1. Data Controller

The controller responsible for the processing of personal data on this website within the meaning of the GDPR is:

Baan Chiang Hua Hin Co., Ltd.

Petchkasem Road · Hua Hin

77110 Prachuap Khiri Khan, Thailand

Email: info@swissbaanchiang.com

Website: https://swissbaanchiang.com

2. General Information

We take the protection of your personal data very seriously. This privacy policy explains which personal data we collect, how we use it, and what rights you have.

You can generally use our website without providing any personal data. Where personal data (e.g. name, email address) is collected, this is done voluntarily and only to the extent necessary for the relevant purpose.

This privacy policy applies to the website swissbaanchiang.com, including all associated subpages and language versions (DE / EN / TH).

3. Legal Bases for Processing

Where we obtain your consent for a processing activity, the legal basis is Art. 6(1)(a) GDPR.

For processing necessary for the performance of a contract (e.g. bookings), the legal basis is Art. 6(1)(b) GDPR.

For processing necessary to comply with a legal obligation, Art. 6(1)(c) GDPR applies.

To safeguard our legitimate interests, we rely on Art. 6(1)(f) GDPR, provided that your interests do not override ours.

4. Data Collected When Visiting the Website

4.1 Server Log Files

When you access our website, the following information is automatically stored in server log files:

• IP address of the requesting device
• Date and time of access
• Name and URL of the file accessed
• Website from which access occurred (referrer URL)
• Browser used and, where applicable, operating system
• Name of the internet service provider

This data is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the smooth operation of the website). The data is deleted after 30 days at the latest.

4.2 Cookies

Our website uses cookies — small text files stored on your device. We distinguish between:

• Technically necessary cookies: required for the website to function and set without consent (Art. 6(1)(f) GDPR).
• Analytics and marketing cookies: set only with your express consent (Art. 6(1)(a) GDPR).

You can restrict or disable cookies in your browser settings. Please note that disabling cookies may limit the functionality of the website.

4.3 Contact Form and Email

If you contact us via the contact form or by email, we store the details you provide (name, email address, and any further information you share voluntarily) in order to process your enquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest). This data is deleted once your enquiry has been fully resolved, unless a statutory retention obligation applies.

5. Booking and Contract Processing

When you book a stay through our website, we collect the following data:

• First and last name
• Email address
• Phone number
• Arrival and departure dates
• Number of guests
• Payment information (processed by our payment service provider)
• Special requests and messages

This data is used exclusively to process your booking, to communicate with you, and to fulfil our contractual obligations.

Legal basis: Art. 6(1)(b) GDPR. Booking data is retained in accordance with applicable Thai tax retention requirements (5 years).

We use the MotoPress Hotel Booking plugin for online bookings. Booking data is stored on our server (WordPress) and is not shared with third parties unless required to fulfil the contract.

6. Payment Processing

Payments are processed via external payment service providers. We do not store credit card data on our own servers.

Payment service providers used: PayPal, Wise

Processing of your payment data is subject to the respective payment service provider’s own privacy policy.

7. Third-Party Services

7.1 Google Fonts

Our website uses Google Fonts (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) for the consistent display of typefaces. When a page is loaded, your browser retrieves the required fonts directly from Google’s servers, transmitting your IP address to Google in the process. Legal basis: Art. 6(1)(f) GDPR.

Google’s privacy policy: https://policies.google.com/privacy

7.2 Google Maps

When the Google Maps map is loaded, data (in particular your IP address and location data) is transmitted to Google. Use of Google Maps requires your consent (Art. 6(1)(a) GDPR).

7.3 Analytics Tools

We do not use analytics tools.

7.4 Social Media Links

Our website contains links to social networks. These are implemented as simple links rather than embedded plugins, so no data is transmitted automatically to the respective network when a page loads. Data is only transmitted once you click a link and are redirected to the external platform.

8. Hosting

Hosting provider: Hostinger.com

Our web host processes data on our behalf under a data processing agreement (Art. 28 GDPR). The servers are located in: Germany.

9. International Data Transfer

As Swiss Baan Chiang is based in Thailand, data may be transferred to a country outside the European Union. Thailand is not currently recognised by the European Commission as providing an adequate level of data protection.

We implement appropriate safeguards in accordance with Art. 46 GDPR (in particular the EU Standard Contractual Clauses) to ensure an adequate level of protection. A copy of these safeguards is available on request.

10. Retention Period

We store personal data only for as long as necessary for the relevant purpose or as required by law. Specifically:

• Server log files: maximum 30 days
• Contact enquiries: until fully resolved, then deleted
• Booking data: 5 years (Thai statutory tax retention requirement)
• Newsletter data: until consent is withdrawn
• Cookie data: as set out in the cookie notice (varies by cookie type)

11. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): you may request information about the data we hold on you at any time.
• Right to rectification (Art. 16 GDPR): you may request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): under certain conditions, you may request the deletion of your data (‘right to be forgotten’).
• Right to restriction of processing (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR): you have the right to receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): you may object to processing where we rely on a legitimate interest.
• Right to withdraw consent (Art. 7(3) GDPR): you may withdraw any consent given at any time, with effect for the future.

To exercise your rights, please contact us at info@swissbaanchiang.com.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority — generally the authority of the EU member state in which you have your habitual residence.

12. Newsletter

We do not currently operate a newsletter.

13. Minors

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from minors without the consent of a parent or guardian. Should we become aware that such data has been collected, we will delete it without delay.

14. Changes to this Privacy Policy

We reserve the right to amend this privacy policy at any time to reflect changes in the law or in our services. The current version is always available on this page. We recommend that you review it periodically.

15. Data Protection Contact

For any questions relating to data protection, please contact us at any time:

Baan Chiang Hua Hin Co., Ltd.

Email: info@swissbaanchiang.com

Website: https://swissbaanchiang.com

16. Supplementary Provisions for Visitors from the United Kingdom (UK GDPR)

If you are accessing this website, enquiring about, or booking a stay from the United Kingdom, the following supplementary provisions apply in addition to the sections above.

16.1 Applicable Law

Alongside the EU GDPR, the processing of your personal data is also subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Wherever this policy refers to the “GDPR” or cites a GDPR article, the equivalent provision of the UK GDPR applies to you in the same way, unless expressly stated otherwise.

16.2 Your Rights Under the UK GDPR

You hold the same rights described in Section 11 above — access, rectification, erasure, restriction, portability, objection, and withdrawal of consent — under the UK GDPR. You can exercise these rights at any time by contacting us at info@swissbaanchiang.com.

16.3 International Data Transfer

As explained in Section 9, Swiss Baan Chiang is based in Thailand. Thailand is not covered by UK adequacy regulations. Where we transfer your personal data from the UK to Thailand, we rely on appropriate safeguards recognised under Article 46 of the UK GDPR — specifically the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. A copy of the relevant safeguard is available on request.

16.4 Right to Complain

If you are based in the United Kingdom, you have the right to lodge a complaint with the UK’s independent supervisory authority, without prejudice to any other administrative or judicial remedy:

Information Commissioner’s Office (ICO)

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom

ico.org.uk