Privacy Policy – Detailed Information

Last updated and valid from: 27 July 2026 – replaces all previous versions

Welcome to Wiango Thailand. The protection and responsible handling of your personal data are among our highest priorities. We treat all information you entrust to us with the utmost care, strictly in accordance with the applicable laws of the Kingdom of Thailand including the Personal Data Protection Act BE 2562, the EU General Data Protection Regulation (GDPR / DSGVO) where applicable, all other relevant legal provisions and the internal guidelines defined here.

This privacy policy applies to all services offered by Wiango, all our websites, enquiries, bookings, agreements, telephone calls, written communications and all other forms of interaction between you and us. It applies equally to all our service areas: vehicle rental, transfer services, technical assistance, senior support, maintenance, photography, travel information and all other local services we provide in Wiang Pa Pao, Chiang Rai, Chiang Mai and surrounding regions.

We always act according to the principles of legality, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality and accountability.

1. Responsible Party and Contact Information

The entity legally responsible for the collection, processing and use of your personal data is:

Wiango
Wiang Pa Pao District
Chiang Rai Province, Postcode 57130
Kingdom of Thailand

For all matters concerning data protection, enquiries, exercise of your rights, suggestions or complaints, you can contact us directly:
Email: info@wiango.com
WhatsApp: +66 82 798 5025
Communication is possible in Thai, German and English. We will respond to your enquiry within 3 working days.

We do not have to appoint an official Data Protection Officer under applicable law, but the person responsible for these matters can always be reached via the contact details given above.

2. What Data We Collect and Process

We only collect and process data that is actually required or that you provide voluntarily. We never collect more data than necessary for the stated purpose.

2.1 Data you provide actively

• Personal and contact details: salutation, full name, postal address, email address, telephone number, date of birth where relevant for age verification or insurance requirements, nationality or language preference.
• Enquiry and request details: the exact content of your message, questions, wishes, information about your travel plans, needs or requirements you mention in the course of communication.
• Booking and order data: dates, times, locations, number of people, number of vehicles or equipment, agreed service scope, agreed prices, special requests, payment details or payment confirmation information, identity document data only where legally required for rental or official formalities.
• Feedback and review data: information you send us in feedback forms, surveys, ratings or testimonials.
• Any other information: all further details you choose to share with us voluntarily at any time.

2.2 Data collected automatically

When you visit our website, certain information is recorded automatically for technical and security reasons:

• IP address of the accessing device, shortened immediately where possible
• Date, time and duration of your visit
• Type, model and operating system of your device
• Browser type, version and language settings
• Websites visited previously, links opened and pages viewed on our site
• Downloads initiated, buttons clicked and navigation behaviour
• Data volume transferred and status of access

This technical data is generally stored separately from all personal information and cannot normally be assigned to a specific person unless you have given your explicit consent or this is required to investigate misuse or security incidents.

3. Purpose and Legal Basis for Processing

We always process your data for clearly defined, legitimate purposes only. The legal basis depends on the type of processing and the applicable law:

3.1 Fulfillment of contract and pre-contractual measures

This applies to all processing required to prepare, confirm, carry out and complete your booking or service agreement, including all related communication, preparation, organization and settlement of services.

3.2 Your consent

If you have given separate consent for certain processing, such as for additional information offers, extended analysis or saving of data beyond the necessary period, this consent forms the legal basis. You can revoke any consent you have given at any time with future effect.

3.3 Legitimate interests

Where legally permitted, we process data to ensure the security and stable operation of our website and systems, to prevent misuse, fraud or damage, to improve our services and website based on usage behaviour, to develop new offers and to carry out internal administrative processes. We always balance our interests against your rights and privacy.

3.4 Compliance with legal obligations

We process data where this is necessary to fulfill our legal obligations under Thai law, tax regulations, commercial regulations, official requirements or applicable international standards.

4. Cookies, Analysis and Other Tools

We use different technologies to operate, secure and improve our website. You can manage your settings or withdraw consent at any time via browser settings or our information below.

4.1 Necessary cookies and functions

These are absolutely required so the website can function correctly, so your selected language, settings or entries are saved, and security measures work properly. You cannot disable these via our systems, but you can adjust browser settings accordingly – however this may limit some functions permanently.

