1. USER INFORMATION
TERMAS DE CUNTIS S.L., hereinafter RESPONSIBLE, is the Data Controller of the User’s personal data and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR) regarding the protection of individuals with regard to the processing of personal data and the free movement of such data, so the following information about the processing is provided:
Purpose of the processing: to maintain a business relationship with the User. The operations planned to carry out the processing are:

• Sending commercial advertising communications by email, fax, SMS, MMS, social communities, or any other electronic or physical means, present or future, that enables commercial communications. These communications will be carried out by the RESPONSIBLE and will be related to their products and services, or those of their collaborators or suppliers with whom they have reached a promotion agreement. In this case, third parties will never have access to personal data.
• Conducting statistical studies.
• Processing orders, requests, or any type of request made by the user through any of the contact forms made available to them.
• Sending the newsletter from the website.

Data retention criteria: they will be kept as long as there is a mutual interest to maintain the purpose of the processing, and when it is no longer necessary for that purpose, they will be deleted with appropriate security measures to ensure the pseudonymization of the data or their total destruction.

Data disclosure: Data will not be disclosed to third parties, except for legal obligations.

Rights granted to the User:

• Right to withdraw consent at any time.
• Right of access, rectification, portability, and deletion of their data and to the limitation or opposition to their processing.
• Right to file a complaint with the supervisory authority (agpd.es) if they consider that the processing does not comply with current regulations.

Contact information to exercise your rights:
Postal address: TERMAS DE CUNTIS S.L., R/ DO BALNEARIO, 1 36670 CUNTIS (PONTEVEDRA).
Email: termas@en.termasdecuntis.com

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

Users, by marking the corresponding boxes and entering data in the fields marked with an asterisk (*) on the contact form or presented in download forms, expressly and freely and unequivocally accept that their data are necessary to meet their request by the provider, being voluntary the inclusion of data in the remaining fields. The User guarantees that the personal data provided to the RESPONSIBLE are true and is responsible for communicating any changes to them.

The RESPONSIBLE informs and expressly guarantees users that their personal data will not be transferred in any case to third parties, and that whenever any type of personal data transfer is made, the express, informed, and unequivocal consent of the Users will be requested. All data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the User. In the event that all data are not provided, it is not guaranteed that the information and services provided will be completely tailored to their needs.

3. SECURITY MEASURES

In accordance with the provisions of current personal data protection regulations, the RESPONSIBLE is complying with all the provisions of the GDPR regulations for the processing of personal data under their responsibility, and manifestly with the principles described in Article 5 of the GDPR, by which they are treated in a lawful, fair, and transparent manner in relation to the data subject and appropriate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

The RESPONSIBLE guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR in order to protect the rights and freedoms of Users and has informed them of the appropriate information so that they can exercise them.

SOCIAL MEDIA PRIVACY POLICY

1. USER INFORMATION

Who is responsible for the processing of your personal data?

TERMAS DE CUNTIS S.L., hereinafter RESPONSIBLE, informs the USER that it has created a profile on the Social Media platforms Facebook, Instagram, Twitter, LinkedIn, Youtube, Vimeo, and Google+, which is responsible for the processing of user’s personal data carried out on these social networks, and informs them that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of April 27 (GDPR), and Organic Law 3/2018, of December 5 (LOPDGDD), so the following processing information is provided:

For what purpose do we process your personal data?

Purpose of the processing: maintain a relationship between the USER and the RESPONSIBLE that may include the following operations:

• Process requests and inquiries made to the responsible party.
• Inform about activities and events organized by the responsible party.
• Inform about products or services offered by the responsible party.
• Interact through official profiles.

Why can we process your personal data?

Legal basis for processing: Article 6.1.a GDPR, the data subject has given consent to the processing of their personal data for one or more specific purposes. The USER has a profile on the same social network and has decided to join the RESPONSIBLE’s social network, thus showing interest in the information published on it. Therefore, when requesting to follow our official profiles, they provide their consent for the processing of the personal data published on their profile.

The USER can access the privacy policies of the social network at any

time, as well as configure their profile to ensure their privacy.

The RESPONSIBLE has access to and processes the public information of the USER, especially their contact name.

This data is only used within the social network itself and will only be incorporated into the RESPONSIBLE’s file when necessary to process the USER’s request.

How long will we keep your personal data?

Data retention criteria: they will be kept as long as the USER does not revoke the consent given, as indicated in this privacy policy.

To whom do we disclose your personal data?

Data disclosure: The information provided by the USER through the RESPONSIBLE’s social networks, including their personal data, may be published, always depending on the services that the USER uses, and may become publicly available to other third-party users of the social networks. From the profile of each social network, the USER can configure what information they want to make public in each case, see the permissions that have been granted, delete them, or deactivate them, just like any third-party application they no longer wish to use.

No communication of personal data to third parties outside the social network is foreseen, unless it is essential for the development and execution of the processing purposes, to our service providers related to communications, with whom the RESPONSIBLE has signed the confidentiality and data processing contracts required by current privacy regulations.

What are your rights?

Rights granted to the USER: they can only be satisfied in relation to that information that is under the control of the RESPONSIBLE.

• Right to withdraw consent at any time.
• Right of access, rectification, portability, and deletion of their data, and of limitation or opposition to their processing.
• Right to file a complaint with the supervisory authority (www.aepd.es) if they consider that the processing does not comply with current regulations.

Contact information to exercise your rights:

TERMAS DE CUNTIS S.L., R/ Do Balneario, 1 – 36670 Cuntis (Pontevedra). Email: termas@en.termasdecuntis.com

2. PROFILE USAGE

The RESPONSIBLE will carry out the following actions:

• Access to the public information of the profile.
• Publication on the USER’s profile of all the information that has already been published on the RESPONSIBLE’s social network.
• Sending personal and individual messages through the social network channels.
• Status updates that will be published on the USER’s profile.

The USER can always control their connections, delete content that is no longer of interest, and restrict with whom they share their connections; for this, they must access their privacy settings.

3. PUBLICATIONS

Once the USER becomes a follower or joins the RESPONSIBLE’s social network, they may publish comments, links, images, photographs, or any other type of multimedia content supported by the social network. In all cases, the USER must be the owner of the published content, have the copyright and intellectual property rights, or have the consent of the affected third parties.

Any publication on the social network, whether texts, graphics, photographs, videos, etc., that violates or is likely to violate morals, ethics, good taste, or decorum, and/or infringes, violates, or breaches intellectual or industrial property rights, the right to image, or the law is expressly prohibited.

In these cases, the RESPONSIBLE reserves the right to immediately remove the content, without prior notice, and may request the permanent blocking of the USER.

The RESPONSIBLE will not be responsible for the content freely published by a USER.

The USER should be aware that their publications will be known to other users, so they are primarily responsible for their privacy.

The images that may be published on the social network will not be stored in any file by the RESPONSIBLE, but they will remain on the social network.

4. DATA OF MINORS OR PERSONS WITH SPECIAL NEEDS

Access and registration through the RESPONSIBLE’s social networks are prohibited for minors under 18 years of age. If the USER has special needs, the intervention of their legal guardian or guardian, or their legal representative with a valid document proving representation, will be necessary. The RESPONSIBLE will be expressly exempt from any responsibility that may arise from the use of social networks by minors or persons with special needs. The RESPONSIBLE’s social networks do not knowingly collect any personal information from minors, so if the USER is a minor, they should not register, use the RESPONSIBLE’s social networks, or provide any personal information.