This Privacy Policy describes how BLUMAR TURISMO LTDA (“Blumar”) collects, uses, stores, and protects personal data of users who access the website www.blumar.com.br and its subdomains.

We are committed to ensuring transparency, security, and compliance with applicable Brazilian laws, including the General Data Protection Law (Law No. 13.709/2018 – LGPD) and the Digital Statute of Children and Adolescents (ECA Digital).

Blumar acts as the data controller for personal data processed through this website.

DATA PROCESSING OVERVIEW

Blumar processes personal data of users who interact with its digital channels, including website visitors, clients, and potential customers.

Data may be provided directly by users or collected automatically during browsing.

DATA WE COLLECT

Data provided by the user:

• Name
• Email address
• Phone number
• Company (when applicable)
• Information related to service requests

Data collected automatically:

• IP address
• Device type and browser
• Pages visited
• Time spent on the website
• Approximate location (city/country)

Data collection is always limited to what is necessary for each specific purpose.

COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to:

• Ensure proper website functionality
• Analyze usage and performance
• Improve user experience
• Personalize content (when authorized)

Cookies are categorized as:

• Essential
• Analytics
• Functional
• Marketing

Non-essential cookies are only activated with the user's consent.

Users can manage their cookie preferences at any time through the cookie settings available on the website.

ANALYTICS AND MARKETING TOOLS

We may use tools such as:

• Google Analytics
• Advertising and media platforms
• Behavioral analysis tools

These tools may collect browsing data in aggregated or pseudonymized form.

On pages where interactions may involve minors, we limit or restrict the use of non-essential tracking and marketing tools.

PURPOSE OF DATA USE AND LEGAL BASIS

Personal data may be used for:

• Responding to inquiries and requests
• Providing information about services
• Sending marketing communications (when authorized)
• Improving website functionality and content
• Complying with legal and regulatory obligations

Personal data is processed based on applicable legal grounds, including:

• User consent
• Performance of contracts or pre-contractual measures
• Compliance with legal obligations
• Legitimate interests, when applicable and respecting user rights

DATA SHARING

Personal data may be shared with:

• Operational partners (hotels, airlines, and service providers)
• Technology providers (such as hosting, cloud, CRM, and analytics services)
• Marketing and advertising platforms (when authorized)
• Legal or regulatory authorities, when required

This sharing is always limited to what is necessary for each purpose.

We adopt appropriate measures to ensure data security and confidentiality in all sharing processes.

DATA OF CHILDREN AND ADOLESCENTS

Our services are intended for a general audience.

In cases where interactions may involve individuals under 18 years of age:

• Data collection should be carried out by a parent or legal guardian
• We adopt stricter data minimization practices
• We limit or disable non-essential tracking and marketing technologies

We do not intentionally collect personal data from minors without appropriate legal basis or supervision.

If we identify improper collection of minors’ data, we may restrict or delete such information.

DATA STORAGE AND SECURITY

Data is stored in secure environments, including internal servers and cloud services, which may involve international data transfers.

When international data transfers occur, we adopt appropriate safeguards in accordance with applicable data protection laws.

We implement technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

USER RIGHTS

Users may, at any time:

• Request access to their personal data
• Request correction of inaccurate data
• Request deletion of their data
• Withdraw consent
• Request data portability

To exercise these rights, please contact:
viajepelobrasil@blumar.com.br

DATA RETENTION

Data is retained only for as long as necessary to fulfill its purposes, in compliance with legal and regulatory obligations.

THIRD-PARTY LINKS

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

POLICY UPDATES

This Privacy Policy may be updated at any time. We recommend periodic review.

GOVERNING LAW AND JURISDICTION

This Policy is governed by Brazilian law. Any disputes shall be resolved in the courts of Rio de Janeiro, Brazil.