Privacy Policy
This Privacy Policy ("Privacy Policy") applies to users of the Tourism Authority of Thailand's websites and any other services that we provide, including through our websites and global Tourist Information Centers ("our Services"). We respect the privacy of every individual who visits our websites, contacts our Tourist Information Centers, or uses our Services, and we are committed to ensuring that everyone enjoys a safe online experience.
Purpose of this Privacy Policy
This Privacy Policy describes our practices with respect to any personal data we may collect from you, or personal data we may receive about you from third parties, as well as the purposes for which we process your personal data. It also explains your rights in relation to our processing of your personal data. For the purposes of this Privacy Policy, "personal data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to a name, identification number, location data, an online identifier (such as an IP address), or to one or more factors specific to that person's physical, physiological, genetic, mental, economic, cultural, or social identity. This Privacy Policy serves to inform you of the categories of personal data about you that we process, and how you may request deletion, rectification, transfer, and/or access to such data. The purpose of this Privacy Policy is to provide you with sufficient information to make informed decisions when using our websites and Services. Please take the time to read and understand this Privacy Policy carefully, together with our Terms of Use and Cookie Policy. This Privacy Policy applies solely to the use of your personal data obtained by us, whether directly from you or from third parties. It does not apply to personal data collected by third parties arising from your communications with them, or from your use of their products or services (for example, when you follow a link to a third-party website that we do not control, or when you purchase goods or services from such third parties).
About Us
Our websites and Services are operated by the Tourism Authority of Thailand ("TAT" or "we"). TAT acts as the data controller and is responsible for your personal data. TAT is a legal entity established under the Tourism Authority of Thailand Act B.E. 2522 (1979), with its headquarters located at: 1600 New Phetchaburi Road, Makkasan Sub-district, Ratchathewi District, Bangkok 10400, Thailand. TAT also operates Tourist Information Centers in: London, Frankfurt, Paris, Rome, Stockholm, Moscow, Prague, New York, Los Angeles, Toronto, Sydney, Kuala Lumpur, Singapore, Jakarta, Hong Kong, Beijing, Chengdu, Shanghai, Guangzhou, Kunming, Taipei, Tokyo, Osaka, Fukuoka, Seoul, New Delhi, Mumbai, Ho Chi Minh City, and Dubai.
Contact Us
If you have any questions about this Privacy Policy, or wish to exercise your rights under this Privacy Policy, please use the contact form available on our website. You may also contact us through the following channels:
- Email: center@tat.or.th
- Telephone: +66 02 250 5500
- Facsimile: +66 02 250 5511
- Postal Address: Tourism Authority of Thailand 1600 New Phetchaburi Road, Makkasan Sub-district, Ratchathewi District, Bangkok 10400, Thailand
Our Operations in Collecting and Receiving Personal Data
We collect and receive personal data through various methods as follows:
You may provide personal data to us directly. Examples of such cases include when you contact us to inquire about information, fill out forms on our website or at our Tourist Information Centers, subscribe to marketing communications, or provide feedback to us.
When you access and use our website, we automatically collect certain technical information about your device, behavior, and website usage patterns. We collect such personal data using cookies and similar technologies (please see the "Our Use of Cookies and Similar Technologies" section below).
Sometimes, we may receive personal data about you from third parties. Such third parties may include data analytics providers, payment service providers, hotel and transportation service providers, and third parties who provide technical services to us to enable us to provide our website and services.
People We Collect Data From
We collect and process data from the following individuals:
Visitors to Our Website
If you visit our website, register as a member of our website, contact us to inquire about information through our website, submit complaints through our website, or use any of our services on our website, we will collect and process your personal data in connection with the communication between you and us and our website.
Visitors to Tourist Information Centers
If you contact one of our Tourist Information Centers, we will process personal data about you that you voluntarily provide to us in connection with your purpose of contact and any inquiries you may have. For example, you may voluntarily provide information about yourself when you ask us to help you find accommodation and transportation that suits your needs.
Event Participants
If you participate in our events, we will process personal data about you in connection with your event participation. For example, we may ask you to complete questionnaires, feedback forms, or other documents related to that event.
