EXTERNAL PRIVACY AND DATA PROTECTION POLICY

Information Security Committee

EXTERNAL PRIVACY POLICY AND PERSONAL DATA PROTECTION

IT4CIO Network Technology Ltda. (4Network), also referred to here as “We”, “Us” and “Ours” is a company specialized in developing relationships between executives working in Information Technology (IT), HR and Finance, holding meetings and events aimed at these audiences.

4Network offers the best quality products and services, personalized and meticulously developed, based on a structure of responsibility and ethics, seeking to improve with each new event, as well as delight those present at all times.

Please read this External Privacy and Personal Data Protection Policy (Policy) carefully to understand how we process your Personal Data. This Policy therefore aims to inform how 4Network may, as controller, treat your Personal Data, based on Law No. 13.709/2018 Brazilian General Personal Data Protection Law – LGPD), in the Law No. 12.965/2014 (Internet Civil Framework – MCI) and other applicable legislation.

This Policy is intended for individuals (natural persons) who interact with Our services, whether they are participants in the events we organize, speakers, guests, suppliers, members of sponsors, etc. ("You").

Our data processing activities, both online and offline, cover Personal Data collected through Our channels, including, but not limited to: websites, applications, third-party social networks, surveys, events, etc.

In some specific cases, if You decide not to provide your Personal Data identified as necessary for the performance of the service (it will be indicated when applicable), We may not be able to provide Our products and/or services.

PERSONAL DATA SOURCES

We may collect your Personal Data, directly or indirectly, through any of the following sources:

• 4Network websites, applications and social networks or third-party virtual platforms used for events;
• Email, instant messaging applications, telephones, or any other means made available through Our customer service channels.
• 4Network publicity, advertisements, market research, feedback and online forms;
• Testimonials and physical records obtained during events or other interactions with 4Network;
• In person, at our headquarters, through our surveillance and security cameras or, virtually, through print screens;
• Data received from third parties or made available by You on the internet (including, but not limited to, social networks and third-party websites such as, for example, Facebook, Instagram, LinkedIn and similar, data aggregator services, 4Network partners, public sources, indication made by third parties, etc.).

WHAT PERSONAL DATA DO WE PROCESS

During your interaction with 4Network, using one or more of the previously mentioned collection sources, we may collect various types of Personal Data about You, as set out below:

Category	Type of Personal Data
Identification and Contact Information	Full name, phone numbers, email address, residential address, profession, identification documents (such as ID card, CPF, RNE, driver's license, bar association card, work permit, among others), job title within the organization, professional achievements, date of birth, marital status, age, gender, facial image, personal websites, and social media profiles.
Login credentials	Data for identification and authentication in services provided by 4Network, such as login and password (an initial password may be provided for later change by You).
Demographic data and information about your interests	Any information that may describe favorite products, hobbies and pastimes, other interests, and family or lifestyle-related information.
Technical information about your computer equipment or mobile device	IP addresses used to access any of Our websites, services, or applications, including the corresponding dates, times, and geographic location.
Information about how You use Our websites and services	As detailed in the Cookies section.
Content generated by You	Information published on publicly accessible websites or social media or authorized through social login (when this feature is available).
Financial and payment information	Data such as your debit or credit card information (cardholder name, card number, expiration date, etc.) or other payment methods used.

¹ To learn more about how your information from a third-party social network is obtained by 4Network, or to opt out of sharing this social network information, visit the specific third-party social network's website. Also, read the Terms of Use related to the platform's usage.

SENSITIVE PERSONAL DATA

4Network does not normally process Personal Data considered sensitive in accordance with current legislation, in the normal course of Your interactions with Our products or services. If necessary, the purpose will be informed in advance, and your consent will be requested, particularly in the Terms of Participation in our events.

As for Your image although it may be considered sensitive personal data, is not used by 4Network in any way other than identifying the User or recording presence, and there is no inference capable of enabling interpretations other than identity (therefore, we do not consider this data to be sensitive).

Event participants can insert a photo of themselves on their business card in the 4Network application or on their profile in the Exclusive Lounge, which makes it easier to identify them among other guests. If the image has been provided to Us by email, it may be included by Us in the 4Network application and may be removed or changed by You.

We may also collect your image at our events (photographs or videos) and share it with other participants, sponsors, and clients to promote these events. Disclosure may occur on our app (Exclusive Lounge), our social media, and website. Additionally, please remember that your image may be used and reposted organically by third parties, such as speakers and other CIOs present at the activities we organize. Specific image usage rules will be stated in the respective Terms, and if you do not agree, avoid turning on your camera in online events or consenting to be filmed or photographed by any third parties.

PERSONAL DATA OF CHILDREN AND ADOLESCENTS

The events held by 4Network are not aimed at children and teenagers. However, at certain in-person events, it is possible that participants and speakers may be accompanied by members of their family, who will not participate in lectures, debates or workshops, but may benefit from the additional benefits and leisure activities provided at the event location by Our sponsors.

