1. Introduction and who we are

The confidentiality of your personal data is one of the main concerns of Therme Group a data controller. Therefore we want to be completely transparent regarding the processing of personal data by providing all the information you need on this subject.

According to the requirements of the General Data Protection Regulation No. 679/2016 regarding the protection of individuals with respect to the processing of personal data and on the free movement of such data, amended and supplemented, Therme Group RHTG AG (hereinafter refer to Therme Group), Wienerbergstrasse 51 1120 Vienna, Austria, is required to manage safely and only for specified purposes, personal data that you provide to us or we collect about you.

This document is designed to inform you about the processing of your personal data with respect to the use of the website : therme-forum.com and the other processing activities related to  Therme Forum Event.

The purposes and means of the processing  are determined together with “Radu Stanca” National Theatre Sibiu  in a  joint controller operation. (They are using the recoded materials  on their  social media platforms).

“Radu Stanca” National Theatre Sibiu, is a public cultural institution of interest for the municipality, with legal personality, funded from budget allocations granted by the Local Council of Sibiu Municipality and from extra-budgetary incomes under Law No. 273 2006 on local public finances, subordinated to the Local Council of Sibiu Municipality in accordance with Decision No.46/2001 of the Local Council of Sibiu Municipality. It operates in accordance with the specific legislation as a repertory institution and as an institution that can bring together other artistic teams during a project to create artistic productions or co-productions to be performed only in determined series. “Radu Stanca” National Theatre Sibiu is structured and operates according to the provisions of the Government Ordinance No. 21/2007 on institutions and companies specialised in the area of performance arts and concerts as well as in artistic agency activities, as approved with its subsequent amendments and additions by Law No. 353/2007, as amended by the Government Emergency Ordinance 48/2016, the provisions of this Regulation and the other legal provisions in force.

“Radu Stanca” National Theatre Sibiu is solely responsible for obtaining consent from the speakers for the recordings made at the conference (including the using of the personal data by Therme Group and his processors) and giving all the necessary information regarding their personal data processing of the data subject. Both Parties are responsible for the security of processing in their sistems.

More information about “Radu Stanca” National Theatre Sibiu`s Privacy Policy you can find accessing: https://www.sibfest.ro/regulation-on-the-protection-of-personal-data

‍

2.  Details of the processing of personal data

Based on legal grounds, we have highlighted most of the situations in which your personal data is processed within Therme Forum event  by mentioning the purposes, categories of processed data and their storage period:

Based on your CONSENT, we process your personal data in the following situations:

Ø  Using your e-mail address for sending invitation and registering/participation to Therme Forum Event. The consent will be  registered in the moment you accept the terms and conditions and privacy Policy.

Categories of processed data:  e-mail address, name and surname.

Information storage period: your e-mail address is used for this purpose until the withdrawal of consent, which can be exercised at any time by sending an e-mail at  hq@thermegroup.com

Ø  If you are the subject of the audio-video materials collected  (“speaker” or other situation in which you can be recorded) under the Therme Forum Events, we will use the materials in order to achieve various marketing materials distributed on social media like Youtube, Facebook , Instagram ,etc, owned by Therme Group and “Radu Stanca”National Theatre Sibiu

The consent is given by signing a separate agreement provided by  “Radu Stanca”National Theatre Sibiu

Categories of processed data:  name and surname, voice and image and any other personal data disclosed by you within the event.

Information storage period: because of the nature of the purposes  and publishing the materials in public area, is not possible to establish the exact period of time for processing.  We keep the materials only for the necessary time for fulfillment the purposes. You can withdraw your consent anytime, if no other contract applies.

In order to fulfill LEGAL OBLIGATION and our LEGITIMATE INTEREST, we process your personal data in the following situations:

– any collection of personal data in order to record your consent.

Categories of processed data:  name and surname, signature.

Information storage period: We keep records of consent for the necessary period in order to fulfill the legal obligation.

‍

3.  Disclosure of personal data

For the purposes of the processing, Therme Group can disclose your data to partners, to third parties or entities that support  Therme Group in performing its activity through the Website (for example: marketing collaborators, IT service providers, processors etc.), or to central public/local authorities, in the following cases listed as examples:

– for the transmission of invitations throught e-mail, in situations where this communication would be required through external provider (i.e mailchimp).

– for managing the Website and other necessary platforms (i.e. zoom application)

– for organizing and conducting the events.

– for maintenance and administration of IT systems.

– when the disclosure of personal data is provided by law, etc.

The main processors are:

– Therme Media Group SRL which is empowered by Therme  Group  to conduct the following processing activities: administrating the data subject`s email addresses. (collecting, sending the invitations etc).

