These terms, policies and conditions of purchase, cancellation and refunds set out the rules for participants wishing to register for the BAPS Health Tourism Summit, 5th BAPS National Congress, BAPS Management - Planning for 2027 and BAPS In The House Face, available for registration through the official website https://baps.global/eventos-2026/en/. Before completing registration, we recommend carefully reading the terms below. By proceeding with the purchase, participants declare that they are fully aware of and agree to all the conditions, policies and provisions presented here.
The Privacy Policy provisions contained in these terms apply uniformly upon acceptance and agreement, even when reproduced in more than one set of terms or guidelines, without conflict between them.
1. PRIVACY POLICY
1.1. DEFINITIONS
BAPS: ASSOCIAÇÃO BRASILEIRA DE CIRURGIÕES PLÁSTICOS – BAPS (Brazilian Association of Plastic Surgeons), a private association registered under CNPJ No. 46.236.701/0001-25, headquartered at Avenida Deputado Jamel Cecílio, No. 2496, Jardim Goiás, Ed. New Business Style, Room 46A, ZIP Code 74.810-100, Goiânia, Goiás, Brazil. BAPS Website: the BAPS Website is available to users to facilitate ticket purchases, event registration and participant management, accessible at https://baps.global/eventos-2026/en/.
Personal Data: information relating to an identified or identifiable natural person.
Nonpersonal Data: any information that does not relate to a person and/or cannot be used to identify a person.
Personal data processing: any operation involving personal data, such as collection, production, receipt, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination or extraction.
Personal data controller: a natural person or legal entity, governed by public or private law, responsible for decisions concerning the processing of personal data.
Personal data processor: a natural person or legal entity, governed by public or private law, that processes personal data on behalf of the controller.
Cookies: files intended to identify a computer and obtain access data, such as pages visited or links clicked, thereby allowing navigation to be personalized according to the user's profile.
Consumer: the term used to describe individuals who purchase tickets for events.
Participants: individuals who use tickets purchased by Consumers. Consumers who purchase tickets for themselves are also Participants. When a Consumer purchases tickets for a third party, that third party is considered only a Participant and not a Consumer.
User: the term used to refer jointly to the consumer and/or participant.
Registration ownership: pertains to the registered individual, linking their name and email address.
1.2. COLLECTION OF PERSONAL AND NONPERSONAL INFORMATION
1.2.1. For the purposes of Law No. 13,709/2018 (Brazilian General Personal Data Protection Law), BAPS may act as either a personal data controller or a personal data processor, depending on the circumstances of each case.
1.2.2. In general, BAPS will collect personal data from users whenever they voluntarily provide such information for the purposes set out in this Policy. This information includes:
a) Account information: to create an account, users must provide their full name, CPF (Brazilian taxpayer ID), email, telephone number and ZIP code.
b) Participant information: to purchase a registration, identification details of the person who will use the ticket to access the event are collected, such as name and email.
c) Registration validation information: identification details of the Consumer, meaning the person receiving the registration by email, are collected. These details consist of name and email.
d) Payment information: financial and identification details of the person responsible for paying for registrations are collected, such as credit card details, name, telephone number, CPF and address.
1.2.3. In addition to the information above, other data may be collected from the user's computer, including geolocation and details of the device used to browse or use the website, such as IP addresses, browser type and language, internet service provider, entry and exit pages, operating system, date and time, clickstream data, device manufacturer, carrier, model, Wi-Fi networks and telephone number.
1.2.4. BAPS may obtain information about its users from other databases through database APIs belonging to systems operated by other public or private bodies or entities.
1.2.5. BAPS may also collect information through cookies, small text files sent by the website to the user's computer and stored there. Information stored in cookies is also considered personal data and is subject to all rules in this Privacy Policy.
1.2.6. To better understand and improve the usability of its products, BAPS may invite users to answer surveys about their website experience. Users acknowledge that participation is voluntary and that personal data provided will be processed and stored for the purposes specified in the survey invitation.
