Privacy Policy

Last Updated: May 7, 2025

Introduction

Welcome to SaoPauloMuseum.art. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

This privacy policy applies to all information collected through our website, as well as any related services, sales, marketing, or events.

Please read this privacy policy carefully as it will help you understand what we do with the information that we collect.

Information We Collect

We collect several different types of information for various purposes to provide and improve our service to you.

Personal Information

While using our website, particularly the contact form, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. This may include:

  • Email address
  • First name and last name
  • Phone number (optional)
  • Subject and Content of your message
  • Cookies and Usage Data

Usage Data

We may also collect information about how the website is accessed and used ("Usage Data"). This Usage Data is typically anonymous or aggregated and may include information such as:

  • Your computer's Internet Protocol address (e.g., IP address, anonymized where feasible)
  • Browser type and version
  • The pages of our website that you visit
  • The time and date of your visit
  • The time spent on those pages
  • General geographic location (e.g., country or city)
  • Unique device identifiers and other diagnostic data (if applicable)

How We Use Your Information

SaoPauloMuseum.art uses the collected data for various purposes:

  • To provide and maintain our website
  • To respond to your inquiries submitted via the contact form
  • To notify you about changes to our website or services (if you opt-in)
  • To allow you to participate in interactive features of our website when you choose to do so (e.g., cookie preferences)
  • To provide customer support related to the website
  • To gather analysis or valuable information so that we can improve our website (using aggregated or anonymized data)
  • To monitor the usage of our website
  • To detect, prevent and address technical issues

Legal Basis for Processing

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where we need to respond to your inquiries (based on your request/consent when submitting the form)
  • Where it is necessary for our legitimate interests (e.g., for running our website, provision of administration and IT services, network security) and your interests and fundamental rights do not override those interests
  • Where we need to comply with a legal obligation
  • Where you have provided explicit consent (e.g., for optional cookies or newsletter subscription)

Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Depending on your location (e.g., EEA or Brazil), you may be entitled to the following:

The right to access

You have the right to request copies of your personal data.

The right to rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

The right to erasure

You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to data portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

The right to object to processing

You have the right to object to our processing of your personal data, under certain conditions.

If you make a request, we typically have one month to respond to you. If you would like to exercise any of these rights, please contact us using the information provided in the Contact section.

GDPR & LGPD Compliance

SaoPauloMuseum.art is committed to complying with data protection regulations, including the European General Data Protection Regulation (GDPR) and the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais - LGPD).

GDPR Compliance

For users in the European Economic Area (EEA), we process your data in accordance with the GDPR. This means:

  • We only collect and process your data when we have a lawful basis to do so
  • We protect your data with appropriate security measures
  • We don't keep your data longer than necessary for the purposes it was collected
  • We respect your data subject rights as outlined above
  • We generally do not transfer your personal data outside the EEA. If we do, we ensure adequate protection is in place.

LGPD Compliance

For users in Brazil, we process your data in accordance with the LGPD. This means:

  • We respect the principles of purpose, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination, and accountability
  • We only process your data with a legal basis under the LGPD (e.g., consent, legitimate interest, legal obligation)
  • We respect your rights as a data subject under the LGPD
  • We implement appropriate security measures to protect your data
  • We have appointed a Data Protection Officer (DPO) whose contact details are provided below.

Third-Party Services

We may employ third-party companies and individuals to facilitate our website, provide the website on our behalf, perform website-related services, or assist us in analyzing how our website is used (e.g., web hosting, analytics).

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics

We may use analytics services (if you consent via Cookie Settings) to help us understand how our website is used. These services may collect anonymous or aggregated information sent by your browser or mobile device, including the pages you visit and other information that assists us in improving our website.

Website Analytics

We use analytics tools to gather information about website use by means of cookies (if consented). The information gathered relating to our website is used to create reports about the use of our website.

Details about the specific analytics tools and their privacy practices can be found in our cookie management tool or by contacting us.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Address

RUA 01, LOTE11, Vila Telebrasília
Brasília - DF, 70210-000
Brazil

Data Protection Officer

Marcelo Rodrigues
[email protected]

Or use our Contact Form

Contact Page

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.