PRIVACY NOTICE ON THE CREATION AND USE OF THE MYTHERME ACCOUNT

 

Through this Privacy Notice we want to provide you with details about the processing of your personal data in the context of the creation, personalization and use of your My Therme account.

We recommend that you read this Privacy Notice together with the Privacy Policy, in order to obtain as much information as possible on how we protect your personal data.

WHAT ARE THE CATEGORIES OF PERSONAL DATA THAT WE PROCESS?

To create and activate the MyTherme account, the following personal data are required:

  • First name and last name;
  • Email address;

Optionally, after creating the account, you can add additional personal data that can be used when placing an order in the online shop, without having to enter them manually each time. This data relates to:

  • Appellative (Mr./Ms.)
  • Phone number and other contact information;
  • Billing address, postal code or other additional information you want on your invoice;
  • Credit card details (the information that remains stored in our database refers to: card holder’s name, last 4 digits of card number and expiration date).

Also, providing your date of birth is optional, but required only if you want to participate in the Therme loyalty program, for getting  ZEN points on your birthday.

Afterwards, all fields remain editable to allow you to update your personal data whenever necessary, directly from your MyTherme account.

Other personal data what we process may refer to:

  • Information about your account (account creation date, last use, etc.);
  • The history of changes in the account;
  • Order status;
  • Order history;
  • Notifications history
  • Account benefits (if you have linked your account with a group, we will be able to know the name of the company that created the group); accumulated Zen points etc.
  • Marketing preferences.

WHY DO WE PROCESS THIS PERSONAL DATA?

The aforementioned data is processed for:

  • Creating, activating and managing your MyTherme account.
  • Providing technical support;
  • Keeping all information necessary to investigate and resolve your requests.
  • Improving Therme services;
  • Giving loyalty benefits.

WHAT ARE THE LEGAL GROUNDS ON WHICH WE PROCESS YOUR DATA?

The data is processed on the basis of your consent that you give us at the time of creating the account.

You can exercise your right to withdraw the consent by deleting your My Therme account.

Account deletion can be done directly by you, by accessing the “Settings / Delete account” section, directly from your My Therme account.

The withdrawal of consent does not affect the lawfulness of the processing before its withdrawal.

Depending on the purposes for using  the account and your actions within it, we may also rely on other legal grounds in relation to the processing of your data, for example when you purchase products and services in the online shop. In this context, we keep your data on orders and tickets purchased and after the deletion of your account for the purpose of fulfilling our legal, contractual obligations and legitimate interests, according to the Therme product and Service purchase Privact Notice.

WHO ELSE HAS ACCESS TO YOUR PERSONAL DATA?

Personal data may also be accessed by other third parties, to the extent that this is reasonably necessary in accordance with the purposes mentioned in this Privacy Notice.

For details, please refer to the dedicated section of the Privacy Policy.

HOW DO WE MANAGE INTERNATIONAL DATA TRANSFER?

As a rule, your personal data is processed in Romania, within Europe Union and countries that provide an adequate level of protection, as required by the General Data Protection Regulation no 679/2016.

To the extent that it will be necessary to transfer your personal data to organisations in third countries that do not provide an adequate level of protection, we will take additional protection measures. For more details, please see the “International data transfer” section of the Privacy Policy.

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We process your data for the whole time your My Therme account is active. We will delete your personal data as soon as possible after submitting your request for deleting your account.

After executing this request, your data used to create and personalize your account will be deleted from our database within 30 days at the latest.

The erasure will only take place to the extent that such personal data are no longer necessary for other purposes.

Other criteria on the basis of which we determine the retention of data are:

- legal retention periods, where applicable;

- contractual obligations, if applicable;

- Therme’s legitimate interests, as detailed in the Privacy Policy.

WHAT ARE YOUR RIGHTS?

For the purposes of using your personal data for the aforementioned purposes, you have the following rights:

  • Right to be informed;
  • Right of access;
  • Right to rectification;
  • Right to erasure, under the conditions stipulated by law;
  • Right to restriction of processing;
  • Right to data portability to another controller, under the conditions stipulated by law;
  • Right to object to the processing of your personal data;
  • Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you or similarly affects you to a significant extent, with the exceptions set out in data protection laws;
  • Right to lodge a complaint with a supervisory authority.

UPDATING THE PRIVACY NOTICE

The information presented in this Privacy Notice will be reviewed periodically to reflect any changes in current processing activities.

Please visit this page periodically to make sure you always have up-to-date information.

However, if we intend to significantly change the way we use your personal data, we will notify you in advance.

 

Last update: April 2022