Privacy Policy

The controller responsible for data processing on this website is:

STP Professional Co., Ltd.
29/22 Soi 112 Nong Kae
Hua Hin, Prachuap Khiri Khan 77110
Thailand

E-Mail: info@swissthaipro.ch
[TODO: Vertretungsberechtigte(r)]
[TODO: Registrierungs-/Steuernummer]
[TODO: Telefonnummer]

For privacy matters and to exercise your rights, please contact info@swissthaipro.ch.

When you submit the contact form, we process the following data:

• Entered by you: name and email address (required), optionally phone/messenger number, area of interest and your message.
• Collected automatically: the time of your enquiry, the language version and the page you submitted from, your browser identifier (user agent) and your truncated IP address.

Your IP address is truncated before storage (for IPv4 the last group is set to 0; for IPv6 only the first three blocks are kept). We do not store the full address.

Purpose and basis: The processing serves to handle your enquiry and to take steps prior to entering into a contract (PDPA Sec. 24(3)). We additionally process the timestamp, truncated IP and user agent to prevent abuse and automated spam – our legitimate interest in a working contact channel (PDPA Sec. 24(5)).

Where the data is held: Your enquiry is stored in a database on our own server that is not reachable from the internet. We additionally keep the unmodified original content of your submission so that no detail is lost to a technical fault. We do not share this data with third parties and we do not sell it.

Email notification: We are notified of a new enquiry by an email to our own mailbox. It is sent via the mail server of our provider Hostinger, acting as a processor on our behalf.

Retention: We automatically delete enquiries 24 months after receipt. If your enquiry leads to a contract, statutory retention periods apply to the contract documents.

We want to understand which content is found and read. For that we use Matomo, analytics software we run on our own infrastructure (stats.swissthaipro.ch). The data stays with us: there is no analytics corporation behind it, no sharing with third parties, no selling, and no combining with other data sources.

No measurement takes place without your consent. Until you agree, the Matomo software is not even loaded – no request reaches the statistics server, no IP address is transmitted and no cookie is set. Measurement only starts once you click “Accept” in the cookie notice.

Basis: your consent (PDPA Sec. 19). You may withdraw it at any time with effect for the future – as easily as you gave it. See our Cookie Policy for details.

Once consent is given we record: pages visited and times, the page you came from (referrer), approximate origin, device type and screen size, links clicked, and your IP address. We also honour your browser’s “Do Not Track” signal: if it is enabled, we do not measure even after consent.

[TODO: verify IP anonymisation in Matomo and describe it accurately here – the setting lives in the Matomo instance, not in this website’s code.]
[TODO: state the retention period for Matomo raw data.]

When this website is accessed, our web server logs technically necessary information: the address requested, the time, the status code, the amount of data transferred, the browser identifier and the IP address. This is required for operation and security (PDPA Sec. 24(5)) and happens regardless of your cookie choice.

The application logs of our contact service deliberately contain no personal content – no names, no messages, only a sequential number, the language, the area of interest and a truncated IP.

[TODO: state the retention period for web server logs.]
[TODO: state the server location – this determines whether data leaves Thailand.]

We deliberately keep this website lean. Specifically:

• No external content. Fonts, images and code are hosted on our own server. No Google Fonts, maps, videos or ad networks are loaded from third-party servers – while viewing this page your browser contacts nobody but us.
• No advertising or tracking networks, no social media plugins, no cross-site profiling.
• No automated decision-making and no profiling with legal effect.
• No selling or sharing of your data for advertising purposes.

As a data subject you have the right:

• to access the data we process about you and receive a copy (Sec. 30);
• to have inaccurate data corrected (Sec. 36);
• to request erasure or anonymisation (Sec. 33);
• to request restriction of processing (Sec. 34);
• to object to processing (Sec. 32);
• to receive or transfer your data in a common format (data portability, Sec. 31);
• to withdraw consent at any time (Sec. 19) – with no disadvantage to you;
• to lodge a complaint with the supervisory authority (Sec. 73): Personal Data Protection Committee (PDPC), Bangkok.

Write to us at info@swissthaipro.ch. We respond within 30 days. To locate your request we usually need the email address you contacted us from.

The connection between your browser and our server is encrypted throughout (HTTPS). The database holding enquiries lives outside any web-accessible directory and cannot be retrieved publicly. Only those of our staff who handle enquiries have access to them.

If the way we process data changes, we update this policy. The date of the last change is shown at the top of this page.