1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other
national data protection laws and data protection provisions is:
Schlaraffia Pattaya – Castrum Siamesiae
Schlaraffia Castrum Siamesiae (383)
Pattaya, Thailand
Represented by: Ritter XXL (Henry Senger), Chancellor
E-Mail: kantzler(at)schlaraffia-thailand(dot)org
Telefon: +49 171 8031368
There is no legal obligation to appoint a data protection officer (§ 38 BDSG, Art. 37 GDPR). For questions concerning data protection please contact the controller named above.
2. General information on data processing
As a matter of principle we process personal data of our users only to the extent necessary to provide a functioning website together with our content and services. Processing takes place on the basis of the applicable legal ground under the GDPR. Our website can generally be used without providing personal data; where you use contact or registration forms, you do so voluntarily.
3. Hosting and server log files
This website is operated on the server of a German hosting provider. Each time the website is accessed, the hosting provider automatically records the following data in so-called server log files:
- IP address of the accessing device (anonymised where applicable)
- Date and time of access
- Name and URL of the file retrieved
- Website from which access was made (referrer URL)
- Browser and operating system used, and screen resolution where applicable
- HTTP status code and volume of data transferred
The legal basis is Art. 6(1)(f) GDPR (legitimate interest). That legitimate interest lies in ensuring the proper operation of the website and in preventing and investigating misuse. The log files are deleted automatically after seven days at the latest, unless longer storage is required in a specific case.
4. Technically necessary cookies and session
This website uses technically necessary cookies only, which are strictly required to provide the basic functions of the site. Consent is not required for these under § 25(2) TTDSG. The following cookies are used:
- uhu_sess: session cookie for managing the browser session (CSRF protection, flash messages). It is deleted automatically when the browser is closed (session cookie).
- scms_cookie_consent: stores your acknowledgement of the cookie notice. Validity: 365 days. Contains no personal data.
The legal basis is Art. 6(1)(f) GDPR and § 25(2) TTDSG respectively. We use no analytics, advertising or tracking cookies.
5. Contact form and e-mail contact
If you contact us via our contact form or by e-mail, the data you provide (name, e-mail address, telephone number where given, message) is processed – and where necessary stored – for the purpose of handling your enquiry.
The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest in answering enquiries) respectively.
The data is deleted once your enquiry has been dealt with conclusively and no statutory retention obligations stand in the way – as a rule after two years at the latest. You may request information about the data stored, or its deletion, at any time.
6. Event registrations
If you register for an event or as a guest via our online form, we collect the following data: first and last name, e-mail address, optionally a telephone number, optionally your Schlaraffen name and home chapter, and a note where applicable.
This data is used exclusively to organise and handle the guest visit or the event. It is sent by e-mail to the responsible contact person and stored in our database.
The legal basis is Art. 6(1)(b) GDPR (performance of pre-contractual measures). In addition your express consent under Art. 6(1)(a) GDPR applies, which you give by submitting the form. You may withdraw that consent at any time with effect for the future (informally by e-mail to kantzler(at)schlaraffia-thailand(dot)org).
Registration data is deleted after the event has taken place, at the latest after twelve months, unless statutory retention obligations stand in the way.
7. Anonymous audience measurement
We want to know which of our pages are read – not who reads them. To that end we count page views anonymously on our own server. No external analytics tool is used and no data is transferred to third parties.
The following is not stored:
- your IP address
- your browser identification (user agent)
- the full address of the page you came from
- cookies, session identifiers or any other recognition features
Only the following is stored: the page called up (without parameters) as a counter reading, together with totals for device category (computer, tablet, mobile phone), language code, type of origin (direct, search engine or referring domain), time of day and weekday.
The decisive point is this: no record is created for an individual visitor, only a counter is increased – for example „mobile phone: 41". Recognition of individual persons, any combination of the features or the creation of profiles is therefore ruled out. The features themselves (browser identification, referring address, language setting) are evaluated only fleetingly and are not stored.
The members' area and the administration are excluded from the count.
The legal basis is our legitimate interest in knowing the reach of our website (Art. 6(1)(f) GDPR). Since no cookies are set and no information is stored on or read from your device, consent under § 25 TTDSG is not required. In our assessment no personal reference arises.
8. OpenStreetMap
On the page „Schlaraffia in Pattaya" and on the home page we embed maps from the service OpenStreetMap. OpenStreetMap is operated by the OpenStreetMap Foundation (OSMF), St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.
The map is displayed only after your active consent by clicking the corresponding button. Only then are map data (tiles) loaded directly from the OpenStreetMap servers, in the course of which your IP address and technical browser data are transmitted to those servers.
For the location search on the home page the free geo service Nominatim of the OpenStreetMap Foundation is used to convert place names entered into geographical coordinates. Your IP address is transmitted in this case as well.
The legal basis for the embedding is Art. 6(1)(a) GDPR (consent). Further information can be found in the privacy policy of the OpenStreetMap Foundation.
9. Facebook page (joint controllership)
We operate a Facebook page at https://facebook.com/schlaraffiathailand. When you visit that page, data is processed by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (in short: Facebook).
For the operation of our Facebook page we and Facebook are joint controllers under Art. 26 GDPR as far as the processing of insights data is concerned. Facebook is primarily responsible for the processing of insights data. Further information can be found in the privacy policy of Meta.
10. Your rights
As a data subject you have the following rights with regard to the personal data concerning you:
- Right of access (Art. 15 GDPR) – you may request information as to whether and which personal data concerning you we process.
- Right to rectification (Art. 16 GDPR) – you may have inaccurate data corrected.
- Right to erasure (Art. 17 GDPR) – you may request the deletion of your data provided no retention obligations stand in the way.
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR) – to the processing of your data on the basis of a legitimate interest.
- Right to withdraw consent (Art. 7(3) GDPR) – consent given may be withdrawn at any time with effect for the future.
To exercise your rights please contact us in writing or by e-mail:
Ritter XXL (Henry Senger), Chancellor, Schlaraffia Castrum Siamesiae (383)
Pattaya, Thailand
E-Mail: kantzler(at)schlaraffia-thailand(dot)org
You also have the right to lodge a complaint with a data protection supervisory authority. Which authority is competent depends on your place of residence or the place of the alleged infringement. As this website is operated on a server in Germany, the German state data protection authorities may be addressed by data subjects in Germany; an overview is kept by the Datenschutzkonferenz at www.datenschutzkonferenz-online.de. For data subjects in Thailand the competent body is the Personal Data Protection Committee (PDPC), www.pdpc.or.th.
11. Data security
We protect our website and other systems by technical and organisational measures against loss, destruction, unauthorised access, alteration or dissemination of your data. Data transmission on our website takes place via an SSL/TLS-encrypted connection (HTTPS). Please note that the transmission of data on the internet (for example by e-mail) can have inherent security gaps.
As at: 07.09.2026 · Schlaraffia Pattaya – Castrum Siamesiae