Controller

The controller responsible for processing personal data on this website is Baan Thai — Massage & Spa, owner Livio Kropf, Marktgasse 32, 3011 Bern, Switzerland.

Please send questions about data protection and requests concerning your data to baan-thai@outlook.com.

When you visit this website

The website is delivered via Cloudflare, Inc. (USA). In the process, technically necessary data is processed, such as your IP address, the time and the page requested, and information about your browser and device. This data is used to deliver the pages and to protect them against misuse. Cloudflare is certified under the Swiss-U.S. Data Privacy Framework.

For visitor statistics we use Cloudflare Web Analytics. It counts page views, the origin of the visit, country, device type and browser. Nothing is stored on your device and no usage profile is created.

This website does not set any cookies. Fonts and images are hosted on our own web space, and no content from social networks is embedded.

Online Booking

For appointment booking, we embed the booking system of Terminland GmbH, Kreuzberger Ring 44a, 65205 Wiesbaden, Germany, in our website. As soon as you open the booking page, your browser connects to Terminland and transmits technical data such as your IP address.

When you book an appointment, we and Terminland receive the details of the requested appointment, your name and your contact details. Terminland provides us with the system and processes this data so that we can manage your appointments and contact you if necessary. Under Swiss law, Germany provides an adequate level of data protection.

For processing by Terminland, including any cookies on Terminland’s pages, the Terminland privacy policy also applies.

Contact by email or phone

When you write to us or call us, we process your details in order to respond to your request, for example a question about an appointment or a gift voucher. We receive emails via the Outlook.com service of Microsoft Corporation, which may also process data in the USA. Microsoft is certified under the Swiss-U.S. Data Privacy Framework.

Purposes and legal basis

We process personal data only to operate this website, to arrange and carry out appointments, to answer requests and to comply with legal obligations. The legal basis is the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, we rely on the performance of a contract or pre-contractual measures, on legal obligations and on our legitimate interest in a secure and functioning service (Art. 6(1)(b), (c) and (f) GDPR).

Disclosure

We do not sell personal data or pass it on for other purposes. The only recipients are the service providers named here, to the extent they need the data for their task, and authorities where required by law.

Retention

We keep personal data only for as long as is necessary for the purposes stated or required by law. After that it is deleted or anonymised.

Your rights

You have the right to information about your data, to rectification, to erasure and to receive or transfer your data. You may object to processing and withdraw your consent at any time with effect for the future. To do so, please contact baan-thai@outlook.com. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

Security

This website is transmitted in encrypted form. We protect personal data against unauthorised access, loss and misuse with appropriate technical and organisational measures.

Changes

We update this privacy policy when our processing changes. The version published on this website applies.

Last updated: October 2026