CONSENT FOR DATA PROCESSING: FACIAL BIOMETRIC REGISTRATION Dear fan, In order to complete the ticket purchase and gain access to the stadium, FLAMENGO collects your personal data, especially your facial biometrics, linking the fan to the ticket with the purposes of ensuring the integrity of the purchase process, minimizing fraud, theft, ticket cloning, and other illicit acts, while also promoting convenience, speed, and safety for the fan experience at the stadium, and ensuring the correct correlation between buyer/holder, payment, and stadium access. All fans who acquire tickets sold by FLAMENGO – including those entitled to free admission – must have their facial biometrics registered for the same purposes described above. Data processing is based on the following legal grounds, according to Law No. 13.709/2018 – General Data Protection Law (LGPD):
• Legal or regulatory obligation for individuals over 16 years old, under Article 7, II of the LGPD, to comply with Article 148 of Law No. 14.597/2023 (General Sports Law).
• Consent of the legal guardian for minors under 16 years old (Article 7, I of the LGPD). Notes:
• Data processing may exceptionally occur even without the consent of the data subject in cases where it is essential for compliance with legal or regulatory obligations attributed to FLAMENGO or FLAFLU Serviços (administrator of MARACANÃ), or upon request from a legitimate Public Administration body, for the execution of public policies provided for in laws or regulations (Art. 11 II "a" and "b" of the LGPD and the General Sports Law).
• Two implicit benefits of linking facial biometrics to the ticket are: improved quality of fan support operations at the stadium (e.g., when access issues occur, support staff can quickly confirm ticket validity and ownership, minimizing dissatisfaction), and faster operational readiness in adverse or extreme situations that pose risks – especially for minors, such as quickly identifying a fan who is lost or in danger. How it works:
Facial biometric registration is performed through our partner BE PASS, which provides a dedicated platform for collection and storage. Flamengo members already have their data managed by our partner FENG. Other fans create a registration for ticket purchase, managed by FUTEBOL CARD. Those without facial biometrics are directed to BE PASS to complete the biometric registration. For each registration, a secure access code (hash) is generated and automatically linked to the CPF of the ticket holder. This database is shared with the stadium’s turnstile system before the event. The commercial partner responsible for access system management at MARACANÃ is TI CONSULTING, under FLAFLU Serviços, which administers the stadium under concession. FLAMENGO keeps registered data for different periods depending on the type of data: identification data of Flamengo members, including facial biometrics, remain in the database as long as the membership exists, and for an additional period of xxxxxxxxx months if the membership is terminated, for potential campaigns. Non-members who purchase tickets have their data stored for 12 (twelve) months after their last purchase, whether paid or free, subject to legal obligations such as labor, tax, or other regulatory requirements. Rights of data subjects collected by FLAMENGO:
Every individual who provides personal data has rights under the LGPD, including the right to request confirmation of processing, contestation, revocation of consent, access, correction, blocking, anonymization, deletion, portability, information on sharing, and denial of consent, among others. How to exercise rights and contact FLAMENGO’s Data Protection Officer:
FLAMENGO provides a service channel for data subjects to exercise their LGPD rights. To do so, open a request through this link:
https://titulares.becompliance.com/webforms/75c21893-b94d-4046-842aa0adb7c80be6/85088d1a-dbcb-488c-b6cd-66fb35085083.
FLAMENGO’s Data Protection Officer, Liliane Ferreira, will handle your request and intermediate with the internal department responsible. For non-LGPD related matters, you may also contact the Data Protection Officer at [email protected]