This Privacy Policy explains how personal data is processed on sabaiandco.com and in our services. We follow the EU General Data Protection Regulation (GDPR) and, where it applies to you, Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
1. Controller
SWKM GmbH (brand: Sabai & Co.), Kathi-Kobus-Str. 21, 80797 Munich, Germany. Managing director: Sebastian Kaiser. Contact for all privacy matters: hello@sabaiandco.com. See the imprint for the full provider details.
2. Data we process
- Contact data you provide when emailing us or booking a call: name, email address, phone or messaging handle, and the content of your enquiry.
- Service data you provide during an engagement, such as passport, visa and address details needed to deliver the support you ask for.
- Technical data generated when you visit this website, such as server log entries (IP address, timestamp, requested page, browser data), kept for security and operation.
We do not run analytics or advertising trackers on this website.
3. Purposes and legal bases
We answer enquiries and perform contracts or pre-contractual steps you request (Art. 6(1)(b) GDPR). We keep records and make filings where the law or an instruction you give requires it (Art. 6(1)(c) GDPR). We operate and secure this website on the basis of our legitimate interest (Art. 6(1)(f) GDPR). Where we need consent, for example for a newsletter or the booking widget, we ask for it separately and you can withdraw it at any time with effect for the future (Art. 6(1)(a) GDPR).
4. Hosting
This website is hosted by ALL-INKL.COM - Neue Medien Münnich, Germany, which processes server data on our behalf under a data processing agreement.
5. Booking tool
The booking calendar loads only after you click the button. After that, your browser connects to Calendly LLC in the USA and your booking details are processed by Calendly. Your click is your consent to this transfer (Art. 6(1)(a) and Art. 49(1)(a) GDPR). Calendly's own privacy notice applies in addition. If you prefer, email us instead.
6. Sharing and transfers
We share data only as needed to deliver the support you request: with Thai authorities for filings you instruct, with licensed professionals you ask us to involve (for example accountants), and with independent providers you ask us to involve, such as airport service providers, transport operators and banks, limited to the data they need. Some of these recipients are in Thailand, which has no EU adequacy decision. Where we transfer data there it is necessary to perform the contract you requested or you have consented (Art. 49(1)(a) and (b) GDPR). We do not sell personal data.
7. Retention
We keep personal data only as long as needed for the purposes above and for statutory retention duties under German commercial and tax law (generally 6 or 10 years), then delete or anonymise it.
8. Your rights
You may request access, rectification, erasure, restriction of processing, data portability and object to processing based on legitimate interests (Art. 15 to 21 GDPR). Contact hello@sabaiandco.com. You may lodge a complaint with a data protection authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany. If the PDPA applies to you, you may also complain to the Personal Data Protection Committee of Thailand.
9. Changes
We will update this policy as our services and legal requirements evolve, and publish the current version on this page.