TERMS AND CONDITIONS

Respect for the right to protection of personal data as well as the right to privacy is one of the fundamental tasks of Hagi Sport SRL (IAKI SPA).

Thus, we take all necessary steps to process your personal data in accordance with the principles established by the applicable data protection legislation in Romania, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data concerning the processing of personal data and the free movement of such data and repealing Directive 95/46 / EC ("GDPR").

Personal data means any information about an identified or identifiable natural person ("the data subject"); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or one or more many specific elements, of his physical, physiological, genetic, psychic, economic, cultural or social identity.

The processing of personal data is made by: Hagi Sport SRL (IAKI SPA) based in Constanta, Bucharest B Hotel, Mamaia, registered under no. J13 / 1896/1999 to the Trade Registry, CUI RO 6646915. Hagi Sport Company (IAKI SPA) is a personal data operator within the meaning of the GDPR, and establishes the means and purposes of processing personal data.

WHAT DO WE DO OF PERSONAL DATA?

If you are a client or potential customer

We collect personal data from most interactions with you, as well as other aspects of our work. The categories of data we process are the following:

a) data required to make reservations (eg name, surname, e-mail, telephone);

e) the information you provide about your marketing preferences;

f) personal information provided by you for subscribing and subscribing to the newsletter;

g) information about the vehicles you may bring to our property, such as registration number;

i) information collected by various contractual partners (event organizers) and transmitted to Hagi Sport SRL (list of events invited);

j) data necessary for the provision of additional services, as the case may be;

k) reviews and opinions about our services;

l) any other information you choose to provide us with.

Also, surveillance cameras and other security measures on our property can capture or record guests' images in public places (such as entering the Spa center, hallways) as well as your location data (through camera-captured images supervision).

You can always choose which personal data you want us to provide. However, if you choose not to provide certain personal data, if the basis of our request is compliance with a legal obligation, contractual obligations or obligations to conclude a contract we will be unable to provide you with certain services, for example: i) if you do not want to give us your name, surname, e-mail address or phone number if you wish to make a reservation / scheduling, we will not be able to make the reservation.

If you are potentially engaged

We collect information from your resume and any other information submitted with your resume and / or the interviews you have submitted.

If you are a visitor to our location

Surveillance cameras can capture or record visitors' images in public places (such as entrances to the Spa center, hallways, etc.).

If you are a user of our Internet sites www.iakispa.ro

No personal data is required to read the information on the site.

However, for the purpose of the technical exploitation of the portal, we collect the time and date of access to the Internet site and the IP address from which our website was accessed.

Some personal data is required to use certain services (eg job vacancies). For details, please refer to the section corresponding to the operation used on the site.

If you are a representative or contact person of our suppliers or business partners

We collect the name, surname, function, as well as any other data provided by you or the company that you represent.

If you are employed

Please read the Employee Privacy Policy, made public at the time of employment, and available at any time to the Human Resources Department.

PERSONAL DATA OF MINORS

We protect the confidentiality of data from children under 16. If you are under the age of 16, you must obtain the consent or permission of your parents or guardian for any personal data you provide.

SPECIAL DATA

The term "special dates" refers to racial or ethnic origin, political opinions, religious confession or philosophical beliefs, or membership of trade unions and the processing of genetic data, biometric data, data on health or data on sexual life or sexual orientation.

Generally, we do not collect special information unless you want us to give it to you.

____________________________________________________________________________________________________________

WHAT AIM AND WHERE DO I MAKE YOUR PERSONAL DATA?

If you are a customer

a) Reservations for massages and therapies, scheduling in the activities carried out (swimming lessons, aquagym, yoga etc.) or in the case of requests for offers submitted by you for certain organized or organized events (bachelor party, etc.).

Purpose: We process your personal data (s) to reserve you a place in IAKI Spa therapies / activities, (ii) to respond to your requests for offers.

Themes: conclusion of a contract in the case of Spa subscriptions (All Inclusive, Spa Break s.a.) or only reservation according to the above mentioned specifications;

b) Profiling

Purpose: In order to provide personalized services, some of your special preferences (for example: if you prefer massage to a particular therapist, swimming instructor, etc.) are stored so that when you get back we will already know what you like.

Themes: Consent

c) Feedback:

Goal: We process your personal data to make sure you have had a nice experience at our facility.

Themes: Our legitimate interest in constantly improving the services we offer and providing services that are as appropriate and conform to our customers' standards.

d) Marketing:

Purpose: We process your personal data for marketing purposes, such as business newsletters and marketing communications on new products and services, or other offers that we think might be of interest to you.

Themes: We rely on the legitimate interest in promoting our services by submitting the offers we consider to be of interest to you (see "Right to oppose" in the "Your Rights" section)

If necessary, in accordance with applicable law, we will obtain your consent before processing your personal data for direct marketing purposes. In this case, we hereby notify you that you may at any time withdraw your consent to marketing for marketing, in which case you will not receive any marketing communications from us.

