Privacy Policy

Privacy Policy

Cinemark Brasil S.A. (Cinemark)

Version 1.2. Updated on June 14, 2022.

Controller: Cinemark Brasil S.A., headquartered in São Paulo/SP, at Av. Doutor Chucri Zaidan , nº 920, 15th floor, CEP 04583-904, registered with the CNPJ under nº 00.779.721/0001- 41 (Cinemark).

This Privacy Policy (Privacy Policy) provides for the collection, use, processing and sharing of information and the Processing of Personal Data carried out by Cinemark, during the access and use of the Cinemark electronic address available at www.cinemark.com.br (Site), the Cinemark Application (App ), Cinemark Points of Sale (POS) and the annual calendar of films that will be shown at Cinemark (Cinemark Calendar), together referred to as Cinemark Channels, in accordance with the obligations stipulated by Federal Law No. 12,965, of April 23, 2014 (MCI), by Decree No. 8,771/16, by Federal Law No. 13,709, of August 14, 2018 (LGPD), as well as other laws and regulations applicable to any Processing of Personal Data (Applicable Data Protection Legislation).

When started in capital letters, the terms Processing, Controller, Operator, Data Subject, Holder and Personal Data will have the meanings attributed to them in the LGPD.

This Privacy Policy is divided as follows:

1. Purpose of the Privacy Policy

2. Personal Data collected by Cinemark

3. Sharing of Personal Data

4. Legal Bases and Purpose of Processing Personal Data

5. Method of Storage and Protection of Personal Data

6. International Transfer of Personal Data

7. Rights of Holders

8. Personal Data Storage Period

9. General Provisions

10. Contact information

1. Purpose of Privacy Policy

Cinemark values the security and confidentiality of information provided by users on Cinemark Channels (Users). For this reason, we have adopted the necessary measures to protect your rights, which can be found in this Privacy Policy, which is an integral part of the Terms and Conditions of Use (Terms of Use).

This Privacy Policy details how We Treat Personal Data and other information shared by Users on Cinemark Channels and explains how they are collected, accessed, stored , used, processed, transferred and disclosed your Personal Data, and also, as we allow the User, to access, rectify, erase or restrict the Processing of such Personal Data, when applicable.

Cinemark reserves the right to modify this Privacy Policy unilaterally, ensuring, however, that Users are duly notified of any changes. We will keep any new versions of this Privacy Policy public and accessible on Cinemark Channels, in addition to making them available to your registered email.

2. Personal Data Collected by Cinemark

2.1. Information and Personal Data necessary to create an access account and use features

Cinemark will request the provision of some User Personal Data for the purpose of creating your Cinemark Channels access account, to purchase tickets online or directly at the POS, to join the loyalty program, to enjoy the benefits offered, to purchase tickets and products online and to send information about the films in which the User has expressed interest in the Cinemark Calendar. The Processing of these Personal Data by Cinemark will be carried out based on the execution of the contract between the User and Cinemark and eventually, to comply with legal obligations or upon consent expressed by the User, as applicable.

For such purposes, the following User Personal Data may be collected: Full name, CPF, Cell phone number, Gender, Date of Birth, State, City and Email. We will also collect payment information, such as your credit card number.

2.2. Information and Personal Data that the User chooses to provide

The User may choose to provide some Personal Data to improve their experience when using Cinemark Channels or to exercise their preferences, such as registering and receiving mailings, news and promotions, notifications by email, WhatsApp and Push on App, additional information in your profile and film genre preferences. This information and Personal Data will be treated based on legitimate interest or consent (in the case of the Cinemark Calendar), and it is up to the User to opt-out of receiving mailings and information additional preference

2.3. Personal Information and Data collected while using Cinemark Channels

Cinemark may collect navigation information, behavioral data or Personal Data, such as the User's IP address of origin, in an automated manner to improve our services and the use of features that benefit Users, in accordance with Cinemark's legitimate interests.

Cinemark uses cookies, which are small stored text files that can be accessed later to verify browsing information. The categories of cookies used by Cinemark are: (i) necessary cookies; (ii ) analytical cookies; (iii) identification and functionality cookies; (iv) performance cookies; (v) advertising and targeting cookies; and (v) third-party cookies. Below, we describe their main functionalities:

(i) Necessary cookies will use information necessary to ensure Cinemark Channels function, such as to prevent fraud. Necessary cookies do not collect Personal Data for marketing purposes.

(ii) Analytical cookies collect data on the pages most visited by the Cinemark Channels User and the User's usage patterns for statistical purposes, without identifying the User. For this reason, some of these features cannot be disabled or rejected, in order to guarantee the proper functioning of Cinemark Channels.

