Privacy Policy

Last updated: November 8, 2026.

This Policy explains what personal data we process, why, with whom we share it, how long we keep it and how you exercise your rights. It follows Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018) and the Brazilian Internet Civil Framework (Marco Civil da Internet, Law No. 12,965/2014). For people in Japan, we also observe Japan's Act on the Protection of Personal Information (APPI) where applicable.

It applies to the misscolonia.com website (the Miss Colônia news portal, the pages of the Miss Colônia Pageant and of Miss Nikkey Japan, and the institutional pages), to the old addresses that redirect to it, such as missnikkey.com, and to the data you send us through the official channels of the pageants (entry forms, e-mail, WhatsApp and Instagram).

1. Who is responsible for your data

The controller of the personal data is the organization of Miss Colônia and Miss Nikkey Japan, under the responsibility of producer and organizer Daniela Nishikawa, headquartered in the city of São Paulo, State of São Paulo.

Privacy channel: [email protected], with the subject "Privacidade". This is the channel through which you reach the person in charge of handling data subjects' requests (Art. 41 of the LGPD).

2. Summary

You can read the portal without creating an account and without providing your name or e-mail.
Audience measurement and advertising cookies are activated only if you allow them. You can change this choice whenever you want, through the "Cookie preferences" link in the footer.
We do not sell personal data.
In the pageants, we process the data of contestants and their guardians only to run the pageant, publicize it and comply with the law.
You can request access to, correction of or deletion of your data through the privacy channel.

3. What data we process and why

3.1. Browsing the site

When you access the site, your browser automatically sends technical data: IP address, date and time, requested page, referring page, browser type and device type. This data passes through Cloudflare (the site's delivery and protection network) and through our server.

Purpose: to deliver the pages, protect the site against attacks and abuse, limit the number of searches per visitor (the IP is used temporarily for this) and fix faults.

Legal basis: legitimate interest in keeping the site secure and working (Art. 7, IX of the LGPD). Where the law requires it, as in Art. 15 of the Marco Civil da Internet, we keep access logs (IP, date and time) for 6 months, in a restricted-access environment, to comply with a legal obligation (Art. 7, II).

The terms typed into the site search are used only to display the results. We do not associate them with your identity.

3.2. Audience measurement (Google Analytics 4) — only with your consent

If you accept the "Audience measurement" category, we use Google Analytics 4 to learn, in aggregate form, which pages are read, where readers come from and how the site is used. Google receives an identifier stored in your browser, the pages viewed and interactions, device data and the approximate location inferred from the IP.

We have configured Google Analytics not to use Google Signals or ad personalization signals. It is not loaded in the administrative area or in previews. Without your consent, the Google Analytics script is not loaded.

Legal basis: consent (Art. 7, I). You can withdraw it at any time.

3.3. Advertising (Google AdSense and sponsors)

The portal is funded in part by advertising. Ad spaces are labeled "Advertising".

Google AdSense, only with your consent. If you accept the "Advertising" category, Google may display ads and measure their performance using cookies and advertising identifiers, the IP, device data and the page visited. Depending on your Google settings, the ads may be personalized. Learn more at How Google uses information from partner sites and adjust your ads at My Ad Center. Legal basis: consent (Art. 7, I).
Without consent, AdSense is not loaded. In its place, sponsor banners or an "Advertise here" notice may appear, served by the site itself, without third-party tracking.
Sponsor banners are images served by the site itself. When you click, you go to the sponsor's website, which has its own privacy policy.

3.4. Embedded videos (YouTube)

Some articles include YouTube videos in privacy-enhanced mode (youtube-nocookie.com). When the page with the video opens, your browser connects to Google's servers, which receive the IP and device data. When you press play, YouTube may store data in your browser, in accordance with the Google Privacy Policy.

Legal basis: legitimate interest in presenting editorial content in video (Art. 7, IX).

3.5. Contact with the newsroom and the organization

When you contact us by e-mail, phone, WhatsApp, Instagram or through a form on the site (where available), we process your name, your contact details and the content of the message.

Purpose: to reply to you, and to receive story suggestions, correction requests, and partnership, advertising and sponsorship proposals.

Legal basis: legitimate interest in assisting those who contact us (Art. 7, IX) and, for commercial proposals, preliminary procedures related to a contract (Art. 7, V).

3.6. Pageants: Miss Colônia Pageant, Miss Colônia Infantil and Miss Nikkey Japan

Each edition has its own rules. This section explains how we process the data of those who enter.

