Status: 4th May 2025
Responsible for data processing on this website is:
Christian Nickel
The Palm Jumeirah, Frond E 74
00000 Dubai
United Arab Emirates
c.nickel@the-world-school.com
This privacy policy has been prepared in accordance with the requirements of the following data protection laws
- General Data Protection Regulation (GDPR) of the European Union, which applies to all users within the EU,
- Personal Data Protection Act (PDPA) of Thailand, which applies to the processing of personal data in Thailand.
a) When you visit the website
When you access our website https://world-school.webflow.io/, technical information is automatically collected, including
- Your IP address,
- Date and time of access,
- Browser type and version,
- operating system,
- Referrer URL (the previously visited page),
- Name and URL of the retrieved file,
- name of your access provider.
This data is processed for the following purposes:
- Ensuring a smooth connection to the website,
- Ensuring a comfortable use of our website,
- Checking system security and stability,
- for other administrative purposes.
Legal basis:
- For users from the EU: Art. 6 para. 1 lit. f GDPR (legitimate interest),
- For users in Thailand: Section 24 PDPA (legitimate interest).
b) When using the contact form
If you use our contact form, we process the following personal data:
- Your name,
- your e-mail address,
- your message.
This data is processed in order to respond to your inquiry.
Legal basis:
- Your consent pursuant to Art. 6 para. 1 lit. a GDPR (EU) and Section 19 PDPA (Thailand).
c) When using cookies
We use cookies on our website. These are small files that are stored on your end device. These cookies fulfill different purposes:
- Essential cookies: Necessary for the operation of the website,
- Statistical cookies: Used to analyze and improve the website,
- Marketing cookies: Enable personalized advertising, e.g. through Facebook Pixel or Instagram.
You have the option of giving your consent to the use of certain cookies via our cookie banner when you first visit the website.
Legal basis:
- Your consent in accordance with Art. 6 para. 1 lit. a GDPR and Section 19 PDPA.
We use plugins and links to the following social networks on our website to give you the opportunity to share content or visit our profiles on these platforms:
1. Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)
2. Instagram (Instagram LLC., represented by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)
3. YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
4. LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland)
5. X (formerly Twitter) (Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland)
How do the plugins work?
When you visit a page of our website on which a plugin or link to these social networks is integrated, your browser establishes a direct connection to the servers of the respective provider. The provider receives the information that you have visited our website and may be able to process personal data such as your IP address, even if you are not logged in to the social network.
How do we use these plugins?
- We integrate the plugins to provide the functions of the social networks on our website, e.g. sharing content or displaying our profiles.
- The social network providers themselves are responsible for processing personal data.
Legal basis:
The processing of your personal data through the integration of social media plugins is only carried out on the basis of your consent (Art. 6 para. 1 lit. a GDPR or Section 19 PDPA), which you can give via the cookie banner.
References to the privacy policies of the providers
Further information on the processing of your data by the social networks can be found in the privacy policies of the respective providers:
- Facebook: https://www.facebook.com/about/privacy/
- Instagram: https://help.instagram.com/519522125107875
- YouTube: https://policies.google.com/privacy?hl=de
- LinkedIn: https://www.linkedin.com/legal/privacy-policy
- X (formerly Twitter): https://twitter.com/de/privacy
As our company is based in Thailand and our website is hosted on servers outside the EU, your personal data will be transferred to third countries, including Thailand.
Thailand does not offer an equivalent level of data protection according to EU standards. Nevertheless, we use the following measures to ensure the protection of your data:
- Conclusion of standard contractual clauses in accordance with Art. 46 GDPR with the hosting and service providers.
Legal basis:
- For EU users: Art. 49 para. 1 lit. b GDPR, insofar as the transfer is necessary for the performance of the contract.
A copy of these guarantees can be provided on request.
For users in the EU (according to GDPR):
You have the right to:
1. to request information (Art. 15 GDPR): You can request confirmation as to whether we are processing personal data about you. You can also obtain detailed information about the purposes of the processing, the categories of data, the recipients of the data (e.g. third-party providers) and the planned storage period.
2. to request erasure (Art. 17 GDPR): You can request the erasure of your personal data if:
o the data are no longer necessary for the purposes for which they were collected,
o you withdraw your consent and there is no other legal basis for the processing,
o the data have been processed unlawfully or
o the erasure is necessary for compliance with a legal obligation.
However, the right to erasure does not apply if there are statutory retention obligations (e.g. tax obligations).
3. rectification of inaccurate data (Art. 16 GDPR): You can request that we correct incorrect or incomplete data.
4. restriction of processing (Art. 18 GDPR): You can request that we temporarily restrict the processing of your data, e.g. if the accuracy of the data is being verified.
5. data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used and machine-readable format or to have it transmitted to another provider.
6. objection to processing (Art. 21 GDPR): You may object to the processing of your data, in particular if we process your data on the basis of our legitimate interests.
----
For users in Thailand (according to PDPA):
Users in Thailand also have similar rights:
1. access (Section 30 PDPA): you can request that we provide you with information about the processing of your data, including the purposes of processing and disclosure to third parties.
2. rectification (Section 35 PDPA): You can have incorrect or incomplete data corrected.
3. erasure (Section 33 PDPA): You can request that we erase your data, in particular if the purpose of the processing has been achieved or you have withdrawn your consent.
4. withdrawal of consent (Section 28 PDPA): You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
If you wish to exercise any of the rights set out above, please contact us at:
Christian Nickel
The Palm Jumeirah, Frond E 74
00000 Dubai
United Arab Emirates
c.nickel@the-world-school.com
Please note:
- For access requests or erasure requests, we may require proof of your identity to ensure that the request originates from the data subject.
- Your request will be processed within the statutory period (under GDPR within 1 month, under PDPA within a reasonable period).
If you have any questions about this privacy policy or the processing of your personal data, you can contact us using the following contact details
Christian Nickel
The Palm Jumeirah, Frond E 74
00000 Dubai
United Arab Emirates
c.nickel@the-world-school.com