Privacy Policy

Last updated: 2026

This page explains, in plain language, what personal data this site collects, why it is collected and what you can do about it. It follows the Brazilian data protection law (LGPD, Law 13.709/2018).

01Who is responsible for your data

The controller of the data collected on this site is:

Marco Viggiani — Venha para o Rio
CADASTUR 19.026072.96-0
Rio de Janeiro — RJ, Brasil
E-mail: venhaparaorio@gmail.com
WhatsApp: +55 21 96496-9381

Any question or request about your data can be sent to the address above.

02What we collect

Data you give us. When you request a booking or get in touch, you provide your name, e-mail, phone or WhatsApp, the date you want, the number of people and the tour you are interested in. If you write a message, we receive its content too.

Data collected automatically. The server records IP address, browser type, language, pages visited and time of access. These are ordinary technical logs, used for security and operation.

What we do not collect. This site does not process payments, so it never asks for or stores card numbers, bank details or identity documents. No booking is charged through the site.

03What we use it for

Replying to your booking request or message;
Organising the calendar and confirming the tour date;
Contacting you by e-mail or WhatsApp about the service requested;
Understanding which tours attract most interest, in aggregate;
Keeping the site secure and stopping abuse.

Your data is never sold, rented or passed to third parties for advertising.

04Legal basis

Contact data is processed on the basis of pre-contractual steps (art. 7, V of the LGPD): you ask for a quote and we need your details to answer. Technical logs and statistics rely on legitimate interest (art. 7, IX). Statistics and marketing cookies rely on your consent (art. 7, I), given in the banner and revocable at any time.

05Who we share it with

Only what the service requires:

Partner guides, when the tour is run in a language that requires another professional — they receive only name, date and tour details;
Drivers, when the service includes a transfer;
Hosting and e-mail providers, which technically store the messages;
Authorities, only under legal obligation.

06How long we keep it

Messages and booking requests are kept for up to 5 years, the period related to possible queries about the service provided. Server logs are kept for 6 months, as required by Brazilian internet law. Your cookie choice is stored for 6 months. After that, data is deleted.

07Cookies: frequently asked questions

What is a cookie?: A small text file the site stores in your browser to remember something — the language you chose, for instance. It is not a program and cannot read files on your device.
Which cookies does this site use?: Necessary: store the chosen language, the session and the form security token. The site does not work without them, so they need no permission.
Statistics: count visits and show which tours are most sought after, in aggregate. Only active if you accept.
Marketing: allow campaign measurement and more relevant ads on other sites. Only active if you accept.
Do I have to accept?: No. Declining is one click, just like accepting, and the site keeps working normally. Only the necessary cookies remain.
How do I change my mind later?: Click Cookie preferences in the footer of any page. You can also delete cookies in your browser settings.
Does the site track who I am?: No. Statistics are aggregated: they show how many people visited a page, not who.

08Your rights

You may at any time:

Confirm whether we process your data and request access to it;
Correct incomplete or outdated data;
Request deletion of data processed on the basis of consent;
Request portability to another provider;
Withdraw cookie consent;
Know who we share your data with;
Object to processing you consider improper.

Write to venhaparaorio@gmail.com. We answer within 15 days.

09Security

The site uses an encrypted connection (HTTPS) on every page. The administration area is protected by password and by cross-site request verification. Forms are protected against automated submission. No system is infallible: should an incident occur that may cause relevant risk, those affected and the Brazilian authority will be informed.

10Children

This site is aimed at adults booking tourism services. We do not intentionally collect data from people under 18. When a booking includes children, we record only how many and their age, with no identifying data, and that information is supplied by the responsible adult.

11Visitors outside Brazil

Most of our clients are abroad. Data is processed in Brazil, where the site is hosted. If you are in the European Union, the GDPR rights — access, rectification, erasure, restriction, portability and objection — are served through the same contact channel on this page.

12Changes to this policy

If this policy changes, the date at the top changes with it. Significant changes will be announced on the site.