Contractors (including Subcontractors)
If you are a contractor working on your own behalf to provide services to us, we will collect and process your personal data in connection with our receipt of products or services from you, including our provision of related services to others. This may include personal data that appears as part of emails or telephone communications, or recorded in other documents related to the ordering of products or provision of services.
Employees of Our Business Partners and Contractors
Legal entities and other organizations do not own personal data, but any individuals working for such legal entities and organizations do own personal data. If you work for or represent an organization that is one of our business partners or contractors and contact us as a representative of that organization, whether through our website or otherwise, we will collect and process your personal data in connection with our receipt of products or services or our provision of products or services, including the overall relationship with your organization.
Job Applicants
If you apply for a job with TAT (whether in Thailand or other countries where we operate), whether through our website or otherwise, we will collect and process your personal data in connection with your job application.
Personal Data We Collect and How We Use Data
The main reasons for collecting personal data from you are: (1) to promote tourism in Thailand and to provide our services related to this purpose; (2) to verify your identity (where relevant); (3) to help us improve our websites and services and assist us in developing and marketing new products and services; (4) to process requests on our websites; (5) to investigate and resolve doubts or disputes; (6) to comply with laws, court orders, other legal processes, and requirements of relevant regulatory authorities; (7) to comply with contracts and agreements between us and you; (8) to protect the rights, property, and safety of us and third parties, including users of our websites and services; (9) to provide support for our services; (10) to conduct recruitment activities; and (11) for other operations as required or permitted by law. In particular, we use your personal data for the following purposes:
For Use in Our Service Operations
Use of Our Website, Tourist Information Centers, and Services
We will collect and maintain personal data that you provide to us while you use our website services, our Tourist Information Centers, and our services offered on our website or at our Tourist Information Centers. We may collect and process your personal data whether you contact us on your own behalf or as a representative of any organization. The personal data we process may include your name and contact information (such as email address, postal address, and telephone number), as well as your payment information (if any). We will process such data to complete our services as requested by you, to maintain user databases, and to record the use of our services. If you contact our Tourist Information Centers, we will process information about you that you voluntarily provide to us in connection with your purpose of contact and any inquiries you may have. Some services we offer are subject to specific terms and conditions that will apply to you if you use such services. If you click on social media links on our websites or interact with our social media accounts (such as Facebook or Instagram), we may collect information regarding such interactions or about your social media account. Furthermore, our Tourist Information Centers employ security measures, including closed-circuit television (CCTV) cameras and access control systems. Notices are displayed to indicate the use of CCTV. CCTV footage is stored securely and accessed only when necessary (e.g., for incident investigation). Ordinarily, CCTV recordings are automatically overwritten after a short period, unless they are required for fact-finding purposes (e.g., in cases of theft). We may also request visitors to our Tourist Information Centers to sign in. Such visitor logs are retained for a short period only, stored securely, and accessed solely when necessary (e.g., for incident investigation).
Registration and Access to Your Member Account on Our Website
The main website of the Tourism Authority of Thailand (TAT) allows users to register for a member account in order to access additional Services, including member-exclusive offers. All applicants are required to complete a registration form, providing a username, email address, and password, as well as [please insert any other personal data, if applicable], along with information about future travel plans and particular travel preferences.
We use your personal data to process your membership application. Once registered, we process your username and password to identify you when signing in to your account and accessing secure areas of our website. We also process your login data to manage your account and to communicate with you regarding your account.
Access to and use of our website, including member-only secure areas, is always subject to our Terms of Use.
Requests for Use of Photographs from the TAT News Website
Our TAT News website provides a "Photo Request" service, which permits accredited members of traditional and online media, as well as freelance writers, to request access to our high-resolution image library of Thailand's destinations, events, and infrastructure. If you request photographs from us, you will be asked to complete a request form providing your name, job title, organization name (if applicable), email address, postal address, mobile phone number and home/office phone number, together with other information relevant to your request. We process such data for the purposes of handling and responding to your request.
Your Contributions to the TAT News Website
If you write articles or blogs for us, or otherwise contribute to publications distributed to members and/or published on our websites or in other media, we may use your personal data (such as your name and organization) to provide proper attribution for your work. If you submit photographs or other images with your article or blog, we may publish one or more of those images alongside your contribution.
