Privacy Policy / Privacy and Cookies Statement
Effective Date: February 20, 2025
We appreciate your visit to our blog, “Thailand Legal Guys.”
1. Introduction
We are based in Bangkok, Thailand, and as such, only Thai data protection laws apply to our services. The GDPR does not directly apply to us. This is because data processing on this blog is not conducted within the activities of an establishment of a controller or processor within the EU, regardless of whether the processing takes place in the EU (see Art. 3(1) GDPR).
However, as we highly value the protection of our website visitors’ personal data, we aim to provide transparency by informing you about data processing practices on our blog in accordance with GDPR guidelines, without acknowledging any legal obligation.
Below, you will find details on what personal data we collect, for what purposes, and what rights you may have under the GDPR. Additionally, we will outline who to contact if you have any questions.
We strive to present this privacy policy in an understandable manner. If anything is unclear or if you have suggestions or questions, please let us know.
This privacy policy applies to all pages available at www.thailandlegalguys.com. It does not apply to third-party websites linked from our site.
2. Data Controller
The responsible entity for processing your personal data when visiting this website is: Andreas C. Richter
3. Data Protection Officer
We have not appointed a Data Protection Officer for the operation of this blog. For any inquiries, please contact Mr. Richter directly via the contact form provided on our website.
4. Collection of Website Usage Data and Log Files
Each time you visit our website, we automatically collect certain data transmitted by your browser, including:
- IP address of the requesting computer
- Date and time of the request
- Filename of the requested page
- Access status (file transferred, file not found, etc.)
- Amount of data transferred
- Referring page
- Browser name, application language, and version
- Operating system used
This data is stored in log files and is necessary to ensure the functionality and security of our blog (e.g., for investigating misuse or fraud) and to improve user experience based on visitor behavior. These log files are stored for seven days before being anonymized and archived.
Legal basis under GDPR (if applicable): Art. 6(1)(f) GDPR.
5. Interactive Features of Our Blog
Our blog offers various ways to interact with us, such as through contact forms and the comment function.
5.1 Contact Forms
Information you provide (e.g., name, contact details, inquiries) is encrypted and used solely for communication and responding to your requests. Data is retained as long as necessary for these purposes.
Legal basis under GDPR (if applicable): Art. 6(1)(b) GDPR (contract-related inquiries) or Art. 6(1)(f) GDPR (legitimate interest in processing inquiries).
5.2 Comment Function
When you leave a comment, we store your provided data, IP address, and user-agent string (for spam detection). The IP address is stored to prevent misuse. Comments remain on our site until removed upon user request or for legal reasons.
Additionally, an anonymized string (hash) of your email address may be sent to the Gravatar service to check if you use it. The Gravatar privacy policy can be found at https://automattic.com/privacy/. Once your comment is approved, your profile picture is publicly visible alongside your comment.
Legal basis under GDPR (if applicable): Art. 6(1)(b) GDPR (contract-related inquiries) or Art. 6(1)(f) GDPR (legitimate interest in handling inquiries and preventing misuse).
6. Marketing
6.1 Newsletter
You may subscribe to our newsletter to receive updates on new blog posts and relevant content. We use a double-opt-in process, meaning you will receive an email confirmation link to verify your subscription. If confirmed, we store your email, registration timestamp, and IP address until you unsubscribe. You may unsubscribe at any time using the provided link in each email or by contacting us directly.
Legal basis: Art. 6(1)(a) GDPR (consent).
7. Cookies, Local Storage, and YouTube
7.1 Cookies
We use cookies to ensure website functionality, enhance user experience, and optimize services. Cookies are small text files stored on your device, either temporarily (session cookies) or permanently (persistent cookies). Most browsers accept cookies by default, but you can adjust your settings to block them.
7.1.1 Necessary Cookies
These cookies are essential for website functionality. Legal basis: Art. 6(1)(f) GDPR.
