English
Türkçe
Deutsch
ภาษาไทยPrivacy Policy
We explain in plain language how we collect your personal data, what we use it for, who we share it with and how we protect it.
Your personal data is never sold or rented to third parties under any circumstances.
We limit ourselves to the information required for your account, communication and property transactions.
Wherever you connect from, your local data protection rights apply.
You can exercise your rights of access, rectification, erasure and objection at any time.
1. Scope and data controller
This Privacy Policy applies to the worldofcondos.com website, the World of Condos mobile app, our WhatsApp, email, phone and social media channels, and all services we provide at our offices (together, the "Services").
The data controller for your personal data is World of Condos Co., Ltd., a company incorporated under the laws of Thailand ("World of Condos", "we", "us"). Our Istanbul team is subject to the same principles for the communication and consultancy activities provided in Türkiye.
| Details | |
|---|---|
| Company name | World of Condos Co., Ltd. |
| Address | 124 75, Pong, Bang Lamung District, Chon Buri 20150, Thailand |
| info@worldofcondos.com | |
| Phone | +66 81 148 8584 |
This policy has been prepared on the basis of the Thai Personal Data Protection Act B.E. 2562 (2019) ("PDPA"), the EU General Data Protection Regulation 2016/679 ("GDPR") to the extent we provide services to individuals in the European Union, and, for individuals in Türkiye, the Turkish Personal Data Protection Law No. 6698 ("KVKK").
2. What personal data do we collect?
We only collect the data needed to provide our services. The data we collect depends on how you use our services:
| Category | Examples | Where do we get it? |
|---|---|---|
| Identity and contact | First name, last name, email, phone, WhatsApp number, country, city, gender (optional) | From you (registration, contact and consultancy requests) |
| Account information | Username, hashed password, profile photo, favourite listings and designs, saved calculations | From you and from your use of your account |
| Social sign-in | The name and email from your Google or Apple account that you agree to share | Google LLC / Apple Inc. (with your consent) |
| Requests and correspondence | Your messages, budget, area and property preferences, meeting notes, appointment details | From you |
| Property transactions | Passport details, nationality, purchase and lease agreements, payment plans, foreign exchange transfer documents (FET form), title deed details | From you, from the developer/owner, from banks |
| Property tracking (WOC Account) | Purchase price, rent collections, payment status, return calculations | From you and from the property we manage |
| Technical data | IP address, device and browser information, language and currency preference, pages visited, cookie identifiers | From your device (cookies and similar technologies) |
| Job applications | CV, education and work history, work permit/visa status | From you via our careers page |
Sensitive data: We do not intentionally collect special categories of personal data such as race, religion, health, biometric data or criminal records. If a document you share contains such information, we only process it to the extent necessary for a legal obligation.
3. For what purposes and on what legal bases do we process your data?
We tie every processing activity to a legal basis. The table below shows our most common processing activities and the legal bases they rely on:
| Purpose | Legal basis |
|---|---|
| Creating an account, signing in, favourites and My Account features | Performance of a contract (PDPA s. 24(3) · GDPR Art. 6(1)(b) · KVKK Art. 5/2-c) |
| Providing listing, project and price information on request, giving consultancy, planning video tours and visits | Pre-contractual steps and performance of a contract |
| Carrying out purchase, lease and title transfer processes; coordinating with developers, owners, lawyers and banks | Performance of a contract and legal obligation |
| Identity verification, anti-money laundering and compliance with legislation on foreign property ownership | Legal obligation (PDPA s. 24(6) · GDPR Art. 6(1)(c) · KVKK Art. 5/2-ç) |
| Rent collection and property management reporting (WOC Account) | Performance of a contract |
| Site security, preventing fraud and bot traffic, improving our services | Legitimate interest (PDPA s. 24(5) · GDPR Art. 6(1)(f) · KVKK Art. 5/2-f) |
| Analytics and marketing cookies, personalised listing recommendations | Explicit consent (you can withdraw it at any time) |
| New listing alerts, newsletters and campaign communications | Explicit consent |
| Evaluating job applications | Pre-contractual steps and legitimate interest |
| Establishing, exercising and defending legal claims | Legitimate interest and legal obligation |
We do not use your data for any purpose incompatible with the purpose for which it was collected. If a new purpose arises, we will inform you in advance and obtain your consent where required.
