INFORMATION NOTICE IN ORDER TO OBTAIN CONSENT FOR
PROCESSING OF PERSONAL DATA
This information notice is used by VIP EVENTS S.R.L. (a company that commercializes services and products under the ZENco SPA brand), in its capacity as personal data controller, to inform you about the processing of your personal data, respectively to obtain your informed consent for the processing of your personal data, in accordance with the provisions of the General Data Protection Regulation no. 679/2016 ("GDPR").
- With this notice we inform you about the processing of your data in order to give us your informed consent to process your personal data, specifically for each of the purposes set out below.
- Please read the information and, where applicable (if the processing is based on your consent), tick those boxes for which you wish to give your consent to us to process personal data for the purposes and within the limits explained. If you do not tick one or more boxes, we will not process your personal data for that purpose
1. About VIP EVENTS SRL and contact details
Your personal data are processed by VIP EVENTS SRL, with registered office at Intrarea Sevastopol nr. 1, Parter, Camera 2, sector 1, București, email: manager@thaicospa.ro, telephone: 0729 842 426, website: www.thaicospa.ro, and the person responsible for the protection and processing of your personal data is
can be contacted at manager@thaicospa.ro
ZENco Spa is the brand used by VIP EVENTS SRL for the commercialization of SPA products and services and is not a separate legal entity.
2. Nature and reason for data processing
The way we collect and process your data are described by the General Data Protection Regulation 679/2016 - collection, storage, use, transmission, publication, processing for statistical data. The data provided by you will not be used for automated decision-making, including the creation of individual profiles.
Your data are treated in a confidential manner and only by authorized persons within or contracted by VIP EVENTS SRL and who have access to your personal data, in order to achieve the purposes for which the data were collected.
The requested information is necessary for the transmission of service and product offers, for personalized scheduling, messaging, and billing. The contact for the conduct of our service relationship will be made through the contact method provided for this purpose - email and/or telephone. If you do not provide us with any contact form, the communication will only be face-to-face at the reception of the locations, in which case we are unable to notify you in advance of program changes, to remind you of appointments, special offers, etc. The basis for processing your data in this case is the condition for the preparation, conclusion and execution of the service contract.
- In order to send you birthday greetings/special offers, we need your consent to record/process your birthday. If you choose not to provide us with your birthday, we will not be able to send you greetings/special offers. The basis of data processing in this case is your consent, i.e., the need to perform the contract concerning the performance of spa services.
- In order to send you newsletters, notifications, invitations or personalized offers regarding the various events, promotions organized by ZENco SPA, only in relation to the activities and types of services we provide and products we sell, we need your consent for the use of your email address. If you do not want to provide this data, we will not be able to send you emails with newsletters, notifications, invitations or personalized offers regarding the different events, promotions organized by ZENco SPA, but we will still provide the services requested by you. Please note that you have the right to object to this processing at any time, as well as the right to withdraw your consent by clicking on a link available in each email.
- For situations where we need to return money to your account, we will need your bank account in order to complete the action. If you do not provide us with your bank account you will need to present yourself at the ZENco SPA location reception to receive the cash. The basis of the processing of your bank account details will be your consent to have the amount returned to you in this way.
- If you attend public events organized by ZENco SPA, we will need your consent to allow us to film and photograph you. These images and photos can then be used on our own promotional channels (facebook, instagram, posters/newsletters, website, screens at venues). If you choose not to give us consent for this data, we will not use your image in promotion, but we will continue to provide you with the services you have requested.
- In the legitimate interest of ensuring the security of the premises, people, goods belonging to VIP EVENTS SRL, its customers and visitors, we process data on your image, your vehicle, license plate number, all these images being taken in areas that are equipped with surveillance cameras with signs.
- For legitimate business purposes, in order to be able to compile internal statistics on the categories of customers who access our services and thus improve our services and offers, we process data on the age, place of residence, gender of customers in an anonymized and globalized manner.
3. Purpose, conditions and authorized entities that will come into contact with your personal data
To ensure confidentiality and data integrity, information concerning your data will be disclosed only to employees and processors of VIP EVENTS SRL in order to fulfill the described purposes.
Thus, your data/part of your data may be transmitted to:
1. VIP EVENTS SRL employees and therapists with a service contract who provide reception, SPA, manicure/pedicure and cosmetic/make-up services and who have access to the VIP EVENTS SRL database and software resources only for the purposes of making appointments, identifying clients, sending SMS reminder SMS, issuing receipts/invoices in the name and on behalf of VIP EVENTS SRL, exclusively for the execution of services and only on the Romanian territory.
