PRIVACY NOTICE ON FILLING/SUBMITTING IN THE VARIOUS FORMS/REQUESTS

                                

Through this Privacy Notice we want to provide you details about the processing of your personal data when you fill in/sign various forms printed or electronical during your visit to the Therme Bucharest complex.

We made sure that the data we request for the completion of these forms is relevant and necessary in relation to the purposes for which they are used.

By forms we refer to the following types of documents/records:

  • Payments provisions, collection provisions;
  • Record reports;
  • Delivery-receipt minutes;
  • Payment commitments;
  • Forms for reversed amounts of money or other financial-accounting supporting documents;
  • Commitments for food products brought in from outside;
  • Declaration of commitment regarding the accompanying of minors;
  • Other similar forms.

We recommend that you read this Privacy Notice together with the Privacy Policy to get as much information as possible about how we process your personal data.

The printed forms we fill in will also contain relevant and specific information regarding the processing of your personal data.

WHAT ARE THE CATEGORIES OF PERSONAL DATA THAT WE PROCESS?

When it is necessary to fill in one of the forms mentioned, we process the following categories of personal data:

Identification and contact details, such as first name and last name, address, telephone, the number of the RFID access bracelet allocated during the visit, signature.

Biometric data (writing speed, pressure, acceleration, starting and stopping points, sequences and time measurements) from the electronic signature

Data specific to the purpose for which we request that data, such as:

  • Estimated losses, sums of money that are due, refunds;
  • Commitments you make;
  • Information on the received/delivered products, mentioned in the delivery-receipt reports;
  • The quality of the accompanying person (legal guardian, teacher, etc.), children’s name, required in the commitments form of accompanying children;
  • Data relating to the services purchased and the details of the visit (e.g. date of visit, time of entry / time of exit, areas accessed etc.); 
  • Any other relevant information depending on the type of the form.

When necessary, in order to fulfill our legal obligations or legitimate interests, together with filling in forms, we may ask you for a copy of your passport or other supporting documents, which will be kept together with the requested form, in accordance with our financial and accounting legal obligations.

WHY DO WE PROCESS THIS DATA?

This data is necessary for the following purposes:

  • Fulfilling our legal obligations on taxation;
  • Fulfiling the legal obligations, reporting information/documents to certain authorities (ANPC, ITM, IGI, etc.)
  • Compliance with the contractual conditions between you and us;
  • Our legitimate interest, relating to:

          - ensuring the people’s health and safety;

          - prevention of financial losses;

          - recovery of damages;

          - defense of rights in court;

          - keeping supporting documents that may be required by the competend authorities (e.g. ANAF);

         -  compliance with the internal regulations;

         - other legitimate interests as stated in the Privacy Policy.

WHAT ARE THE LEGAL GROUNDS ON WHICH WE PROCESS YOUR DATA?

The processing of personal data is carried out according to the purposes for which they are collected, based on the following legal grounds:

  • Performance of the contract concluded between us and you at the time of purchase of Therme’s products and services;
  • Fulfillment of our legal obligations, where applicable;
  • Establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity;
  • Our legitimate interests.

WHO ELSE HAS ACCESS TO YOUR PERSONAL DATA?

Personal data may also be accessed by other third parties to the extent that this is reasonably necessary in accordance with the purposes set out in this Privacy Notice.

For more details, please see the dedicated section of the Privacy Policy

HOW DO WE MANAGE INTERNATIONAL DATA TRANSFER?

As a rule, for this processing activity, your personal data is stored and processed on servers and in physical locations within Romania and European Union.

Data processing outside the European Union and countries that do not provide an adequate level of protection, such as the United States, will only be carried out to the extent that the conditions set out in the “International data transfer” section of the Privacy Policy are met.

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

Data retention periods may vary, depending on the purpose and may be influenced by legal provisions.

The criteria on which we set the retention of data are:

- legal retention periods, where applicable;

- contractual obligations  to which you are party, if applicable;

- Therme’s legitimate interests.

We keep the data that are necessary for financial-accounting purposes, as required by national and European law, for at least 5 years after the issue of the supporting documents containing them. After the expiry of this period, the data will be deleted/destroyed within a maximum of 1 year, according to internal data retention policies.

Data processed on the basis of legitimate interests are assigned retention periods in accordance with the purposes for which they were collected. We periodically evaluate storage periods to ensure that we retain your data only for as long as necessary in relation to the purposes pursued.

WHAT ARE YOUR RIGHTS?

For using your personal data for the purposes aforementioned, you shall have the following rights:

  • Right to be informed;
  • Right of access;
  • Right to rectification;
  • Right to erasure, under the conditions stipulated by law;
  • Right to restriction of processing;
  • Right to data portability to another controller, under the conditions stipulated by law;
  • Right to object to the processing of your personal data;
  • Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you or similarly affects you to a significant extent, with the exceptions set out in data protection laws;
  • Right to lodge a complaint with a supervisory authority.

UPDATING THE PRIVACY NOTICE

The information presented in this Privacy notice will be reviewed periodically to reflect any changes in current processing activities.

Please visit this page periodically to make sure you always have up-to-date information.

However, if we intend to significantly change the way we use your personal data, we will notify you in advance.

Last update: April 2024