1 – WHAT IS PERSONAL DATA AND WHAT CATEGORIES OF DATA DO WE PROCESS?

What is personal data?

Personal Data is any information of any nature and on any medium (e.g., sound or image) relating to an identified or identifiable natural person. A person is considered identifiable if they can be identified, directly or indirectly, for example, by name, identification number, location data, an electronic identifier, or other elements that allow for the identification of that natural person.

Who are the data subjects?

The Customer or User, a natural person, to whom the data relates and who has used the services or products of "Joyful Arts Academy". The Customer is the person who enters into a contract with "Joyful Arts Academy", and the User is the person who uses the services or products of "Joyful Arts Academy", but who may not correspond to the Customer.

In this regard, "Joyful Arts Academy" informs that it equally protects personal data and respects the rights of customers and users.

What categories of personal data do we process?

The categories of data we process are as follows:

Identification and Contacts

Civil or tax identification numbers, payment data, billing address, telephone contact, and email address; date of birth, gender, professional activity, and IP address (if registered online).

Service

Products and services purchased or subscribed to.

2 – WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

The entity responsible for the collection and processing of your personal data is "Joyful Arts Academy", which provides the service or product and, in that context, decides which data is collected, the means of processing, and the purposes for which the data is used.

3 – ON WHAT GROUNDS CAN WE PROCESS YOUR PERSONAL DATA?

These are the circumstances in which we process your personal data:

Consent

When we have your express consent—written, oral, or through the validation of an option—provided it is free, informed, specific, and unambiguous. Examples include your consent for "Joyful Arts Academy" to analyze the use of services and products to make recommendations or send marketing messages.

Contract Execution and Pre-contractual Procedures

When the processing of personal data is necessary for the conclusion, execution, and management of the contract entered into with "Joyful Arts Academy" (e.g., billing, collection, and payments).

Compliance with Legal Obligations

When processing is necessary to comply with a legal obligation to which "Joyful Arts Academy" is subject (e.g., communicating data to judicial or tax authorities).

Legitimate Interest

When the processing corresponds to a legitimate interest of "Joyful Arts Academy" or third parties (e.g., service quality improvement or fraud detection).

4 – FOR WHAT PURPOSES AND FOR HOW LONG DO WE PROCESS YOUR DATA?

How long do we process your Personal Data?

Your personal data is processed by "Joyful Arts Academy" only for the period necessary to achieve the defined purpose or, as applicable, until you exercise your right to object, your right to be forgotten, or withdraw your consent. Once the respective storage period has expired, "Joyful Arts Academy" will delete or anonymize the data, provided it is not required to be kept for a different purpose that may persist.

For what purposes do we process your Personal Data?

• Marketing and Sales: Marketing or selling new products and services; analyzing consumption profiles; adapting and developing new products or services.

• Customer Management and Service Provision: Managing contacts, information, or requests; handling complaints; managing billing, collection, and payments.

What are the timeframes for the processing and retention of personal data?

"Joyful Arts Academy" processes and stores your personal data according to the purposes for which they are handled. In some cases, the law requires data to be processed and stored for a minimum period — for example, 10 years for data required by the Tax Authority for accounting or tax purposes. Whenever there is no specific legal obligation, the data will be processed only for the period necessary to fulfill the purposes that motivated its collection, always in accordance with the law and the guidelines of the relevant data protection authorities (such as LGPD/GDPR). "Joyful Arts Academy" will maintain your personal data for as long as you maintain a contractual relationship with us. We may keep other data for longer periods based on your consent, to ensure rights or duties related to the contract, or due to legitimate interests, but always for the strictly necessary period.

5 – HOW DO WE COLLECT YOUR PERSONAL DATA?

Como recolhemos os seus dados pessoais?

Direct Collection: We collect personal data with your consent when you purchase "Joyful Arts Academy" products or services, download or use e-books, quizzes, offer sessions, applications, or when you participate in market studies. This collection can be done orally, in writing, or through the "Joyful Arts Academy" website.

Indirect Collection: We may also collect information from publicly accessible sources or other sources, such as:

• Relevant information regarding credit risk or identification and contact data for collection management, fraud detection, and revenue protection.

