Privacy Policy

Privacy statement pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)

In accordance with the provisions of Reg. EU 2016/679 (European Data Protection Regulation) we hereby provide you with the necessary information regarding the processing of your personal data. The statement does not apply to other websites that may be consulted via links on the domain websites of the controller, who is in no way responsible for the websites of third parties.

Personal data that may be processed: “personal data” refers to any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more elements that are characteristic of his or her physical, physiological, genetic, mental, economic, cultural or social identity; (C26, C27, C30).

Browsing data
The computer systems and software procedures used to operate this site acquire, during their normal operation, certain personal data that are automatically transmitted during the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user's operating system and computer environment.

Data disclosed by the data subject
The optional, explicit and voluntary sending of messages to the contact addresses, as well as the filling in and forwarding of the forms on the Controller's website, results in the acquisition of the sender's contact data, which are necessary in order to reply, and of all personal data included in the communications.

Cookies
For more information on the cookies used by this website, please see the cookies policy at the following link

1. The Data Controller and contact details
The Data Controller is QC Terme Srl, in co-ownership with the individual Centres where you intend to make a reservation and/or provide a service, pursuant to Reg. EU 2016/679 and as specified below.
QC TERME DOLOMITI S.R.L, TERME MILANO S.R.L, TERME DI PRÉ SAINT DIDIER S.R.L, QC TERME E BENESSERE S.R.L., QC TERME RESORT S.R.L., QC TERME SAN PELLEGRINO S.R.L., QC TERME TORINO S.R.L., QC TERME ROMA S.r.l. QC TERME CHAMONIX S.A.R.L.
To contact the Controller: e-mail: [email protected]
Contact address Via Ripamonti, 89, 20141 Milano (MI)

2. The Data Protection Officer - Contact details
The Data Protection Officer (DPO- DATA PROTECTION OFFICER) pursuant to Articles 37 - 39 of Reg. EU 2016/679, is Mr. Mirco Giorgi,
E-mail: [email protected] Mobile: 3315907729
Place of contact: Biassono (MB) via Santa Maria delle Selve, 3

3. Purposes of processing, Type of data, Legal basis, Period of storage and provision of data
Purposes A)
Website navigation
• LEGAL BASIS: the processing is necessary in order to pursue the legitimate interests of the data controller or of a third party, provided that the interests or the fundamental rights and freedoms of the data subject that require the protection of personal data are not overridden, taking into account the reasonable expectations of the data subject based on his/her relationship with the data controller. Activities strictly necessary for the operation of the website and the provision of the platform navigation service.
• DATA STORAGE PERIOD: see the storage periods indicated in the cookie policy.
• NATURE OF DATA PROVISION: With the exception of the specifications regarding browsing data (which are necessary in order to allow the website to be navigated), the user is free to provide personal data.

Purposes B)
Newsletter and Marketing- Sending of advertising and promotional material, statistical data, market surveys.
• TYPE OF DATA: first name, last name, date of birth, country and province, e-mail, gender, browsing data (e.g. number of readers, openings, unique “clickers” and clicks; devices and operating systems used to read the communication; details of individual user activity; geographical origin, language used by the device)
• LEGAL BASIS: Consent of data subject
• DATA STORAGE PERIOD: Until data subject objects (opt-out/revocation of consent)
• NATURE OF DATA PROVISION For the purposes for which consent is required, there is no obligation, but failure to provide data will not allow us to subscribe you to our newsletter, to send you our exclusive promotions and benefits or to inform you about new services and products.

Purposes C)
Profiling: Profiling of the user in order to send commercial proposals of interest to the user.
TYPE OF DATA: personal data of the user with reference to preferences, personal interests, purchasing habits, geographical location, etc.
LEGAL BASIS: Consent of data subject
DATA STORAGE PERIOD: 1 year (or until user objection if earlier)

Purposes D)
Booking of services offered: confirmation and management of the booking of services chosen by the user, also using vouchers; accounting, tax and administrative activities; management of clientèle; management of booking-related activities
• TYPE OF DATA: first name, last name, postcode, place of residence, identity card details, email, phone number, gender, referring to the person making the booking and other guests of the booking; payment data, browsing data
• LEGAL BASIS: Fulfilment of pre-contractual and contractual requirements to confirm and manage the booking of services chosen by the user, to manage customer activities.
Legal obligation for tax and accounting activities related to the booking of services
• DATA STORAGE PERIOD: 2.5 years from the booking of the service; 10 years for tax and accounting activities.
• NATURE OF DATA PROVISION The provision of data is compulsory for contractual purposes and those deriving from legal obligations. Any refusal to provide such data, in whole or in part, may thus make it impossible to perform the contract or the request and to correctly comply with all related requirements.

Purposes E)
SHOP: Purchasing our products, After-sales service, Customer management, accounting, tax and administrative activities
• TYPE OF DATA: First name, last name, e-mail, phone number, shipping address, billing address, payment data, browsing data.
• LEGAL BASIS: Fulfilment of pre-contractual and contractual requirements for the purposes described above, except for tax and accounting activities on which there is a legal obligation
• DATA STORAGE PERIOD: The data provided will be stored for the entire duration of the contract and 10 years from the time of acquisition for administrative, accounting and tax purposes
• NATURE OF DATA PROVISION The provision of data is compulsory for contractual purposes and those deriving from legal obligations. Any refusal to provide such data, in whole or in part, may thus make it impossible to perform the contract or the request and to correctly comply with all related requirements.

