Privacy Policy

1. Introduction

Aurelis is committed to protecting the privacy and personal data of individuals who interact with our heritage property services. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with Thailand's Personal Data Protection Act (PDPA) and international data protection standards. This policy applies to all individuals who visit our website, inquire about properties, or utilize our services.

By providing personal information to Aurelis, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services or provide personal information.

For questions or concerns regarding this policy, please contact our data protection officer at privacy@aurelioesal.

2. Data Controller Information

Aurelis, located at 174/11 Sukhumvit Road, Khlong Toei, Bangkok 10110, Thailand, serves as the data controller responsible for processing your personal information. We determine the purposes and means of processing personal data collected through our website and services.

All inquiries regarding data processing should be directed to our designated contact: privacy@aurelioesal

3. Personal Data We Collect

We collect personal information that you provide directly when interacting with our services. The categories of personal data we may collect include:

Contact Information

Name, email address, phone number, and mailing address. This information is collected when you submit inquiry forms, request property information, or communicate with our staff.

Property Inquiry Details

Specific property interests, preferred rental periods, budget considerations, and cultural interests relevant to property selection. This information helps us provide appropriate property recommendations.

Residence Information

For confirmed residents, we collect identification documentation, payment information, emergency contacts, and preferences regarding property features and services. This information supports residence agreements and service delivery.

Website Usage Data

Technical information including IP address, browser type, device information, pages visited, time spent on pages, and referring website. This data is collected automatically through cookies and similar technologies.

Communication Records

Records of correspondence, phone calls, and meetings with our staff. These records support service quality and help us address inquiries effectively.

4. How We Use Personal Data

Personal data is processed for specific, legitimate purposes in accordance with applicable law. We use your information for the following purposes:

Service Delivery

To provide property information, arrange viewings, process residence agreements, manage property access, and deliver requested services. This constitutes performance of contract or steps taken at your request before entering into a contract.

Communication

To respond to inquiries, provide updates about properties or services, send confirmations, and maintain ongoing communication with residents. This is based on contract performance, legitimate interest, or your consent where applicable.

Service Improvement

To analyze service usage, identify areas for improvement, develop new offerings, and enhance overall service quality. This processing is based on our legitimate interest in improving services.

Legal Compliance

To comply with applicable laws, regulations, and legal processes including tax obligations, property registration requirements, and data protection laws. This processing is necessary for legal compliance.

Marketing Communications

With your explicit consent, to send information about new properties, cultural events, or services that may interest you. You may withdraw consent and unsubscribe from marketing communications at any time.

5. Legal Basis for Processing

We process personal data only when we have a valid legal basis. The legal grounds we rely on include:

Consent

Where you have provided explicit consent for specific processing activities, such as marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Contract Performance

Processing necessary to fulfill our obligations under residence agreements or to take steps requested by you before entering into a contract, such as providing property information or arranging viewings.

Legitimate Interest

Processing necessary for our legitimate business interests, such as service improvement, fraud prevention, and security, provided these interests do not override your fundamental rights and freedoms.

Legal Obligation

Processing required to comply with legal obligations under Thai law or international regulations applicable to our operations.

6. Data Retention

Personal data is retained only as long as necessary to fulfill the purposes for which it was collected or as required by law. Our retention periods are as follows:

Inquiry information from prospective residents is retained for 24 months following last contact. Residence agreement documentation and related records are retained for 7 years following agreement termination, in accordance with Thai legal requirements. Marketing communications consent records are maintained until consent is withdrawn. Website usage data and analytics are retained for 18 months.

At the end of applicable retention periods, personal data is securely deleted or anonymized. In cases where retention is required for legal compliance or dispute resolution, data may be retained longer as necessary.

7. Data Sharing and Disclosure

We do not sell personal data. We may share personal information with the following categories of recipients for legitimate business purposes:

Service Providers

Third-party service providers who assist with website hosting, payment processing, property maintenance, security services, and other operational functions. These providers are contractually obligated to protect personal data and use it only for specified purposes.

Property Owners

Where necessary for residence arrangement and property management, relevant information is shared with property owners. This sharing is limited to information necessary for property access, maintenance coordination, and service delivery.

Legal Authorities

Personal data may be disclosed to government authorities, law enforcement, or regulatory bodies when required by law or necessary to protect our rights, comply with legal processes, or respond to lawful requests.

Professional Advisors

Lawyers, accountants, and other professional advisors who require access to personal data to provide services to Aurelis. These advisors are bound by confidentiality obligations.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, or damage. Security measures include encrypted data transmission using SSL/TLS protocols, secure server infrastructure with regular security updates, restricted access to personal data based on business need and role-based permissions, regular security assessments and vulnerability testing, employee training on data protection and security practices, and incident response procedures for potential data breaches.

While we strive to protect personal data, no method of transmission or storage is completely secure. We cannot guarantee absolute security but commit to addressing any vulnerabilities promptly and notifying affected individuals of any breaches as required by law.

9. Your Rights

Under Thailand's PDPA and applicable data protection laws, you have the following rights regarding your personal data:

Right of Access

You may request confirmation of whether we process your personal data and obtain a copy of such data. We will provide this information within 30 days of your request.

Right to Rectification

You may request correction of inaccurate or incomplete personal data. We will update records promptly upon verification of corrections.

Right to Erasure

You may request deletion of personal data in certain circumstances, such as when data is no longer necessary for the purposes for which it was collected or when you withdraw consent. This right is subject to legal retention requirements.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request transfer of your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

To exercise these rights, please contact privacy@aurelioesal. We will respond to requests within the timeframes required by applicable law.

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience, analyze site usage, and support website functionality. For detailed information about our cookie practices, including types of cookies used and how to manage cookie preferences, please refer to our Cookie Policy.

You may control cookie settings through your browser preferences. Note that disabling certain cookies may affect website functionality and your ability to access certain features.

11. International Data Transfers

Personal data is primarily processed and stored within Thailand. In cases where data is transferred to countries outside Thailand, we ensure appropriate safeguards are in place to protect personal data in accordance with Thai data protection law. These safeguards may include standard contractual clauses approved by relevant authorities, adequacy decisions recognizing equivalent protection levels, or other legally recognized transfer mechanisms.

If you have questions about international data transfers, please contact privacy@aurelioesal.

12. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from someone under 18 without parental consent, we will take steps to delete such information promptly. Parents or guardians who believe we may have collected information from a minor should contact privacy@aurelioesal.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or for other operational reasons. The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Material changes will be communicated through prominent notice on our website or direct communication to registered users. Continued use of our services after changes become effective constitutes acceptance of the updated policy.

We encourage periodic review of this Privacy Policy to stay informed about how we protect personal information.

14. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) in Thailand or other relevant supervisory authority.