PRIVACY NOTICE

M Tech & Data Ltd. ("M Tech & Data" or "We") aims to build a relationship of trust and transparency with all users of our Super App Mata App ("Super App" or "Platform")!

For this reason, we have prepared this Privacy Notice, in compliance with Brazilian Federal Law No. 13,709/2018, also known as the "General Personal Data Protection Law" or "LGPD", to help you ("You") understand how we process your personal data within the scope of the Super App.

If you have any questions and/or requests related to your personal data, please contact us through the channel provided at the end of this Privacy Notice.

Below you will find answers to the following questions:

To facilitate your reading, we present below the definition of some terms used in this Privacy Notice:

National Data Protection Authority (ANPD)	Authority responsible for ensuring, implementing and supervising compliance with LGPD.
Personal data	Any information that can lead to the identification of a natural person, such as name, government identification number and contact details.
Sensitive personal data	Personal data related to racial or ethnic origin, religious belief, political opinion, affiliation to a union or an organization of religious, philosophical or political character, data related to health or sexual life, genetic or biometric data.
Data Protection Officer (DPO)	Person appointed by M Tech & Data to act as a focal point in matters related to personal data protection.
Third-party	Any individual or legal entity that M Tech & Data has or may have a relationship with, such as service providers, suppliers, consultants, partners, and subcontractors.
Data subject	Natural person to whom the personal data being processed by M Tech & Data refers.
Processing	Any activity carried out with personal data, such as collection, access, storage, sharing, and elimination.

Here are the main personal data that we may process when you use the Super App:

Registration data: full name, date of birth, government identification number (such as CPF, passport, etc.) and photo. If You choose to log in to the SuperApp with pre-existing registrations on third-party platforms, we may also collect profile data from those accounts, such as your name and email address registered with Google or Apple ID;
Sensitive data: If you choose from your device settings, we may also collect your digital or facial biometrics to login to the Super App;
Contact details: email, telephone number and address;
Behavioral data: orders, purchase history, and personal preferences regarding the products and services we offer on the Super App;
Payment data: means of payment used and credit and debit card information (such as number, expiration date and Card Verification Value – CVV);
Electronic device data: The information collected may vary depending on the operating system used and the settings of your device. It may include the operating system, browser (type and version), date and time of access, geolocation, pages and products visited or searched for, links clicked, and device IP.

We can collect your personal data in the following ways:

Provided directly by You: From the beginning of Your interaction with us, You voluntarily provide us with information about You, for example, when You create your account on the Super App or register a payment method to make a purchase on the Platform.
Provided by third parties: We may receive information about You from third parties, such as other companies in the M Tech & Data Group, partner brands whose products You purchase, social networks, ad and analytics networks, payment and delivery service providers, among others.
Automatically: We may also collect personal data automatically from your navigation in the Super App, such as clicks, pages visited and other browsing behaviors, to form access statistics.

The personal data we collect about you may be used for the following purposes, which are justified on the legal bases provided in LGPD:

Purpose	Personal data processed	Legal basis
Allow the creation of an access account on the Super App, enabling the use of the Platform’s resources and features.	Registration data and contact details	Performance of a contract
Validate your identity and the truthfulness of the data provided by You.	Registration data, contact details and payment data	Legitimate interest
Identify and authenticate you properly for access to the Super App.	Sensitive data	Fraud prevention and guarantee of data subject’s security
Personalize your experience in the Super App, including offering recommendations of products and services that may be of your interest.	Behavioral data	Legitimate interest
Send communications, including personalized advertisements and offers of products and services from M Tech & Data and partner companies.	Registration data, contact details and behavioral data	Legitimate interest
Allow the purchase of products and services through the Super App.	Registration data and contact details	Performance of a contract
Process payments.	Payment data	Performance of a contract
Conduct satisfaction surveys.	Registration data and contact details	Legitimate interest
Respond to requests, calls, and questions sent through the Super App’s contact channels.	Registration data and contact details	Performance of a contract
Prevent fraud and/or other illicit actions.	Registration data, contact details and electronic device data	Legitimate interest
Conduct research and statistical surveys for market intelligence.	Behavioral data	Legitimate interest
Allow the continuous technical improvement of the Super App, correcting errors and adapting the content to the most used devices.	Electronic device data	Legitimate interest
Comply with legal and regulatory obligations, such as those for issuing invoices and keeping access records.	Registration and electronic device data	Compliance with a legal obligation
Allow the exercise of rights by M Tech & Data in judicial, administrative, or arbitration proceedings.	Registration data, contact details, payment data and behavioral data	Regular exercise of rights

