SECTION I — PRIVACY POLICY CLAUSE
Processing Facial Biometric Data for Identity Verification
BAPS processes facial biometric data of participants in the 5th BAPS National Congress using facial recognition technology exclusively to verify and authenticate identity upon entry to the event, prevent fraud and control access. The facial biometric data collected is classified as sensitive personal data under Article 5, item II, of Law No. 13,709/2018 (Brazilian General Data Protection Law – LGPD). Processing is based on the data subject's freely given, informed, unequivocal, specific and prominent consent, under Article 7, item I, together with Article 11, item I, of that Law. This consent meets the requirements of Article 8 of the same Law, particularly regarding the freely given, informed and unequivocal expression of the data subject's wishes and the specificity of processing purposes. It is provided through electronic acceptance during preregistration, demonstrating the data subject's express and voluntary agreement.
Consent to the processing of facial biometric data is optional. Data subjects may refuse it without any penalty or adverse effect on their participation in the event. In that case, identity verification will use an alternative method involving presentation of an official photo ID and an in-person check. The facial biometric data collected will be stored for a maximum of 180 (one hundred and eighty) days from the event date, after which it will be permanently deleted, and will not be used for any purpose other than that described herein. BAPS undertakes not to share facial biometric data with third parties unless required by a legal or regulatory obligation or to comply with an order from a competent authority, subject to applicable legal grounds and the principles of current legislation, under Article 11, item II, subitems “a” and “d”, of the LGPD, where applicable.
Data subjects may optionally authorize, through specific and prominent consent (Checkbox 2), the retention of their facial biometric data for an additional period of up to 12 (twelve) months from the event date, exclusively for identity verification at future BAPS events. In this case, the data will be deleted at the end of that period unless new express consent is given or a legal retention obligation applies.
Data subjects may at any time request withdrawal of consent under Article 8, paragraph 5, and Article 18, item IX, of the LGPD, through an express statement using a free and accessible procedure. They may also exercise their rights to confirmation of processing, access to data, correction of incomplete, inaccurate or outdated data, and anonymization, blocking or deletion of unnecessary or excessive data, as guaranteed by Article 18, items I, II, III, IV and VI, of the LGPD, by submitting a request to the Data Protection Officer at baps.ti@baps.global. Withdrawal of consent does not affect the lawfulness of processing based on consent previously given.
SECTION II — TERMS OF USE CLAUSE
Consent to Capture, Process and Store Images and Facial Biometric Data
By completing preregistration and accepting these Terms of Use, the PARTICIPANT declares that they understand BAPS may use facial recognition technology to verify and authenticate identity when accessing the event, and for security and fraud prevention. The PARTICIPANT, through express and voluntary electronic acceptance during preregistration, gives freely given, informed, unequivocal, specific and prominent consent to the capture, processing, temporary storage and use of their image and facial biometric data under Articles 7, item I, and 11, item I, of Law No. 13,709/2018 (LGPD). This consent meets the requirements of Article 8 of the LGPD, particularly regarding the freely given, informed and unequivocal expression of the data subject's wishes and the specificity of processing purposes, and is provided through electronic acceptance demonstrating the express and voluntary agreement of the PARTICIPANT.
This consent covers exclusively biometric identity verification for entry to the 5th BAPS National Congress and does not extend to any other purpose, including advertising or commercial purposes. The PARTICIPANT understands that they may refuse or withdraw this consent at any time without affecting their participation in the event, with an alternative verification method using an official photo ID guaranteed. Consent may be withdrawn at any time by an express statement from the data subject, through a free and accessible procedure under Article 8, paragraph 5, and Article 18, item IX, of the LGPD, by formally requesting it from the Data Protection Officer by email at baps.ti@baps.global.
The PARTICIPANT declares that information provided during preregistration is truthful and corresponds to their actual identity, assuming full civil responsibility for its accuracy under the principles of probity and objective good faith established in Article 422 of Law No. 10,406/2002 (Civil Code). The PARTICIPANT acknowledges that providing false information, using a third party's identity or committing fraud will subject the offender to applicable civil liability and, where a criminal offense defined by law is established, criminal liability. The PARTICIPANT undertakes not to use, attempt to use or facilitate fraudulent means, third-party identities or any devices intended to circumvent the facial verification system, under penalty of immediate exclusion from the event without reimbursement of amounts paid.
Facial biometric data will be deleted no later than 180 (one hundred and eighty) days after the event, in accordance with BAPS's information security procedures. If the PARTICIPANT has opted for the additional consent described in Checkbox 2, the data will be retained for an additional period of up to 12 (twelve) months from the event date, after which it will be permanently deleted. Any need for longer retention will be strictly subject to a specific legal basis or an order issued by a competent judicial authority.
SECTION III — PREREGISTRATION CHECKBOX TEXTS
CHECKBOX 1 — CONSENT TO PROCESS FACIAL BIOMETRIC DATA
I understand that BAPS will use facial recognition technology to verify my identity when accessing the event, based on my freely given, informed, unequivocal, specific and prominent consent (Article 7, I, and Article 11, I, of the LGPD – Law No. 13,709/2018). I authorize the capture, processing, temporary storage (maximum 180 days) and subsequent deletion of my facial biometric data exclusively for this purpose. This consent meets the requirements of Article 8 of the LGPD and is expressed through electronic acceptance. I understand that I may refuse this consent without affecting my participation and that an alternative verification method using an official photo ID is guaranteed. I may withdraw it at any time through an express statement using a free and accessible procedure under Article 8, paragraph 5, and Article 18, IX, of the LGPD, by submitting a request to baps.ti@baps.global.
CHECKBOX 2 — OPTIONAL CONSENT TO RETAIN FACIAL REGISTRATION FOR FUTURE EVENTS
I understand that by selecting this option, I authorize BAPS to retain my facial biometric data for an additional period of up to 12 (twelve) months from the date of the 5th BAPS National Congress, exclusively to verify and authenticate my identity at future BAPS events through a new facial recognition process. This consent is optional and prominent and is governed by Articles 7, I, and 11, I, of Law No. 13,709/2018 (LGPD). Withholding this authorization will not result in any penalty or adverse effect on my participation in this or future events, and an alternative verification method using an official photo ID is guaranteed. I understand that I may withdraw this consent at any time through an express statement using a free and accessible procedure under Article 8, paragraph 5, and Article 18, IX, of the LGPD, by submitting a request to baps.ti@baps.global. Withdrawal does not affect the lawfulness of processing already performed. If I do not select this option, my facial biometric data will be deleted within 180 (one hundred and eighty) days from the event date, in accordance with the consent given in Checkbox 1.