• "Joyful Arts Academy" may collect data from private entities that maintain relevant credit information, provided these databases comply with applicable data protection rules.

• We may also access or confirm data on public administration websites or from private entities to ensure the accuracy of your identification and contact information.

6 - DATA ANALYSIS

Cookie Policy

Information about our use of cookies. Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer, if you agree. Cookies contain information that is transferred to your computer's hard drive. The cookies we use are “analytical” cookies. They allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users find what they are looking for easily. You can find more information about the individual cookies we use and the purposes for which we use them below:

Analytics

Google Analytics is a web analysis service provided by Google Inc. ("Google"). Google utilizes the data collected to track and examine the use of this website, prepare reports on its activities, and share them with other Google services. Google may use the data collected to contextualize and personalize the ads of its own advertising network.

- Personal Data collected: Cookies and Usage Data.

- Processing location: United States - Privacy Policy - Opt-Out.

Facebook Ads Conversion Tracking (Facebook, Inc.)

Facebook Ads conversion tracking is an analytics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed on this website.

- Personal Data collected: Cookies and Usage Data.

- Processing location: United States - Privacy Policy.

Commented Content

Content commenting services allow users to make and publish their comments on the content of this website. Depending on the settings chosen by the owner, users may also leave anonymous comments. If there is an email address among the Personal Data provided by the user, it may be used to send notifications of comments on the same content. Users are responsible for the content of their own comments. If a content commenting service provided by a third party is installed, it may still collect web traffic data for the pages where the comment service is installed, even when users do not use the content commenting service.

Facebook Comments (Facebook, Inc.)

Facebook Comments is a content commenting service provided by Facebook, Inc., allowing the user to leave comments and share them on the Facebook platform.

- Personal Data collected: Cookies and Usage Data.

- Processing location: United States - Privacy Policy.

Email Marketing

We collect your name and email address when you register for a webinar or event, request a free resource, or join a waitlist via Infusionsoft (Privacy Policy). We use this data to send you emails regarding helpful advice and industry news, and to notify you about services and products in which you may be interested. You can unsubscribe from our list at any time. Additionally, we collect your last name and mailing address when you purchase a product or course, as part of our payment provider's card verification process and for sales tax collection.

Remarketing and Behavioral Targeting

This type of service allows this website and its partners to inform, optimize, and serve advertising based on the user's past use of this website. This activity is performed by tracking Usage Data and Cookies, information that is transferred to the partners who manage the remarketing and behavioral targeting activity. In addition to any opt-out offered by any of the services below, the user may opt-out of a third-party service's use of cookies by visiting the Network Advertising Initiative opt-out page.

Facebook Remarketing (Facebook, Inc.)

Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. that links the activity of this website to the Facebook advertising network.

- Personal Data collected: Cookies and Usage Data.

- Processing location: United States - Privacy Policy - Opt-out.

Facebook Custom Audience (Facebook, Inc.)

Facebook Custom Audience is a remarketing and behavioral targeting service provided by Facebook, Inc. that links the activity of this website to the Facebook advertising network.

- Personal Data collected: Cookies and Usage Data.

- Processing location: United States - Privacy Policy - Opt-out.

Interaction with External Social Networks and Platforms

This type of service allows interaction with social networks or other external platforms directly from the pages of this website. The interaction and information obtained through this website are always subject to the user's privacy settings for each social network. This type of service may still collect traffic data for the pages where the service is installed, even when users do not use it.

Twitter Tweet Button and Social Widgets (Twitter, Inc.)

The Twitter Tweet button and social widgets are services that allow interaction with the Twitter social network provided by Twitter, Inc.

- Personal Data collected: Cookies and Usage Data.

- Processing location: United States - Privacy Policy.

Facebook Like Button and Social Widgets (Facebook, Inc.)

The Facebook Like button and social widgets are services that allow interaction with the Facebook social network provided by Facebook, Inc.

- Personal Data collected: Cookies and Usage Data.

- Processing location: United States - Privacy Policy.

LinkedIn Button and Social Widgets (LinkedIn Corporation)

The LinkedIn button and social widgets are services that allow interaction with the LinkedIn social network provided by LinkedIn Corporation.

- Personal Data collected: Cookies and Usage Data.