To fulfill the purposes described in this Privacy Notice, we may share your personal data with third parties, observing the legal justifications and applicable limits.

Some of these third parties are:

a. Affiliates, subsidiaries and companies of the M Tech & Data corporate group;

b. Vendors, service providers, and business partners who support us in operating the Super App. This includes technology providers, companies responsible for payment processing, card administrators, partner brands, and event organizers whose tickets are sold on the Super App;

c. Competent authorities, to comply with legal or regulatory obligations or official requests.

International transfer: We may transfer your personal data to organizations located outside of Brazil, such as cloud storage servers located in other countries. In such cases, we will take reasonable care to ensure that international data transfers are carried out in accordance with applicable law.

Your personal data will be retained for the period necessary to fulfill the purposes described in this Privacy Notice. In some cases, the information may be retained for an additional period if necessary to comply with legal and regulatory obligations or to safeguard the exercise of rights by M Tech & Data.

We strive to keep your personal data secure and confidential. In this regard, we have adopted reasonable technical and organizational security measures to protect personal data against unauthorized access and/or accidental or unlawful situations of destruction, loss, alteration, communication or dissemination, in accordance with our Information Security Policies.

Such measures include the application of techniques like logical access control to personal data, ensuring that information is accessed only by authorized individuals, as well as administrative processes, such as maintaining privacy and information security governance programs, which include internal policies and procedures aimed at data protection and security.

LGPD grants rights to personal data subjects, which can be exercised by You, subject to applicable technical and legal limitations. See below for these rights:

Request confirmation of the processing of your personal data by M Tech & Data;
Request access to the personal data about You processed by Us;
Request the correction of your personal data if it is incorrect, inaccurate or out of date;
Request anonymization, blocking or erasure of your personal data, if it is unnecessary or excessive;
Request additional information about the sharing of your personal data with third parties;
Request data portability, in accordance with the regulations of the National Data Protection Authority;
Revoke any authorizations granted by You for the processing of your personal data;
Request information about possible consequences if the processing of personal data is not authorized;
In cases where the processing takes place through the obtaining of your consent, request the revocation of this authorization and/or the erasure of your personal data processed on the basis of this authorization;
Object to the use of your personal data, provided non-compliance with the LGPD is verified and within the legally stipulated limits and conditions;
Request the review of decision based solely on automated processing (without human participation), as well as request the provision of criteria and procedures adopted for making this decision; and
If it is not possible to exercise the rights presented in this topic with M Tech & Data, You can submit a request to the National Data Protection Authority (ANPD).

You can exercise part of these rights, such as the right to correct and update your personal data, directly through the Super App. To do so, access the "Profile" tab. You may also opt-out of receiving marketing communications from M Tech & Data at any time by following the instructions in the message itself.

If you wish to request the exercise of the other rights mentioned above, please send a message to the email: juridico@cidadematarazzo.com.br.

If you have any questions or requests related to the information presented in this Privacy Notice, please contact our Data Protection Officer:

Name: Letícia Fernandes Gheler

Contact: juridico@cidadematarazzo.com.br.

This Privacy Notice may be updated and adjusted at any time. If there is a relevant update, we will use the means available to inform You.

Last updated on: 01/06/2024.