In these circumstances, we may directly request Personal Data from parents or legal guardians of minor children and adolescents to issue tickets, accommodation, transfers, etc.

4Network reaffirms its commitment to protecting the rights of children and adolescents in accordance with Brazilian laws, such as the Child and Adolescent Statute (Law No. 8.069/1990) and the National Policy for the Prevention and Combat of Child and Adolescent Sexual Abuse and Exploitation (Law No. 14.811/2024).

Our commitment extends to the immediate removal of content that violates the rights, dignity, or privacy of children and adolescents, and we encourage users to easily report harmful material. 4Network offers a reporting tool for inappropriate content, as well as an accessible reporting channel in the apps available on Google Play and the App Store, as well as on the website to report any harmful content, which can be accessed at https://4network.com/reporting.

PURPOSES OF PROCESSING YOUR PERSONAL DATA

The processing of your Personal Data must always have a specific purpose. In the examples below, please note that not all uses will be relevant to all individuals and may only apply to specific situations:

• Offering and holding events and providing Our added services, such as, for example, making badges for in-person events, issuing certificates of participation, printing labels, confirmations by email or telephone, publicizing events and promotions conducted by 4Network and partners, issuing attendance reports, sending newsletters, delivering event materials;
• Continuous improvement of 4Network products and services, including customization and strategies to improve the user experience;
• Attendance records;
• Participation and score in the Fraternal Program;
• Registration and use of the 4Network application, including information about the event and promoting networking;
• Registration and use of the Exclusive Lounge social network, including information about the event and interests demonstrated on the platform;
• Conducting trend research;
• Identification of personal preferences;
• Carrying out promotions and other marketing actions;
• Responding to your requests;
• Compliance with contractual and/or legal obligations
• Recruitment and selection of employees;
• Registration of suppliers, conclusion of contracts and issuance of charges;
• Regular exercise of rights;
• Protection, security and defense of the interests of 4Network;
• Fulfillment of various demands submitted to 4Network.

Please note that We may aggregate Personal Data combined from various sources (e.g. Our website and in-person events). As part of this, We may link Personal Data that was originally collected through different 4Network channels or through Our partners.

SHARING YOUR PERSONAL DATA

We may share your Personal Data with third parties, as strictly necessary:

• Travel agencies, hotels, land and air transport services, insurance companies: by sharing your Personal Data with Treviso Agência de Viagens e Turismo Ltda. (“Via Turismo”, CNPJ/ME No. 02.332.375/0001-84), so that We can organize your travel to event locations, as well as your stay.
• Event sponsors: As a general rule, we share with all sponsors of each event your full name, position, company you work for and/or email, telephone number and advertising metrics available on the Exclusive Lounge (other data may be sent from time to time identification and contact information). This makes it possible to continue to hold successful events, whether at no cost or at a symbolic cost. We recommend that everyone who participates in events access and read the privacy policies of the respective sponsors.
• Suppliers and service providers in general: for holding events, when necessary, for example, making personalized gifts, delivering event materials, creating communication and marketing materials, as well as other services, such as providers of IT systems and cloud systems and applications, consultants, accountants and lawyers.
• Credit analysis, debt collection and financial services agencies.
• Public administrative, regulatory, judicial or arbitration authorities.

We do not sell Personal Data by any means, nor do we carry out the automated processing of Personal Data, being possible, when available, only the processing of activities such as automatic registration or unsubscription of our online communications, access to the portal and applications.

INTERNATIONAL TRANSFER OF PERSONAL DATA

International data transfer may occur by 4Network if the sponsor is a foreign company or if we are classified as data exporters. In this case, we will adopt the recommendations of the Brazilian National Data Protection Authority (ANPD) to ensure that this transmission occurs securely and in compliance with current regulations. If the event takes place abroad, there may also be data transfer from Brazilian participants to service providers based at the event location.

When accessing videoconferencing platforms, the participant may also have to provide some personal data requested directly by the company that provides this service and which may be located abroad. There is no interference on the part of 4Network in this case, and it is recommended that the event participant access and read the service provider's privacy policies.

THIRD PARTY LINKS

4Network may suggest redirect links to third party websites to expand the information provided or provide Our services. This is the case, for example, of indicating links to partner content and access to the Privacy Policies of event sponsors.

This Policy does not apply to third party websites, whose specific privacy policies should be consulted directly, as a measure of good practice. We are not responsible for the actions of third parties, content or policies of others, nor for their views, opinions or practices.

RETENTION AND TERMINATION OF THE PROCESSING OF YOUR PERSONAL DATA

4Network adopts appropriate security measures, both technical and administrative, to prevent unauthorized access and ensure that your personal data is kept confidential and secure. However, these protections do not apply to information You choose to share in public areas, such as third-party social networks.

In accordance with current legislation, 4Network uses your personal data for as long as necessary to satisfy the purposes for which your Personal Data was collected, as described in this Policy, or to comply with applicable legal or contractual requirements.

When the processing of your Personal Data ends, it will be deleted within the scope and technical limits of the activities, with conservation authorized in the situations provided for in current legislation.