Data that may be requested:

identification: full name, age and date of birth;
contact: address with postal code, phone numbers, e-mail and Instagram profile;
evaluation: photos, introduction video with image and voice, city and personal story;
measurements, in pageants that require them: height, weight, bust, waist and shoe size;
connection to Japanese ancestry, when it is a requirement of the edition;
data of the legal guardian, in the case of children and adolescents;
for prize winners: identity document and details of a bank account held in the winner's own name, for payment of the prize.

Purpose: to receive and check the entry; to evaluate the contestants (coordinators and jury); to communicate with them; to publicize selected contestants, finalists and winners on the site, in articles and on social media; to organize the public vote, where there is one; to deliver and pay prizes; to comply with legal obligations and maintain the pageant's history.

Legal bases:

performance of the rules to which the contestant agrees when entering (Art. 7, V);
the connection to Japanese ancestry reveals ethnic origin, which is sensitive personal data. It is processed with your specific and highlighted consent, only to verify this requirement (Art. 11, I). Without it, it is not possible to take part in the editions that have this requirement;
use of image and voice: under the image and voice use authorization signed upon entry, within the limits of that authorization;
legal obligation (Art. 7, II), for tax and accounting records of the prizes;
legitimate interest (Art. 7, IX), to maintain the pageant's history: names, titles and images of finalists and winners already published.

The data remains yours. The organization uses it only for the purposes above and does not sell it. If any old pageant document says something different, this Policy prevails.

Measurements and photos are seen only by those who organize and evaluate the edition. Only the images and information that the contestant has authorized are published.

Public vote. When voting takes place on a social network, such as Instagram, that network's policy applies, and we see only what is public on the voter's profile. If voting is done on the site, we will request the minimum necessary to ensure one valid vote per person, such as an e-mail or phone number for confirmation, and IP and device data to prevent fraud. Legal basis: legitimate interest in the integrity of the vote (Art. 7, IX).

3.7. Children and adolescents

The portal is aimed at the general public. When a pageant has a children's category or accepts people under 18:

a child (under 12 years of age) may be entered only with the specific and highlighted consent of at least one parent or the legal guardian (Art. 14, § 1);
adolescents take part with the authorization of their legal guardian;
we request only the data necessary for participation and do not make the entry conditional on any data beyond that (Art. 14, § 4);
we publish only what the guardian has authorized, always in the best interest of the child or adolescent;
the guardian may at any time request access to, correction of or deletion of the data.

3.8. People mentioned in the news

Processing of data carried out exclusively for journalistic purposes is not subject to the LGPD (Art. 4, II, "a"). Even so, we follow good journalistic practices: if you were mentioned in an article and found an error, request a correction through the contact channel. The right of reply is governed by the Right of Reply Law (Law No. 13,188/2015).

3.9. Staff and administrative area

Staff log in to the administrative area through an external login provider (OpenID Connect, such as Google or Microsoft). We do not store passwords. We process name, e-mail, the account identifier at that provider and the log of actions taken in the admin panel (who changed what and when). The cookies for this area exist only for those who have access to it.

Legal basis: performance of the work or collaboration agreement (Art. 7, V) and legitimate interest in security and accountability (Art. 7, IX).

3.10. Sponsors and advertisers

We process the contact details of representatives of partner companies to negotiate and perform sponsorship and advertising contracts (Art. 7, V).

3.11. New features

If the site starts to offer a newsletter, alerts, a contact form, online entry or voting, or payments, it will process only the data necessary for each feature. Before launching it, we will update this Policy with the data, the purpose, the legal basis and the retention period. Newsletter and alert mailings will depend on your consent and will include an unsubscribe option in each message.

4. Cookies and browser storage

Cookies are small files stored in the browser. On your first visit, we show a notice so that you can choose the optional categories. Necessary cookies do not depend on consent because the site does not work properly without them.

Necessary (always active):

mn_consent: stores your privacy choices. Duration: 180 days.
mn_theme (browser local storage): remembers the light or dark theme you chose. It remains until you clear your browser data.
Cloudflare security cookies (for example, __cf_bm and cf_clearance): distinguish people from bots and protect the site against attacks. Short duration, set by Cloudflare.
mn_session, mn_oidc and mn_preview: only in the administrative area, for the staff session (up to 12 hours), login (10 minutes) and content preview (up to 12 hours).

Audience measurement (optional):

_ga and _ga_<ID>: Google Analytics 4. Distinguish visitors and sessions. Duration: up to 2 years.

