Thank you for visiting our website.
This privacy notice provides you with information on our processing of your personal data in relation to our website.
Protecting your personal data and your privacy is very important to us. This means that we process your data exclusively in full accordance with the law (Regulation [EU] 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC [General Data Protection Regulation, GDPR]; Austrian Datenschutzgesetz [Data Protection Act] 2018; EU Privacy and Electronic Communications Directive; Austrian Telekommunikationsgesetz [Telecommunications Act] 2021.
Controller and data protection officer
The data controller for this website in accordance with Art. 4(7) GDPR is Therme Wien GmbH & Co KG represented by Therme Wien Ges.m.b.H (“Therme Wien”).
If you have any questions about Therme Wien’s processing of your data, please do not hesitate to contact us.
By post: FAO Per-Oliver Gustavson, Sterngasse 5, 1230 Vienna
By telephone: +43 (0)1 60127-0
By e-mail: datenschutz@thermewien.at
The contact details of Therme Wien’s data protection officer are:
Per-Oliver Gustavson
Sterngasse 5
1230 Vienna
Tel. +43 (0)1 60127-0
datenschutz@vamed.com
When you visit our website, we save your access data in files known as web server logfiles. We collect the following data:
Purpose of data processing
We carry out statistical evaluation of these data in order to further improve the services on the website, make the website more user friendly, find and rectify errors more quickly, and manage server capacity. We only use these data in a form that enables identification of a specific individual in order to take legal action if there is a clear indication of unlawful use of our website.
Retention period
The data are stored in the WordPress database until further notice. These data can only be viewed in a WordPress back end. Specific data entries can only be deleted on request using the phpMyAdmin database tool.
Legal basis
We process your access data on the basis of Therme Wien’s legitimate interest (in relation to the online service offering and data security) in accordance with Article 6(1)(f) GDPR.
In order to make your visit to our website as enjoyable as possible and enable you to use certain functions, we use cookies on the various pages. Cookies are small text files that are stored on your end device. They enable us to recognise your browser when you make return visits. Cookies are set in accordance with EU and Austrian law (Art. 5[3] EU Privacy and Electronic Communications Directive, and section 165[3] Austrian Telecommunications Act 2021).
You can configure your browser settings so that you are notified about the use of cookies, and so that you can decide whether to accept individual cookies, accept cookies only in certain cases or reject all cookies. Please note that if you deactivate cookies, this may restrict some functions of our website.
Legal basis
The legal basis for setting cookies is for cookies that are required to display the website or to offer a service you have requested, pursuant to Article 6 (1) f GDPR, THERME WIEN’s legitimate interest in providing this website to you and the corresponding offers (Section 96 (3) 3rd sentence of the Telecommunications Act). For all other cookies, the data processing is based on your express consent in the cookie banner (Article 6 (1) lit a GDPR; Section 165 (3) TKG), which you can change or revoke at any time using the link above entitled “My data protection settings”. You can find more information about the cookies on our website here:
This website uses Google Analytics, a web analytics service provided by Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics also uses cookies that enable us to analyse how you use the site. The information generated by the cookie about your use of the website is usually transmitted to and stored on a Google server in the United States. The full IP address is only transmitted to a Google server in the USA and truncated there in exceptional cases. On behalf of the operator of this website, Google will process the information generated in order to evaluate use of the website, to produce reports about website activities and to provide additional services associated with the use of the internet and the website. Google will not associate the IP address transferred by your browser with any other data held by Google. You can prevent the collection of data generated by the cookie in relation to your use of this website (including your IP address), the transfer of such data to Google, and the processing of such data by Google, by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en.
Legal basis
We use Google Analytics on the basis of Therme Wien’s legitimate interest in evaluating the website and analysing activity on the website (in accordance with Article 6[1][f] GDPR).
Data recipients
The data are transferred to Google, as well as to Blue Monkeys GmbH (in connection with its management of the website) for the purposes specified above.
Retention period
Personal data are stored for 28 months and then deleted.