1.2.7. In cases of suspicious activity or transactions with a significant risk of fraud, BAPS may request personal documents or other evidence to confirm the user's identity and its correspondence with registration details. Such requests may be made by telephone, email, a verified WhatsApp business account or another appropriate method.
1.2.8. BAPS will request documents only through its official communication channels: email addresses under the “baps.global” domain and accounts bearing verification badges issued by the applications themselves.
1.2.9. If BAPS combines nonpersonal information with personal information, the combined information will be treated as personal information for as long as it remains combined.
1.2.10. If combined information is considered sensitive, meaning it can reveal racial or ethnic origin, religious beliefs, political opinions, membership in a union or religious, philosophical or political organization, health or sex-life data, or genetic or biometric data, it will be processed with the data subject's consent or under other applicable legal grounds. Such information will be stored securely and will not be shared with third parties unless anonymized first.
1.3. USE OF PERSONAL INFORMATION
1.3.1. Personal data will be used consistently with this Privacy Policy to provide, develop and improve services or products, including those yet to be created.
1.3.2. BAPS will use personal data in the following ways:
a) Create accounts or event registrations, enable access to services, control access to events or content, process payments and issue tax invoices;
b) Send important notices and notifications, such as purchase communications, changes to deadlines, conditions and policies, and provide user support.
c) Enhance security and improve BAPS offerings, personalize registered users' experiences and product offerings, analyze and resolve technical problems, and identify and prevent fraud in website use.
d) Recommend events and send advertising and other promotional materials.
e) Internal and management purposes, such as auditing, data analysis and research to improve products, services and communications with users.
f) Comply with legal obligations and requirements.
1.3.3. BAPS will process personal data on the following legal grounds: compliance with legal obligations, performance of a contract or precontractual measures, regular exercise of rights, legitimate interests and credit protection. Sensitive personal data will be processed with the data subject's consent or under other applicable legal grounds, as provided in item 2.10 of the Terms of Use Policy. The legal basis for processing may vary according to the activity performed.
1.3.4. If BAPS uses any personal data differently from the uses established in this Privacy Policy, users will be informed of the new use in advance, before or on the date the personal data is received.
1.4. SHARING OF PERSONAL INFORMATION
1.4.1. BAPS does not sell users' personal data to third parties. However, BAPS may disclose, transfer or share personal data with third parties in the circumstances described in this document and under Brazilian law.
1.4.2. BAPS may share users' personal data with contractors and service providers processing such data on its behalf.
1.4.3. BAPS may share users' personal data with online payment solutions to identify users who have registered payment-method accounts and facilitate checkout.
1.4.4. BAPS may share users' information through platform integrations or approved solutions.
1.4.5. When requested, BAPS will share users' information with law enforcement or judicial authorities, competent public authorities or other third parties, within or outside Brazil, if required by applicable law, court order or an authority's request, or as necessary to respond to legal proceedings or participate in litigation or disputes of any kind.
1.4.6. BAPS reserves the right to share users' information with third parties when there are sufficient grounds to consider a user's activity suspicious, unlawful or harmful to BAPS or third parties.
1.6. STORAGE OF PERSONAL INFORMATION
1.6.1. BAPS stores users' information only for the period necessary for the purposes described in the Terms of Use and this Privacy Policy, always respecting retention periods required by applicable law.
1.6.2. BAPS uses its best efforts to respect and protect users' personal information against loss, theft, misuse, unauthorized access, disclosure, alteration and destruction.
1.6.3. BAPS will process personal data with a high level of security, implementing best practices for data protection. However, interception or breaches of systems and databases cannot be completely ruled out, as internet security is continually evolving.
1.6.4. In the event of an information security incident resulting in destruction, loss, alteration, unauthorized access or disclosure of personal data, BAPS will immediately assess risks to data subjects' civil liberties and fundamental rights. Notification of data subjects or the Brazilian National Data Protection Authority will depend on the circumstances and the assessment of those risks.
