TDAC

Privacy Policy

We take your data security seriously. This policy outlines how we collect, use, and protect your personal information.

Effective date: April 2026 · Travelservice-Thailand.com

01.Who We Are

Travelservice-Thailand.com is a private travel document assistance service operated by Blue Buff GmbH, registered in Germany. We help travellers prepare and submit their Thailand Digital Arrival Card (TDAC) application.

02. What Data We Collect

To process your application, we collect the following information:

  • Personal Details: Full name, date of birth, nationality.
  • Passport Info: Passport number and expiry date.
  • Contact: Email address and contact details.
  • Travel Details: Travel dates and flight information.
  • Financials: Payment information (processed securely; we do not store card details).
  • Technical: IP address and browser data (collected via cookies).

03.How We Use Your Data

Your data is used exclusively to:

  • Complete and submit your TDAC application.
  • Send your processed documents via email.
  • Provide customer support.
  • Improve our website performance and analytics.
  • Run advertising campaigns (Google Ads).
  • Comply with legal obligations.

04. Legal Basis (GDPR – Art. 6)

  • Contract performance (Art. 6(1)(b)): Processing necessary to deliver our service.
  • Legal obligation (Art. 6(1)(c)): Where required by law.
  • Legitimate interests (Art. 6(1)(f)): Website analytics and fraud prevention.
  • Consent (Art. 6(1)(a)): For marketing cookies and Google Ads tracking.

05. Third-Party Service Providers

ProviderPurpose Location Safeguard
Strato AGWebsite hostingGermanyGDPR Art. 28 DPA
Google LLCAds & AnalyticsUSAEU-US Privacy Framework
Payment ProcessorPayment processingEUGDPR Art. 28 DPA
Brevo / MailchimpEmail deliveryEU / USAEU-US Privacy Framework

06. International Data Transfers

Some providers (Google, Mailchimp) transfer data to the USA. These transfers are covered by the EU-US Data Privacy Framework as approved by the European Commission (July 10, 2023), ensuring an equivalent level of data protection.

07. Data Retention

We retain your personal data for a maximum of 12 months after your application is completed, after which it is securely deleted. Payment records are retained for 10 years in accordance with German commercial law (§ 257 HGB).

08.Your Rights under GDPR

You have the following rights regarding your personal data:

  • Access your data (Art. 15)
  • Rectify incorrect data (Art. 16)
  • Erase your data (Art. 17)
  • Restrict processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)
  • Withdraw consent at any time

09.Right to Lodge a Complaint

You have the right to lodge a complaint with the German data protection authority:

10.Automated Decision-Making

We do not use automated decision-making or profiling as defined in Art. 22 GDPR.

11.Cookies

We use technically necessary cookies and, with your consent, marketing and analytics cookies. For full details please see our Cookie Policy. You can withdraw consent via the settings on our website.

12.Changes to This Policy

We may update this Privacy Policy periodically. The current version will always be available on this page. We will notify you of significant changes via email where possible.