Last update: 27/01/2026

1. Introduction

This Privacy Policy describes how we collect, use, store and protect your personal information when you use our tourism website. We are committed to protecting your privacy and ensuring the security of your personal data, in accordance with the General Data Protection Law (LGPD - Law No. 13.709/2018).

2. Information We Collect

We collect the following information when you use our website:

2.1. Information You Provide

• Registration Data: Full name, email, phone and other information provided during registration
• Contact Data: Information provided when contacting us or subscribing to our newsletter
• User-Generated Content: Reviews, comments, favorites and other content you create on our site

2.2. Information Collected Automatically

• Browsing Data: IP address, browser type, pages visited, time spent and usage patterns
• Cookies and Similar Technologies: Information collected through cookies, as detailed in our Cookie Policy
• Device Data: Device type, operating system and unique identifiers

3. How We Use Your Information

We use your personal information for the following purposes:

• Provide and improve our tourism services
• Process your registration and manage your account
• Send communications about services, events and news (with your consent)
• Personalize your experience on the site
• Analyze site usage for continuous improvements
• Fulfill legal and regulatory obligations
• Prevent fraud and ensure site security

4. Legal Basis for Processing

We process your personal data based on the following legal bases provided for in the LGPD:

• Consent: When you give us explicit consent for data processing
• Contract performance: To fulfill contractual obligations
• Legitimate interest: To improve our services and ensure security
• Compliance with legal obligation: When necessary to comply with legal obligations

5. Information Sharing

We do not sell your personal information. We may share your data only in the following situations:

• Service providers: With companies that assist us in operating the site (hosting, data analysis), always under strict confidentiality agreements
• Legal obligations: When required by law, court order or competent authorities
• With your consent: In other situations, only with your explicit consent

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure or destruction. This includes:

• Encryption of sensitive data
• Restricted access controls
• Regular security monitoring
• Secure data backups

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, except when a longer retention period is required or permitted by law.

8. Your Rights

Under the LGPD, you have the following rights:

• Access: Request information about which personal data we hold about you
• Correction: Request correction of incomplete, inaccurate or outdated data
• Deletion: Request deletion of unnecessary data or data processed in violation of the LGPD
• Portability: Request the portability of your data to another provider
• Withdrawal of Consent: Withdraw your consent at any time
• Objection: Object to the processing of data in certain circumstances
• Information: Obtain information about the sharing of your data

9. Cookies

We use cookies and similar technologies on our site. For more information about how we use cookies, please see our Cookie Policy.

10. Links to Third-Party Sites

Our site may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites. We recommend that you read the privacy policies of each site you visit.

11. Changes to this Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the new policy on this page and updating the "Last update" date. We recommend that you review this policy periodically.

12. Contact

If you have questions, concerns or requests related to this Privacy Policy or the processing of your personal data, contact us:

• E-mail: privacidade@saosebastiao.sp.gov.br
• Phone: (12) 3892-1000
• Address: Tourism Department of São Sebastião - São Paulo, Brazil

You may also exercise your rights through our service channel or by sending a formal written request.

13. Data Protection Officer (DPO)

For matters related to the protection of personal data, you can contact our Data Protection Officer (DPO):

• E-mail: cit.setur@saosebastiao.sp.gov.br
• Phone: (12) 3892-2620