should contain sufficient information to identify the participant and understand the request.

Additional information may be requested where reasonably necessary to verify identity and protect personal information from unauthorized disclosure.

21. PRIVACY POLICY UPDATES

This Privacy Policy may be updated to reflect changes in legal requirements, technology, website functionality, service providers or Brazil Trip operations.

The current version should display its effective date and version number.

Where a material change requires additional notice or consent under applicable law, the appropriate measure will be taken.

22. RELATIONSHIP WITH THE TERMS & CONDITIONS

This Privacy Policy should be read together with the Nova Geração Brazil Trip — Edition III Terms & Conditions.

The Terms & Conditions govern the commercial and operational relationship associated with the booking.

This Privacy Policy explains the handling of personal information.

Acceptance of one document should not be interpreted as replacing any separate consent or authorization legally required for a specific processing activity.

23. CONTACT