(iii) Identification and functionality cookies allow you to store User preferences and customize your user experience of Cinemark Channels and may be disabled in the User's Internet browser. It is possible that the selections and blocking of cookies made affect the functioning of the User's experience and navigation.

(iv) Performance cookies enable Cinemark to obtain information, generally anonymized, about the use of Cinemark Channels, such as number of Users and visitors to a page and how these Users arrived at Cinemark Channels.

(v) Advertising and targeting cookies allow the display of advertisements and advertising campaigns in accordance with the profile and use of Cinemark Channels by the User,

(vi) Third-party cookies are enabled by Cinemark to promote Cinemark Channels services, in accordance with the provisions of this Privacy Policy.

The User can change the settings to block cookies or alert you when a cookie is being sent to your device in your internet browser settings. There are several ways to manage cookies. Consult your browser instructions or help section to learn more about adjusting or changing your browser settings. Below, we provide links to some browsers that can be used so that the User knows how to change the cookie settings in such browsers: Firefox | Cookies, Safari | Cookies, Chrome | Cookies and Microsoft | Cookies.

Disabling the cookies we use may impact your experience on the Cinemark Platforms, for example, you may not be able to visit certain areas of the Cinemark Platforms or you may not receive personalized information when you visit them.

If you use different devices To view and access the Cinemark Platforms, you must ensure that each browser on each device is adjusted to meet your preferences regarding cookies.

Cinemark also uses geolocation technology in its App, through proprietary technology. BLP Desenvolvimento De Software Ltda (Flowsense), which allows the receipt of information about visits to Cinemark commercial establishments, without directly identifying the User, for the purposes of displaying personalized advertisements, sending contextualized messages via push (compatible with your location) and automated address validation. In this case, the collection of your geolocation will only occur if you allow it, through your device settings.

Cinemark Channels may contain links to third-party websites, which are not subject to the provisions of this Privacy Policy. It is recommended that Users consult the privacy policies of third parties before interacting with their Sites

Personal Data collected by Cinemark will be stored securely and, when no longer needed, will be discarded, unless its storage is required to comply with obligations under applicable local and national laws or for the regular exercise of Cinemark's rights.

2.4. Information and Personal Data collected while using Cinemark Channels

Cinemark may collect information and Personal Data of Users from third parties, for example, through Users accessing services provided by third parties (e.g. integration with Facebook), from third party providers for the prevention and detection of fraud in financial transactions, to measure the interactions of Users and visitors to Cinemark Channels with published advertisements, among others.

For the User to take advantage of the features of the Cinemark Calendar (announcements relating to films of interest and other Cinemark news ), Cinemark will collect, through a company contracted to manage the Cinemark Calendar website, basic registration data and data on the User's choices.

Cinemark will process Personal Data only to fulfill the purposes described and in accordance with the legal provisions applicable to the Processing.

Cinemark may collect information and Personal Data of Users from third parties, for example, through Users accessing services provided by third parties (e.g. integration with Facebook), from third party providers for the prevention and detection of fraud in financial transactions, to measure the interactions of Users and visitors to Cinemark Channels with published advertisements, among others.

For the User to take advantage of the features of the Cinemark Calendar (announcements relating to films of interest and other Cinemark news ), Cinemark will collect, through a company contracted to manage the Cinemark Calendar website, basic registration data and data on the User's choices.

Cinemark will process Personal Data only to fulfill the purposes described and in accordance with the legal provisions applicable to the Processing.

3. Personal Data Sharing

Personal Data collected during the use of the Channels will be shared with the following third parties:

a) Payment methods: Cinemark may hire third parties, such as payment gateways or digital wallets, to intermediate payments made on Cinemark Channels. Only strictly necessary Personal Data will be shared with third parties, for the purpose of perform payment processing in favor of Cinemark.

b) Anti-fraud: Cinemark may use third-party services to validate the information provided by Users in order to avoid fraudulent transactions.

c) Infrastructure and Storage: Cinemark uses cloud storage services, with an adequate level of information security, to make Cinemark Channels available.

d) Cashback: Cinemark may share with Méliuz the cell phone number of customers registered in the application, who make ticket purchases via it, with the purpose of informing the partner, to provide cashback on ticket purchases made through this channel. The amounts and responsibility for the credit are the responsibility of Meliuz.

e) Legal obligations and/or Regular exercise of rights: Cinemark may share Personal Data with public or private organizations in order to comply with legal obligations or exercise your rights towards third parties, in accordance with art. 7th, items II and VI.d) Cinemark Channels Management Company: Cinemark may share Users' Personal Data with companies that manage their platforms, for integration between Cinemark Channels.