Participation in TAT Events
From time to time, we organize and host product and service exhibitions, as well as other events, to promote Thailand as a tourism destination. We may process your name and contact details (including email address, postal address, and telephone number) in order to communicate with you about such events, where you have specifically requested such information from us, or where we are otherwise legally permitted to provide such information.
If you attend any of our events, we may use your personal data to record your attendance and for record-keeping purposes. We may also collect and process information about your dietary requirements, if applicable. Additionally, you may appear in photographs taken at our events. Such photographs may appear in member publications and/or be published on our websites or other media.
Legal Basis for Processing
The use of your personal data is necessary for the performance of a contract between you and us, or is otherwise justified on the basis of our legitimate interests, or those of a third party, in ensuring that we are able to deliver our Services effectively and efficiently as requested by you and others.
Where we request your specific consent to use photographs, statements, testimonials, or other content, we will process such personal data on the basis of your explicit consent.
General Inquiries
Our website includes a "Contact Us" page that invites you to submit general inquiries regarding our website, our organization, and our Services via email. In addition, we also accept inquiries by email, telephone, facsimile, and postal mail, as detailed in the "Contact Us" section above.
You may also submit specific inquiries relating to hotels, transportation, or other relevant matters by using the "Send Inquiry" option available on the relevant pages of our website.
When you submit an inquiry, we will collect and process your name, your contact information (including email address and/or telephone number), your organization name, and any other personal data you voluntarily provide to us in connection with your inquiry. We use this data to manage and respond to your inquiry or request. We may also share your personal data with third-party hotels or other relevant businesses, where applicable, so that such third parties can assist in responding to your inquiry. For further details regarding how we share your personal data, please see the section entitled "Sharing of Personal Data" below.
Legal Basis for Processing
The use of your personal data in this context is based on our legitimate interests, namely to enable us to assist you with your inquiries and to provide you with quality customer service.
Surveys and Feedback Forms
From time to time, we may invite you to provide feedback on our organization, our website, our Tourist Information Centers, and our Services through online surveys. We may collect and process your name, your contact information (including email address, postal address, and telephone number, as applicable), and any other personal data you voluntarily provide to us in such surveys or feedback forms. We use this information to improve the quality of service provided by our staff, to monitor and enhance the quality of our website, Tourist Information Centers, and Services, and to assist in the development and selection of future products and services.
We also provide a complaints procedure accessible through the "Complaints" page. When you submit a complaint using our complaint form, we may request your name, email address, country, and other information relevant to your complaint. We use this information to investigate your complaint and to attempt to resolve the matter in the most appropriate manner.
Legal Basis for Processing
The use of your personal data provided in any feedback or complaint form is based on our legitimate interests for the purposes outlined above.
Prize Draws, Competitions, and Other Promotional Activities
From time to time, we may organize prize draws, competitions, and other promotional activities through our website, at our Tourist Information Centers, and/or on our social media accounts. For the purposes of managing such promotional activities, we may process your name, your contact information (including email address, postal address, and/or telephone number), your social media account details (where applicable), your payment information (where applicable), and any other personal data you voluntarily provide to us in connection with your participation in the promotional activity. Such promotional activities may be subject to specific terms and conditions, which you may be required to accept in order to participate.
Legal Basis for Processing
The use of your personal data in this context is necessary for the performance of a contract between you and us (for example, the specific terms and conditions governing the promotional activity to which you may be asked to agree), or is based on our legitimate interests in enabling you to participate in prize draws, competitions, and other promotional activities.
Insights and Data Analytics
We analyze details of your interactions together with other personal data relating to you that we observe from your use of our websites, [our email communications], and/or our Services.
Where required by law, and where we have obtained your consent, we use cookies, log files, and other technologies to collect personal data from the computer hardware, software, and mobile devices you use to access our websites. This data may include:
- IP address – to monitor and track traffic and usage volumes on our websites;
- Session ID – to track usage statistics on our websites; and
- Information on your personal and professional interests, demographic segments, experience of our Services, and contact preferences.
Our websites [and emails] may use cookies, web beacons, and pixel tags ("Tags"). Tags allow us to count visitors to specific website pages [or track email opens] and collect other aggregate information. When you click on emails containing Tags, your contact information may be cross-referenced with [the original email] and/or the related Tags.