Advertising (optional):

__gads, __gpi, __eoi and Google cookies on advertising domains: Google AdSense. Display and measure ads and combat fraud. Duration: up to 13 months.

How to change your choice: use the "Cookie preferences" link in the footer of every page. You can also delete or block cookies in your browser settings; the optional ones stop working and the site remains available.

5. With whom we share data

We share data only with those who need it for the purposes of this Policy:

Hostinger: hosting of the server where the site, the admin panel and the database are located.
Cloudflare: delivery of the pages, protection against attacks, DNS and storage of the images and of the encrypted backups.
Google: Google Analytics and Google AdSense, only with consent, and YouTube videos. For some of these services, Google acts as an independent controller, in accordance with its own policy.
Staff login provider, only for those who access the administrative area.
Social networks and messaging apps used in the pageants and for contact (Instagram and WhatsApp, from Meta, and YouTube): each one processes data in accordance with its own policy.
Coordinators, jury and people working on the edition, only with the data necessary to evaluate the contestants and under a duty of confidentiality.
Sponsors, only what is necessary to deliver a prize offered by them, where applicable.
Public authorities, when there is a legal obligation or a court order.

Currency rates and stock market indices, weather forecasts and sports results are fetched by our server from public sources (AwesomeAPI, Yahoo Finance, Open-Meteo and ESPN), without sending any of your data. Fonts are served by the site itself, with no calls to Google Fonts.

6. International transfer

Some providers, such as Cloudflare and Google, maintain servers outside Brazil, and Hostinger's server may be located in another country. Miss Nikkey Japan is organized in Japan, and some of the contestants and staff live there. For this reason, some data is transferred to other countries.

These transfers follow Art. 33 of the LGPD: we use providers that offer contractual data protection guarantees, and the transfer also takes place when it is necessary to perform the pageant rules at the contestant's request (Art. 33, IX) or with your specific consent (Art. 33, VIII).

7. How long we keep data

Cookie choice: 180 days. After that, we ask again.
Technical browsing data: for as long as necessary for the security of the site; access logs required by the Marco Civil, for 6 months.
Google Analytics: event data remains in Google Analytics for up to 14 months.
Contact messages: for as long as necessary to handle the matter and, after that, for up to 2 years. Proposals that become contracts follow the term of the contract and the legal periods.
Entries not selected: deleted or anonymized within 12 months after the result of the edition.
Finalists and winners: entry data is kept for up to 5 years after the edition, for accountability purposes. Names, titles and images already published remain in the pageant's history, within the limits of the image use authorization.
Prize data: 5 years, to comply with tax obligations.
Administrative area: for as long as the access lasts. The action log is kept for security and accountability.
Encrypted backups: up to 35 days.

Once the period ends, the data is deleted or anonymized, except where the law permits or requires it to be kept longer (Art. 16 of the LGPD).

8. Your rights

Under the LGPD (Art. 18), you may request, free of charge:

confirmation that we process your data and access to it;
correction of incomplete, inaccurate or outdated data;
anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
portability of the data to another provider;
deletion of data processed on the basis of your consent;
information about whom we share your data with;
information about the possibility of not giving consent and about the consequences of doing so;
revocation of consent;
objection to processing based on legitimate interest, when it does not comply with the law.

We do not make decisions about you solely by automated means. The evaluation of contestants is carried out by people.

How to request: write to [email protected] with the subject "Privacidade". We may ask for confirmation of your identity to protect your data. Confirmation of processing and access are provided in simplified form immediately or, in a full statement, within 15 days (Art. 19). People in Japan may use the same channel for the requests provided for in the APPI, such as disclosure, correction and suspension of use.

If you are not satisfied with the response, you may file a petition with Brazil's National Data Protection Authority (ANPD), at gov.br/anpd.

9. Security

We adopt technical and administrative measures to protect data: encrypted connection (HTTPS), Cloudflare protection against attacks, access to the admin panel only through external login and with role-based permissions, logging of staff actions, a database with no public access and encrypted backups. No system is completely immune to failures. If a security incident occurs that may pose a relevant risk or harm, we will notify the ANPD and the affected people, as required by law (Art. 48).

10. Links to other sites

The site contains links to other sites, such as social networks, sponsors and the sources of articles. When you leave misscolonia.com, the other site's privacy policy applies.

11. Changes to this Policy

We may update this Policy when we change the site or the pageants, or when the law changes. The date of the last update is at the top of the page. Relevant changes will be announced on the site.

12. Languages

This Policy is available in Portuguese, Japanese, English and Spanish. If there is any discrepancy between the versions, the Portuguese version prevails.