Privacy Policy

1.1. Instituto Aplausos Arte e Cultura (CNPJ: 59.864.354/0001-27), headquartered in Atibaia/SP. Throughout this document, you will see us referred to only as “Instituto” or “Aplausos”. We are the Controllers of your data (who decides what to do with it so the festival can happen).

2.1. We collect only the strictly necessary for you to participate in the festival, shop in our store or follow our content.

2.2. Your registration data (responsible party), such as name, email, CPF, phone and encrypted password, are used to create your account, ensure your security, process payments for registrations/tickets and send technical information.

2.3. Dancer data (participants), such as full name and date of birth/age, are used to build the technical schedule, divide age categories, make badges, issue certificates and organize special awards.

2.4. Purchase data (Aplausos Collection), such as full address, are used to deliver clothing and accessories from our store and issue invoices.

2.5. Navigation data — your IP, date/time of access and essential session cookies — are used for site security and fraud prevention.

3.1. Dance is for all ages, and the protection of minors is our priority. We do not collect data directly from minors. The entry of children's and adolescents' names and ages is done exclusively by their parents, guardians or authorized school directors, always in the best interest of the dancer for their artistic participation (Art. 14 of the LGPD).

4.1. The Aplausos Festival is a public cultural event. By registering or entering the event, you know and authorize that your image and voice be captured in photos and videos.

4.2. We use them in our system, historical archive, website and official social media to record and promote the art of dance. All in a free and respectful manner.

5.1. The Instituto, following the principle of minimization, adopts a strict policy of non-commercialization and non-transfer of personal data. We do not share your information with hotels, tourism agencies, sponsors or any third parties for targeted advertising purposes.

5.2. We do not sell or rent your data to anyone (partners, hotels, etc.). Sharing is minimal and restricted to:

• (i) Payment gateways (MercadoPago/PagSeguro): billing data to approve your purchases securely;
• (ii) Judging panel: only the dancer's name and age so the panel can evaluate and assign scores correctly;
• (iii) Public authorities: if there is a court order.

6.1. We adopt adequate technical safeguards to protect your data, such as secure connections (HTTPS) and encryption. To provide our services, we use cloud storage and computing tools (such as database servers and secure spreadsheets) that may be located on international servers, ensuring the same level of protection required by Brazilian law.

7.1. We keep your registration and financial data for the legal period of 5 years. This time is necessary to fulfill our tax obligations and for our legal security (in case of any future dispute). After that, they are deleted or anonymized.

7.2. This period is based on the need to fulfill fiscal and accounting obligations, as well as to protect the Instituto's right of defense in potential lawsuits or administrative inspections, in accordance with the statute of limitations of the Civil Code and the Consumer Protection Code.

8.1. You can ask us at any time to confirm whether we process your data, see what information we have about you, correct errors or cancel the receipt of news emails (Blog/Newsletter).

9.1. Your direct bridge to us for privacy matters is our Data Protection Officer:

10.1. We reserve the right to change this Policy as many times as necessary, aiming to provide you with more security, convenience and to continually improve your experience. Therefore, it is very important to access our Policy periodically. To make it easier, we indicate the date of the last update at the beginning of the document. If relevant changes are made that require new authorizations from you, we will publish a new Privacy Policy subject to your consent again.

11.1. This document is governed and must be interpreted in accordance with the laws of the Federative Republic of Brazil, especially Law No. 13,709/2018 (General Data Protection Law — LGPD); Law No. 12,965/2014 (Internet Civil Framework); Federal Constitution of 1988; Law No. 10,406/2002 (Civil Code) and Law No. 8,078/1990 (Consumer Protection Code).

11.2. The Court of the District of São Carlos/SP is hereby chosen as competent to resolve any disputes arising from this document, with express waiver of any other jurisdiction, however privileged, regardless of the Instituto having its headquarters in another location.