Data Controller
VIN7 Tecnologia e Negócios LTDA., headquartered in Brasília, DFBrazil, is the data controller for the personal data processed on this platform, pursuant to Brazil's General Data Protection Law (LGPDLei nº 13.709/2020).
Contact: privacidade@arenasnap.com
Data We Collect
Producer (registered account): full name, email address, CPF or CNPJ (for billing), phone/WhatsApp (optional). Payment data is processed directly by the payment gatewayArenaSnap does not store card numbers.
Guest (camera access): device fingerprint (anonymous hash used solely to limit the number of photos per device); approximate geolocation (only with explicit consent during the camera session); photos and videos submitted to the event; lead data (name, email, or WhatsApp) voluntarily provided when liking or commenting on the album.
Purpose & Legal Basis
Producer dataproviding the service and billing. Legal basis: contract performance (LGPD art. 7, V).
Guest device fingerprintpreventing abuse (multiple uploads). Legal basis: legitimate interest (LGPD art. 7, IX).
Geolocationevent metadata. Legal basis: consent (LGPD art. 7, I).
Photos and videosdisplay on the live screen and album. Legal basis: consent implicit in participation at the event.
Album leadspost-event communication by the Producer. Legal basis: consent (LGPD art. 7, I).
Sub-Processors
We use the following vendors who may access personal data:
Cloudflare R2 (USA)photo and video storage. AWS Rekognition (USA)automatic NSFW moderation and facial recognition. Asaas (Brazil)domestic payment processing. Stripe (USA)international payment processing. Fly.io (USA)hosting infrastructure. Google Analytics (USA)navigation analytics (with IP anonymization).
All international vendors operate under appropriate data transfer safeguards.
Data Retention
Photos and videos: up to 30 days after the event ends, or immediately upon Producer's deletion request.
Album leads: for the duration of the event + 6 months.
Producer account data: while the account is active + 5 years (tax obligation).
Access logs: 6 months (Brazilian Internet Civil Rights Framework, art. 15).
Your Rights
Under LGPD art. 18, you may request:
Accessconfirmation and copy of the data we process about you. Rectificationcorrection of incomplete or incorrect data. Deletionerasure of your data, subject to legal retention periods. Portabilityreceive your data in a structured format. Withdrawal of consentat any time, without affecting prior processing.
To exercise your rights, email: privacidade@arenasnap.com. We will respond within 15 business days.
Minors
ArenaSnap is intended for Producers who are 18 years of age or older. Guests may be of any age, with parental consent implied by the event organizer. We do not knowingly collect data from minors in a targeted manner.
Changes to This Policy
We may update this Policy periodically. Producers will be notified by email of material changes with 15 days' notice.
Contact & DPO
For privacy-related inquiries or to exercise your rights:
privacidade@arenasnap.com