[We use "click-through URLs" in some email communications to link you to websites managed by us or on our behalf. We may track click-through statistics to measure specific topic interest and the effectiveness of such communications.]
This information is used to generate insights into visitor behavior on our websites. With your consent, we may also use your location data for analytics and insights purposes.
The use of such information allows us to measure the effectiveness of our content and user behavior on our websites and Services, enabling us to identify which pages attract the most visitors, which areas are most engaging, and which features or functions users most wish to see.
We use such information to assist in the development and selection of future products and services, including website design, and to remember your particular settings.
We also use such information for marketing purposes (for further details, please see the "Marketing Activities" section below).
Legal Basis for Processing
Where your personal data is in a form that cannot be used to identify you, we do not require a legal basis for using that data, as such data is not personal data subject to data protection laws. However, the collection and use of such anonymized personal data may be subject to other laws that require your consent. For further details, please see our Cookie Policy.
Where your personal data is not in an anonymized form, the use of your personal data is based on our legitimate interests in using personal data in ways that allow us to provide quality services to you and others.
We will use your location data for analytics and insights purposes only where we have obtained your consent.
Marketing Activities
Direct Mail Marketing
We use names and postal addresses to send direct mail marketing communications to you (or the organization you represent). Our direct mail marketing communications include press releases and information promoting Thailand as a tourism destination, as well as general information about our organization, our websites, our Tourist Information Centers, our Services, and events and promotional activities that we organize from time to time.
Our direct mail marketing includes both personalized and non-personalized direct mail marketing. Personalized marketing is marketing that has been tailored specifically to you. For example, personalized direct mail marketing will offer services, events, offers, and/or promotional activities that we think are likely to be of most interest to you. Non-personalized marketing is marketing about our general services, events, offers, and/or promotional activities that is not tailored to any particular individual.
Where we send personalized direct mail marketing to you, we will use information about you that we observe from your use of our websites, [our email communications to you], our Tourist Information Centers, and/or our Services to select personalized marketing messages to send to you. For further details regarding the personal data collected and how we collect it, please see the "Insights and Data Analytics" section above.
Legal Basis for Processing
Where your personal data is in a form that cannot be used to identify you, we do not require a legal basis for using that data, as such data is not personal data subject to data protection laws. However, the collection and use of such anonymized personal data may be subject to other laws that require your consent. For further details, please see our Cookie Policy.
Where your personal data is not in an anonymized form (such as your postal address), the use of your personal data is based on our legitimate interests in using personal data for direct mail marketing purposes.
Email and SMS/MMS Marketing
We use names and email addresses to send email marketing communications to you (or the organization you represent). We use your mobile telephone number to send SMS/MMS marketing communications to you. Our email and SMS/MMS marketing communications include press releases and information promoting Thailand as a tourism destination, as well as general information about our organization, our websites, our Tourist Information Centers, our Services, and events and promotional activities that we organize from time to time. In addition, members can subscribe to email notifications about special offers.
Our email and SMS/MMS marketing includes both personalized and non-personalized email marketing. Personalized marketing is marketing that has been tailored specifically to you. For example, personalized email marketing will offer services, events, offers, and/or promotional activities that we think are likely to be of most interest to you. Non-personalized marketing is marketing about our general services, events, offers, and/or promotional activities that is not tailored to any particular individual.
Where we send personalized email or SMS/MMS marketing to you, we will use information about you that we observe from your use of our websites, [our email communications to you], our Tourist Information Centers, and/or our Services to select personalized marketing messages to send to you. For further details regarding the personal data collected and how we collect it, please see the "Insights and Data Analytics" section.
Legal Basis for Processing
We will only send email marketing communications where you have given your consent to receive such communications or where we have another legal right to send such communications to you.
Social Media Remarketing
We will use information about you that we observe from your use of our websites, [our email communications to you], and/or your use of our Services to provide personalized advertising to you through social media channels operated by Facebook and/or Google, where you are a registered user of such services. For further details regarding the personal data collected and how we collect it, please see the "Insights and Data Analytics" section above. We conduct remarketing using Facebook Customer
Audiences and/or Google Customer March respectively. These activities will be carried out according to the privacy settings you have selected for those services.