The Therme Wien website uses social media plug-ins (“plug-ins”) for the following social networks:
These plug-ins include the logo or name of the operator. If you view a page on the Therme Wien website that contains such a plug-in, your browser connects directly to the operator’s servers. The operator sends the content of the plug-in directly to your browser and the content is then integrated into the page. By integrating the plug-in into the page, the operator receives information that you have viewed a particular page on the Therme Wien website. If you are logged in to the operator’s service, the operator can associate your visit to the Therme Wien website with your user account. If you interact with plug-ins, for example by clicking on a plug-in button, your browser will directly notify the operator and the operator will store this information on its servers. You can prevent the operator from associating the information collected with your user account by logging out of the account.
Information on the purpose and scope of data collection and the processing and use of data by the operator, as well as your rights in this respect and the settings available for protecting your privacy can be found in the privacy policy of the operator concerned:
Data processing
As part of the business relationship when purchasing a VAMED Vitality World gift card/voucher, THERME WIEN processes the following personal data (in short: “the data”):
Purpose of data processing
The purpose of processing data are
Legal basis
Processing for the purpose of managing the business transaction is based on Art 6 (1) b) of the EU General Data Protection Regulation (“GDPR”) (performance of the contract). Data processing for the purpose of marketing is based on Art 6 (1) a) GDPR (consent).
Data transmission
On behalf of THERME WIEN, the data is forwarded to VAMED Standortentwicklung und Engineering GmbH (Sterngasse 5, A-1230 Wien), INCERT eTourismus GmbH & Co KG (Leonfeldnerstraße 328, 4040 Linz), mediasupport GmbH (Lerchenfelder Straße 124/Top 6, 1080 Vienna), Usercentrics GmbH (Sendlinger Str. 7, 80331 Munich) and Datatrans AG (Kreuzbühlstrasse 26, CH-8008 Zurich) for the purpose of managing the business transaction, as well as to hi.one digital marketing OG (Gurkgasse 43/ Top 2, 1140 Vienna) for marketing purposes. The data is not passed on to other third parties.
Duration of storage
The data is only stored as long as there are statutory retention periods, legal claims from the contractual relationship can be asserted, or other legitimate reasons justify further storage.
Data processing
When a customer purchases a voucher for services, Therme Wien processes the following personal data submitted by the Customer (“the data”) for the purpose of executing the transaction:
Purpose of data processing
We process data for the following purposes:
Legal basis
Data processing for the purpose of executing transactions is carried out pursuant to article 6(1)(b) GDPR (performance of the contract). Processing of data for marketing purposes is carried out in accordance with article 6(1)(a) GDPR (consent).
Data transfer
For the purpose of executing transactions on behalf of Therme Wien, data are transferred to TAC, The Assistant Company (Schildbach 111, 8230 Hartberg), Usercentrics GmbH (Sendlinger Str. 7, 80331 München), KLARNA Austria GmbH (Mayerhofgasse 1/20, 1040 Vienna), card complete Service Bank AG (1020 Wien, Lassallestraße 3) and Datatrans AG (8008 Zürich – Schweiz, Kreuzbühlstrasse 26). No data are transmitted to other third parties.
Retention period
The data are stored for the purpose of executing the transaction concerned. The data are only stored for longer when required by statutory retention periods, or where legal claims based on the contractual relationship can be asserted, or other legitimate grounds justify a longer retention period.
You have the option of submitting your telephone number when you visit our website.
Data processing
Therme Wien processes the following personal data you provide in order to arrange an appointment for a free introductory session:
Purpose of data processing
The personal data you provide are processed so that we can contact you in order to arrange an appointment for a free introductory session.
Legal basis
Processing of your personal data by Therme Wien is carried out solely on the basis of your consent (Art. 6[1][a] GDPR) to our use of your telephone number in order to contact you.
Retention period
Data processed for the aforementioned purpose are stored until you withdraw your consent. In addition, only data that are essential for the purpose of providing proof of your consent or withdrawal of consent will be stored in accordance with the applicable statutory provisions and retention obligations.
Data recipients
In order to arrange an appointment for a free introductory session, your data will be transferred to Therme Wien and to our service providers Bluemonkeys GmbH (website management) and Digimagical GmbH (website hosting).
Withdrawal of consent
You can withdraw your consent to the use of your telephone number in order to arrange an appointment for a free introductory session at any time by sending an e-mail to datenschutz@thermewien.at.
