Privacy Policy for Nutty’s Adventures
This privacy policy has been designed to protect our customers’ privacy and identity and is based on the requirements of the EU General Data Protection Regulation (GDPR). Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information
Nutty’s Adventures will require and store only a limited amount of personal and other information from you, that is, only what is necessary to process all of your travel arrangements and payments. This will generally be restricted to:
Personal details
Full name.
Date of birth.
Sex.
Passport number, date a place of issue and expiry (a photocopy of your passport may be required for some flight reservations).
Contact information
Email address.
Telephone number, home and in Thailand.
A postal address in some occasional circumstances
Financial information
Credit card details, if you chose that method of payment.
The name of your bank if you pay by bank transfer.
Your bank account details if we are required to make a bank transfer to you.
Records of all payments received from you and any payment made by us to you.
None of this information will ever be given to any third party, except for such personal details as are required to make hotel and flight reservations or any other travel arrangements. The information will be stored securely on the company’s own computers.
An external PCI compliant payment gateway handles all CC transactions.
We use regular Malware Scanning.
Cookies
We use cookies to understand and save user’s preferences for future visits.
If you turn cookies off, some of the features that make your site experience more efficient may not function properly. It won’t affect the user’s experience that make your site experience more efficient and may not function properly.
Third-party disclosure
We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information.
Third-party links
Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
Fair Information Practices
Should a data breach occur, we will notify you by email within seven working days.
We also confirm that we will:
• Not use false or misleading subjects or email addresses.
• Identify the message as an advertisement in some reasonable way.
• Include the physical address of our business or site headquarters.
• Honour opt-out/unsubscribe requests quickly.
If at any time you would like to unsubscribe from receiving future emails, you can email us at and we will promptly remove you from ALL correspondence.
Contacting Us
If there are any questions regarding this privacy policy, you may contact us using the information below.
Nutty Adventures Co. Ltd.
Pratuchai, Phra Nakhon Si Ayutthaya District
Ayutthaya, Phra Nakhon Si Ayutthaya 1300
Thailand
nutty.adventures.tours@gmail.com
035 244 558
Website Analytics with Google Analytics
This website utilises Google Analytics 4, a web analytics service provided by Google LLC, after obtaining user consent. The relevant controllers are Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, for users from the EU/EEA and Switzerland. Google Analytics 4 practices IP anonymisation by default, meaning your IP address is instantly shortened when interacting with this website. Only under rare circumstances will your full IP be transferred to a US-based Google server and shortened there. Google maintains that the IP transferred via Google Analytics will never be combined with other Google data. Google Analytics 4 only activates upon your approval via the cookie banner, and can be undone anytime through the cookie settings. Data processed includes: usage data such as page views, website interaction, general location, and visit duration; and communication data like shortened IP addresses, user agent, language preference and screen resolution. The purpose of this data processing is for Google to evaluate your website use on behalf of the website operator, compile reports on activity and analyze site performance. This data processing is legal, based on your consent under Art. 6 para.1 p.1 lit. a GDPR and § 25 para. 1 p.1 TDDDG. Google Ireland Limited, Google LLC and Alphabet Inc are the recipients of this data. Your website usage information is typically sent to a Google server in the U.S., an action legitimized by the European Commission’s recent adequacy decision from July 10th, 2023, which recognizes Google LLC’s certification under the EU-US Privacy Framework. In terms of data storage, any data linked to cookies is automatically deleted after a certain period of time, which is monthly for data that has reached its retention period, and a maximum of 2 years for Google Analytics cookies. For more information on Google Analytics’ terms of use and Google’s privacy policy, please visit {link}https://policies.google.com/{link-ende} and {link}https://support.google.com/analytics/answer/12017362{link-ende} Google Analytics verwendet sog. “Cookies”, Textdateien, die auf dem Computer des Seitenbesuchers gespeichert werden und die eine Analyse der Benutzung der Website durch den Seitenbesucher ermöglichen. Die durch das Cookie erzeugten Informationen über die Benutzung dieser Website durch den Seitenbesucher (einschließlich der gekürzten IP-Adresse) werden in der Regel an einen Server von Google übertragen und dort gespeichert. Google Analytics wird ausschließlich mit der Erweiterung “_anonymizeIp()” auf dieser Website verwendet. Diese Erweiterung stellt eine