Ipiranga Museum

Menu

Policy
privacy

At the IPIRANGA MUSEUM, privacy and security are priorities, and we are committed to transparency in the handling of our users'/clients' personal data. Therefore, this Privacy Policy establishes how we collect, use, and transfer information from clients or other individuals who access or use our website.

By using our services, you understand that we will collect and use your personal information in the ways described in this Policy, under the rules of the Federal Constitution of 1988 (art. 5, LXXIX; and art. 22, XXX – included by EC 115/2022), the Data Protection regulations (LGPD, Federal Law 13.709/2018), the consumer protection provisions of Federal Law 8078/1990 and other applicable rules of the Brazilian legal system.

Therefore, the MUSEU PAULISTA, hereinafter referred to simply as “MUSEU DO IPIRANGA”, registered with the CNPJ/MF under number 63.025.530/0032-00, in its role as Data Controller, is bound by the provisions of this Privacy Policy.

1. What data do we collect about you and for what purpose?

Our website collects and uses some of your personal data in order to provide services and improve your user experience.

1.1. Personal data provided by the data subject

  • Name
  • E-mail
  • Telephone

2. How do we collect your data?

In this regard, your personal data is collected through the completion of forms on the website.

2.1. Consent

We process your personal data based on your consent. Consent is the free, informed, and unequivocal expression by which you authorize the MUSEU PAULISTA to process your data.

Therefore, in accordance with the General Data Protection Law, your data will only be collected, processed, and stored with your prior and explicit consent.

Your consent will be obtained specifically for each purpose described above, demonstrating the commitment of the MUSEU PAULISTA to transparency and good faith towards its users/clients, in accordance with the relevant legislative regulations.

By using the services of the MUSEU PAULISTA and providing your personal data, you are aware of and consent to the provisions of this Privacy Policy, as well as being aware of your rights and how to exercise them.

You may revoke your consent at any time and at no cost.

It is important to note that revoking consent for data processing may prevent the proper functioning of some website features that depend on its operation. Such consequences will be communicated beforehand.

3. What are your rights?

The Paulista Museum guarantees its users/clients their rights as data subjects as stipulated in article 18 of the General Data Protection Law. Therefore, you can, free of charge and at any time:

  • Confirm the existence of data processing, either in a simplified manner or in a clear and complete format.
  • You can access your data, requesting a legible copy in printed form or through secure and reliable electronic means.
  • Correct your information when requesting to edit, correct, or update it.
  • Limit your data when it is unnecessary, excessive, or processed in violation of the law through anonymization, blocking, or deletion.
  • Request the portability of your data through a registration data report that the MUSEU PAULISTA processes regarding you.
  • We will delete your data processed based on your consent, except in cases provided for by law.
  • Revoke your consent, thereby no longer authorizing the processing of your data.
  • Find out about the possibility of not giving your consent and the consequences of refusing.

4. How can you exercise your rights as a data subject?

To exercise your rights as a copyright holder, you must contact the MUSEU PAULISTA through the following available means:

In order to ensure your correct identification as the data subject of the request, we may request documents or other proof to verify your identity. In this case, you will be informed beforehand.

5. How and for how long will your data be stored?

Your personal data collected by MUSEU PAULISTA will be used and stored for the time necessary to provide the service or to achieve the purposes listed in this Privacy Policy, considering the rights of data subjects and controllers.

Generally, your data will be kept for as long as the contractual relationship between you and the MUSEU PAULISTA lasts. Once the personal data storage period has ended, it will be deleted from our databases or anonymized, except in cases legally provided for in article 16 of the General Data Protection Law, namely:

I – compliance with a legal or regulatory obligation by the controller;
II – study by a research body, ensuring, whenever possible, the anonymization of personal data;
III – transfer to a third party, provided that the data processing requirements set forth in this Law are respected; or
IV – exclusive use by the controller, access by third parties is prohibited, and provided that the data is anonymized.

That is, personal information about you that is essential for complying with legal, judicial, and administrative requirements and/or for exercising the right to defense in judicial and administrative proceedings will be retained, despite the deletion of other data.

The storage of data collected by MUSEU PAULISTA reflects our commitment to the security and privacy of your data. We employ technical protection measures and solutions capable of guaranteeing the confidentiality, integrity, and inviolability of your data. Furthermore, we also have security measures appropriate to the risks and access control to the stored information.

6. What do we do to keep your data secure?

To keep your personal information secure, we use physical, electronic, and managerial tools designed to protect your privacy. We apply these tools taking into account the nature of the personal data collected, the context and purpose of the processing, and the risks that any breaches would generate for the rights and freedoms of the data subject whose data is collected and processed.

Among the measures we have adopted, we highlight the following:

  • Only authorized individuals have access to your personal data.
  • Access to your personal data is only granted after a confidentiality agreement has been signed.
  • Your personal data is stored in a secure and reliable environment.

The Paulista Museum is committed to adopting the best practices to avoid security incidents. However, it is necessary to emphasize that no virtual page is entirely secure and risk-free. It is possible that, despite all our security protocols, problems caused exclusively by third parties may occur, such as cyberattacks by hackers, or also as a result of negligence or recklessness on the part of the user/client.

In the event of security incidents that may pose a significant risk or harm to you or any of our users/clients, we will notify those affected and the National Data Protection Authority of the incident, in accordance with the provisions of the General Data Protection Law.

7. With whom can your data be shared?

In order to protect your privacy, the MUSEU PAULISTA will not share your personal data with any unauthorized third party.

8. Changes to this Privacy Policy

The current version of the Privacy Policy was last drafted and updated on: 21/06/2022

We reserve the right to modify this Privacy Policy at any time, particularly to adapt to any changes made to our website or by law. We recommend that you review it frequently.

Any changes will take effect upon publication on our website, and we will always notify you of any changes.

By using our services and providing your personal data after such modifications, you consent to them.

9. Responsibility

The Paulista Museum foresees the responsibility of the agents involved in data processing, in accordance with articles 42 to 45 of the General Data Protection Law.

We are committed to keeping this Privacy Policy up-to-date, observing its provisions and ensuring its compliance.

Furthermore, we are also committed to seeking technical and organizational conditions that are securely capable of protecting the entire data processing process.

Should the National Data Protection Authority require us to take action regarding the data processing carried out by the MUSEU PAULISTA, we commit to complying with it.

9.1. Disclaimer

As mentioned in Topic 6, although we adopt high security standards to prevent incidents, no website is entirely risk-free. In this sense, the MUSEU PAULISTA is not responsible for:

I – Any consequences arising from the negligence, recklessness, or incompetence of users in relation to their individual data. We guarantee and are only responsible for the security of data processing and the fulfillment of the purposes described in this document.
We emphasize that the responsibility for maintaining the confidentiality of access data lies with the user.

II – Malicious actions by third parties, such as hacker attacks, except if culpable or deliberate misconduct by the MUSEU PAULISTA is proven.
We would like to emphasize that in the event of security incidents that may pose a significant risk or harm to you or any of our users/customers, we will notify those affected and the National Data Protection Authority of the incident and take the necessary measures.

III – The inaccuracy of information entered by the user/client in the records necessary for the use of the services of the MUSEU PAULISTA; any consequences arising from false information or information entered in bad faith are the sole responsibility of the user/client.

10. Data Protection Officer

The Paulista Museum provides the following means for you to contact us to exercise your rights as a copyright holder:
E-mail: contato.museudoipiranga@usp.br.

Premium WordPress plugins