- Processing location: United States - Privacy Policy.

How to Provide or Withdraw Consent for the Installation of Cookies

In addition to what is specified in this document, the user can manage cookie preferences directly in their own browser and prevent—for example—third parties from installing cookies. Through browser preferences, it is also possible to delete cookies installed in the past, including cookies that may have saved the initial consent for the installation of cookies by this website. Users can, for example, find information on how to manage cookies in the most commonly used browsers at the following addresses: Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Internet Explorer. With regard to cookies installed by third parties, users can manage their preferences and withdraw their consent by clicking on the related opt-out link (if provided), using the means provided in the third party's privacy policy, or by contacting the third party. Notwithstanding the above, the Owner informs that Users may follow the instructions provided in the initiatives subsequently linked by the EDAA (EU), the Network Advertising Initiative (USA) and the Digital Advertising Alliance (USA), DAAC (Canada), DDAI (Japan) or other similar services. These initiatives allow users to select their tracking preferences for most advertising tools. The Owner, therefore, recommends that Users make use of these resources in addition to the information provided in this document.

System Logs and Maintenance

For purposes of operation and maintenance, this website and any third-party services may collect files that record interaction with this website (system logs) using other personal data (such as the IP address) for this purpose.

Changes to this Privacy Policy

The owner reserves the right to make changes to this privacy policy at any time, notifying users on this page and possibly within this website and/or—to the extent technically and legally possible—sending a notice to users through any contact information. If the changes affect processing activities carried out based on the user's consent, the owner shall collect new consent from the user, where necessary.

Owner and Data Controller

"Joyful Arts Academy", Joinville/SC/BR

Owner contact email: viaanimi.com@gmail.com

As the installation of third-party cookies and other tracking systems through the services used on this website cannot be technically controlled by the owner, any specific references to cookies and tracking systems installed by third parties should be considered indicative. To obtain complete information, we request that the User consult the privacy policy of the respective third-party services listed in this document. Given the objective complexity surrounding the identification of technologies based on cookies, Users are encouraged to contact the Owner should they wish to receive further information regarding the use of cookies by this website.

7 – WHAT ARE YOUR DATA PROTECTION RIGHTS AND HOW TO EXERCISE THEM?

What are your rights?

See below your rights and the details of what is protected under each one:

Right of Access

The right to obtain confirmation of which of your personal data are being processed and information about them, such as the purposes of the processing and the retention periods, among others. The right to see or obtain a copy, for example, of invoices, written agreements, or support requests you have made.

Right to Rectification

The right to request the rectification of your personal data that is inaccurate or to request that incomplete personal data be completed, such as your address, tax identification number (TIN/NIF), email, telephone contacts, or others.

Right to Erasure or “Right to be Forgotten”

The right to obtain the erasure of your personal data, provided there are no valid grounds for its conservation, such as cases where "Joyful Arts Academy" must keep the data to comply with a legal obligation for the investigation, detection, and prosecution of crimes, or because a judicial process is underway.

Right to Data Portability

The right to receive the data you provided to us in a commonly used and machine-readable digital format, or to request the direct transmission of your data to another entity that becomes the new controller of your personal data—for example, receiving your invoices or transmitting your contacts to the new controller—but in this case, only if technically possible.

Right to Withdraw Consent or Right to Object

The right to object to or withdraw your consent at any time for data processing, such as in the case of data processing for marketing purposes, provided there are no legitimate interests that prevail over your interests, rights, and freedoms, such as the defense of a legal right in a judicial process.

Right to Restriction of Processing

The right to request the restriction of the processing of your personal data in the form of:

1. Suspension of processing.

2. Limitation of the scope of processing to certain categories of data or processing purposes.

Right to Lodge a Complaint

The right to lodge a complaint with the supervisory authority (CNPD), in addition to the company or the DPO.

How can you exercise your rights?

Exercising your rights is free of charge, except in the case of a manifestly unfounded or excessive request, in which case a reasonable fee may be charged taking costs into account. Information must be provided in writing but, if requested, can be provided orally. In this case, "Joyful Arts Academy" must verify your identity by means other than oral. Responses to requests must be provided within a maximum of 30 days, unless it is an especially complex request.

