[et_pb_section fb_built=”1″ custom_padding_last_edited=”on|tablet” admin_label=”Header” _builder_version=”4.16″ custom_margin=”||||false|false” custom_padding=”110px||180px||false|false” custom_padding_tablet=”50px||50px||true|false” custom_padding_phone=”” locked=”off” global_colors_info=”{}”][et_pb_row _builder_version=”4.27.4″ z_index=”10″ custom_padding=”0px|0px|0px|||” locked=”off” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ background_color=”#ffffff” z_index=”11″ custom_padding=”50px|60px|50px||true|false” custom_padding_tablet=”0px|0px|||false|false” custom_padding_phone=”” custom_padding_last_edited=”on|phone” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.4″ _module_preset=”9d5d3c4d-e5a5-4d42-bbe9-b29ddd3ebdfc” header_line_height=”1.5em” header_font_size_last_edited=”off|phone” header_line_height_last_edited=”off|desktop” locked=”off” inline_fonts=”Krub,Noto Sans Thai Looped,Charm” global_colors_info=”{}”]<\/p>\n
Preamble<\/strong><\/span><\/p>\n With the following privacy policy we would like to inform you which types of your personal data (hereinafter also abbreviated as “data”) we process for which purposes and in which scope. The privacy statement applies to all processing of personal data carried out by us, both in the context of providing our services and in particular on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as “online services”). <\/span><\/p>\n The terms used are not gender-specific.<\/span><\/p>\n Last Update: 22. June 2025<\/span><\/p>\n Table of contents<\/span><\/strong><\/span><\/p>\n Thorsten Fleischer E-mail address: privacy@madumayu.com<\/a> Impressum: https:\/\/www.madumayu.com\/th\/legal-notice<\/a><\/span><\/span><\/p>\n The following table summarises the types of data processed, the purposes for which they are processed and the concerned data subjects.<\/span><\/p>\n Categories of Processed Data<\/span><\/strong><\/span><\/p>\n Categories of Data Subjects<\/strong><\/span><\/p>\n Relevant legal bases according to the GDPR:<\/strong> In the following, you will find an overview of the legal basis of the GDPR on which we base the processing of personal data. Please note that in addition to the provisions of the GDPR, national data protection provisions of your or our country of residence or domicile may apply. If, in addition, more specific legal bases are applicable in individual cases, we will inform you of these in the data protection declaration. <\/span><\/p>\n National data protection regulations in Germany: <\/strong> Reference to the applicability of the GDPR and the Swiss DPA: <\/strong> We take appropriate technical and organisational measures in accordance with the legal requirements, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, in order to ensure a level of security appropriate to the risk.<\/span><\/p>\n The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access to, input, transmission, securing and separation of the data. In addition, we have established procedures to ensure that data subjects’ rights are respected, that data is erased, and that we are prepared to respond to data threats rapidly. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and service providers, in accordance with the principle of privacy by design and privacy by default. <\/span><\/p>\n Masking of the IP address: If IP addresses are processed by us or by the service providers and technologies used and the processing of a complete IP address is not necessary, the IP address is shortened (also referred to as “IP masking”). In this process, the last two digits or the last part of the IP address after a full stop are removed or replaced by wildcards. The masking of the IP address is intended to prevent the identification of a person by means of their IP address or to make such identification significantly more difficult. <\/span><\/p>\n Securing online connections through TLS\/SSL encryption technology (HTTPS): To protect the data of users transmitted via our online services from unauthorized access, we employ TLS\/SSL encryption technology. Secure Sockets Layer (SSL) and Transport Layer Security (TLS) are the cornerstones of secure data transmission on the internet. These technologies encrypt the information that is transferred between the website or app and the user’s browser (or between two servers), thereby safeguarding the data from unauthorized access. TLS, as the more advanced and secure version of SSL, ensures that all data transmissions conform to the highest security standards. When a website is secured with an SSL\/TLS certificate, this is indicated by the display of HTTPS in the URL. This serves as an indicator to users that their data is being securely and encryptedly transmitted. <\/span><\/p>\n In the course of processing personal data, it may happen that this data is transmitted to or disclosed to other entities, companies, legally independent organizational units, or individuals. Recipients of this data may include service providers tasked with IT duties or providers of services and content that are integrated into a website. In such cases, we observe the legal requirements and particularly conclude relevant contracts or agreements that serve to protect your data with the recipients of your data. <\/span><\/p>\n Data Processing in Third Countries: If we transfer data to a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or if this occurs in the context of using third-party services or the disclosure or transfer of data to other individuals, entities, or companies (which becomes apparent either from the postal address of the respective provider or when explicitly mentioned in the privacy policy regarding data transfer to third countries), this is always done in accordance with legal requirements. <\/span><\/p>\n For data transfers to the USA, we primarily rely on the Data Privacy Framework (DPF), which has been recognized as a secure legal framework by the EU Commission’s adequacy decision of July 10, 2023. Additionally, we have concluded Standard Contractual Clauses with the respective providers, which comply with the EU Commission’s requirements and establish contractual obligations to protect your data. <\/span><\/p>\n This dual safeguard ensures comprehensive protection of your data: The DPF serves as the primary level of protection, while the Standard Contractual Clauses act as an additional security measure. Should any changes occur within the DPF framework, the Standard Contractual Clauses will serve as a reliable fallback option. This ensures that your data remains adequately protected even in the event of political or legal changes. <\/span><\/p>\n For individual service providers, we will inform you whether they are certified under the DPF and if Standard Contractual Clauses are in place. The list of certified companies and further information about the DPF can be found on the U.S. Department of Commerce’s website at https:\/\/www.dataprivacyframework.gov\/<\/a><\/span>. <\/span><\/p>\n\n
Controller<\/span><\/strong><\/span><\/h2>\n
c\/o IP-Management #4725
Ludwig-Erhard-Str. 18
20459 Hamburg
GERMANY <\/span><\/p>\n
Phone: +49 1520 7128151<\/span><\/p>\nOverview of processing operations<\/span><\/strong><\/span><\/h2>\n
\n
\n
Purposes of Processing<\/span><\/strong><\/span><\/h2>\n
\n
Relevant legal bases<\/span><\/strong><\/span><\/h2>\n
\n
In addition to the data protection regulations of the GDPR, national regulations apply to data protection in Germany. This includes in particular the Law on Protection against Misuse of Personal Data in Data Processing (Federal Data Protection Act – BDSG). In particular, the BDSG contains special provisions on the right to access, the right to erase, the right to object, the processing of special categories of personal data, processing for other purposes and transmission as well as automated individual decision-making, including profiling. Furthermore, data protection laws of the individual federal states may apply. <\/span><\/p>\n
These privacy policy serves both to provide information pursuant to the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR). For this reason, we ask you to note that due to the broader spatial application and comprehensibility, the terms used in the GDPR are applied. In particular, instead of the terms used in the Swiss FADP such as “processing” of “personal data”, “predominant interest”, and “particularly sensitive personal data”, the terms used in the GDPR, namely “processing” of “personal data”, as well as “legitimate interest” and “special categories of data” are used. However, the legal meaning of these terms will continue to be determined according to the Swiss FADP within its scope of application. <\/span><\/p>\nSecurity Precautions<\/strong><\/span><\/h2>\n
Transmission of Personal Data<\/strong><\/span><\/h2>\n
International data transfers<\/strong><\/span><\/h2>\n