A CONCESSIONÁRIA DOS AEROPORTOS DA AMAZÔNIA S.A., headquartered at Avenida Djalma Batista, nº 1719, Manaus - AM, ZIP code 69050-010, registered with the CNPJ under nº 42.548.035/0001-00 (“Airport”, “we”, “our” and “us”) respects and is committed to protecting the privacy and protection of its users' personal data (“User” and “you”).

Thus, the Airport has developed this Privacy Policy (“Policy”) to provide information on how the collection, use, retention, and sharing of such data will be carried out, by us or on our behalf, to ensure that we comply with all principles, standards, and best practices related to its protection.

This Policy applies to any processing of personal data carried out by the Airport to enable the exercise of its commercial activities, including compliance with its legal and/or regulatory obligations, and the offering of websites or applications that reference or are linked to it.

BY USING OUR SERVICES, YOU DECLARE THAT YOU HAVE READ AND UNDERSTOOD THIS POLICY IN ITS ENTIRETY AND ARE AWARE THAT WE MAY PROCESS YOUR PERSONAL DATA UNDER THE TERMS DEFINED HEREIN AND IN ACCORDANCE WITH APPLICABLE LEGISLATION.

To ensure the maximum protection of your information, the Airport guarantees that personal data will be collected and processed only for legitimate, specific, and previously informed purposes.

In the cases mentioned in this section, the following categories of data may be collected:

• In order to understand your objectives, meet your needs, improve and personalize your experience on the Airport's website, in the context of our and your legitimate interests, your browsing data (e.g., cookies) and pages visited may be collected. To learn more, please refer to our Cookie Policy. Note that you can visit our site anonymously by configuring this function in your browser. However, not providing such information may hinder or prevent access to certain content and services.
• To enable the registration and processing of your submissions to our Ombudsman, in compliance with legal, regulatory, and contractual obligations, we will request that you enter certain information in the form available on our website or other physical and digital service systems provided by us. For example, you may share with us your first and last name, phone number, address, email, and other data and documents you share through other free-form fields.
• To conduct passenger satisfaction surveys in loco, provide assistance to people with disabilities, aged 60 (sixty) or older, pregnant women, nursing mothers, people accompanied by infants, people with reduced mobility, or any person who, due to a specific condition, has limitations in their autonomy as a passenger, as well as for the exercise of other activities in which the Airport is obligated by laws, regulations, and the concession contract, we may request, access, and perform other processing activities with your personal data, such as your first and last name, phone number, age, educational level, date, time and airline of boarding, flight number and destination, etc.

In addition to the purposes and categories of data listed above, we may collect and process any other information that you or third parties legitimately provide to us through various means, such as our websites, applications, email, and physically, whenever necessary (i) to comply with legal or regulatory obligations, (ii) to allow the execution of contracts or preliminary procedures to contracts of which you are a part, (iii) to enable the regular exercise of our rights in judicial, administrative, or arbitration proceedings, (iv) to meet our and/or your legitimate interests, such as the adoption of fraud prevention services, (v) by force of a court order addressed to the Airport, or (vi) to ensure credit protection, in order to enable risk management in operations related to the provision of our services, (vii) and in other cases permitted or required by the regulations in force.

In order to preserve the integrity of your personal data under our control, as a rule, the Airport does not sell, trade, assign, or transfer such information to third parties not belonging to the same economic group. Even within the same group, your data will only be transferred to our parent companies, affiliates, and subsidiaries when strictly necessary and in accordance with applicable legislation.

However, to provide our services and in situations where applicable regulations authorize or require, we may share and/or transfer your personal data to trusted third parties, including but not limited to:

• Suppliers and/or service providers who support the Airport in operating the website or assist us in providing other services offered by us, in fulfilling our legal, regulatory, or contractual obligations, and in other situations authorized by applicable regulations, with these third parties being subject to confidentiality agreements and contractual and regulatory restrictions that prohibit the processing of your personal data contrary to our instructions;
• Authorities and public bodies, aiming to fulfill legal, regulatory, and contractual obligations applicable to the Airport, such as the National Civil Aviation Agency (ANAC), the Federal Revenue of Brazil (RFB), and the State (SEFAZ) and Municipal (SMF) Departments of Finance.

