The website is operated by DIHK and DIHK DEinternational GmbH, both located at Breite Straße 29, 10178 Berlin, as joint controllers for specific topics together with

German- Thai Chamber of Commerce (AHK Thailand, hereinafter referred to as "AHK") 
AIA Sathorn Tower, 14 Fl. Unit 1403, 11-1 South Sathorn Road

Yannawa, Sathorn, Bangkok 10120 Thailand 
Tel.: +66 2 0550600 
E-Mail: communications@gtcc.org

We will be happy to provide you with excerpts from the joint controller agreement. Please contact ahk@ahk.de.

Processing operations for which AHK is solely responsible are described below in Part B.

As AHK is not based in the EU, it has appointed DIHK, Breite Straße 29, 10178 Berlin, as its EU representative in accordance with Art. 27 of the General Data Protection Regulation ("GDPR").

The data protection officer of the controller is:

Contact point for Data Protection at AHK Thailand

German-Thai Chamber of Commerce (hereinafter referred to as "AHK") 
AIA Sathorn Tower, 14 Fl. Unit 1403, 11-1 South Sathorn Road

Yannawa , Sathorn, Bangkok 10120 Thailand

Tel.: +66 2 0550600 
E-Mail: dataprotection@gtcc.org

1.      Data Categories and Description of Data Processing

The following data is processed each time our website is accessed:

• IP address;
• Date and time of access;
• Time zone difference to Greenwich Mean Time (GMT);
• Specific website accessed;
• Access status/HTTP status code;
• Amount of data transferred in each case;
• Website from which you came;
• Browser;
• Operating system and its interface;
• Language and version of the browser software;
• Internet service provider (collectively referred to as "server log files").

2.      Legal Basis and Purpose of Data Processing

The legal basis for the processing of your personal data when you use our website are the public tasks assigned to us is, Art. 6 (1) (e), (3) GDPR in conjunction with Section 10a IHKG, in particular the representation of the overall interests of associated businesses in the Federal Republic of Germany at national, European, and international level, the promotion of the economy, and the coordination and promotion of the AHK network, including delegate offices as well as representative offices, and the promotion of foreign trade of the Federal Republic of Germany. To promote this purpose, a functional website is provided, and the associated processing of personal data takes place.

3.      Data Retention

Server log files are deleted after seven days at the latest.

In the event of an error, logs are also generated, which are then stored for a period of 30 days for error analysis as well as problem tracking and are then deleted.

4.      Data Recipients

The server log files are accessible to those employees of the controller who are responsible for maintaining the website. In this context, employees of DIHK DEinternational GmbH may receive access to your personal data. For this reason, AHK, DIHK, and DIHK DEinternational GmbH have concluded a data protection group agreement that regulates the processing and transfer of personal data within the AHK network.

We also use third-party services on our website. For more information about these services and the associated data processing, please visit Part B and the cookie settings.

1.      Data Categories and Description of Data Processing

We use Piwik PRO Analytics Suite as our website analysis software. We collect data about website visitors in the form of server log files and cookies. For an overview of the cookies placed in this context, please refer to the following link: https://help.piwik.pro/support/privacy/cookies-created-for-piwik-pro-users/.

For a description of the server log files, please refer to Section IV.1.

2.      Legal Basis and Purpose of Data Processing

The purpose of using PIWIK PRO Analytics Suite is to track certain usage patterns, such as bounce rate, page views, and session duration, to understand how our website is used. We may also create visitor profiles based on browsing history to analyze visitor behavior, display personalized content, and conduct online campaigns. The legal basis for analytics and conversion tracking is your consent pursuant to Art. 6 (1) (a) GDPR.

3.      Data Retention

If you have provided us with your consent for analytics and conversion tracking, we will retain your personal data for a period of 25 months and then delete it thereafter, unless you withdraw your consent; in this case, we will no longer retain any personal data once we have received your withdrawal. Your withdrawal only takes effect for the future and has no effect on the previous processing of your data up to the time of your withdrawal.

4.      Recipients

The recipients of your personal data are employees of DIHK DEinternational GmbH and the AHK who are responsible for maintaining the website. In addition, it may happen (e.g., in troubleshooting cases) that employees of PIWIK PRO Analytics Suite, AHK, and DIHK DEInternational GmbH receive access to your personal data. PIWIK PRO Analytics Suite uses third-party providers, some of which are based in the USA, to provide its services, so it is possible that your personal data may be transferred to these third-party providers. For more information, please refer to the PIWIK PRO privacy policy.