2. The advertising company with which VIP EVENTS SRL works at a given time, as a processor, for sending newsletters, notifications, invitations or personalized offers regarding various events, promotions organized by ZENco SPA and other information by email. This has access to: name, surname, email address, date of birth. All the companies that we may use for this purpose are located in Romania and process the data entrusted by VIP EVENTS SRL only on the territory of Romania.
3. Accounting and tax software companies, for accounting operations, receipts and payments. They have access to: name, surname, address. The companies are located in Romania and process the data entrusted by VIP EVENTS SRL only on Romanian territory.
4. Companies specialized in CRM services, to keep track of clients, appointments and services rendered, as well as to automatically organize and send SMS reminders for appointments. In the database are registered: name, surname, date of birth, address, e-mail address, telephone.
5. Guard and protection company, security services, as a processor, which has access to images of persons, license plate number, vehicle image, taken in areas that are equipped with surveillance cameras with signalized surveillance. The company is located in Romania and processes data entrusted by VIP EVENTS SRL only on the territory of Romania.
6. Audit company, as processor with access to: name, surname, address, bank account. The company is located in Romania and processes data entrusted by VIP EVENTS SRL only on the territory of Romania.
7. Banking institutions, as data processors for services related to receipts, payments, returns, settlements. They have access to: name, surname, address, bank account. They are located in Romania and process data entrusted by VIP EVENTS SRL only on the territory of Romania.
The company VIP EVENTS SRL concludes agreements with all these processors/processors of personal data, which comply with the standards and requirements of the General Data Protection Regulation no. 679/2016.
Your data may also be disclosed to the Police and other law enforcement bodies (data concerning name, surname, address, telephone and image), if necessary and strictly in accordance with the law.
Your data will be disclosed to lawyers and/or courts in the event of a dispute (name, surname, address).
Please note that your data will also be disclosed to the competent public authorities (operators), with responsibilities in the tax field and with responsibilities in the field of grant management (data on name, surname, address, telephone and/or email), according to the regulations in force.
4. Duration of storage of collected data
Your data will be kept for the duration of the contractual relationship plus a period of 5 years. After this period, the data whose retention is required or permitted by law (invoices, documents issued by a commercial company) will be archived securely for a period of 10 years in the case of invoices and 30 years in the case of documents issued by a commercial company.
Your data will be kept in our database (CRM) for the duration of the contractual relationship and for another 1 year after the end of the contract/last appointment, in order to be able to make you special offers if you come back to us.
Photographs and video images collected for security purposes by marked surveillance cameras will be kept for a maximum of 30 days.
Photographs and video images from public events organized by ZENco SPA, subsequently used on its own promotional channels, based on your consent, will be kept and used, where appropriate, for a maximum period of 5 years.
If your data is involved in a legal case, it will be kept until the final resolution of the case. Likewise, if a competent authority orders the retention of data, we will retain it in accordance with the obligation so imposed.
Once the applicable retention period has expired, your data will be deleted.
5.Customer rights
The client can exercise at any time:
- the right of access to data (to know whether we process your data, what data and how,
and details of the processing)
- the right to rectify incorrect or out-of-date data
- the right to erasure of personal data, under the conditions and in the cases provided for by law
- the right to request restriction of processing, under the conditions and in the cases provided for by law
- the right not to be subject to an automatic individual decision
- the right to portability of your personal data (insofar as the data have been processed by automated means and portability is possible).
The client can access details of rights, their limits and ways of exercising them in the General Policy on the processing of personal data of VIP EVENTS SRL on the company's website www.thaicospa.ro, where this policy is presented to the public.
- Where the processing of your personal data is for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for this purpose, insofar as it is related to that direct marketing, and VIP EVENTS SRL will stop the processing of your data for this purpose immediately.
- You also have the right to object to the processing of your personal data based on public interest or legitimate interest, in certain cases and under certain conditions provided by law.
For situations where we rely on your consent for processing (point 2 above), you have the right to withdraw your consent to data processing at any time.
In this case, we will stop processing and, where appropriate, delete your data. We may in this situation no longer be able to fulfill the purpose for which your data was collected.
To exercise any of these rights, as well as for any further information or details you may have regarding the processing of your personal data, you can contact us at the contact details mentioned in paragraph 1 above, by using the "Unsubscribe" button in our email or by using a "reply" with the text "NO" to the text messages you receive from us.
If necessary, you have the right to lodge a complaint about the processing of your personal data to the National Supervisory Authority for Personal Data Processing (www.dataprotection.ro), Bucharest, Bdul Gen. Gheorghe Magheru nr. 28-30, sector 1, CP 010336; Phone: +40.318.05.92.11, Fax: +40.318.05.96.02 email: anspdcp@dataprotection.ro.
