Go directly to:
THON+ (loyalty programme)
| Purposes and types of data | Why do we process the data? | Legal basis | When is the data deleted? |
|---|---|---|---|
|
1. Establishment of membership: Name, email address, phone number, country, membership number and membership level The above information is provided by you. Other information can be registered voluntarily by THON+ members on 'My Page' or in our app. |
To give you the opportunity to collect bonus points for stays and member benefits. | GDPR Article 6 (1) b: necessary to fulfil an agreement with you. | Deleted on receiving request to delete membership |
|
2. My page: In addition to the categories in point 1, we process the following information - if you provide it: address and date of birth We also process: stay history, points balance and communication preferences when using your membership. |
To give you control over your accumulated bonus points, stay history, order history and benefits. | GDPR Article 6 (1) b: necessary to fulfil an agreement with you. | Deleted on receiving request to delete membership |
|
3. Ordering of bonus gift cards: Name, address, membership number |
To be able to send you a physical bonus gift card. | GDPR Article 6 (1) b: necessary to fulfil an agreement with you. | Deleted on receiving request to delete membership |
|
4. Newsletter: Name, email address, membership number, membership level and points balance |
To be able to inform you about membership campaigns. |
GDPR Article 6 (1) a: you have consented to receive emails about benefits and offers. We use your data to market our services and products, for example via push notifications, email, regular mail and text message. |
You can remove your email address from the recipient list for these mailings at any time in the following ways: - on My Page - by clicking on 'unsubscribe' at the bottom of the email itself or - by contacting our data protection officer |
|
5. Membership information: email, membership level |
To be able to communicate with you about membership information we believe is important. | GDPR Article 6 (1) f: we have a legitimate interest in providing our members with what we consider to be important membership information. | You can remove your email address from the list of recipients of email that we send based on our legitimate interests at any time by contacting our data protection officer. |
Before and during the stay
After the stay
| Purposes and types of data | Why do we process the data? | Legal basis | When is the data deleted? |
|---|---|---|---|
|
12. Evaluation form after stay: Name, email address, stay dates, language, feedback We use the information from the time of booking to send you the evaluation form. |
To be able to improve our services at the hotels and follow up on your feedback after your stay. | GDPR Article 6 (1) f: we have a legitimate interest in receiving feedback in order to improve our services at the hotels. | Responses are automatically deleted after two years. Can be deleted earlier on request by contacting the data protection officer. |
|
13. Customer events, etc.: Contact information, membership number |
Relationship building and recognition of frequent guests, customers, etc. | GDPR Article 6 (1) f: we have a legitimate interest in inviting guests to events as a token of appreciation. |
The list of frequent guests is updated continuously at the hotels. If guests no longer qualify as frequent guests, the data will be deleted. If guests wish to be removed from this list, they can contact either the hotel director/hotel manager or the data protection officer. |
When you stay with us
| Purposes and types of data | Why do we process the data? | Legal basis | When is the data deleted? |
|---|---|---|---|
|
14. Camera surveillance: Photographs/videos of you |
Read more about camera surveillance at TG here. | GDPR Article 6 (1) f: and camera surveillance regulations. | Recordings are deleted after seven days. |
|
15. Thon Wi-Fi: IP address, MAC address and email address. |
To provide you with free Wi-Fi. | GDPR Article 6 (1) b: necessary to fulfil an agreement with you. | Deleted after session has ended. The session duration is selected by the user before connecting. |