YOUR RIGHTS REGARDING PERSONAL DATA

You have the right to obtain from 4Network, at any time, the following:

• Confirmation of the existence of processing;
• Access to data;
• Correction of incomplete, inaccurate or outdated data;
• Anonymization, blocking or deletion of unnecessary, excessive or processed data that does not comply with the LGPD;
• Portability of data to another service or product provider, upon express request;
• Deletion of Personal Data processed with the data subject's consent, if this is the legal basis used for the processing of Personal Data and there is no legal authorization for its conservation;
• Information about data sharing;
• Information about the possibility of not providing consent and the consequences of refusal;

When available, Our websites, applications and online services may have a dedicated function where you can directly review and edit your Personal Data. We emphasize that 4Network requests validation of your identity using, for example, a login system with an access password or similar resource, before allowing access or modification of your Personal Data, thus ensuring that there is no unauthorized access to your account and associated Personal Data.

Alternatively, you can send your request to privacy@it4cio.com. Your request will be reviewed and, before it is fulfilled, we may ask for additional data to confirm Your identity. Whenever a request is submitted without providing the necessary evidence to prove the legitimacy of the data subject, the request will be automatically rejected.

There are circumstances in which the exercise of the above rights may be restricted, when we have to retain Your Personal Data for some justified reason, such as allowing the continuity of the provision of services, compliance with legislation or the defense of 4Network in legal proceedings and/or proceedings, for example.

ABOUT THE USE OF COOKIES, LOG FILES AND SIMILAR

Cookies are small text files that may be placed on Your computer or portable device by websites or web services that You use. They are used to ensure the proper functioning of websites and other online services, as well as to provide information to the owners of the website or online service.

4Network uses the following types of Cookies on its supported websites and services:

• Session cookies: These are cookies for temporary use, which are deleted when you close your browser. When You restart Your browser and return to the website that created the cookie, that website treats You as a new visitor.
• Persistent cookies:: These are Cookies that remain in your browser until You manually delete them or until your browser deletes them in accordance with the duration period established by the cookie. These Cookies will recognize your return as a visitor to a 4Network website or service.

4Network's supported websites and services may also use other tracking technologies similar to Cookies, which may collect information such as IP addresses, log files and web beacons, among others. This data is also used to help us adapt 4Network's websites and other compatible services to your personal needs.

• Web beacons: We may use web beacons (or clear GIFs) on 4Network websites and newsletters. Web beacons (also known as web bugs) are small sequences of code that allow the delivery of a graphic image on a web page for the purpose of transferring data back to Us. We use information from web beacons for a variety of purposes, including:
  • Understand how a user responds to email campaigns and share this information with sponsors;
  • Perform unique visitor counting, auditing and advertising and email reporting.

It is important to remember that it is up to You to ensure that the settings on Your computer or portable device reflect whether You consent to accept Cookies or not.

Most browsers allow You to set rules to warn You before accepting Cookies or simply refusing them. You do not need to have Cookies enabled to use or browse most 4Network websites and online services, however in this case we cannot guarantee that You will be able to access all of their resources.

We recommend that you see the “help” button in your browser on how to perform this type of configuration. Remember that if You use different browsers, or even computers and/or portable devices in various locations, You will need to ensure that each device and browser is adjusted to your personal Cookie preferences.

Because our web beacons may be part of a web page, it is not possible to opt-out of this type of feature, but you can make it completely non-functional by enabling the opt-out feature for the Cookies placed by this beacon.

WHAT ARE YOUR CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR PERSONAL DATA

4Network makes it possible for You to have freedom of choice over the Personal Data You provide to us. The following mechanisms give You control over the processing of your Personal Data:

• Advertising, marketing and promotions: You can evaluate how your Personal Data is used by 4Network to promote our products or services, as well as those of our sponsors, by contacting us or filling out forms to exercise your rights.

If You decide that You no longer wish to receive such communications, You may unsubscribe from receiving marketing-related communications at any time by following the instructions provided in such communications.

To unsubscribe from communications sent by any means, You can opt out at any time by unsubscribing through the links available in our communications, logging into our websites, applications, adjusting your user preferences or contacting us directly at and e-mail.

It is important to remember that even if you unsubscribe from our marketing communications, You may continue to receive administrative communications from 4Network, such as orders, transaction confirmations notifications about your account activities on our websites and supported services, and others important announcements not related to the unsubscribed service.

CHANGES TO OUR POLICY

This Policy may be updated. We reserve the right to make changes to our practices at any time, as long as we maintain compliance with current legislation.

We recommend that You visit it frequently, or whenever you have questions, to see any updates or changes we have made to our Policy.

HOW TO CONTACT US

You can contact us to exercise any of your rights, as a holder of Personal Data, as well as to clarify doubts regarding the treatments we carry out:

• Data Protection Officer:
  • Isabel Cristina Felicio Mazzei
  • E-mail: privacidade@4network.com
  • Telephone: (41) 3202-5900

4Network will receive, investigate and respond, within a period considered reasonable or within the deadlines set out in legislation.