In addition to the situations mentioned above, the Airport may also share your personal information when necessary for (i) compliance with court orders, legal, regulatory, and/or contractual obligations, or our policies, (ii) exercising our rights in judicial, administrative, or arbitration proceedings, (iii) meeting our, your, or third parties' legitimate interests, (iv) credit protection, and (v) other cases where applicable regulations authorize or require.

The Airport is part of one of the largest multinational groups in the airport market, with a physical presence in eleven countries and serving around two hundred and fifty-five million passengers worldwide, according to 2021 data. For this reason, when you use our services, your personal data may be processed anywhere we are located, within the limits of current legislation and provided that the said country guarantees adequate protection of your data or other legitimate protection guarantees are adopted.

Furthermore, your personal data may be stored in cloud systems or other similar technologies and infrastructures, whose servers are generally located in Brazil or abroad, such as in the United States of America or Chile.

Considering that the provision of our services may be unfeasible without such international transfers, you acknowledge that the said cross-border data flow may occur, under the terms of this Policy and within the limits of the applicable regulations.

In any case, the Airport clarifies that it will only carry out such international transfers after adopting all necessary safeguards established by legislation, including the adoption of standard clauses and/or global corporate rules.

The Airport will store the personal data it collects for the time strictly necessary to fulfill the purposes informed to you, in compliance with applicable legislation, opting, as much as possible and reasonable, for the anonymization of the data from the beginning of processing activities, especially when such activities involve sensitive personal data.

Your personal data may also be retained when necessary for us to comply with our legal or regulatory obligations and/or to exercise our rights in judicial, administrative, or arbitral proceedings, in accordance with the terms and deadlines provided by applicable regulations.

The Airport has a set of security measures, both technical and administrative, adopted from the design stage and, by default, capable of protecting your personal data from unauthorized access and accidental or unlawful situations of destruction, loss, alteration, communication, or any form of improper or unlawful treatment, in full compliance with applicable legislation. Moreover, it is part of our internal policy to constantly seek new measures to ensure that only the personal data necessary for each specific purpose are subject to processing and that such processing occurs securely.

Among the security measures already implemented, we highlight the control and tracking of user access in our internal systems, the backup of our databases, and the protection of our systems and servers through the use of specific software, such as antivirus and firewalls.

Additionally, we ensure the reliability of all employees who need to have access to your personal data for the provision of our services, including through proper instruction and commitment to confidentiality agreements.

Unfortunately, no matter how much the Airport makes its best efforts to protect its systems and databases, it is a fact that no security measure is completely effective, so we ask for your help in enhancing the protection of your personal data, including by using antivirus and firewall, constantly updating your browser and operating system, and avoiding accessing suspicious websites or downloading files from unknown sources.

In accordance with Article 18 of Federal Law No. 13,709, dated August 14, 2018 (General Data Protection Law), you have various rights regarding your personal data, including, but not limited to, confirmation of the existence of processing, access, correction, anonymization, blocking, deletion, portability, information, and revocation of consent.

To exercise these and other rights provided for in the applicable regulations related to privacy and personal data protection, you can contact us at any time via the email indicated at the end of this Policy.

The Airport is committed to staying updated on topics related to privacy and data protection and adopting the standards, regulations, guidelines, and best practices established by national authorities. In this regard, it reserves the right to modify its Policy at any time.

If the Airport decides to modify this Policy, this site will be updated. If significant changes or updates are made and/or if applicable legislation so requires, you will be notified through our communication channels, such as email or an announcement on our official website.

Last updated on: October 20, 2022.

Any questions, suggestions, complaints, or requests to exercise rights related to privacy and data protection can be directed to the responsible department via the email ppd@vinci-airports.com.br.

If you need to contact the Data Protection Officer (DPO) for the Amazon Airports, please send an email to: dpo.amazonia@vinci-airports.com.br