Thermal Spa

Privacy Policy

This page describes our web-site management’s procedures in relation with personal data of users who consult it.

This information is issued in accordance with article 13 of our Regulation UE 2016/679 applicable from 25/05/2018 General Regulations for the protection of personal data ( hereinafter referred to as rgdp) to anyone interacting with the web services ofTerme Salus Resort & Spa , accessible by electronic means from the address managed by TERME SALUS RESORT & SPA .

The information is provided just for the web-site htttp:// and not for other websites possibly consulted by the user via links and complies with the recommendation N.2/2001 related to the minimum requirements for online data collection in the UE, adopted on 17th May 2001 from the Article 29 Work Group.


Pursuant to article 28 of GDPR 2016/679, The data processor for hotel room booking occurring on this website through Vertical Booking Platform is the company TERME SALUS RESORT & SPA.

Under article 28 of GDPR 2016/679, Responsable for the processing of data for bookings related to pool entrances, wellness clubs, spa and gift vouchers is the company GESTERVIT TERME SRL.

Place of data processing

The treatments connected to the web services take place at the headquarters of Viterbo ( Italy) Strada Tuscanese 26/28 and at the hosting providers and are handled only by technical staff of the processor.

No data from the web service is communicated or disclosed. The personal data provided by Users who request the sending of informative material are used only to perform the service or supply requested and are communicated to third parties only if this is necessary for that purpose.

Types of processed data

Navigation data

The computer systems and software procedures responsible for web site operation acquire , during their normal operation, some of the personal data whose transmission is implicit in the use of Internet communications protocols.

This information is not collected to be associated to identified users, but by their very nature they could allow user identification through elaborations and associations with data held by third parties,

Navigation data

This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI notation addresses (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the answer from the server (successful, error, etc..) and other parameters regarding the user’s operating system and computer environment. These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this possibility, the data on web contacts is not kept for more than 30 days.

Data provided voluntarily by the user

the optional, explicit and voluntary transmission of electronic mail to the addresses posted on the web Site involves the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as of any other personal information included in the message.

Specific summaries will be progressively reported or displayed in the pages of the site prepared for particular services which may be requested.


The Use of so-called session cookies (which are stored temporarily on the user’s computer and which are normally deleted when the browser is no longer used) is strictly limited to transmission of session identifiers (consisting in random numbers generated by the Reply web server) required for secure, efficient website exploration.

The so- called session cookies used on this website avoid the use of other computer techiniques that could potentially compromise the confidentiality of users’ browsing and do not allow the acquisition of user’s personal information data.

in order to be able to choose or modify or be informed on available options about cookies’s usage from terme salus resort & spa please click here in order to be able to choose or modify or be informed in details on available options about cookies’s usage from Terme Salus Resort & Spa in its booking platform integrated into the website, please click here

Purpose, legal basis and nature of the provided data

Personal data furnished by the user through the website will be processed by TERME SALUS RESORT & SPA for the following purposes:

  • purposes related to the execution of a contract of which you are a part or to the execution of pre-contractual measures taken at your request (e.g.: contact request through the Contact form, booking, acceptance of special offers, etc.). Consent Not required;
  • purposes related to the selection of personnel instrumental to the evaluation of your potential job application within our organization (“Work with us” site section). Please include the treatment authorization in the CV you send;
  • purposes related to sending promotional and commercial material via email as you are registered as our customer and having expressed your explicit consent or on the basis of contacts, registration to the site newsletter, the use of soft spam.Requires the explicit consent of the relevant person or the use of soft spam
  • purposes of research and statistical analysis on anonymous aggregate data, to measure the operation of the Site, measure traffic and evaluate usability and interest to make it more functional and performant; Consent not necessary as it does not affect the processing of personal data
  • purposes relating to compliance with laws and regulations; Consent not required
  • purposes necessary to establish, exercise or defend a right either in court or whenever courts exercise their jurisdiction functions.Consent not required


Where this is not the case, transfers are based either on an adequacy decision or on the Standard Model Clauses approved by the European Commission, as well as in compliance with the principles of Privacy by Shield in the case of transfers to the USA.