We will include a unsubscribe link that you can use if you do not want to send us any further messages.

Also, when organizing certain events within the location, it is possible to take some photos, and some of these could also be distributed in the online environment to show others what our events are like. In any case, taking into account your right to privacy, we will do our best to keep you informed that photographs will be taken (for objections to our photographs see "Right to Opposition" in "Your Rights" section).

g) Other communications: by e-mail, mail, telephone or SMS

Purpose: These communications will be made for a specific reason such as: (i) to respond to your requests, (ii) if you have not completed an online reservation or a call for offers, we may send you an email to your remind you to complete the reservation, (iii) to inform you about the manner in which complaints and / or incidents occurred during your stay have been resolved.

Legal basis: Our legitimate interest in providing services at the desired standards by resolving any claims / complaints and ensuring our full availability.

h) Analysis, improvement and research:

Legal basis: Our legitimate interest in providing services at the desired standards by resolving any claims / complaints and ensuring our full availability.

h) Analysis, improvement and research:

Goal: In order to constantly ensure the qualitative evolution of our services, we take care to analyze each complaint / suggestion on your part, so we compile statistical reports to identify the problems and find the best solutions to remedy them.

Topics: We rely on our legitimate interest in providing services to your standards and the IAKI SPA center.

If you are a user of our website www.iakispa.ro

Purpose: Trafficking to track for errors and / or any other malfunctions of the site.

Themes: We base this data processing activity on our legitimate interest, namely providing you with a fully functional site by repairing any error, and continually improving it.

If you are a representative or contact person of our suppliers or business partners

Purpose: to conduct contractual relations with our suppliers or our business partners.

Topics: Execution of a contract.

If you are potentially engaged

Purpose: Evaluating your employment application.

Themes: conclusion of a contract.

If you are employed

Please see the Employee Privacy Policy, brought to your attention at the time of employment, and available at any time to the Human Resources department.

For all of the above categories of people, we can also process your data in the context of the following activities:

a) Restructuring, internal reorganization or sale of assets or shares / shares:

Purpose: We process your data to perform the above mentioned operations.

Themes: The legitimate interest in performing the operations, especially if they would be impossible to do without the processing of your data.

However, we assure you that this eventual processing will be done in accordance with this policy and by implementing a measure to ensure the confidentiality of your data.

b) Security:

Purpose: We process personal data for the security of goods and the physical integrity of individuals.

Themes: We rely on our legitimate interest in securing the protection of your property and the hotel as well as the protection of the people in our Spa area.

c) Legal reasons:

Purpose: In some cases, we need to process the information we provide, which may include personal data, to resolve legal disputes or complaints, investigations and compliance with applicable legal regulations, to implement an agreement, or to comply with requests from the part of the public bodies to the extent that these requests meet the requirements of the law.

Themes: The reasons for the processing may be represented by the legal obligation (if we have a legal obligation to disclose certain personal data to public authorities) or our legitimate interest in resolving any disputes and / or complaints.

____________________________________________________________________________________TO WHOM WE TRANSMIT YOUR DATA PERSONAL?

To provide you with the expected level of hospitality and to provide you with high-quality services, your data can be sent to our service providers and other third parties, as detailed below:

a) Suppliers: In order to provide the requested services, in some cases we will need to pass some of your personal data to the providers, and they have the capacity to process and process the data in the name, on our account and in accordance with our guidelines software providers, IT, accounting services, medical services).

b) Group Events or Meetings: if you visit our Spa in a group, the information required for meeting and event planning can be shared with the organizers of these meetings and events and, where appropriate, with the guests who are organizing or attending the meeting or event.

c) Business Partners: In some cases, we associate with other companies to provide you with products, services or offers. For example, collaborations with local instructors Yoga, Aquagym)

The confidentiality of your data is important to us, which is why, where possible, the transmission of personal data in accordance with the above is done only on the basis of a confidentiality commitment on the part of the recipients to ensure that the data is kept and that such information is provided in accordance with applicable law and applicable policies. In any case, we will always send to the recipients only the information strictly necessary for the purpose.

______________________________________________________________________________________________________________

WE COLLECT PERSONAL DATA FROM THIRD PARTIES?

To provide you with the expected level of hospitality and to provide you with the best level of service, we may collect information about you from our business partners and other third parties, as detailed below:

a) Business partners: such as card partners, social networking services that are consistent with your settings for these services, travel agencies, event organizers

In any case, we ensure that your data collected from third parties will be processed under the same conditions as if it were collected directly from you. We will also collect only what is necessary for our purposes. (see Section "WHAT ARE PURPOSE AND IN WHAT IS YOUR PERSONAL DATA PROCESSED?").

Additionally, when we first contact you, we will let you know, first of all, the source from which we obtained your personal data.

____________________________________________________________________________________________________________

DO WE TRANSFER YOUR PERSONAL DATA OUTSIDE EU / SEE?