4.2 Microsoft Clarity

We use Microsoft Clarity to better understand how visitors use our website and identify areas for improvement. Clarity records mouse movements, clicks, scrolling behaviour and general usage patterns. No names, contact details or other personal identifiers are ever collected or stored. All data is transmitted anonymously. Microsoft processes this data according to their own privacy rules: Microsoft Privacy Statement

4.3 Google Analytics 4

Google Analytics 4 provides us with aggregated statistics about usage. We have activated full IP anonymisation so your IP address is shortened immediately and cannot be assigned to an individual. We do not combine this data with other information held by Google. Google Ireland Limited or Google LLC may process this data outside Thailand or the EU under appropriate data protection agreements: Google Privacy Policy

4.4 Other integrated services

When you click links or use functions leading to external providers, their privacy policies apply additionally: WhatsApp, LINE, Facebook, Google Maps, YouTube and other platforms used on our site.

5. Disclosure and Transfer of Your Data

Your personal data will never be sold, traded, rented or otherwise made accessible to third parties for commercial gain. Forwarding only takes place in strictly limited cases:

• If you have given your clear, explicit consent
• If this is absolutely necessary to fulfill the agreed service, for example forwarding details to local partners, accommodation providers, transport partners or official bodies – and always only the minimum information required
• If we are legally obliged, authorized or requested by courts or competent authorities to provide information
• If required for accounting, tax auditing, invoicing or official documentation purposes
• If we work with carefully selected service providers who act exclusively according to our instructions, are bound by strict data protection rules and have been checked for adequate security standards
• In connection with the sale, restructuring or transfer of our business operations, subject to applicable data protection rules

Processing takes place primarily within the Kingdom of Thailand. Where transfers to other countries occur, we ensure this happens only to places with recognized adequate protection or under appropriate legal safeguards.

6. Storage Periods and Deletion

We store your data only for exactly as long as is necessary for the stated purpose or required by applicable laws. Afterwards it will be deleted, anonymised or securely blocked immediately:

• General enquiries without further booking or agreement: maximum 12 months after completion of communication
• Completed bookings, contracts, invoices and related documents: 7 years according to Thai commercial and tax retention rules
• Data stored based on your consent: until consent is revoked
• Anonymous usage and analysis data: maximum 26 months
• Data needed for legal claims or defence: until the matter is finally concluded and all deadlines have expired

If data must be kept for legal reasons but is no longer needed, it will be restricted and processed no longer for any other purpose.

7. Your Full Rights – Exercise Simply

You have comprehensive rights under applicable law. You can exercise all these rights at any time free of charge by contacting us via the channels mentioned above. We may only refuse requests if legal grounds exist and will explain this decision to you.

• Right of confirmation and access: you can ask us to confirm if we hold data about you and request a complete, understandable copy of all information processed, its origin, recipients and further details.
• Right to correction: if information is incorrect, incomplete or outdated, you can request immediate correction, completion or updating.
• Right to deletion: you can ask for deletion if the purpose no longer applies, storage is unlawful, consent is revoked or there is no overriding legal reason to keep the data.
• Right to restriction: you can request processing be limited while accuracy is checked, you object or legal proceedings are pending.
• Right to data portability: where technically feasible, you can receive your provided data in a structured, machine-readable format or request direct transfer to another provider.
• Right to object: you can object at any time to processing based on legitimate interests or for marketing purposes with future effect.
• Right to withdraw consent: any consent you have given can be revoked completely or partially at any time.
• Right to lodge a complaint: you can submit a complaint to the Thai Personal Data Protection Committee or other competent supervisory authority if you believe processing violates applicable rules.

8. Data Security Measures

We implement comprehensive, up-to-date technical and organisational measures to protect your data against loss, destruction, alteration, unauthorised disclosure or access:

• Encrypted transmission via TLS/SSL protocols on all our pages
• Firewall systems, regular security updates and access controls
• Secure storage, backup procedures and limited access authorisation only for persons who absolutely require access
• Regular staff training and internal guidelines on data protection
• Careful selection and regular checking of all service providers involved

Nevertheless, fully secure transmission over the public internet cannot be guaranteed under all circumstances. You should always protect your own access data appropriately and inform us if you notice any irregularities.

9. Updates and Changes

We may need to adjust this privacy policy from time to time to reflect changes in our services, legal requirements, official regulations or business conditions. The version published here with the date stated at the top is always the valid and applicable version. We recommend checking this page regularly for updates.

10. Final Provisions and Contact

The law of the Kingdom of Thailand applies exclusively to all matters arising from this privacy policy. If individual provisions prove to be or become invalid, the validity of all other sections remains unaffected. The invalid provision will be replaced as closely as possible to the original meaning and legal intention.

If you have further questions, special requests, need clarification or want to exercise any of your rights, do not hesitate to contact us at any time:

Email: info@wiango.com
WhatsApp: +66 82 798 5025