– Ventivo Capital SRL SRL which is empowered by Therme Media Group SRL to conduct the following processing activities: creating  the web interface (therme-forum.com), managing the processing activities on the website (data subject`s registering, managing video-conferences, etc ), consultancy, provision of technical support, maintenance, etc

In specific situations in which it will be necessary to carry out any of the purposes above-mentioned, Therme Group can call upon third parties or entities that can access your data from outside of the country. In these circumstances, Therme Group will always take steps to ensure that any international transfer of personal data is managed carefully in order to protect your rights and interests. Transfers to service providers and other third parties will always be protected through contractual commitments and, where appropriate, through other guarantees, such as the standard contractual clauses issued by the European Commission or certification schemes.

‍

4.  Your rights

Under the conditions laid down in the law on the processing of personal data, as data subjects, you benefit from the following rights:

•  the right to be informed, respectively the right to receive details concerning the processing activities carried out by Therme Group, as described in the present document;
• the right of data access, respectively the right to obtain confirmation from Therme Group with respect to the processing of personal data, as well as details on the processing activities, as well as the manner in which the data is processed, the purpose for the processing, the recipients or the categories of data recipients etc.;
• the right to rectification, namely the right to obtain the correction, without legitimate delays, by Therme Group of personal data that is inaccurate/ unwarranted, as well as to fill out incomplete data; Rectification / completion will be communicated to each recipient to whom the data was transmitted, unless this proves impossible or involves disproportionate efforts.
•  right to erasure, without undue delay (“the right to be forgotten”), if one of the following reasons applies:

– they are no longer necessary to fulfil the purposes for which they were collected or processed;

– if you have withdrawn your consent and there is no other legal basis for processing;

– if you oppose the processing and there are no legitimate reasons to prevail;

– if personal data has been unlawfully processed;

– if personal data must be deleted in order to comply with a legal obligation;

– personal data has been collected in connection with the provision of information company services under the Union law or under national law to which Therme Group is subject.

Following your request to delete the data, Therme Group may anonymize this data (thus depriving them of their personal character) and continue processing for statistical purposes;

•  the right to restrict the processing in so far as:

– you are challenging the accuracy of the data, for a period that allows us to verify the correctness of the data;

– the processing is illegal, and you oppose the deletion of personal data, requesting instead to restrict its use;

– Therme Group no longer needs the personal data for the purpose of processing, but you request it for the establishment, exercise or defence of legal claims; or

– you have opposed the processing (other than that of direct marketing) for the period of time when it is verified that the legitimate rights of Therme Group prevail over your rights.

• the right to data portability, namely (i) the right to receive personal data in a structured way, used in the usual way and in a format easy to be read, as well as (ii) the right for this data to be submitted by Therme Group to another data controller, to the extent that the conditions laid down by law are met;
• the right to object – with respect to processing activities, it may be exercised by submitting a request as indicated below:

– at any time, for reasons related to the particular situation in which you find yourself, as personal data that is to be processed pursuant to the legitimate interest Therme Group or based on the public interest, except for cases where Therme Group can prove that it has legitimate and compelling reasons that justify the processing, and which take precedence over your interests, rights and freedoms or that the purpose is the establishment, exercise or defence of a right in court;

– at any time, free of charge and without any justification, that data concerning be processed for direct marketing purposes.

• withdraw consent at any time in relation to our use of the personal data  for the Specified Purpose, in relation to which are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. We will advise you if this is the case at the time you withdraw your consent.
• the right not to be subjected to an individual automatic decision-making process , meaning the right not to be the subject of a decision taken only on the basis of automatic processing activities, including profiling which produces legal effects which concern you or affect you, in a similar manner, to a significant extent;
• the right to address the Austrian Data protection Authority or the competent courts, in so far as considered necessary, directly on the website of the authority sb@dsb.gv.at

5. Governing Law and Jurisdiction

This Privacy Policy shall be construed and governed by Austrian law.

‍

5. Contact

Therme Group will provide free information concerning the processing of personal data upon request, without undue delay, within 30 calendar days from the date of the request registration. Depending on the intricacies of the information requested, this period may be extended by 60 days informing you of the reasons for extending the initial term.  For applications received in electronic format, the information will be provided in electronic format, unless you request the information in another format (printed). In cases where you ask us for the same repetitive, excessive information or without legal basis, Therme Group may refuse to provide the information.

If you want to exercise any of your rights related to the processing of personal data by Therme Group, to get additional information or clarification with respect to the processing of your personal data, please contact us at the following e-mail address:  hq@thermegroup.com  

For the processing operations conducted by  “Radu Stanca” National Theatre Sibiu you can address your requests, dated and signed, through its Data Protection Officer at the e-mail address: administrator@sibfest.ro or at the following mailing address: Bd. Corneliu Coposu nr. 2, Sibiu.

‍