QC PRIVACY NOTICE
Effective Date: June 8, 2021, We, QC Terme NY LLC, collect and use personal information from visitors of our web and mobile sites that link to this notice and visitors to our QC Terme New York spa in accordance with the following notice.
What data we collect: If you register for an account with us, make a purchase, book an appointment, or communicate with us we may ask you to actively provide certain personal data, such as your full name, email address, phone number, postal address, other contact details and billing information. This information enables us to provide you with our services, communicate with you including to ask about your spa experience, and ship any products you purchase to you. We may also ask you (at your option) to provide your shoe and bathrobe size (which will give us a chance to confirm that we have your chosen size available for your appointment).
We will also take note of what spa service you are purchasing. If you sign up for our newsletter, we may request your name, birthday, zip code and email address. You can opt out from marketing communications through our portal (https://www.qcny.com). You will know what information you provide because you will actively submit it to us.
We also automatically receive certain information from your computer or mobile device, including the activities you perform on our sites, the type of hardware and software you are using (for example, your operating system or browser), information stored in cookies, IP address, access times, the web pages from which you came, the regions from which you navigate the web page, and the web page(s) you access (as applicable).
We use tracking technology (“cookies”) on the QC Terme website
We use cookies that are strictly necessary to enable users to navigate around our online services and use their features, otherwise known as Required cookies. Without these cookies, we would not be able to provide core features of our online services, such as the checkout process.
We use “functional cookies” to enhance user’s experience on our online services and for internal operational purposes, including to collect aggregated information about how users of our website interact with it, and remember choices they make while using our website.
We also use cookies for marketing including behavioral advertising purposes.
Read our full cookie policy.
We do not respond to “do not track signals”. We may share your personal information:
- as directed by you;
- with your consent;
- to comply with relevant laws, regulatory requirements, and to respond to lawful requests, court order and legal process;
- to protect and defend the rights or property of us or third parties, including enforcing agreements, policies and terms of use;
- in an emergency, including to protect the safety of our employees or any person;
- in connection with investigating and preventing fraud;
- and for purposes of a business deal involving sale or transfer of all or part of our business or assets (e.g. merger, financing, acquisition, bankruptcy transaction or proceeding).
We may also share your personal information with our affiliates, agents, contractors, and service providers, subject to strict confidentiality and data protection requirements, in order to assist us in conducting our business. Security: We have implemented information security measures to help keep your personal information secure.
Because submissions of information over the Internet are never entirely secure, we cannot guarantee the security of information you submit via the Internet and such submissions are made at your own risk. We use HTTPS with TLS (Transport Layer Security) 1.2 or above, which encrypts all transmitted data.
When payments are processed via credit card, we use third-party vendors that commit to PCI-DSS compliance. Our own employees do not access your credit card information. Information storage and international transfers: We and our affiliates and service providers process and store your personal data on servers around the world, including in the United States.
Changes, Contact: We may update this privacy notice from time to time, at our sole discretion. When we do, we will update the effective date at the top of this page. If you have any questions about our privacy notice, please contact: [email protected]
EEA/UK Supplemental Data Protection Law Disclosures
QC Terme NY LLC provides to persons in the European Economic Area and the United Kingdom these supplemental disclosures, which contain additional information for such persons to supplement the QC Terme Privacy Notice. Data Controller QC Terme NY LLC with corporate office at 14 Penn Plaza, Suite 1800, New York, New York 10122. Legal Basis for Processing: We process your personal information on several different legal bases, as follows:
-Based on necessity to perform contracts with you – we need to process your personal data to answer questions and requests from you.
-Based on legitimate interests – we process personal data from you for security and safety; to detect and prevent fraud; to protect and defend the rights or property of others, or our own rights and interests; to send you emails about our offerings or to provide our newsletter.
-Based on compliance with legal obligations – we may need to process your personal data to comply with relevant laws, regulatory requirements and to respond to lawful requests, court orders, and legal process.
-Based on your consent for tracking your activities in accordance with the cookie policy.
Recipients in Third Countries: QC Terme NY LLC and part of our service providers are based in the United States, a country with respect to which the European Commission has not issued an adequacy decision. The transfer of your personal information to the United States is necessary for us to provide our sites because QC Terme NY LLC is located in the United States. When you interact with our site, you are sending your personal information to the United States. Data Subject Rights: You may have a right to request from QC Terme NY LLC access to and rectification or erasure of your personal information, restriction of processing, data portability, a right to object to processing, and to lodge a complaint with a supervisory authority.
Note that there are limitations to these rights and there may be circumstances where we are not required or able to comply with your request. Period of Data Storage: We will process your personal data only for as long as necessary for the purposes for which it was collected, to provide your with the sites, for legitimate purposes, in accordance with contract, and where required or allowed under law.