Privacy Policy

Last updated

16/02/2026

Introduction

Parque das Aves values your privacy and is committed to protecting personal data in accordance with Law No. 13,709/2018 (LGPD). This Policy explains how we collect, use, store, and share your data when you use our website and related services (including ticket purchases). 



1. Who we are and how to contact us




Data controller: Parque das Aves – FOZ TROPICANA PARQUE DE AVES LTDA. – CNPJ: 00.090.638/0001-60
Address: Rodovia das Cataratas km 17.1, No. 12450, ZIP Code 85.859-899 – Foz do Iguaçu/PR.

Privacy channel: [email protected]

2. What data we collect

We may collect personal data according to how the website is used:

2.1 Data provided by you

  • Contact and support: name, email, phone number, and message content (Contact Us / forms).
  • Ticket/service purchases: name, CPF (if required), email, phone number, purchase details (items, date, amount), and data for issuing receipts/invoices when applicable.
    Note: payment data (e.g., card details) is usually processed by the payment gateway/provider, and Parque das Aves may not have access to the full card number.
  • Preferences: information you choose to provide (e.g., communication preferences).

2.2 Data collected automatically

  • Browsing and device data: IP address, date and time of access, pages visited, identifiers, browser type, operating system, cookie information, and similar technologies.
  • Metrics and advertising data: events and interactions collected by tools such as Google Analytics and Meta Pixel, according to your cookie preferences (see section 6).

2.3 Embedded third-party content

When loading content such as YouTube videos or maps, the browser may communicate with these providers, and they may collect browsing information and cookies in accordance with their policies.

3. How we use the data (purposes) and the legal basis

We process personal data, to the extent necessary, to:

  1. Sell tickets and provide services (confirm purchases, send receipts, customer support).
    Legal basis: performance of a contract and preliminary procedures related to a contract.
  2. Comply with legal and regulatory obligations (e.g., tax/accounting records, issuing documents, audits).
    Legal basis: legal/regulatory obligation.
  3. Respond to requests and contacts sent through the website.
    Legal basis: legitimate interest and/or preliminary procedures (depending on the case).
  4. Ensure website security and prevent fraud (access monitoring, log records, anti-abuse measures).
    Legal basis: legitimate interest and security (when applicable).
  5. Improve the website experience and performance (usage statistics, browsing analysis).
    Legal basis: consent for non-essential cookies, when applicable, or legitimate interest for items strictly necessary for operation.
  6. Communication and marketing (e.g., newsletter, campaigns, ads).
    Legal basis: consent (e.g., signing up to receive communications) and/or legitimate interest, depending on the channel and cookie settings.

4. With whom we share data

We may share data with suppliers and partners that help us operate the website and services, always to the extent necessary and subject to confidentiality and security obligations, such as:

  • Ticket and service sales platforms, customer service and support;
  • Payment and anti-fraud providers (when there is a purchase);
  • Hosting, storage, and IT infrastructure;
  • Analytics and metrics tools (e.g., Google Analytics);
  • Advertising/marketing tools (e.g., Meta Pixel), according to your preferences;
  • Embedded content providers, such as YouTube and maps (when you interact with these features).

We may also share data due to a legal obligation, court order, or request from a competent authority; or to protect rights, prevent fraud, and ensure the safety of people and systems.

We do not sell personal data.

5. International transfer

Some technology providers may store or process data on servers located outside Brazil. When this occurs, we will adopt contractual and organizational measures to ensure adequate protection, in accordance with the LGPD.

6. Cookies and similar technologies (Google Analytics / Meta Pixel / YouTube / Maps)

We use cookies and similar technologies to:

  • Essential (necessary): website operation and security;
  • Analytics/performance: measure usage and improve pages (e.g., Google Analytics);
  • Marketing/advertising: measure campaigns and personalize ads (e.g., Meta Pixel);
  • Embedded content: videos (YouTube) and maps may set their own cookies.

How to manage cookies: you can manage cookies through your browser settings and, when available, through the website’s cookie preferences banner/center.

Please also see our Cookie Policy.

7. How long we keep the data (retention)

We keep personal data only for as long as necessary to fulfill the purposes of this Policy and in accordance with:

  • Legal and regulatory obligations (e.g., tax and accounting records);
  • Regular exercise of rights (e.g., defense in proceedings, disputes, audits);
  • Security and fraud prevention.

Retention periods may vary depending on the type of data and purpose.

8. Information security

We adopt technical and organizational measures to protect data against unauthorized access, loss, alteration, or improper disclosure, such as access controls, monitoring, and security best practices. Even so, no environment is completely risk-free; if a relevant incident occurs, we will take the appropriate measures and applicable communications.

9. Your rights as a data subject

You may request, among other rights: confirmation and access to data; correction; anonymization, blocking, or deletion when applicable; portability when applicable; information about sharing; withdrawal of consent (when that is the basis); and objection to processing, when applicable.

How to request: send an email to [[email protected]] with the subject “LGPD – Data Subject Request”. For your security, we may request additional information to confirm your identity before fulfilling the request.

Important about deletion: you may request the deletion of your data. We will comply whenever possible, observing situations in which the law requires or allows retention, such as tax/accounting records, fraud prevention, security, and defense of rights.

10. Children and adolescents

If there is processing of data of children and adolescents (for example, in educational activities, school visits, and specific forms), we will take additional care and process such data in accordance with applicable rules and with the necessary security measures. If the website has a form aimed at minors, it is recommended to detail the consent/guardian flow.

11. Changes to this Policy

We may update this Policy periodically to reflect changes to the website, services, and legal requirements. The current version will always be available on this page with the update date.