Menu
(AI concept image)
Last updated: 20 October 2026

Privacy policy

1. Controller

Responsible for the processing of personal data on mythaicity.com is:

Design Planet, Inh. Simon Mast, Tulpenweg 4, 8107 Buchs ZH, Switzerland. E-mail: info@mythaicity.com, phone: +41 76 309 90 90.

Design Planet is also the data controller within the meaning of the Thai Personal Data Protection Act (PDPA). For all questions about data protection, please contact us at the address above.

2. Scope and applicable law

This privacy policy applies to the website mythaicity.com, including the travel guide, the business directory, the forms and the paid packages.

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). For people in Thailand, sections 13 and 14 also explain how we meet the requirements of the Thai Personal Data Protection Act B.E. 2562 (2019) (PDPA).

3. Principles

We process only the personal data needed for the respective purpose, and only for as long as this is necessary or required by statutory retention obligations. Processing is transparent, proportionate and limited to the stated purposes. We do not sell personal data and do not create advertising profiles.

4. Hosting and server log files

This website is a static website. It is hosted by Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Les Acacias (Geneva), Switzerland, in data centres in Switzerland.

When you visit the website, the server automatically records technical data in log files, in particular your IP address, the date and time of access, the page requested (URL) and the identification of your browser (user agent). These data are needed to operate the website securely and stably, for example to detect and defend against attacks. They are not combined with other data.

The log files are kept only for as long as necessary for operation and security and are then deleted by the host.

The connection between your browser and the website is encrypted (HTTPS/TLS).

5. No cookies, no tracking, no third-party content

This website does not set cookies and does not use any analytics or tracking services.

When you open a page, no content is loaded from third parties: no advertising networks, no embedded maps or videos, no social media plugins and no external fonts. Our fonts are stored on our own server.

Third parties receive data from your browser only when you actively click a link or button that takes you to them (see sections 9 and 10).

6. Business listings from open data

Most listings in the directory are based on open data from the Overture Maps Foundation (dataset “Places”). These data come mainly from Meta and also from Microsoft, Foursquare and AllThePlaces and are published under the licences CDLA-Permissive-2.0, Apache-2.0 and CC0.

From these data we use and show only: business name, category, address, geographic coordinates, business phone number and, where available, a link to the website or social media page of the business. We do not take over e-mail addresses or names of owners.

Data about companies are not personal data. For sole proprietors and small businesses, however, some of these details (for example a phone number or a business name that contains a person’s name) may relate to an identifiable person.

Purpose: we show the business in the directory so that visitors can find it, call it and get directions. We use these data only for this purpose. Legal basis: the overriding interest of visitors, of the businesses and of Design Planet in a publicly accessible business directory (Art. 31 FADP; for the PDPA see section 13).

Listings show the source of their data and are not verified unless they carry the badge “Verified by owner”. We update the open data regularly. If a business no longer appears in the source data, we stop showing its listing.

Listings are publicly accessible and can be found by search engines and AI systems.

You can object to the publication at any time and request correction or deletion (section 7). After a deletion we keep only the source identifier of the listing and the date of deletion, so that the listing does not reappear with a later data update.

7. Reporting, correcting and deleting listings

Anyone can report a listing that is wrong, belongs to a closed business or should be deleted, using the report form at mythaicity.com/en/report/ or by e-mail to info@mythaicity.com. If you give us your e-mail address, we reply within 5 working days.

We check every report and correct or delete the listing after checking. Owners can claim the listing of their business free of charge and correct it.

8. Forms and e-mail

You can contact us, report a listing, claim a listing or add a listing using the forms on this website. We process the details you enter (for example name, e-mail address, phone number, details of the business and your message) only to handle your request.

The form sends your details encrypted (HTTPS) to our web server, which forwards them to us by e-mail. The details are not stored on the web server. Spam protection runs on our own server, without cookies and without third-party services such as reCAPTCHA.

E-mails are transmitted and stored by our e-mail provider Infomaniak Network SA, Switzerland. Between e-mail servers, messages are only encrypted if the servers involved support it; we therefore cannot guarantee end-to-end encryption.

We delete enquiries 12 months after the matter has been closed. Details we need to manage a claimed listing or a package are kept for as long as you manage the listing with us; for payment records see section 10.

Legal basis: handling your request, the performance of a contract with you, or our legitimate interest in answering enquiries.

9. Call, directions and links to other websites

The button “Call” is a simple phone link: your device starts the call. We do not receive any information about it.

The button “Directions” is a simple link. Only when you click it does your own map app or map website (for example Google Maps or Apple Maps) open with the location of the business. From then on, the privacy policy of that provider applies, and data may be transferred abroad, including to the USA.

Links to the websites and social media pages of businesses are simple links. Only when you click them do you go to the third-party website, whose privacy policy then applies.

10. Paid packages and payment

If you buy a package (Pro or Featured), we process the details needed for the contract: the business and its listing, the name of the contact person, the e-mail address, the package purchased, its term and the payment reference. We use the e-mail address to send you the confirmation and a reminder 30 days before the package expires.

You order a package with the order form. We store the order on our web server at Infomaniak in Switzerland and use the details to check that you represent the business (usually by calling the phone number of the listing) and to send you a payment link by e-mail. Orders that are not paid are deleted 12 months after the order.

