Through this Privacy Notice we would like to provide you with details about the processing of your personal data in the context of using the Therme access bracelet.
We recommend that you read this Privacy Notice together with the Privacy Policy, in order to obtain as much information as possible on how we protect your personal data.
Therme bracelets operate on RFID (Radio frequency Identification) technology, that allows us to manage customer access to the premises of the Therme complex in a secure and efficient way. It also helps us to streamline the process of purchasing products and services and using the IT systems made available to customers within Therme Bucharest, throughout the visit.
The use of Therme bracelets also helps to pseudomize your identity when you access the services within Therme Bucharest.
WHAT ARE THE CATEGORIES OF PERSONAL DATA THAT WE PROCESS?
The access bracelet collects and discloses personal data such as:
WHY DO WE PROCESS THIS PERSONAL DATA?
Access bracelets are used for purposes such as:
WHAT ARE THE LEGAL GROUNDS ON WHICH WE PROCESS YOUR DATA?
The legal grounds for data processing in this context are:
- streamlining the sales process, taking into account the large flow of customers;
- efficiency of access and transit procedures;
- protection of property and people;
- reservations and appointments of services in the location;
- prevention and recovery of damages, material and financial losses;
- defending rights in court;
- other similar legitimate interests.
WHO ELSE HAS ACCESS TO YOUR PERSONAL DATA?
Personal data may also be accessed by other third parties to the extent that this is reasonably necessary in accordance with the purposes mentioned in this Privacy Notice.
For details, please see the dedicated section of the Privacy Policy.
HOW DO WE MANAGE INTERNATIONAL DATA TRANSFER?
As a rule, your personal data is processed in Romania, within Europe Union and countries that provide an adequate level of protection, as required by the General Data Protection Regulation no 679/2016.
Data processing outside the European Union and countries that do not provide an adequate level of protection, such as the United States, will only be carried out to the extent that the conditions set out in the “International data transfer” section of the Privacy Policy are met.
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We periodically evaluate storage periods to ensure that we retain your data only for as long as necessary in relation to the purposes pursued.
The criteria on which we determine the retention of data are:
- legal retention periods, where applicable;
- contractual obligations to which you are a party, if any;
- Therme’s legal interests.
The deletion will only take place to the extent that such personal data are no longer necessary for other purposes.
WHAT ARE YOUR RIGHTS?
For the purposes of using your personal data for the purposes mentioned, you have the following rights:
UPDATING THE PRIVACY NOTICE
The information presented in this Privacy Notice will be reviewed periodically to reflect any changes in current processing activities.
Please visit this page periodically to make sure you always have up-to-date information.
However, if we intend to significantly change the way we use your personal data, we will notify you in advance.
Last update: April 2024