Privacy policy

This is a translation for convenience. The German Datenschutzerklärung is legally binding.

1. Controller

Grand Thai Massage, owner Phumiphinat Hongsaeng, Sophienstraße 34A, 76530 Baden-Baden, Germany
Email: grandthaimassage.badenbaden@gmail.com, phone: 07221 7027 000

2. In short

  • Cookies are only set with your consent (Google Ads, section 9).
  • Fonts and images are served from our own server, not from third parties.
  • You can book online through our booking system, or via WhatsApp, phone or email.

3. Hosting and server log files

The website runs on a server we rent in Germany. When you visit, the web server automatically records your IP address, date and time, the page requested, the amount of data transferred, the referrer and your browser identification. This is technically necessary to deliver the website securely and reliably (Art. 6(1)(f) GDPR). Log files are deleted automatically after 14 days at the latest.

4. Prices, opening hours and current notices

When you open the home page, the website loads our current prices and opening hours and checks whether we have published a current notice (e.g. changed opening hours). This information comes from our studio system, operated on our behalf by Zabaiherz (data processing under Art. 28 GDPR). Your IP address and technical request data are transmitted to its server (Art. 6(1)(f) GDPR). So that a notice does not reappear on every page, your browser storage (sessionStorage / localStorage) records that you have seen it; no cookies are set for this.

5. Contact via WhatsApp

When you click a WhatsApp button, WhatsApp opens with a prepared message. Only then is data transferred to WhatsApp (WhatsApp Ireland Limited / Meta Platforms), possibly including transfers to the USA. WhatsApp's privacy policy applies. We use your message only to arrange your appointment (Art. 6(1)(b) GDPR). If you prefer not to use WhatsApp, please call or email us.

6. Contact by phone or email

We use your details only to handle your enquiry or appointment (Art. 6(1)(b) GDPR) and delete them once they are no longer needed and no statutory retention obligations apply.

7. Online booking

For online bookings we process the data you enter (name, phone number, email address, chosen massage, appointment and any notes) to perform the contract (Art. 6(1)(b) GDPR). The booking system is operated on our behalf by Zabaiherz (data processing under Art. 28 GDPR). You receive a confirmation email with a link to cancel the appointment.

So you do not have to enter your details again next time, the booking form stores first name, last name, phone number and email address in your browser's local storage after a successful booking (zabaiherz.booking.customer); you can delete this copy at any time in your browser settings. After booking you may voluntarily rate how easy it was.

If the booking form says so, we send you one email after your appointment asking for a review, with a link to book again (§ 7(3) UWG, Art. 6(1)(f) GDPR). You can object at any time via the unsubscribe link or by email.

8. Payment

If you pay online, Stripe Payments Europe, Ltd. (Dublin, Ireland) processes the payment data directly; we never receive full card details. Stripe loads its own scripts in the booking window and may offer Google Pay, Apple Pay or Link depending on your device (Art. 6(1)(b) GDPR). Transfers to the USA are based on the EU-US Data Privacy Framework or standard contractual clauses. More: stripe.com/privacy.

9. Google Ads conversion measurement (consent only)

With your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG) we use Google Ads by Google Ireland Limited (Dublin, Ireland) to measure whether an ad led to a booking. The Google script is only loaded after "Accept"; it sets cookies (e.g. _gcl_*) and transmits usage data, possibly to the USA. Without consent nothing is loaded from Google. Your choice is kept in your browser's local storage (zbh_consent).

Withdrawal: at any time via "Withdraw cookie consent" in the footer of every page; the Google Ads cookies are then deleted.

10. Google Maps

We do not embed a map. The "Get directions" link opens Google Maps in a new window; only then does Google's privacy policy apply.

11. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, to object to processing based on Art. 6(1)(f) GDPR and to withdraw consent. Please contact us at the address above. You may also lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

12. Encryption

This website is served over HTTPS only.