Some of your personal data are transferred to recipients who may be located outside the European Community.

Terme Salus Resort & Spa ensures that the processing of data in paper or electronic form Will be done in compliance with the applicable law which has a legal scope of applicability outside the EU.

Where this is not the case, transfers are based either on an adequacy decision or on the Standard Model Clauses approved by the European Commission, as well as in compliance with the principles of Privacy by Shield in the case of transfers to the USA.

Data retention

Terme Salus Resort & Spa processes your Personal Data for the time strictly necessary to achieve the purposes indicated in this information notice.

By way of example but not limited to, Terme Salus Resort & Spa processes Personal Data for the newsletter service until you decide to unsubscribe from the service by simply clicking on the email received.

Without prejudice to the above-mentioned facts, Terme Salus Resort & Spa will process your Personal Data up to the time allowed by Italian law to protect its interests (Art. 2947(1)(3) c.c.).

Further information regarding the period of retention of Personal Data and the criteria used to determine this period may be obtained by writing to the DPO.

CVs management

This information, prepared in compliance with art. 13 of the RGPD 2016/679, can also be used by Terme Salus Resort & Spa for any advertisements published for the search of personnel on sites or portals it does not directly manage.

The Company will treat the CVs received via email or third-party personnel selection companies (publications on portals, etc.) to evaluate potential applications within the Company or which may be submitted in the near future.

The treatment takes place by electronic means with the exception of CVs received by ordinary mail.

The CVs considered “interesting” will be kept at the company headquarters for a period of 12 months and will be treated in full compliance with the security measures stipulated in Article 32 of RGDP 2016/679.

CVs considered not relevant as well as those CVs whose retention time has exceeded 12 months will be erased.

The CVs will be kept in the human resources office of Terme Salus Resort & Spa and will not be disclosed to unauthorized third parties.

They can be evaluated by department heads of the spa centre appointed in charge of the treatment (under art. 29 and 32 paragraph 4 of RGPD 2016/679).

In compiling your CV, please follow these rules:

  • fill in your CV in the European format;
  • send the CV in pdf format;
  • avoid including in your CV particular categories of personal data as defined by Article 9 of the RGP 2016/679 (relating, in particular, to health status, religious, philosophical or political convictions) which are not relevant to the job offer;
  • consent to the processing of special categories of personal data relating to your health status as defined in Article 9 of the DPO relevant to the establishment of an employment relationship (e.g. membership of protected categories).

    The company reserves the right not to erase the CVs that do not meet the above-mentioned requirements.

    The purpose of the treatment related to the management of CVs, will involve activities strictly related to the assessment, recruitment or selection of personnel, with the aim of collaboration, temporary or permanent employment, internship, or to allow the chosen candidate to prepare his thesis at our headquarters.

Rights of the relevant persons

The persons to whom the personal data refer have the right at any time to obtain confirmation of the existence or absence of such data and to know its content and origin, verify its accuracy or request it is added more data, updated or corrected (Section III RGPD 2016/679). Pursuant to this Article you have the right to request the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, and in any case, refuse their processing for legitimate reasons. Requests should be addressed to Terme Salus Resort & Spa – Strada Tuscanese 26/28- 011000 Viterbo Italy – email to the attention of the Data Protection Officer.

In accordance with Chapter III of the RGPD 2016/679, you have the right to request, at any time, access to your Personal Data, the rectification or cancellation of such Data or to refuse its processing, the limitation of the processing and to obtain the data concerning you in a structured, commonly used and machine-readable format, you also have the right to refuse the profiling and to lodge a complaint with the Supervisory Authority.

You also have the right to withdraw your consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal. For a complete and exhaustive list of the rights that can be exercised by the relevant person, see art. 15-23 of the RGPD 2016/679.

Requests should be sent by e-mail to the address:

Updating and revising

The privacy policy was updated on 29.01.2019 and may be subject to future revision.

By using the site, you declare to accept the use of cookies. More info

Questo sito utilizza i cookie per fornire la migliore esperienza di navigazione possibile. Continuando a utilizzare questo sito senza modificare le impostazioni dei cookie o cliccando su "Accetta" permetti il loro utilizzo.