Cinemark may receive Personal Data from Customers of Partners responsible for benefit offering programs, to obtain offers related to tickets and/or exclusive Cinemark products. Personal Data shared by the Partner with Cinemark will be used exclusively for the purpose of confirming the validity of the Partner's offer to the Customer. The Customer must consult the Partner's Privacy Policy if they have any questions about the sharing of their Personal Data and if they are not interested in being part of the Partner's Benefits Program, they must opt-out directly through the Partner's official communications and channels .

4. Legal Bases and Purposes for the Processing of Personal Data

Execution of contract or preliminary procedures and credit protection:

1. Creating an account at Cinemark;

2. Joining the Cinemark Loyalty Program;

3. Registering for the mailing list and newsletter;

4. Receiving information about new film releases and products;

5. Collection and processing of payments, including the processing of credit card payments;

6. Billing and collection of orders;

7. Provision of after-sales service to the User who wishes information or measures, as well as other User relationship management functions

8. Resolution of questions or complaints; and

9. Resolution of disputes.

Legitimate interest:

1. Improving the performance of Cinemark Channels;

2. Use of cookies and functionalities for collecting information and Personal Data, such as IP address;

3. Creation of internal usage reports for the developing new services and content and improving services already offered by Cinemark Channels;

4. Carrying out internal management and business procedures, e.g., accounting, audits, master data management, anti-fraud and credit checking;
n
5. Direct marketing and advertising of Users;

6. Display of personalized content to the User.

Compliance with legal obligation and regular exercise of rights in process:

When necessary to comply with applicable legal obligations, including in relation to financial and regulatory reports, adverse event reports and tax obligations, audit reports, among others or for the purposes of regular exercise of rights in judicial, administrative proceedings or arbitration.

Consent:

When the User actively expresses their interest in receiving communications such as newsletters, offers, highlights of the week, loyalty programs when registering on the Cinemark Calendar.

5. Storage and Protection of Personal Data

To mitigate the risks involving the loss or misuse of Personal Data, we have adopted technical and organizational measures to ensure a level of security compatible with the activities carried out by Cinemark, namely:

Use of the TLS (Transport Layer Security) protocol for processing Personal Data and information on the Website and App;

Encryption; and

Control of access to Personal Data Processed by Cinemark Channels.

It is important to highlight that no Processing of information or Personal Data is completely secure, being susceptible to the exploitation of loopholes and vulnerabilities by third parties. If there is any suspicion of violation of the rules of this Privacy Policy, please contact us immediately at contact channel indicated in item 10 below.

6. International Transfer of Personal Data

As an international company, Cinemark may transfer your Personal Data to servers located outside Brazil, for example, servers located in the United States of America, for the purposes of executing the contract with the User, in accordance with art. . 33, item IX of the LGPD. In such cases, Cinemark will adopt the necessary measures to ensure that Personal Data transferred to recipients in countries other than your country receives an adequate level of protection as required by Applicable Data Protection Laws

7. Subject Rights

By using Cinemark Channels and providing your Personal Data, the User will have the following rights in relation to their own Personal Data provided by law:

a) Access to Personal Data: Be aware of the information and Personal Data Processed by Cinemark Channels;

b) Correction: Request correction of Personal Data stored by Cinemark Channels;

c) Deletion of Registration : Request the deletion of the registration made on Cinemark Channels. In this case, it is possible that some Personal Data will remain stored to comply with legal obligations or to exercise Cinemark's rights;

d) Revocation of Consent: Revoke the consent provided for some functionalities, through opt-out;

e) Portability: Request the portability of Personal Data in an interoperable format (informed by Cinemark), such as a txt file;

f) Review of Automated Decisions: Request the review of an exclusively automated decision that affects your interests.

If necessary, contact us via the channel provided in item 10 below to exercise the rights provided for in this Privacy Policy. In order for Cinemark to analyze and respond to your request, proof of the User's identity is required holder of Personal Data and/or their legal representative, which is why a photo identification document and power of attorney (if applicable) must be sent. This is a security measure to ensure that Personal Data is not disclosed to anyone who does not have the right to receive them.

8. Personal Data Storage Period

The Personal Data of a specific User collected by Cinemark will be stored during the period of registration of said User on the Cinemark Channels and to achieve the purposes described in this Privacy Policy, respecting the legal periods for storing Personal Data after that period as necessary so that Cinemark can comply with its contractual or legal obligations or defend itself in a judicial or administrative proceeding.

9. General Provisions

Cinemark reserves the right to unilaterally modify this Privacy Policy, provided, however, that you are notified of such changes. We will keep any new versions of this Privacy Policy public and accessible on our Cinemark Channels.

10. Contact Information

If you have any questions regarding our Privacy Policy or how We Treat your Personal Data, please contact us using the customer service form at https://sac.cinemark.com.br /hc/pt-br

Data Protection Officer: Privacy Committee.