1.      Data Categories and Description of Data Processing

We use Piwik PRO to manage consent and collect personal data via cookies for this purpose. We also use cookies to make our website more user-friendly. Cookies are small text files that are placed on your computer. For an overview of the cookies placed in this context, please refer to the following link: https://help.piwik.pro/support/privacy/cookies-created-for-visitors-by-piwik-pro/. Some of the cookies we place are deleted from your device at the end of your browser session ("session cookies"). In addition, we also set permanent cookies that remain on your device to recognize you, for example, when you visit our website again.

If cookies are set, they process certain user information to an individual extent, as described in the link.

You can control the use of cookies at any time through your browser settings, which provide you the option of deleting or blocking cookies. However, this may result in the functionality of our website being restricted. We also use social media buttons on our website; for more information, please refer to Section VIII.

2.      Legal Basis and Purpose of Data Processing

The legal basis for the management of consent by PIWIK PRO is our legitimate interest of a legally compliant and usage-specific consent management pursuant to Art. 6 (1) (f) GDPR.

If personal data is processed through individual cookies placed by us, the processing is carried out on the following legal bases:

·         Necessary cookies: The processing of personal data through necessary cookies is based on our legitimate interests pursuant to Art. 6 (1) (f) GDPR, as these cookies are necessary for the proper functioning of the website. The placing of cookies is also based on Section 25 (2) No. 2 TDDDG, according to which the storage of information on your device or access to information already stored on your device is absolutely necessary for us to provide a digital service that you have expressly requested – our website. 

·         All other cookies: The placing of these cookies in accordance with Section 25 (1) TDDDG and the processing of personal data is based on your consent in accordance with Art. 6 (1) (a) GDPR. These cookies collect information about your use of our website, which we use to improve its functionality and your user experience.

3.      Data Retention

Data for consent management is stored for a period of 25 months.

You can find an overview of the cookies we place and their storage time at the following link: https://help.piwik.pro/support/privacy/cookies-created-for-visitors-by-piwik-pro/.

4.      Recipients

Your personal data will be accessed by those employees of the controller who are responsible for maintaining the website. In addition, it may happen (e.g., in troubleshooting cases) that employees of PIWIK PRO receive access to your personal data. Insofar as PIWIK PRO employees receive access to personal data, we implemented necessary arrangements to protect your personal data, in particular by concluding data processing agreements in accordance with Art. 28 GDPR, pursuant to which PIWIK PRO is obligated to maintain confidentiality.

1.      Data Categories and Description of Data Processing

We have integrated the map service "OpenStreetMap" ("OSM") into our website. This is a service provided by the OpenStreetMap Foundation, based at St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom, which is the controller for OSM pursuant to Art. 4 No. 7 GDPR.

The map is displayed only after you have provided your consent. 

To display OSM, server log files are transmitted to the OpenStreetMap Foundation. For information on how your personal data is processed by the OpenStreetMap Foundation, please refer to the OpenStreetMap Foundation's privacy policy at https://osmfoundation.org/wiki/Privacy_Policy.

2.      Legal Basis and Purpose of Data Processing

The legal basis for the processing of your personal data is your consent in accordance with Art. 6 (1) (a) GDPR. The processing of your personal data serves to display a map for the purpose of location display and route planning.

3.      Data Retention

For information on processing and storage periods, please refer to: https://osmfoundation.org/wiki/Privacy_Policy

4.      Recipient

The OpenStreetMap Foundation is the recipient of your personal data. 

Except for the processing described in section V, your personal data will not be processed by us for automated decision-making and/or profiling.

You may choose not to provide us with your personal data or provide us with incomplete data. In such cases, for example, if you prevent the placing of cookies, this may mean that you are unable to use all the features of our website. If you wish to become a member and do not provide us with your personal data, we may not be able to process your membership application.

You can contact AHK directly either in writing or by email dataprotection@gtcc.org to exercise the following rights:

• Right to access your data, check and verify them,
• Right to receive a copy of your personal data,
• Right to rectification, deletion, or restriction of processing; this also includes the right to complete incomplete or incorrect data by providing additional information,
• Right to object to the processing; please note that Art. 21 GDPR provides you the right to object to the processing of personal data we process on the basis of legitimate interests in accordance with Art. 6 (1) (f) GDPR. You have the right to object to the processing of your personal data for reasons arising from your particular situation; if the objection is directed against the processing of personal data for direct marketing purposes, you have a general right to object without the need to specify a particular situation.
• You can receive your provided personal data in a structured, commonly used, and machine-readable format and transmit this data to another controller, provided that the processing is based on your consent or on a contract.

If you have provided us with your consent to process your personal data, you can withdraw this consent at any time with effect for the future.