This website contains links to other sites. References to the websites of other organisations are provided as a service to enable you to obtain further information. Therme Wien has no influence over the content of these websites and assumes no liability for their content. The provider of the site to which a link is provided is solely responsible for the content and the accuracy of the information provided on its website.
You have the option of subscribing to our newsletter.
Data processing
Therme Wien processes the following personal data you provide when you subscribe to the newsletter:
Purpose of data processing
The personal data you provide when you subscribe to the newsletter are processed for the following purposes:
Legal basis
Processing of your personal data by Therme Wien is carried out solely on the basis of your consent (Art. 6[1][a] GDPR) to receive the newsletter.
Retention period
Data processed for the aforementioned purposes are stored until you withdraw your consent to receive the newsletter. In addition, only data that are essential for the purpose of providing proof of your consent or withdrawal of consent will be stored in accordance with the applicable statutory provisions and retention obligations.
Data recipients
In order to send you the newsletter, your data are transferred to our service provider, artworx GmbH, which handles distribution of the newsletter on our behalf.
Withdrawal of consent
You can withdraw your consent to receive the newsletter at any time by sending an e-mail to newsletter@thermewien.at. You can also cancel your newsletter subscription at any time by clicking on the “Unsubscribe” button which is displayed at the end of each newsletter.
You have the option of taking part in online competitions.
Data processing
Therme Wien processes the following personal data you provide when you register for an online competition:
Purpose of data processing
The personal data you provide when you register for an online competition are processed for the purpose of contacting you in the event that you win a competition.
Legal basis
Processing of your personal data by Therme Wien is carried out solely on the basis of your consent (Art. 6[1][a] GDPR) to take part in a particular online competition.
Retention period
Data processed for the aforementioned purpose are stored until the respective online competition ends.
Data recipients
In order for you to take part in the respective online competition, your data will be transferred to Therme Wien and to our service providers Bluemonkeys GmbH (website management) and Digimagical GmbH (website hosting).
Withdrawal of consent
You can withdraw your consent to participate in an online competition at any time by sending an e-mail to marketing@thermewien.at.
Therme Wien operates a Facebook fan page where your personal data are processed. As the operator of the fan page, Therme Wien is also the controller in the meaning of data protection law.
Data related to you can be collected on the fan page by means of cookies, regardless of whether you have a Facebook account. The use of cookies is at the sole discretion of Facebook, and Therme Wien has no influence over this. Details of Facebook’s use of cookies are provided in its data protection policy (https://www.facebook.com/privacy/explanation) and cookie policy (https://www.facebook.com/policies/cookies/). You can also download your own Facebook data directly on the Facebook site (by downloading the extended archive in your account settings).
The cookies may transfer your data to Facebook, Inc. in the USA. Facebook has been certified under the US-EU Privacy Shield data protection framework; this means that with regard to European users, Facebook must meet data protection standards that are adjudged by the European Commission to be comparable with European standards. Facebook can also set cookies from third parties. These are listed at https://www.facebook.com/policies/cookies/. The policies for the use of these cookies can be found on the website concerned.
You can withdraw your consent to the storage, processing and use of your data by cookies in the course of using the fan page at any time. This does not affect the lawfulness of processing carried out prior to your withdrawal of consent.
The security of your personal data is very important to us.
Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, Therme Wien implements appropriate technical and organisational measures in accordance with Art. 32 GDPR.
These include the following measures designed to protect your data and safeguard them against loss, destruction, access, alteration and unauthorised disclosure:
Please note that we accept no liability for the disclosure of information due to data transfer errors not caused by or attributable to us and/or unauthorised access by third parties.
As a user of our website, you have the following rights:
Austrian Data Protection Authority
Wickenburggasse 8
1080 Vienna
Tel. +43 (0)1 521522569
E-mail: dsb@dsb.gv.at
With the exception of your right to lodge a complaint with the Austrian Data Protection Authority, you can exercise your rights as a data subject by contacting Therme Wien at the following addresses:
By post: Therme Wien GmbH & Co KG, Data Protection Officer, Kurbadstrasse 14, 1100 Vienna
By e-mail: datenschutz@thermewien.at