7.1.2 Analytics Cookies (Matomo)
These cookies help us analyze visitor behavior to improve our website. Analytics cookies are only used if you consent by selecting “Accept All Cookies.” Legal basis: Art. 6(1)(a) GDPR (consent).
| Name | Anbieter | Zweck | Cookie-Name | Lebensdauer |
| Matomo Besucher-ID | Eigentümer der Webseite | Speichert eine dem Besucher zugewiesene pseudonymisierte Besucher-ID. Darüber kann erkannt werden, ob Besucher mehrfach unsere Webseite besuchen. | _pk_id* | 13 Monate ab letztem Zugriff |
| Matomo Herkunftscookie | Eigentümer der Webseite | Speichert, von wo der Besucher auf unsere Webseite kam. | _pk_ref* | 6 Monate ab letztem Zugriff |
| Matomo Sitzungscookie | Eigentümer der Webseite | Speichert kurzfristige Informationen, um die Aktivitäten des Besuchers auf unserer Webseite der Besucher-ID zuordnen zu können. | _pk_ses*, pk_testcookie | 30 min |
7.2 Local Storage
We use local storage in your browser to enhance user experience (e.g., remembering dismissed banners). Data remains stored until you manually clear your browser cache. Legal basis: Art. 6(1)(f) GDPR.
7.3 YouTube Videos
We may embed YouTube videos in the future, using a two-click solution to prevent Google from collecting data until you explicitly consent. Videos are embedded via youtube-nocookies.com to avoid storing YouTube cookies.
The videos are stored on www.YouTube.com, but are played via our website. We use a two-click solution for the integration of YouTube, through which Google only learns of your IP address and your access to a video if you have previously clicked the consent button to view a video. If you click the button while you are logged into Google at the same time, Google can assign your use to your Google user account.
Your consent to the use of YouTube is stored by means of a cookie in your browser (see section Use of cookies and local storage).
We embed YouTube videos from the site youtube-nocookies.com so that no cookies from YouTube are stored in your browser.
The data collected by Google may be transferred by Google to countries outside the EU, in particular the USA. We have no knowledge of and no influence on the possible collection and use of your data by Google. You can find more information in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy/.
You can change the decision as to whether videos are loaded on the site at any time.
Legal basis: Art. 6(1)(a) GDPR (consent).
8. Website Analytics
We use Matomo (formerly Piwik), an open-source analytics platform, hosted on our own servers to track visitor behavior. IP addresses are truncated to anonymize user data.
If you accept all cookies, Matomo assigns a pseudonymous visitor ID stored in cookies. If you allow only necessary cookies, Matomo generates a temporary configuration ID based on browser settings, deleted after 30 minutes of inactivity. You can opt out of analytics at any time.
Our website uses Matomo (formerly Piwik), an open source analysis platform from InnoCraft Ltd, 150 Willis St, 6011, Wellington, New Zealand. The analysis platform is operated on servers of Stadtwerke Potsdam GmbH. The data collected in connection with Matomo is not passed on to third parties.
When you visit our website, your data (see section 3) is transmitted to our server in Matomo. Your IP address is shortened by two bits in Matomo so that we can no longer identify you as a visitor to our website.
If you select “Accept all cookies” in the data protection settings (cookie banner), Matomo will store cookies in your computer’s browser in order to be able to assign your visit to a pseudonymized visitor profile. (See the Cookies section in our privacy policy.) We will then recognize you on your subsequent website visits, but will not be able to identify you.
The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. a) GDPR.
However, if you select “Only allow necessary cookies” in the data protection settings (cookie banner), Matomo will not store any cookies in your computer’s browser. In order to be able to analyze your usage behavior on our website anyway, a config_ID is generated by Matomo. This uses information about your browser settings and version, your operating system and your truncated IP address as well as parameters of this website. The config_ID is deleted after 30 minutes of inactivity on our website and when you leave. The calculation algorithm of this config_ID changes every 24 hours, so that no conclusions can be drawn about any earlier or later visits and the activities that took place on our website. The calculation algorithm also calculates the config_ID in such a way that it is always different when you visit other websites that use Matomo, so that it is not possible to draw conclusions about your visits to other websites in Matomo. You can object to this form of website analysis at any time. See section 7.2.
The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR.
You can find more information on Matomo’s data protection in Matomo’s data protection principles.
Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interest in improving our website).
You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.
9. External Links
Our website may contain links to third-party services. These third parties have their own privacy policies, which we do not control. However, we may receive aggregate statistics of these third parties about interactions on our page.
Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
Due to the further development of our website and the use of new technologies, changes to this data protection notice may become necessary. We therefore recommend that you read this data protection notice again from time to time.
If you have any questions about this privacy policy or data protection, please contact us via our website’s contact form.