You also have the right to lodge a complaint with a supervisory authority in connection with the processing of your personal data. To exercise this right, you can contact the authority competent for your place of residence or the authority competent for AHK:
 The supervisory authority competent for our EU representative is the Federal Commissioner for Data Protection and Freedom of Information, Graurheindorfer Str. 153, 53117 Bonn.

1.  Newsletter

               i.            Data Categories and Description of Data Processing

On our website, you can subscribe to our free newsletter. We use this to keep you informed about our products and services, upcoming events, and current economic topics. If you sign up, we will process the following personal data:  

·         First name,

·         Last name,

·         Email address along with the date and time of registration.

We use a double opt-in procedure for newsletter registrations. After you have registered, we will send a confirmation email to the address you provided, asking you to confirm your subscription to the newsletter. This procedure is designed to verify your registration and prevent the misuse of your personal data.

If you sign up for our newsletter and provided us with your consent, we will evaluate your user behavior, particularly how our newsletters are opened and used. Specifically, we track:  

·         Whether and when you opened our newsletter,

·         Which links are clicked,

·         We analyze how you interact with the content of our newsletters (collectively referred to as 'newsletter tracking').

This is achieved with the help of a small, invisible image file or code embedded in our website or email. When you visit our website or open the newsletter, the file is downloaded from the server and your interaction with the newsletter is recorded. To evaluate this, we link server log files with the web beacon and your email address as well as add an individual ID.

             ii.            Legal Basis and Purpose of Data Processing

The legal basis for subscribing to and receiving our newsletter is your consent, in accordance with Art. 6(1)(a) of the GDPR. You can withdraw your consent to receive the newsletter at any time. To do so, click on the link at the end of the newsletter or send an email to communications@gtcc.org. Your email address is collected to inform you about AHK news as requested.

The legal basis for newsletter tracking is your consent, in accordance with Art. 6(1)(a) GDPR. This helps us analyze and improve the effectiveness of our content. You can withdraw your consent to newsletter tracking at any time by send an email to communications@gtcc.org.  

           iii.            Data Retention

We will process your personal data until you withdraw your consent. As part of our regular reviews (approximately every two years), we will periodically ask you whether you are still interested in receiving our newsletter. If you do not confirm your interest, we will stop sending you the newsletter. You can always subscribe to our newsletter again. 

           iv.            Recipients

In order to send you our newsletter, we use the services of external providers, some of whom are based outside the EU. In such cases, we enter into data processing agreements incorporating EU standard contractual clauses unless an adequacy decision exists. You can view the EU standard contractual clauses at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.

We use personalized newsletter tracking to optimize our newsletter offering. In addition to the email address, we also record activities related to newsletter dispatch (e.g. click behavior).

             v.            Right to Object and Right to Erasure

Users can unsubscribe from the newsletter at any time. There is a corresponding link for this purpose in every newsletter. Alternatively, you can send us an email to communications@gtcc.org.

2. Registration for events

 i.            Data Categories and Description of Data Processing

On our website we offer our users the feature of registration as a gateway to our event via the “Glue Up” event management platform. Event registrations are managed through Glue Up, our third- party event management service provider, which acts as a data processor on our behalf. Glue Up platform is a service provided by Eventbank Software Pte. Ltd. based on 9 Battery Road, MYP Centre, Singapore 049910, which is responsible for registration platform in the sense of Article 4 No. 7 GDPR.

When you register for an event via “Glue Up”, following personal data will be processed: 

·         Identification data (e.g. title, first name, last name)

·         Contact Data (e.g. company name, address, telephone number, email address)

·         Date and time of registration

·         Payment details (can be online or bank transfer)

·         Other information voluntarily provided by the user (e.g. food restrictions)

In line with the registration process, consent is obtained from the user for processing of such data.

ii.            Legal Basis and Purpose of Data Processing

The legal basis for processing data is under Article 6 (1) sentence 1 lit. a) GDPR if the consent of the user is on hand. If the registration serves the execution of a contract whose contractual party is the user, or the execution of pre-contractual measures, the additional legal basis for the processing of data is Article 6 (1) lit. b) GDPR.

The processing of your personal data serves the purpose of managing the user’s registration and attendance for events. The registration of the user is required for the execution of a contract with user, or for the execution of pre-contractual measures.

iii.            Data Retention

Your personal data is stored securely and only for as long as necessary to fulfill the purpose Data is deleted as soon as it is no longer required to fulfill the purpose of its collection. This is the case of data collected during the registration process for the execution of a contract or for the execution of pre-contractual measures if such data is no longer required for the execution of the contract. Even after having entered into a contract, the requirement to store personal data of the contractual partner may remain in existence to fulfill contractual or statutory requirements.