Legal Basis for Processing
If you interact with our social media anonymously
If you interact with our social media with identification
Social media marketing requires your consent
Social Media Insights
Where you are a registered user of Facebook or Google services, we will use your email address in encrypted form to enable Facebook and Google to find other registered users of their services who have similar interests to you based on:
- Information about you that we observe from your use of our websites, [our email communications to you] and/or your use of our Services (for further details regarding the personal data collected and how we collect it, please see the "Insights and Data Analytics" section above), and
- Information about you held by Facebook and/or Google
We use social media insights using Facebook Lookalike Audiences and/or Google Similar Audiences respectively. These activities will be carried out according to the privacy settings you have selected for those services.
Legal Basis for Processing
Where your personal data is in a form that cannot be used to identify you, we do not require a legal basis for using that data, as such data is not personal data subject to data protection laws. However, the collection and use of such anonymized personal data may be subject to other laws that require your consent. For further details, please see our Cookie Policy.
Where your personal data is not in an anonymized form, the use of your personal data is based on our legitimate interests in using personal data for marketing purposes.
Recruitment
Processing personal data for recruitment purposes
Data we process for recruitment
Personal data related to job applications
Equal and fair recruitment
Legal Basis for Processing
The use of your personal data in connection with recruitment will be in accordance with steps you have requested to enter into a contract we may have with you or based on our legitimate interests in using personal data in ways that enable us to make the best recruitment decisions.
Sensitive personal data in recruitment
Contractor Services
Processing data for contractors
Personal data of contractors
Legal Basis for Processing
Legal basis for processing contractor data
Business Management and Legal Compliance
We will use your personal data for business management and legal compliance
- Compliance with laws and regulations
- Protection of our rights and property
- Sharing data with third parties
- Changes in business operations
- Legal basis for processing
Legal basis for business management
Sensitive personal data in business management
Notification regarding data provision
If you do not provide data
If you do not provide necessary data, we may not be able to provide full services
How We Obtain Your Consent
Where the use of personal data requires consent, you may provide consent at the time we collect your personal data as set out in usage instructions, by informing us using the contact details set out in the "Contact Us" section above.
Our Use of Cookies and Similar Technologies
Our websites may use cookies, web beacons, pixel tags, computer traffic logs, and other technologies. For details about cookies and other similar technologies we use, our purposes for using them, and how to manage, block, or delete such technologies, please see our Cookie Policy.
Links and Third Party Services
Our websites contain links to third-party websites and services. This Privacy Policy does not apply when you use links to connect from our websites to other websites or when you request services from third parties.
Any visits to and interactions on any other websites or agreements with third-party service providers will be subject to the rules and policies of those third-party websites or service providers. For example, our websites invite you to connect with us on social media platforms such as Facebook and Instagram. When you click links leading to such platforms, you will be transferred from our websites to those platforms, and the privacy policies (including other terms and conditions) of those platforms will apply to you.
We are not responsible for examining, controlling, or endorsing the privacy practices of any third parties.
We recommend that you familiarize yourself with the privacy practices of every website you visit or third-party service provider you contact, and if you have questions about the privacy policies and practices of websites or service providers, please contact those websites or service providers for more information.
This Privacy Policy applies only to personal data we collect through our websites, our services, and/or in connection with our business operations, and does not apply to third-party websites and third-party service providers.
Sharing of Personal Data
We will only share personal data with others when we can legally do so. When we share personal data with others, we will establish contractual agreements and security mechanisms to protect the shared personal data and to comply with data protection standards and obligations, confidentiality and security.
In processing your personal data, we may need to share such data with third parties as follows:
Third-party organizations providing application/function services, data processing, or information technology (IT) services
We will share personal data with third parties who support our services and help provide, maintain and manage IT systems within the organization.Such third parties may include IT service providers, cloud system software, identity control systems, website hosting and management, data analytics, data backup, security and data storage.Servers that support and facilitate cloud system operations are located in secure data centers around the world and personal data may be stored in any of these centers.We may share your personal data with third-party service providers who assist us in analytics, which will be described in our Cookie Policy.
Hotel operators, transportation service providers, and other tourism-related businesses
When you send inquiries about hotel operators or transportation service providers, we will share your inquiries (including personal data you voluntarily provide to us) with such third parties so they can provide information and assistance as you request.
