Privacy Policy & Legal Terms

1. Introduction

Mana Fest 2026 is deeply committed to safety, privacy, and transparency in the treatment of personal data of all athletes, collaborators, and participants. This Privacy Policy clearly describes how we collect, store, use, and protect your data in compliance with the General Data Protection Law (LGPD - Law No. 13.709/2018) of Brazil.

2. Data Controller

The controller of the data collected through this official platform is the organization of Mana Fest 2026, registered under the norms of the Brazilian territory, based in Pipa, Tibau do Sul, RN.

3. Data Protection Officer (DPO)

In compliance with Art. 41 of the LGPD, the Mana Fest 2026 team acts as a direct communication channel between the organization, data subjects, and the National Data Protection Authority (ANPD):
Responsible: Mana Fest 2026 Team
Contact E-mail: contato@manafestpipa.com.br

4. Collected Data and Detailed Purpose

To enable your safe registration in the sports modalities and experiences of the festival, we exclusively collect the following information:

• Identification and Contact (First Name, Last Name, E-mail, Phone, Date of Birth and Gender): Collected for registration validation, correct division by age/gender categories, billing, and direct contact regarding schedules.
• Tax ID (CPF - Cadastro de Pessoas Físicas): The Tax ID is strictly mandatory for reasons of legal compliance and safety for the contracting of individual athlete accident insurance, which covers all participants during the competition days.
• Sensitive Health Data (Pre-existing Medical Conditions): Used exclusively in case of medical assistance by the official medical team and paramedics present at the beach during competitions.
• Logistics and Operational Impact (Accommodation Type, Hotel Name, Number of Nights, Means of Transport, Companions and Estimated Spend): Collected for consolidated statistical purposes and analysis of the local economic impact and estimation of the festival's carbon footprint.

5. Data Retention and Health Purge Rule

Your general registration and billing data will be kept in our database only for the period strictly necessary as required by legal, tax obligations, and financial audits.

🚨 CRITICAL HEALTH RETENTION RULE: All sensitive medical data described in the form will be permanently and irreversibly deleted from our servers within 30 days after the end of the event.

6. Your Rights as a Data Subject (Art. 18 LGPD)

You have the right to request from our team, at any time:

• Confirmation of the existence of data processing.
• Access to collected data in a readable format.
• Correction of incomplete, inaccurate, or outdated data.
• Definitive elimination of unnecessary personal data or data processed under consent (Right to be Forgotten).

To exercise any of these rights, send an email to contato@manafestpipa.com.br.

7. Information Security Measures

We use industry-standard security measures - including SSL/TLS encryption in transit, firewalls, and restricted access controls.