Exercise your rights through the following address: viaanimi.com@gmail.com

8 – TO WHOM DO WE DISCLOSE YOUR PERSONAL DATA?

Under what circumstances is your personal data disclosed to other entities, subcontractors, or third parties?

Your data may be transmitted to subcontractors so that they may process it in the name and on behalf of "Joyful Arts Academy". In this case, "Joyful Arts Academy" will take the necessary contractual measures to ensure that the subcontractors respect and protect the data subject’s personal data. Data may also be transmitted to third parties — entities other than "Joyful Arts Academy" or its subcontractors — such as companies within the "Joyful Arts Academy" group, companies with which "Joyful Arts Academy" develops partnerships, in cases where the data subject has given consent, or entities to whom the data must be disclosed by law, such as the tax authority.

Under what circumstances does (Client Name) transfer your data to a third country?

"Joyful Arts Academy" may need to transfer your personal data to a third country outside the European Union and that is not included in the list of countries that the EU has already considered to provide an adequate level of protection for personal data. In such cases, "Joyful Arts Academy" will ensure that data transfers are carried out in strict compliance with the applicable legal rules.

9 – HOW DOES "JOYFUL ARTS ACADEMY" PROTECT YOUR PERSONAL DATA?

"Joyful Arts Academy" has implemented appropriate, necessary, and sufficient logical, physical, organizational, and security measures to protect your personal data against destruction, loss, alteration, disclosure, unauthorized access, or any other form of accidental or unlawful processing.

"Joyful Arts Academy" has implemented:

• Logical security requirements and measures, such as the use of firewalls and intrusion detection systems in its systems, the existence of a strict policy regarding access to systems and information, and the recording of actions carried out by "Joyful Arts Academy" employees involving customers’ or users’ personal data (logging);

• Physical security measures, including strict control of access to the physical premises of "Joyful Arts Academy" by employees, partners, and visitors, as well as highly restricted and permanently monitored access to the essential technological infrastructure of "Joyful Arts Academy";

• Data protection measures by design (“privacy by design”), using technical means such as masking, encryption, pseudonymization, and anonymization of personal data, as well as a set of preventive measures favorable to privacy (“privacy by default”);

• Scrutiny, audit, and control mechanisms to ensure compliance with security and privacy policies;

• An information and training program for the employees and partners of "Joyful Arts Academy";

• Access rules for Customers or Users to certain products or services, such as the introduction of a password, in order to strengthen control and security mechanisms.

10 – USEFUL ADVICE FOR THE PROTECTION OF YOUR DATA

"Joyful Arts Academy" websites and third-party websites

With regard to the use and processing of personal data on "Joyful Arts Academy" websites, please make sure to consult the rules on the use of cookies on the respective websites. The websites, products, or applications of "Joyful Arts Academy" may contain links to third-party websites, products, or services that have no relationship with "Joyful Arts Academy" or are not covered by this Privacy Policy. The collection or processing of personal data requested by such third parties is their sole responsibility, and "Joyful Arts Academy" cannot, under any circumstances, be held responsible for the content, accuracy, truthfulness, or legitimacy of those websites or for the misuse of data collected or processed through them. We alert Customers and Users of "Joyful Arts Academy" to this fact and to the need to read and accept the rules relating to the processing of personal data defined by such third parties before using their websites, products, or applications.

Other advice

"Joyful Arts Academy" advises caution in exposing your personal data and in the circulation of such data over the internet, acts which are entirely the responsibility of the customer, since such data is not fully protected against possible breaches. We also recommend the adoption of additional security measures, including maintaining devices (PCs, tablets, or mobile phones) and software properly updated and configured with firewalls and protection against malicious software (e.g., antivirus), avoiding browsing websites of doubtful reputation or for which you do not have adequate guarantees of authenticity, physically protecting your devices, avoiding entering access credentials on public computers (e.g., cybercafés, hotels, etc.), and using strong and different passwords depending on each service or website.

Legal information

This privacy statement was prepared based on provisions of multiple legislations, including the LGPD. This privacy policy refers only to this website, unless otherwise stated in this document.

Information not contained in this policy

More details regarding the collection or processing of personal data may be requested from the Owner at any time.