PRIVACY NOTICE ON THE CREATION AND USE OF MY THERME CORPORATE ACCOUNT

 

Through this Privacy Notice, we would like to provide you with details regarding the processing of your personal data, as a representative, employee, or party involved in a contract between Therme and your company in the context of the creation and use of your My Therme Corporate account.

We recommend that you read this Privacy Notice together with the Privacy Policy to obtain as much information as possible on how we protect your personal data.

WHAT ARE THE CATEGORIES OF PERSONAL DATA THAT WE PROCESS?

For the creation and activation of the MyTherme Corporate account, it is necessary to provide information about the company you represent, as well as personal data belonging to you, as the representative and administrator of the My Therme corporate account. These data relate to:

  • First name and last name;
  • Email address (which may be personal or not);
  • Phone number (which may be personal or not);
  • Any other information submitted in the “more details” section.

Where appropriate,

  • If you use the MyTherme Corporate platform to send your access tickets directly to the final beneficiaries, using the integrated functionality, we will have access to their email addresses.
  • If you use your MyTherme Corporate account to create groups of your company's staff to offer them employee benefits, we will have access to the group members, their names, email addresses, how many times they used the services, order details (order number, date for which they purchased the access tickets). You as a MyTherme account administrator will only be able to see the members of the group and how many times they have accessed the services.
  • If there is a signed contract or other supporting documents between Therme and the company you represent, they will be uploaded to the corporate platform, where we will both have access to information such as name and surname, position, email address, phone number, legal representative signature.

WHY DO WE PROCESS THIS PERSONAL DATA?

The aforementioned data is processed for:

  • Providing products and services and generally for the fulfilment of contractual scope of work between your company and Therme;
  • Facilitating access to services through our corporate platform;
  • Providing technical support;
  • Promotion of Therme products and services;
  • Therme’s legitimate interest and fulfilment of legal obligations.

WHAT ARE THE LEGAL GROUNDS ON WHICH WE PROCESS YOUR DATA?

The processing is necessary for the signing and performance of the contract to which you are a party as a representative of the company with which Therme has signed or is about to sign a contract.

Data processing is also carried out on the basis of our legitimate interest, for example when:

- we send you similar offers by email that may be of interest to you or,

- Where processing of your data is necessary to defend a legal right or other legitimate interests as detailed in the Privacy Policy.

WHO ELSE HAS ACCESS TO YOUR PERSONAL DATA?

Personal data may also be accessed by other third parties, to the extent that this is reasonably necessary in accordance with the purposes mentioned in this Privacy Notice.

For details, please refer to the dedicated section of the Privacy Policy.

HOW DO WE MANAGE INTERNATIONAL DATA TRANSFER?

As a rule, your personal data is processed in Romania, within Europe Union and countries that provide an adequate level of protection, as required by the General Data Protection Regulation no 679/2016.

To the extent that it will be necessary to transfer your personal data to organisations in third countries that do not provide an adequate level of protection, we will take additional protection measures. For more details, please see the “International data transfer” section of the Privacy Policy.

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We process your data for the whole time your My Therme corporate account is active and after in accordance with the purposes for which it is collected.

Data that is not subject to legal regulations are assigned retention periods in accordance with the purposes for which they are used. The need for retention of these categories of data is reviewed periodically.

Therefore, the criteria on which we determine the retention of data are:

-legal retention periods, where applicable

- retention periods established by the contract, where applicable.

-Therme’s legitimate interests.

WHAT ARE YOUR RIGHTS?

For the purposes of using your personal data for the aforementioned purposes, you have the following rights:

  • Right to be informed;
  • Right of access;
  • Right to rectification;
  • Right to erasure, under the conditions stipulated by law;
  • Right to restriction of processing;
  • Right to data portability to another controller, under the conditions stipulated by law;
  • Right to object to the processing of your personal data;
  • Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you or similarly affects you to a significant extent, with the exceptions set out in data protection laws;
  • Right to lodge a complaint with a supervisory authority.

UPDATING THE PRIVACY NOTICE

The information presented in this Privacy notice will be reviewed periodically to reflect any changes in current processing activities.

Please visit this page periodically to make sure you always have up-to-date information.

However, if we intend to significantly change the way we use your personal data, we will notify you in advance.

Last update: April 2024