1.7. PROCESSING OF PERSONAL INFORMATION
1.7.1. Users' personal data may undergo operations such as collection, storage, evaluation, matching, comparison, classification, processing, transfer, and studies and research.
1.8. SECURITY IN PERSONAL INFORMATION PROCESSING
1.8.1. BAPS undertakes to comply with all legislation concerning the proper use of users' personal data, preserving the privacy of data used in the service and ensuring all legal rights and guarantees of data subjects.
1.9. USERS' RIGHTS
1.9.1. Users can easily and accessibly request the following from BAPS through our email concierge@baps.global:
I - confirmation of whether processing takes place;
II - access to data;
III - correction of incomplete, inaccurate or outdated data;
IV - anonymization, blocking or deletion of unnecessary or excessive data, or data processed contrary to this Law;
V - portability of data to another service or product provider upon express request, in accordance with national authority regulations and subject to commercial and industrial secrecy;
VI - deletion of personal data processed with the data subject's consent, except in the circumstances provided in Article 16 of this Law;
VII - information about public and private entities with which the controller has shared data;
VIII - information about the possibility of withholding consent and the consequences of doing so;
IX - withdrawal of consent under Article 8, paragraph 5, of this Law.
The rights described here will be exercised through an express request to BAPS by the data subject or their duly appointed legal representative.
1.10. COOKIES AND OTHER TECHNOLOGIES
1.10.1. BAPS has its own policy on cookies and similar tracking technologies, called the “Cookie Policy”.
1.11. CONSENT TO USE OF IMAGE IN EVENT CONTENT
1.11.1. I freely, voluntarily and knowingly authorize the capture and use of my image, voice and likeness for 24 (twenty-four) months in photographs, videos and broadcasts produced during the event, for institutional, promotional and publicity purposes related to BAPS activities, in any media, including digital platforms and social networks. This authorization is granted free of charge, and no remuneration is due for use of my image within the purposes and conditions expressly established herein, pursuant to Article 5, items V and X, of the Federal Constitution and Article 20 of Law No. 10,406/2002 (Civil Code). This authorization will be implemented in strict compliance with Law No. 13,709/2018 (LGPD), where applicable, particularly the principles of purpose, adequacy, necessity, transparency and free access. I declare that I am fully aware that refusing this consent will not affect my participation in the event.
1.12. GENERAL PROVISIONS
1.12.1. By browsing the BAPS Website and using its features, users accept this Privacy Policy and all other policies in force on the access date, such as the Cookie Policy and Terms of Use. Users are therefore advised to stay informed of updates.
1.12.2. This Privacy Policy is subject to continuous improvement. BAPS reserves the right to modify it at any time, including to comply with laws or rules having equivalent legal force. Users are responsible for reviewing it whenever accessing the website. BAPS will appropriately notify users of material changes to the Privacy Policy.
1.12.3. Any tolerance of a breach of the terms and conditions of this domain will be considered a mere courtesy and shall not be construed as novation, an invocable precedent, waiver of rights, implied amendment of contractual terms, an acquired right or a contractual amendment.
1.12.4. If any provision of this Policy is held unenforceable or ineffective, the remaining provisions will continue in effect without requiring a judicial declaration. These terms shall be interpreted under Brazilian law.
1.12.5. Communication between BAPS and users must take place through the service channels listed on the BAPS Website, primarily by email at contact@baps.global.
1.12.6. Whenever possible, potential disagreements between users and BAPS will be resolved amicably.
1.13. FINAL PROVISIONS
1.13.1. Once all efforts to resolve the matter have been exhausted, the user agrees that the courts of the judicial district of Goiânia, State of Goiás, shall have jurisdiction over disputes or complaints arising from use of our website or related to these Terms.
1.13.2. The user declares that they received this Privacy Policy online, have read and understood it in full, that it is written in clear language, and that they are aware of the rights and conditions limiting its purpose, agreeing to all provisions, as the process and its completion will take place online. Accordingly, the user electronically agrees to this Privacy Policy.