Anonymisierung der IP-Adresse durch Kürzung sicher und schließt eine direkte Personenbeziehbarkeit aus. Durch die Erweiterung wird die IP-Adresse von Google innerhalb von Mitgliedstaaten der Europäischen Union oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum zuvor gekürzt. Nur in Ausnahmefällen wird die volle IPAdresse an einen Server von Google in den USA übertragen und dort gekürzt. Die im Rahmen von Google Analytics von dem entsprechenden Browser übermittelte IP-Adresse wird nicht mit anderen Daten von Google zusammengeführt. Im Auftrag des Seitenbetreibers wird Google die anfallenden Informationen benutzen, um die Nutzung der Website auszuwerten, um Reports über die Websiteaktivitäten zusammenzustellen und um weitere mit der Websitenutzung und der Internetnutzung verbundene Dienstleistungen dem Seitenbetreiber gegenüber zu erbringen (Art. 6 Abs. 1 lit. f DSGVO). Das berechtigte Interesse an der Datenverarbeitung liegt in der Optimierung dieser Website, der Analyse der Benutzung der Website und der Anpassung der Inhalte. Die Interessen der Nutzer werden durch die Pseudonymisierung hinreichend gewahrt. Google LLC. ist nach dem sog. Privacy Shield zertifiziert (Listeneintrag hier) und gewährleistet auf dieser Basis ein angemessenes Datenschutzniveau. Die gesendeten und mit Cookies, Nutzerkennungen (z. B. User-ID) oder Werbe-IDs verknüpften Daten werden nach 50 Monaten automatisch gelöscht. Die Löschung von Daten, deren Aufbewahrungsdauer erreicht ist, erfolgt automatisch einmal im Monat Die Erfassung durch Google Analytics kann verhindert werden, indem der Seitenbesucher die Cookie-Einstellungen für diese Website anpasst. Der Erfassung und Speicherung der IPAdresse und der durch Cookies erzeugten Daten kann außerdem jederzeit mit Wirkung für die Zukunft widersprochen werden. Das entsprechende Browser- Plugin kann unter dem folgenden Link heruntergeladen und installiert werden: https://tools.google.com/dlpage/gaoptout. The website visitor can prevent data collection via Google Analytics on this website by clicking here. An “Opt-out Cookie” shall then be applied which shall prevent any future collection of the site visitors data when visiting this website. Weitere Informationen zur Datennutzung durch Google, Einstellungs- und Widerspruchsmöglichkeiten, finden sich in der Datenschutzerklärung von Google (https://policies.google.com/privacy) sowie in den Einstellungen für die Darstellung von Werbeeinblendungen durch Google (https://adssettings.google.com/authenticated).
Spam Protection with Google reCAPTCHA
We have implemented Google reCAPTCHA in forms on our website to check whether the data entered in the forms comes from human visitors or from machines or automated programs, also known as “bots”. This tool automatically analyzes the behavior of website visitors as soon as they interact with the website using various information like IP address, length of stay, and mouse movements. The data processed includes usage data such as the website accessed, date and time of access, and mouse movements, as well as communication data like IP addresses, browser type, and operating system. This processing is targeted at website visitors and users of online services. The primary purpose of this processing is to prevent the misuse of our contact form, thereby enhancing security. The legal basis for this is our legitimate interest according to Art. 6 para. 1 p. 1 lit. f. GDPR. The data recipients include Google Ireland Ltd, based at Google Building Gordon House, Barrow St, Dublin 4, Ireland, (https://policies.google.com/privacy) and our website hosting provider. While your personal data is processed within the EU, the retention time for the processed data is determined by Google Ireland Limited. Additional information can be found in the Google reCAPTCHA privacy policy: https://policies.google.com/privacy
Website Analytics
When you visit our website, we collect information about your usage through a web analytics tool provided by our hosting service. This tool collects and combines your IP address and user agent, shortens it and stores this data using a hash function. This process creates a visitor identifier that is encrypted with a randomly generated value (SALT) that changes every 24 hours. This method ensures that your IP address cannot be reconstructed from the stored visitor identifier, thus maintaining your anonymity. In addition, we do not merge this information with any other data and it is stored only on the hosting provider’s server.
We also process web analytics data, HTTP data and web analytics profile data. The web analytics tool we use creates and stores a web analytics profile, which includes details about your use of the website, such as page views, visit frequency, time spent on each page, and the user agent of your device. This includes usage data (such as web pages visited and access times) and communication data (such as browser type, operating system and IP addresses).
Our purpose in processing this data is to analyse user behaviour in aggregate form in order to improve the presentation and content of our website. The legal basis for this processing is our legitimate interest (Art. 6 para. 1 lit. (f) GDPR), in particular in carrying out web measurements in order to improve our products and website.
The data collected is shared with our website hosting provider and processed within the EU.