Through this Privacy Notice we want to provide you with details about the processing of your personal data in the context of the creation, personalization and use of your My Therme account.
WHAT ARE THE CATEGORIES OF PERSONAL DATA THAT WE PROCESS?
To create and activate the MyTherme account, the following personal data are required:
Optionally, after creating the account, you can add additional personal data that can be used when placing an order in the online shop, without having to enter them manually each time. This data relates to:
Also, providing your date of birth is optional, but required only if you want to participate in the Therme loyalty program, for getting ZEN points on your birthday.
Afterwards, all fields remain editable to allow you to update your personal data whenever necessary, directly from your MyTherme account.
Other personal data what we process may refer to:
WHY DO WE PROCESS THIS PERSONAL DATA?
The aforementioned data is processed for:
WHAT ARE THE LEGAL GROUNDS ON WHICH WE PROCESS YOUR DATA?
The data is processed on the basis of your consent that you give us at the time of creating the account.
You can exercise your right to withdraw the consent by deleting your My Therme account.
Account deletion can be done directly by you, by accessing the “Settings / Delete account” section, directly from your My Therme account.
The withdrawal of consent does not affect the lawfulness of the processing before its withdrawal.
Depending on the purposes for using the account and your actions within it, we may also rely on other legal grounds in relation to the processing of your data, for example when you purchase products and services in the online shop. In this context, we keep your data on orders and tickets purchased and after the deletion of your account for the purpose of fulfilling our legal, contractual obligations and legitimate interests, according to the Therme product and Service purchase Privact Notice.
WHO ELSE HAS ACCESS TO YOUR PERSONAL DATA?
Personal data may also be accessed by other third parties, to the extent that this is reasonably necessary in accordance with the purposes mentioned in this Privacy Notice.
HOW DO WE MANAGE INTERNATIONAL DATA TRANSFER?
As a rule, your personal data is processed in Romania, within Europe Union and countries that provide an adequate level of protection, as required by the General Data Protection Regulation no 679/2016.
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We process your data for the whole time your My Therme account is active. We will delete your personal data as soon as possible after submitting your request for deleting your account.
After executing this request, your data used to create and personalize your account will be deleted from our database within 30 days at the latest.
The erasure will only take place to the extent that such personal data are no longer necessary for other purposes.
Other criteria on the basis of which we determine the retention of data are:
- legal retention periods, where applicable;
- contractual obligations, if applicable;
WHAT ARE YOUR RIGHTS?
For the purposes of using your personal data for the aforementioned purposes, you have the following rights:
UPDATING THE PRIVACY NOTICE
The information presented in this Privacy Notice will be reviewed periodically to reflect any changes in current processing activities.
Please visit this page periodically to make sure you always have up-to-date information.
However, if we intend to significantly change the way we use your personal data, we will notify you in advance.
Last update: April 2022