Information on processing and retention period of our service provider can be found at: https://www.glueup.com/legal/privacy-policy.

iv.            Recipients

In order to process the event registration for you, we use the services of external provider “Glue Up”, based outside the EU. In such cases, we enter into data processing agreements incorporating EU standard contractual clauses unless an adequacy decision exists. You can view the EU standard contractual clauses at

https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.

Your personal data will be accessed by those AHK employees who are responsible for responding to scope of event arrangement.

 3. Contact Form and Email Contact

 i.            Data Categories and Description of Data Processing

If you contact us via the contact form on our website, we will process the following information:

·         Your full name;

·         Your email address; and

·         A message. This data is marked as a mandatory field.

You can also provide the following information voluntarily:

·         Title,

·         Your company,

·         Zip code,

·         City

In addition to your personal data described here, we also process server log files (see IV.1) when you access our contact form.

As an alternative to using the contact form, you can contact us via the email address provided.

In this case, the personal data transmitted with the email will be processed.

ii.            Legal Basis and Purpose of Data Processing

The legal basis for the processing of your data marked as mandatory fields is your request to us in accordance with Art. 6 (1) (b) GDPR. The same applies to any contact you make with us by email.

The legal basis for data that is not marked as a mandatory field and that you provide to us voluntarily is your consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time regarding the data you provide to us voluntarily. You can declare your withdrawal by email to info@gtcc.org. We will store your data until we receive a corresponding withdrawal.

We process your personal data to process and respond to your request.

iii.            Data Retention

Your personal data will be deleted as soon as your request has been answered conclusively. If you have given us your consent, we will process your data until you withdraw your consent, or your request has been answered conclusively.

iv.            Recipients

Your personal data will be accessed by those employees of the AHK and DIHK DEinternational GmbH who are responsible for responding to inquiries. In addition, employees of DIHK DEinternational GmbH and/or other AHKs may also receive access to your personal data. For this purpose, we have concluded an internal data transfer and processing agreement with the AHK network, which incorporates EU standard contractual clauses. You can view the EU standard contractual clauses at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.

4.      Cookies

In addition to the Piwik cookies described in Part A, the following cookies are also placed by this local website:

Outlook: If you use features on our website that are provided by Microsoft Outlook or Microsoft 365, such as calendar bookings or embedded forms, etc., this service is provided by Microsoft Corporation (hereinafter referred to as “Microsoft”) and is embedded in our website. Microsoft sets the following cookies on your device:

The overview indicates that some cookies are deleted from your device at the end of your browser session. Furthermore, certain cookies are classified as "necessary cookies". These cookies are essential for the proper functioning and display of our website.

The legal basis for setting these cookies is your consent, as outlined in Art. 6 (1) (a) GDPR, except for necessary cookies, which may be set pursuant to Art. 6 (1) (f) GDPR based on our legitimate interest, as the functionality of the website is dependent on these cookies. The legal basis for the setting of the cookie is also outlined in Section 25 (2) No. 2 TDDDG, which stipulates that the storage of information on your device or access to information already stored on your device is essential for us to provide a digital service that you have explicitly requested – namely, our website. For more information on data processing by Microsoft, please refer to the Microsoft Privacy Statement: https://www.microsoft.com/en-us/privacy/privacystatement.

YouTube: Our website utilizes "YouTube" videos. This service is provided by Google Ireland Limited, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "YouTube"). When you visit our website, which contains an embedded YouTube video, YouTube will place cookies and similar technologies on your device to collect information about website visitors:

The overview indicates that some cookies are deleted from your device at the end of your browser session; these cookies are known as "session cookies." 

The legal basis for setting these cookies is your consent in accordance with Art. 6 (1) (a) GDPR. For more information on YouTube's data processing, please refer to Google's privacy policy: How Google uses cookies – Privacy Policy & Terms of Service – Google

5.      Social media buttons:

Our website contains social media buttons for the following social networks: 

 i.            LinkedIn

The social media button is operated by LinkedIn Ireland Unlimited Company (hereinafter referred to as "LinkedIn"), located at Wilton Place, Dublin 2, Ireland. When you click on the social media button, your browser connects to LinkedIn's servers. This process involved the transfer of your personal data to LinkedIn. If you are logged into your LinkedIn account while visiting our website, LinkedIn may assign this information to your personal LinkedIn account.  Information on the processing of your personal data by LinkedIn can be found in LinkedIn's privacy policy at www.linkedin.com/legal/privacy-policy . The legal basis for your use of the social media button is your consent in accordance with Art. 6 (1) (a) GDPR.

ii.            YouTube Videos

If we embed YouTube videos on our website, these videos are hosted on servers belonging to Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland (hereinafter referred to as “YouTube”). We have embedded the videos using the so-called "advanced privacy settings." This means that your personal data is not transferred directly to YouTube when you visit our website. Only when the video is actively clicked to play will personal data be transferred to YouTube in the form of server log files and cookie IDs. At this point, cookies will also be set by YouTube.  