Purposes F)
Request for quotation for B2B relations/ Management of company quotation data: data entry for request for quotation for Meetings and Events
• TYPE OF DATA: First name, last name, e-mail, phone number, company name
• LEGAL BASIS: Fulfilment of pre-contractual and contractual requirements for the purposes described above
• DATA STORAGE PERIOD: until the requested service is performed and in any case no later than 1 year from the request for quotation
• NATURE OF DATA PROVISION The provision of data is necessary for contractual purposes. Any refusal to provide such data, in whole or in part, may thus make it impossible to fulfil the request and comply with all related requirements

Purposes G)
Registration for MY QC: Create an account, access exclusive services and benefits (create personalised wish lists, extend the validity of vouchers, etc.), manage orders placed (return status, billing history), manage requests received via email to contacts in the various sections of the site, manage requests received for special arrangements.
• TYPE OF DATA: First name, surname, date of birth, e-mail, telephone number, shipping address, browsing data, data provided when purchasing/booking services and/or products
• LEGAL BASIS: Fulfilment of pre-contractual and contractual requirements for the registration activities described above
• DATA STORAGE PERIOD: for the duration of registration and after 5 years of user inactivity
• NATURE OF DATA PROVISION The provision of data is compulsory for contractual purposes and those deriving from legal obligations. Any refusal to provide such data, in whole or in part, may thus make it impossible to perform the contract or the request and to correctly comply with all related requirements.

Purposes H)
Registration for the SHOP: Access to exclusive services and benefits, extending the validity of vouchers, management of orders placed (status, returns, billing history), after-sales service, accounting, tax and administrative activities
• TYPE OF DATA: First name, last name, date of birth, e-mail, phone number, shipping address, billing address, browsing data, payment data.
• LEGAL BASIS: Fulfilment of pre-contractual and contractual requirements for all the purposes described above and legal obligations
• DATA STORAGE PERIOD: for the duration of registration and after 5 years of user inactivity; 10 years for administrative, tax and accounting purposes
• NATURE OF DATA PROVISION The provision of data is compulsory for contractual purposes and those deriving from legal obligations. Any refusal to provide such data, in whole or in part, may thus make it impossible to perform the contract or the request and to correctly comply with all related requirements.

Purposes I)
Management of complaints and disputes: the data provided for the purposes described above will also be used for the management of any complaints and/or disputes that may arise from the related and above-described activities.
• TYPE OF DATA AND NATURE OF PROVISION: Personal data previously collected and provided on a voluntary or mandatory basis according to the services requested
• LEGAL BASIS: Legitimate interest of the controller
• DATA STORAGE PERIOD: The time required to comply with any claims (5 years) and until the conclusion of any litigation.
4- Recipients: To whom the personal data collected will be passed on
The personal data provided will be shared with entities, which will process the data as data controllers (Art. 28 of Reg. EU 2016/679) and/or as natural persons acting under the authority of the Data Controller and the Data Processor (art. 29 of Reg. EU 2016/679), for the purposes listed above.
More specifically, the data will be shared with:
• persons who provide services for the management of the computer system used by QC Terme srl and telecommunications networks, including e-mail, newsletters and website management, freelancers, firms or companies as part of assistance and consultancy relationships
• competent authorities for the fulfilment of legal obligations and/or provisions of public bodies, on request (e.g. communicating to the Police Headquarters the data required for public safety purposes in the case of hotel bookings)
The list of Data Processors is constantly updated and can be obtained by writing to [email protected] or by contacting QC Terme srl

5. Does QC Terme transfer data outside the EEA?
The personal data provided will not be transferred outside the EEA.
It is, however, possible that certain entities acting on behalf of the Data Controller may have databases in countries outside the European Economic Area (EEA); in this case, these entities are obliged to take the appropriate contractual measures to ensure that your data is adequately protected, including by means of agreements based on standard contractual clauses (SCC) adopted by the European Commission.


6. Method of processing: How does QC Terme process data?
Processing of data for the purposes set out above takes place using both automated methods, on electronic or magnetic media through the use of booking and management software shared by QC Terme Group companies; and non-automated methods, on paper, in compliance with the rules of confidentiality and security required by law, consequent regulations and internal provisions.


7. Rights: What they are and how you can exercise them
You may assert your rights as set out in Articles 15 et seq. of Regulation EU 2016/679 by filing a request with the Data Controller or the DPO at the contact details indicated in this document. Requests are submitted free of charge and processed by the Data Controller as quickly as possible, and in any event within a month.
You have the right, at any time, to ask the Controller to provide you with access to your personal data, to rectify or erase them, to restrict the processing and to allow the portability of your data. Furthermore, you have the right to object, at any time, to the processing of your data based on consent.
To stop receiving marketing communications (e.g. e-mails) it will be sufficient to use our cancellation systems described in the communication itself
Without prejudice to any other administrative and jurisdictional recourse, if you believe that the processing of your data violates the provisions of Reg. EU 2016/679, you have the right to lodge a complaint with the Data Protection Authority by consulting the website at http://www.garanteprivacy.it/.

8. Further information
The data controller reserves the right to change, update, add or remove parts of this privacy statement at its own discretion and at any time.