Payment service providers and banks
We will share personal data with third parties who assist us in processing payments and refunds.
Business partners in events and contractors
When we organize events, we will share your personal data with third-party service providers who assist us in operating and managing such events.If we organize events jointly with other organizations, we will share your personal data with such organizations for use in cases related to that event.
Email marketing and third-party customer relationship management specialists
We will share personal data with specialist contractors who assist us in managing marketing databases and sending marketing communications and member communications via email.
Postal service contractors and delivery service providers
We will share personal data with contractors who assist us in sending marketing communications and member communications via post.
Third-party organizations that assist us in promotional activities
We will share personal data with specialist contractors who assist us in organizing raffles, competitions and other promotional activities.
Recruitment agents and related organizations
We will share personal data with external recruiters, third-party service providers who conduct background checks on our behalf and other legal entities within our group of companies.
Auditors, lawyers, accountants and other specialist advisors
We will share personal data with professional service companies who advise and assist us regarding the proper legal and efficient management of our organization, including any disputes we may be involved in.
Law enforcement agencies or government agencies and regulatory bodies
We will share personal data with law enforcement agencies or government agencies and other regulatory bodies or any other third parties as required by applicable laws and regulations.
Sharing data with third parties
We may occasionally receive requests from authorized third parties to disclose personal data, such as in verifying whether we comply with applicable laws and regulations, criminal investigations, or to establish, exercise, or defend legal rights.We will comply with requests for such personal data only when we can legally do so under applicable laws and regulations.
Sharing of data with third parties is not limited to the cases mentioned above, as there may be other cases that require us to share personal data with third parties for the provision of our website, our tourist information center services, and our services.
Transfer of data outside the European Economic Area ("EEA")
We are located in Thailand, so when you provide personal data to us, whether through the use of our website, our international tourist service centers, and branch offices or headquarters in Thailand, you acknowledge that your data will be transferred outside the EEA to Thailand where we and our contractors will store and process it for the purposes set out in this privacy policy.
We will transfer personal data to countries outside the EEA when necessary for the provision of our website and tourist information center services and our services.
Countries outside the EEA do not have personal data protection laws equivalent to EEA laws. In particular, countries outside the EEA may not provide the same level of protection for your personal data, including may not provide the same rights regarding your personal data, and may not have personal data protection regulatory bodies to assist you if you have concerns about the processing of your personal data. However, in transferring your personal data outside the EEA, we will comply with laws and regulations regarding your personal data, including legal bases for transferring personal data and providing appropriate safeguards to ensure adequate protection for personal data.
We will take appropriate steps to ensure the security of personal data in accordance with applicable personal data protection laws.
When your personal data is transferred outside the EEA, we will take steps to ensure that we transfer data with legal basis support. Our legal basis may be consent (when you provide personal data to us, we may request your consent to transfer your personal data outside the EEA) or implementation of one of the safeguards.
Adequacy Decision
We will transfer your personal data to countries that the European Commission considers to provide adequate protection for personal data. For more details, please see https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en
Standard Contracts
When using services from certain service providers, we may use specific contract forms approved by the European Commission that provide the same level of personal data protection as European protection. For more details, please see https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en
EU-U.S. Privacy Shield Framework
In cases where we have business partners or contractors located in the United States, we may transfer personal data to such business partners or contractors if such business partners or contractors are under the Privacy Shield framework, which requires such business partners or contractors to provide similar levels of protection for personal data shared between the European Union and the United States. For more details, please see https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacy-shield_en
Please contact us if you would like more information about the specific mechanisms we use to transfer your personal data outside the EEA.
How We Store and Retain Your Personal Data
For personal data that we process in connection with our Services, we will retain personal data related to our Services for 6 years from the date such services were provided. To comply with obligations under the European Union General Data Protection Regulation (EU General Data Protection Regulation) (or similar laws around the world), we may destroy such data files without prior notice or without any liability.
For any other personal data that we process, we will retain relevant personal data for 3 years from the date of last contact with the relevant person. To comply with obligations under the European Union General Data Protection Regulation (EU General Data Protection Regulation) (or similar laws around the world), we may destroy such data files without prior notice or without any liability.
If any personal data is used only for a short period (such as for specific events or marketing campaigns, or in recruitment), we may delete such data when that period ends.
