EN
Book

This translation is provided for your convenience. Only the German version is legally binding.

Legal

Privacy policy

In accordance with the GDPR (EU) 2016/679 · Last updated: September 2026

1. Controller

The controller within the meaning of the GDPR for the processing of personal data on this website is:

Baan Chiang Hua Hin Co., Ltd.
14/1 Moo 4
Tambon Nong Phlap
Prachuap Khiri Khan
77110 Hua Hin
Thailand
E-mail: info@swissbaanchiang.com
Website: https://swissbaanchiang.com

2. General information

We take the protection of your personal data very seriously. This privacy policy informs you about which personal data we collect and which rights you have.

Our website can generally be used without providing personal data. Where personal data (e.g. name, e-mail address) is collected, this is done on a voluntary basis and only to the extent necessary for processing.

This privacy policy applies to the website swissbaanchiang.com and all associated subpages and language versions (DE / EN / TH).

3. Legal bases for processing

Where we obtain consent for processing operations involving personal data, Art. 6(1)(a) GDPR serves as the legal basis.

For processing to perform a contract (e.g. bookings), Art. 6(1)(b) GDPR is the legal basis.

For processing to fulfil a legal obligation, Art. 6(1)(c) GDPR applies.

To safeguard legitimate interests, we rely on Art. 6(1)(f) GDPR, provided that the interests of the data subject do not override them.

4. Data collection when visiting the website

4.1 Server log files

When you access our website, information is automatically stored in so-called server log files:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the file accessed
  • Website from which access is made (referrer URL)
  • Browser used and, where applicable, operating system
  • Name of the internet service provider

This data is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the trouble-free operation of the website). The data is deleted after 30 days at the latest.

4.2 Cookies

Our website uses only technically necessary cookies. Cookies are small text files that are stored on your device.

Language selection (pll_language) — stores the language version you selected (DE / EN / TH) so that the website is shown in your language on your next visit. Storage period: 1 year. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a working language selection). We do not use analytics or marketing cookies.

You can restrict or disable the use of cookies in your browser settings. Please note that disabling cookies may limit the functionality of the website.

4.3 Contact form and e-mail

If you contact us via the contact form or by e-mail, your details (name, e-mail address and any other information you provide voluntarily) are processed for the purpose of handling your enquiry. Details entered in the contact form are sent to us by e-mail and are not stored in a database on the website.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest). The data is deleted as soon as your enquiry has been fully processed and no statutory retention obligation applies.

5. Booking and contract processing

Bookings are made via our booking portal buchung.swissbaanchiang.com or on request via the contact form, by e-mail or via WhatsApp. When you book a stay, we collect the following data:

  • First and last name
  • E-mail address
  • Telephone number
  • Arrival and departure date
  • Number of guests
  • Payment information (processed by our payment service provider)
  • Special requests and messages

This data is used exclusively to process the booking, to communicate with you and to fulfil our contractual obligations.

Legal basis: Art. 6(1)(b) GDPR. Booking data is stored in accordance with the applicable tax retention periods (Thailand: 5 years).

The «Book» buttons on this website lead to our booking portal buchung.swissbaanchiang.com. Booking data is only collected there; the privacy information published on the booking portal applies in addition. Booking data is not passed on to third parties unless this is necessary to perform the contract (e.g. for payment processing).

6. Payment processing

Payments are processed by external payment service providers. We do not store any credit card data on our servers.

Payment service providers used: PayPal, Wise

The processing of your payment data is subject to the privacy policies of the respective payment service providers.

7. Integrated third-party services

7.1 Fonts

The fonts used on our website are stored locally on our server. When you open a page, no connection is made to servers of Google or any other font provider.

7.2 Google Maps

On our home page and the «Contact & directions» page we show our location with an embedded Google Maps map (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is only loaded when you scroll to it. Your browser then transmits in particular your IP address to Google; a transfer to the USA is possible. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in making our location easy to find). Google privacy policy: https://policies.google.com/privacy

7.3 Analytics tools

We do not use any analytics tools.

7.4 Social media links

Our website contains links to social networks. These are implemented as simple links (no embedded plugins), so no data is automatically transmitted to the respective platforms when the page is opened. You are only redirected to the external platform when you click the link.

7.5 WhatsApp

You can message us directly via the WhatsApp link. The link is not embedded: you are only redirected to WhatsApp (WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland) when you click it. If you contact us via WhatsApp, WhatsApp processes your phone number and messages in accordance with its own privacy policy; a transfer to the USA is possible. Legal basis: Art. 6(1)(b) or (f) GDPR. Alternatively, you can reach us at any time by e-mail or via the contact form.

7.6 YouTube

A YouTube video (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) is embedded on our home page. We use the privacy-enhanced mode (youtube-nocookie.com); the video is only loaded when you scroll to it. Your browser then transmits in particular your IP address to YouTube; only when you play the video can YouTube collect further data and set cookies. A transfer to the USA is possible. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in an appealing presentation of our resort). Google privacy policy: https://policies.google.com/privacy

8. Hosting

Hosting provider: Hostinger.com

Our web host processes data on our behalf on the basis of a data processing agreement (Art. 28 GDPR). The servers are located in: Germany

9. International data transfer

As Swiss Baan Chiang is based in Thailand, data may be transferred to a country outside the European Union. Thailand is currently not considered a country with an adequate level of protection recognised by the EU Commission.

We take appropriate safeguards in accordance with Art. 46 GDPR (in particular EU standard contractual clauses) to ensure an adequate level of protection. On request, we will provide you with a copy of these safeguards.

10. Storage period

We store personal data only for as long as is necessary for the respective purpose or as long as statutory retention obligations exist. In detail:

  • Server log files: a maximum of 30 days
  • Contact requests: until fully processed, then deleted
  • Booking data: 5 years (tax retention obligation in Thailand)
  • Language cookie: 1 year

11. Your rights as a data subject

Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR): You have the right to request information about the data stored about you at any time.
  • Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
  • Right to erasure (Art. 17 GDPR): Under certain conditions, you can request the deletion of your data (right to be forgotten).
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, machine-readable format.
  • Right to object (Art. 21 GDPR): You can object to the processing of your data where we rely on a legitimate interest.
  • Right to withdraw consent (Art. 7(3) GDPR): You can withdraw any consent given at any time with effect for the future.

To exercise your rights, please contact: info@swissbaanchiang.com

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. This is usually the authority of the EU member state in which you have your habitual residence.

12. Newsletter

We do not currently operate a newsletter.

13. Minors

Our website is not aimed at children under 16. We do not knowingly collect personal data from minors without the consent of their legal guardians. If we find that such data has been collected, we delete it immediately.

14. Changes to this privacy policy

We reserve the right to amend this privacy policy at any time in order to adapt it to changes in the law or to changes in our services. The current version is always available on this page. We recommend visiting this page regularly.

15. Privacy contact

If you have any questions about data protection, please feel free to contact us at any time:

Baan Chiang Hua Hin Co., Ltd.
E-mail: info@swissbaanchiang.com
Website: https://swissbaanchiang.com