Imprint

Last updated: June 2026

1. Data Controller

Tong-Bai Found­a­tion
Thailand

Mae Sapok 62/3 mu. 11
50360 Chi­ang Mai

E-Mail:

Phone:

+66 (0)861 93 03 77

 

2. General Information on Data Processing

We pro­cess per­son­al data con­fid­en­tially and in accord­ance with applic­able data pro­tec­tion laws, includ­ing the EU Gen­er­al Data Pro­tec­tion Reg­u­la­tion (GDPR), the Swiss Data Pro­tec­tion Act (FADP), and oth­er applic­able inter­na­tion­al pri­vacy regulations.

Per­son­al data is only pro­cessed for spe­cified pur­poses and to the extent neces­sary for provid­ing our services.

 

3. Hosting and Server Log Files

When you vis­it our web­site, tech­nic­al data is auto­mat­ic­ally col­lec­ted by the web serv­er and stored in serv­er log files.

• IP address
• Date and time of access
• Vis­ited page
• Refer­rer URL
• Browser and oper­at­ing system
• Inter­net ser­vice provider

 

This data is used for tech­nic­al secur­ity, sta­bil­ity, and optim­iz­a­tion of the website.

Leg­al basis: legit­im­ate interest or equi­val­ent leg­al basis under applic­able data pro­tec­tion laws.

Reten­tion peri­od: usu­ally up to 30 days unless longer stor­age is required for secur­ity reasons.

 

4. Contact Requests

If you con­tact us via email or con­tact form, your inform­a­tion will be pro­cessed to handle your request.

Pro­cessed data may include:

• Name
• Email address
• Phone num­ber (if provided)
• Mes­sage content

 

Data is used solely for pro­cessing inquir­ies and fol­low-up communication.

Leg­al basis: con­trac­tu­al neces­sity, pre-con­trac­tu­al meas­ures, or legit­im­ate interest depend­ing on the context.

 

5. Booking Requests

For book­ing inquir­ies, we may pro­cess the fol­low­ing data:

• Name
• Date of birth
• Con­tact details
• Spe­cial requests

 

Leg­al basis: per­form­ance of a con­tract or pre-con­trac­tu­al measures.

 

6. Newsletter

If you sub­scribe to our news­let­ter, we use your email address to send inform­a­tion­al updates.

Regis­tra­tion is car­ried out using a double opt-in pro­cess, includ­ing log­ging of consent.

Leg­al basis: con­sent. You may with­draw your con­sent at any time (e.g., via the unsub­scribe link).

 

7. Cookies

This web­site uses cookies.

• Strictly neces­sary cookies
• Option­al ana­lyt­ics and mar­ket­ing cook­ies (only with consent)

 

Cook­ies are used in com­pli­ance with applic­able leg­al requirements.

 

8. Web Analytics (e.g., Google Analytics)

We may use web ana­lyt­ics ser­vices to under­stand and improve web­site usage.

Data pro­cessed may include:

• IP address (anonym­ized or truncated)
• User beha­vi­or
• Page views
• Device and tech­nic­al information

 

Data may be trans­ferred to third coun­tries, includ­ing the United States.

Pro­cessing is based on con­sent where required by applic­able law.

 

9. Advertising / Conversion Tracking

We may use con­ver­sion track­ing tech­no­lo­gies to meas­ure the effect­ive­ness of advert­ising campaigns.

Pro­cessing is only car­ried out with con­sent where leg­ally required.

 

10. Geolocation / Country Detection

This web­site may use IP-based geo­loca­tion to estim­ate the user’s coun­try for con­tent adapt­a­tion purposes.

• Trun­cated IP address
• Coun­try / region

 

No pre­cise loc­a­tion track­ing is performed.

 

11. Data Sharing

We only share per­son­al data when neces­sary and leg­ally per­mit­ted, for example:

• Con­sent
• Con­tract performance
• Leg­al obligation
• Legit­im­ate interest

 

Pos­sible recip­i­ents include:

• Host­ing providers
• IT and email ser­vice providers
• Book­ing systems
• Pro­fes­sion­al advisors (leg­al, tax)

 

12. International Data Transfers

Per­son­al data may be pro­cessed glob­ally, includ­ing in coun­tries out­side the EU and Switzer­land, such as Thai­l­and and the United States.

Where data is trans­ferred inter­na­tion­ally, appro­pri­ate safe­guards are applied, such as:

• Stand­ard Con­trac­tu­al Clauses (SCCs)
• Adequacy decisions
• Oth­er leg­ally recog­nized safeguards

 

13. Data Retention

Per­son­al data is retained only as long as neces­sary for the pur­poses for which it was col­lec­ted or as required by law.

 

14. Your Rights

Depend­ing on applic­able data pro­tec­tion laws, you may have the fol­low­ing rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restric­tion of processing
• Right to data portability
• Right to object
• Right to with­draw consent

 

15. Data Security

We use appro­pri­ate tech­nic­al and organ­iz­a­tion­al meas­ures, includ­ing SSL/TLS encryp­tion, to pro­tect your data.

 

16. Updates to This Privacy Policy

This pri­vacy policy may be updated from time to time to reflect leg­al, tech­nic­al, or oper­a­tion­al changes.