This data is transferred regardless of whether you have a Google user account that you are logged into or not. If you are logged into a Google account while visiting our website, this data will be assigned to your account by Google. To ensure that this data is not assigned to your Google account, it is necessary to log out of your Google account before activating the video. For information on the processing of your personal data by YouTube, please refer to YouTube's privacy policy, which you can access here: Privacy Policy – Privacy Policy & Terms of Service – Google

iii.            Facebook

The social media button is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. If you click on the social media button while you are logged into your Facebook account, Facebook will assign your use to your user account.

For more information about how Facebook handles personal data when you use Facebook, please refer to Facebook's privacy policy at de-de.facebook.com/policy.php.

iv.            Instagram

The social media button, which displays a camera icon, is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter referred to as "Instagram"). When you click on the social media button, your browser establishes a direct connection to Instagram's servers, and your personal data is transferred. If you are logged into your Instagram account while visiting our website, Instagram will link your visit to our website to your account. Information on data processing by Instagram can be found in Instagram's privacy policy: https://privacycenter.instagram.com/policy.

v.             X

Twitter International Unlimited Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland (hereinafter referred to as X) is the operator of the social media button X. Clicking on the retweet button will result in the transfer of your personal data to X. If you are logged into your X account while visiting our website, X will assign this information to your X account. For more information on data processing by X, please refer to X's privacy policy.

vi.            Xing

The social media button for the social network Xing is operated by New Work SE (hereinafter referred to as "XING"), Am Strandkai 1, 20457 Hamburg, Germany. When you click on the XING social media button, your browser connects to the XING servers. Your personal data is then transferred to Xing. If you are logged into your XING account while visiting our website, XING can assign this information to your personal XING account. Information on the processing of your personal data by XING can be found in Xing's privacy policy at www.xing.com/privacy .

6.      Support for Expansion Abroad – Appointment Booking Option at a local AHK

 i.            Data Categories and Description of Data Processing

If you have taken advantage of the "Support for Expansion Abroad" offer on the AHK.de website, entered your personal data there, and have now been redirected to our website via the appointment link, we will now process your personal data in order to offer you an appointment with a suitable contact person. For this reason, we process the following data categories:

·         Your first and last name,

·         Your business email address,

·         General background information you provided, such as region, industry, and desired service, and

·         Date and time of your chosen appointment.

Should you have also entered the following voluntary personal data on the AHK.de website, such as

·         Your business phone number,

·         Company name, 

·         Company size, in particular number of employees, and

·         Questions as well as comments that you can enter in a free text field,

We will also process this data.

ii.            Legal Basis and Purpose of Data Processing

The legal basis for the processing of the data originally marked as mandatory fields, along with the date and time of your desired appointment, is your request to us in accordance with Art. 6 (1) (b) GDPR.

The legal basis for the data that is not marked as a mandatory field and that you provide to us voluntarily is your consent in accordance with Art. 6 (1) (a) GDPR. The information you provide voluntarily helps us to obtain a more complete picture of your membership.

iii.            Data Retention

Your personal data will be processed for the duration of the expansion support. 

iv.            Recipients

Your personal data will be accessed by those AHK employees who are responsible for responding to your inquiry. In addition, employees of DIHK DEinternational GmbH and/or other AHKs may also receive access to your personal data. For this purpose, we have concluded an internal group data transfer and processing agreement with the AHK network, which includes the EU standard contractual clauses. You can view the EU standard contractual clauses at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

·         Personal Data Protection Act (Thailand) B.E. 2562, 28. Mai 2019

Contact point at AHK Thailand: dataprotection@gtcc.org

Security measures for protecting data

AHK provides appropriate security measures to protect your personal data in accordance with the security standards required by the laws and regulations. AHK has set out organizational measures for authorization of access to or use of personal data. AHK regularly reviews and implements technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

Links to other third-party websites

For website users, we may contain links to social networks, platforms, and other websites that are operated by third parties. We do not take responsibility for the content or the data protection standards employed by such websites. We will have no control over and shall not be responsible for that party’s use of your personal data.

Update the Privacy Statement

This Privacy Statement may be updated and revised from time to time. All changes to our Privacy Statement will be posted on this website, therefore, you are encouraged to keep up to date with this Privacy Statement.