If you choose not to receive marketing communications from us, we will retain that personal data in a suppression list indefinitely so that we know not to send you marketing communications in the future.
Confidentiality and Security of Your Personal Data
We are committed to keeping the personal data you provide secure and will use appropriate care to protect your personal data from damage, misuse, or alteration.
We have policies, rules, and technical security measures in place to protect personal data under our control from:
- Unauthorized access
- Improper use or disclosure
- Unauthorized modification, and
- Improper destruction or accidental loss
All of our employees and data processors (i.e., persons who process your personal data on our behalf for the purposes stated above) who have access to and are involved in the processing of personal data are required to maintain the confidentiality of personal data of all users of our websites and our services.
Personal Data of Minors
Our websites and products and services are not specifically intended to serve minors as a target group. However, due to the nature of our organization, products, and services, we may occasionally collect and process personal data relating to persons under 16 years of age. In such cases, we will comply with laws and regulations relating to the processing of personal data of minors.
However, if you are under 16 years of age, you must obtain consent from your legal representative or guardian before using our website services and products and services. If you are a guardian, please supervise the minors under your care in using our website services and products and services.
How to Access Information and Your Rights
You have the following rights regarding your personal data that we hold:
Right of Access
If you request, we will confirm whether or not we continue to process your personal data, and if we process your personal data, we will provide you with a copy of the personal data (along with other details). If you require additional copies, we may charge a reasonable fee for providing such additional copies.
Right to Rectification
If your personal data that we hold is inaccurate or incomplete, you have the right to request that we correct such data. If we have shared your personal data with others, we will inform such persons of the correction to the extent possible. If you request, we will inform you of the persons with whom we have shared your personal data so that you can contact such persons directly if such case is feasible and lawful.
Right to Erasure
You may request that we delete or remove your personal data in certain cases, such as when we no longer need to use such data or you have withdrawn your consent (if any). If we have shared your personal data with others, where possible we will inform such persons of the deletion of such data. If you request, we will inform you of the persons with whom we have shared your personal data so that you can contact such persons directly if such case is feasible and lawful.
Right to Restrict Processing
You may request that we suspend or restrict the processing of your personal data in certain cases, such as when you dispute the accuracy of such personal data or you object to the processing of such data. However, objection will not result in us having to suspend the retention of your personal data. We will notify you before lifting any restrictions. If we have shared your personal data with others, we will notify such persons of such restrictions where we are able to do so. If you request, we will inform you of the persons with whom we have shared your personal data so that you can contact such persons directly if such case is feasible and lawful.
Right to Data Portability
In certain cases, you have the right to request to receive your personal data that you have provided to us (in a structured, commonly used, and machine-readable format) for use in other cases, or to request that we transfer it to a third party of your choice.
Right to Object
You may request that we stop processing your personal data, and we will do so if we:
- Rely on our legitimate interests or those of others in processing your personal data, unless we can demonstrate other compelling legal grounds for processing, or
- Process your personal data for direct marketing purposes
- Rights regarding automated decision-making and profiling. For more information, please see here.
You have the right not to be subject to automated decision-making, including profiling, if such decision has legal effects or significantly affects you in a similar manner, unless such profiling is necessary for entering into or performing a contract between you and us.
Right to Withdraw Consent
If we rely on your consent (or explicit consent) as the legal basis for processing your personal data, you have the right to withdraw your consent at any time. You may exercise your right to withdraw consent by contacting us using the details provided in the "Contact Us" section above or by using our other opt-out mechanisms, such as unsubscribe links in emails.
Right to Lodge a Complaint with a Supervisory Authority
If you have any concerns about our privacy practices, including how we handle personal data, please contact us using the details provided in the "Contact Us" section above. You may also report any issues or concerns to your national supervisory authority. You can find contact details for all European Union supervisory authorities at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm
Changes to Privacy Policy
We may make changes to this Privacy Policy from time to time to ensure that you are always aware of how we use your personal data. We will update this Privacy Policy from time to time to reflect changes in how we use your personal data. We may make any changes necessary to comply with applicable laws or regulatory requirements. We will notify you of any significant changes by email. However, we recommend that you check this Privacy Policy periodically to stay informed about how we use your personal data.