For online payment, you are redirected to the payment page of our payment service provider Stripe (contractual partner: Stripe Payments Europe, Ltd., Ireland). You enter your payment details directly with Stripe; we do not receive card or account details. You can pay by credit or debit card, also via Apple Pay or Google Pay. If you choose Apple Pay or Google Pay, the respective provider also processes your data under its own responsibility and privacy policy.

From Stripe we receive confirmation of whether and when the payment was made, the amount, the package, a payment reference and the contact details entered at checkout (such as e-mail address and name). Stripe processes payment data partly under its own responsibility (for example to prevent fraud and to meet legal obligations) and may process data in the USA and in other countries. Stripe’s privacy policy applies on its payment page (stripe.com/privacy), and Stripe may set its own cookies there.

We keep invoices and payment records for 10 years, as required by Swiss law (Art. 958f Code of Obligations). Legal basis: the performance of the contract and our legal obligations.

11. Disclosure to third parties and abroad

We disclose personal data only if this is necessary for the purposes described, if you have consented or if we are legally obliged to do so.

We process personal data in principle in Switzerland. If personal data are disclosed abroad, for example because a service provider processes data outside Switzerland, this happens only to countries with adequate data protection as recognised by the Federal Council (for certified companies in the USA: the Swiss-U.S. Data Privacy Framework), with suitable safeguards such as standard contractual clauses, or on the basis of a statutory exception (Art. 16 and 17 FADP).

Recipients are in particular:

  • Infomaniak Network SA, Switzerland, for hosting the website and for transmitting and storing e-mails;
  • Stripe Payments Europe, Ltd., Ireland, and the payment provider you choose, if you buy a package;
  • the provider of your map app or of a linked website, only after your click (section 9);
  • authorities, if we are legally obliged to disclose data.

12. Data security

We take appropriate technical and organisational measures to protect your data, including encrypted transmission (HTTPS), a strict Content Security Policy in the browser, hosting in Switzerland, no storage of form data on the web server and no unnecessary third-party services.

13. Information for data subjects in Thailand (PDPA)

This section applies to people in Thailand, in particular to owners of businesses listed in the directory. It contains the information under Sections 23 and 25 PDPA about personal data that we did not collect from you directly.

Data concerned: for listings from open data, the business name, category, address, geographic coordinates, business phone number and, where available, a link to a website or social media page (section 6). We do not collect e-mail addresses, owner names or other personal details from open sources. If you contact us, claim or add a listing or buy a package, we process the details you provide (sections 8 and 10).

Source: the Places dataset of the Overture Maps Foundation, which is based mainly on data from Meta and also on data from Microsoft, Foursquare and AllThePlaces.

Purpose and legal basis: we publish the listing so that travellers and residents can find, call and locate the business. The legal basis is the legitimate interest (Section 24 (5) PDPA) of visitors, of the businesses and of Design Planet in a public business directory. To protect your interests, we limit the data to business contact details, do not take over e-mail addresses or owner names, and make it easy to object. For packages, the legal basis is the performance of a contract (Section 24 (3) PDPA).

Retention: a listing is shown for as long as the business appears in the source data or is managed by its owner, and for as long as we operate the directory. Enquiries are deleted 12 months after the matter has been closed, payment records after 10 years.

Recipients and transfer abroad: the data are stored on servers in Switzerland and published on the website. Recipients are listed in section 11. The transfer to Switzerland is necessary to operate the directory and, for packages, to perform the contract with you.

How to object: use the report form at mythaicity.com/en/report/ or write to info@mythaicity.com. If you object to the publication of a listing (Section 32 PDPA), we remove it after checking the request. For your other rights see sections 14 and 16.

14. Your rights under the PDPA

Within the limits of the PDPA, you have the right to:

  • access your personal data and obtain a copy;
  • receive your personal data in a commonly used electronic format and have them transferred to another controller (data portability);
  • object to the processing of your personal data at any time, in particular to the publication of a listing and to direct marketing;
  • have your personal data deleted, destroyed or anonymised;
  • have the processing of your personal data restricted;
  • have incorrect, incomplete or outdated personal data corrected;
  • withdraw any consent you have given, with effect for the future;
  • lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.

15. Your rights under Swiss law

Within the limits of the FADP, you have in particular the right to:

  • access the personal data we process about you;
  • have incorrect personal data corrected;
  • have your personal data deleted, including a listing;
  • receive your personal data in a commonly used electronic format or have them transferred to another controller;
  • object to certain processing, in particular to the publication of a listing;
  • withdraw any consent you have given, with effect for the future.

16. Exercising your rights and complaints

To exercise your rights, please contact us at info@mythaicity.com or by post at the address in section 1. We may ask for proof of identity. We reply within 5 working days and complete your request without undue delay, at the latest within 30 days.

In Switzerland, you can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. In Thailand, you can lodge a complaint with the Office of the Personal Data Protection Committee (PDPC). If the EU General Data Protection Regulation applies to you, you have comparable rights and can contact the data protection authority in your country.

17. No automated individual decisions

We do not make automated individual decisions and do not carry out profiling within the meaning of the FADP.

18. Changes to this privacy policy

We may adapt this privacy policy if our website, our service providers or the legal requirements change. The version published on this website applies.