We may transfer your data to some suppliers located in countries other than the one you are located in and in some cases in countries outside the EU / EEA.

Although data protection laws in these countries may differ from your country, we will take the necessary steps to ensure that your personal data is processed in accordance with this policy and in accordance with applicable law.

____________________________________________________________________________________________________________

FURNISHING YOU THE PERSONAL DATA OF OTHER PHYSICAL PERSONS

If you provide us with the personal data of other individuals, please tell them before this disclosure and how they are to be processed as described in this privacy policy.

____________________________________________________________________________________________________________

WHAT TIME DO WE STAY YOUR PERSONAL DATA?

Your personal data is retained for the full duration of the purposes detailed in this policy if a longer period of retention is not required or permitted by applicable law.

We constantly review the need for your personal data to be retained, and to the extent that processing is no longer required and there is no obligation to retain your personal data, we will delete / destroy your personal information as soon as possible and in a (for example, we will delete / destroy all data for people who have not been interviewed unless there is a serious prospect of future employment).

If personal information is printed on paper, it will be destroyed in a way that eliminates it altogether, and if it is saved on electronic media, it will be erased by technical means to ensure that the information can no longer be subsequently recovered or reconstituted.

WHAT ARE YOUR RIGHTS?

As a person you are entitled to the following rights provided by GDPR:

a) Right of access: You may request (a) confirmation that personal data are processed or not, and, if so, access to, and information about, the data and (ii) a copy of your personal data we hold (Article 15 of GDPR);

b) Right to rectification: You can inform us of any changes to your personal data or you may ask us to correct the personal data we hold about you (Article 16 of GDPR);

c) Right of waiver ("the right to be forgotten"): in certain circumstances (such as (i) the data being collected unlawfully, (ii) the expiry date for the data storage has expired, (iii) you have exercised the right to oppose, or (iv) data processing was done on a consent basis and you have withdrawn your consent), you may ask us to delete the personal data we hold about you (Article 17 of GDPR);

d) Right to Restrict Processing: In certain circumstances (such as when you dispute the accuracy of such data or the lawfulness of the processing), you may require us to restrict your data processing for a certain period (GDPR Article 18);

e) Right to data portability: ask us to send your personal data to a third party or directly to you (GDPR Article 20);

f) Right of opposition: In certain circumstances (such as processing that has the legal basis for legitimate interest), you may request that we no longer process your data (Article 21 of GDPR).

g) If we use your personal data based on your consent, you have the right to withdraw this consent.

If we use your personal data based on your consent, you may withdraw this consent at any time. In this case, your data will no longer be processed by us, unless a legal provision forces us to keep and archive it. In any case, we will let you know if there is such a legal provision and we will indicate it expressly.

____________________________________________________________________________________________________________YOUR DATES IN SAFETY?

We take your personal security seriously, so we take important security measures necessary to protect against unauthorized access to data or unauthorized modification, disclosure or destruction. This requires internal review of data collection, storage and processing practices, and security measures, as well as physical security measures to protect against unauthorized access to systems where we store personal data.

We also require our service providers and business partners to take all necessary measures to protect against unauthorized access to data or unauthorized modification, disclosure or destruction.

____________________________________________________________________________________________________________

LINKS TO OTHER WEB SITES

Our site contains links to third-party sites. Please note that we do not take responsibility for the collection, use, storage, sharing or disclosure of such data or information by such third parties. If you use or provide information on third-party sites, the terms and privacy policy of those sites apply. We encourage you to read the privacy policy of the sites you visit before sending personal data.

The use of the internet services provided by Hagi Sport SRL (IAKI SPA) is subject to the terms of use and privacy policy of Internet providers. You can access these terms and policies by using the links on the service's authentication page or by visiting the Internet provider's website.

____________________________________________________________________________________________________________QUESTIONS OR REPRESENTATIONS

If you have any questions or concerns regarding the processing of your personal data or if you wish to exercise any of the above mentioned rights, you are welcome to contact us using our Contact Form available on the site or by sending an email to the following address : privacy@iaki.ro, and we will respond to you within 30 days of receipt of the request.

Also, insofar as you do not have electronic means or do not wish to use them, you can file a written request that you submit at the address of Constanta, Bucharest B Hotel, Mamaia. [AG1]

To the extent that you are not satisfied with the manner in which your application has been resolved, you may file a complaint with the National Supervisory Authority for Personal Data Processing.

____________________________________________________________________________________________________________

POLICY CHANGES

This privacy policy may change in accordance with changes to data policy legislation or changes to our services or organizational arrangements from time to time. If we make any material changes to this, we will publish a link to the revised policy on the main page of our site. If we make significant changes that will impact your rights and freedoms (for example, when we begin processing your personal data for purposes other than those specified above), we will contact you before you begin this processing.

To help you track the most important changes, we will include a change history below to recognize the changes made to this policy.