4. Cookies and similar technologies
Our site uses technologies such as cookies, pixel tags and local storage. We enable non-essential cookies only with your consent, and you can change your preferences at any time.
| Type | What does it do? | Example | Consent |
|---|---|---|---|
| Essential | Sign-in, security (CSRF), language and currency preference, form protection | Session and security cookies, Google reCAPTCHA | Not required |
| Analytics | Measuring how the site is used, anonymously/statistically | Google Analytics 4 | Required |
| Marketing | Measuring ads and showing content relevant to your interests | Meta (Facebook/Instagram) technologies | Required |
| Embedded content | Displaying video and social media content | YouTube, Instagram | When you open the content |
5. Who do we share your data with?
We do not sell your personal data. We only share it in the following cases and to the extent necessary:
- Developers and property owners: So that a reservation, offer, purchase or lease can be made at your request.
- Legal and official processes: The Land Office, banks (for fund transfers from abroad and the FET form), lawyers, notaries and translators.
- Our service providers: Hosting, email, WhatsApp Business, analytics, map and video services. These providers process data only on our instructions and are bound by contract.
- Within our group: Between our Thailand and Türkiye teams, solely to provide services to you.
- Competent authorities: Where required by law or where there is a valid official request.
- Business transfer: In the event of a merger or transfer of the company, provided that the protections in this policy are maintained.
6. International data transfers
Because our services are offered to users in Thailand, Türkiye and Europe, your data may be transferred between these countries. Some of the service providers we use (e.g. cloud and email services) may also process data in other countries.
- PDPA: Transfers to countries with adequate protection (s. 28), or appropriate safeguards, standard contracts or your explicit consent (ss. 28–29).
- GDPR: Adequacy decisions or the European Commission's Standard Contractual Clauses (SCCs).
- KVKK: Adequacy decisions, standard contracts (notified to the Authority within 5 business days of signature) and other appropriate safeguards introduced by the 2024 amendments (Law No. 7499) (Art. 9).
7. How long do we keep your data?
| Data | Retention period |
|---|---|
| Account information, favourites, profile photo | For as long as your account is open; deleted or anonymised within 30 days at the latest after you delete your account |
| Contact and consultancy requests | 2 years from the last contact |
| Purchase, lease and payment records, contracts | After the relationship ends, for the period required by Thai accounting, tax and anti-money laundering legislation (generally at least 5 years) |
| Marketing consents | Until you withdraw your consent; the withdrawal record is kept as evidence |
| Analytics data | Up to 14 months |
| Job applications | 1 year from the application (longer with your explicit consent) |
When the period expires, we securely delete, destroy or anonymise the data. If there is a legal dispute, we may keep the relevant records until the dispute is resolved.
8. How do we protect your data?
- All connections are encrypted with TLS (HTTPS); passwords are stored in irreversible (hashed) form.
- Access to data is limited to employees who need it for their duties and who are bound by confidentiality obligations.
- Bot and abuse protection is used on form and sign-in pages.
- Data processing agreements are in place with our service providers.
Data breach: In the event of a breach that may affect your rights, we notify the Thai Personal Data Protection Committee (PDPC) within 72 hours of becoming aware of it. If there is a high risk, we will also inform you without delay. We comply with the notification obligations under the GDPR and the KVKK with the same care.
9. Minors
Our services are not intended for persons under 18, and we do not knowingly collect personal data from minors. The age of majority in Thailand is 20; property transactions and data processing on behalf of persons under 20 require the consent of a legal representative.
10. Your rights
You have the right to access, rectify, erase and port your personal data, to object to processing, to restrict processing and to withdraw your consent. For details of your rights and how to apply, see the Your Data Rights (GDPR · PDPA · KVKK) page.
11. Changes to this policy
We may update this policy in line with changes in legislation and in our services. We will inform you in advance of material changes on the site or by email. The effective date of each version is shown at the top of the page.
12. Contact
For any privacy-related questions and requests: info@worldofcondos.com · 124 75, Pong, Bang Lamung District, Chon Buri 20150, Thailand
