Your Data Rights: GDPR · PDPA · KVKK
Wherever you live, you are in control of your personal data. On this page you can find out which rights you have and how to exercise them.
You can exercise your rights of access, rectification, erasure, objection and all other rights with a single request.
We resolve your requests free of charge within 30 days at the latest.
For all your requests, simply write to info@worldofcondos.com.
If you are not satisfied with our response, you can apply to the competent data protection authority.
1. Which laws apply?
As the data controller is a company incorporated in Thailand, the Thai PDPA is the core framework for all the data we process. In addition, depending on where you are, the following laws give you further protection:
| Where are you? | Applicable law | Supervisory authority |
|---|---|---|
| Thailand or anywhere in the world | Personal Data Protection Act B.E. 2562 (PDPA), fully in force since 1 June 2022 | Personal Data Protection Committee (PDPC) · pdpc.or.th |
| European Union / EEA | General Data Protection Regulation (GDPR), under Art. 3(2) | The data protection authority of your country |
| Türkiye | Personal Data Protection Law No. 6698 (KVKK) | Personal Data Protection Authority · kvkk.gov.tr |
2. Your rights
To learn what data we process about you, why and how, and to receive a copy of your data.
PDPA s. 30 · GDPR Art. 15 · KVKK Art. 11To ask for incomplete or inaccurate data to be corrected.
PDPA ss. 35–36 · GDPR Art. 16 · KVKK Art. 11To ask for data that is no longer needed or is processed unlawfully to be erased or anonymised.
PDPA s. 33 · GDPR Art. 17 · KVKK Arts. 7, 11To ask for the processing of your data to be temporarily suspended in certain cases.
PDPA s. 34 · GDPR Art. 18To receive your data in a commonly used format or have it transferred to another service.
PDPA s. 31 · GDPR Art. 20To object to processing based on legitimate interest and to direct marketing.
PDPA s. 32 · GDPR Art. 21 · KVKK Art. 11To withdraw your explicit consent at any time; this does not affect the lawfulness of earlier processing.
PDPA s. 19 · GDPR Art. 7 · KVKK Art. 5To complain to the competent authority and to claim compensation for damage caused by unlawful processing.
PDPA ss. 73, 77 · GDPR Arts. 77, 82 · KVKK Arts. 11, 143. How to make a request
You can send all your requests by email to info@worldofcondos.com. Requests are free of charge; you do not need to fill in any form.
Simply state your request (access, rectification, erasure, portability, objection or withdrawal of consent), your name and the email address registered to your account.
- Identity verification: We may ask for reasonable verification details so that your data is not given to the wrong person.
- Response time: We respond within 30 days at the latest (PDPA and KVKK). Under the GDPR, this period may be extended by 2 months for complex requests; we will inform you if it is extended.
- Refusal: Data we are legally required to keep (e.g. contract and payment records) cannot be erased; in that case we will give you our reasons in writing.
4. On what bases do we process data?
We process your data on the basis of performance of a contract, legal obligation, legitimate interest or your explicit consent. The full list of purposes and bases is in section 3 of the Privacy Policy.
5. International transfers
Your data may be transferred between Thailand, Türkiye and the EU. For each transfer we apply the safeguards under PDPA ss. 28–29, Chapter V of the GDPR and KVKK Art. 9, foremost among them standard contractual clauses. You can request a copy of the safeguards used for transfers.
6. Data breach notification
When a data breach is detected, we immediately assess the risks, stop the breach and, where required, notify the Thai PDPC within 72 hours. For breaches that pose a high risk to your rights, we will also inform you without delay and in plain language. We also comply with the notification obligations under the GDPR and the KVKK.
7. Contact and complaints
You can reach our data protection officer at info@worldofcondos.com. If you are not satisfied with our response, you can file a complaint with the Thai PDPC, with the data protection authority in your country if you are in the EU, or with the Personal Data Protection Board if you are in Türkiye.