Cookie Policy

Who is responsible

The controller responsible for cookies and similar technologies on this site, and for the personal data processed through them, is:

Cookies and similar technologies

Cookies are small text files that a website stores in your browser. This site and the services it uses also rely on similar technologies: the browser’s local storage and session storage (localStorage, sessionStorage), pixels and scripts that send information about your visit to a provider, and requests to a provider’s servers that store nothing on your device but do reveal your IP address to that provider. This policy covers all of them; wherever it says “cookies”, it means any of these technologies.

Legal basis

Necessary cookies work without your consent, because storing or reading them is strictly necessary to provide the service you ask for (Art. 5(3) of the ePrivacy Directive 2002/58/EC and, in Poland, Art. 399 of the Electronic Communications Law). The personal data involved is processed to provide that service (Art. 6(1)(b) GDPR) and in our legitimate interest in running the site securely and reliably (Art. 6(1)(f) GDPR).

All other cookies — analytics, marketing and external content — are used only with your consent (Art. 6(1)(a) GDPR). Until you decide, and after you refuse, none of them is used, and refusing does not limit what you can do on the site.

One exception is in your hands: if you choose “Play this video” on a single video, only that video loads from TikTok or YouTube, and the provider may set its own cookies while it plays; your saved choice stays as it is.

Cookies used on this site

This list is generated automatically from the site’s register of cookies and from the code that is currently switched on, so it shows what the site actually uses. Cookies that providers set on their own domains (third-party cookies) are listed for information only: our site can neither read nor delete them.

Providers and transfers outside the EEA

Some providers process data outside the European Economic Area (EEA). Each such transfer relies on a safeguard under Chapter V GDPR: an adequacy decision of the European Commission (Art. 45 GDPR) — for the country where the provider is established, or the EU-US Data Privacy Framework for providers certified under it — or the standard contractual clauses adopted by the Commission (Art. 46(2)(c) GDPR). The list below shows the safeguard and the privacy policy of each provider whose services the site currently uses. The service runs on Amazon Web Services servers in Singapore, and our e-mails are sent from Singapore; these transfers rely on the standard contractual clauses of the AWS Data Processing Addendum.

Google Consent Mode and Global Privacy Control

Before any Google tag can run, the site sets Google Consent Mode to “denied” for analytics and advertising. Only after you consent are the matching signals switched to “granted”: analytics consent for analytics storage; marketing consent for advertising storage, user data and personalised ads. We use the advanced mode: the site's own Google tag is loaded with these signals denied, so before your consent it sets no cookies, reads no identifiers and only sends cookieless pings to Google (which carry the page address and your IP address). Its cookies appear only after your consent. Other Google tags added by us are not loaded at all without your consent.

If your browser sends the Global Privacy Control (GPC) signal and you have not decided yet, we treat it as a refusal of everything except necessary cookies, record that refusal and do not show the cookie banner. You can still switch categories on yourself in the privacy settings.

How to change or withdraw your consent

You can change your choice or withdraw your consent at any time, as easily as you gave it: with the shield icon in the corner of the screen, the “Cookie settings” link in the footer, “Privacy settings” in the menu on a phone, or in your profile when you are signed in. When you withdraw a consent, we delete the cookies of that category that our site can reach and, if its code is already running, reload the page so that it stops.

You can also block or delete cookies in your browser settings, including blocking third-party cookies — those that providers set on their own domains, which only you or the provider can delete. Blocking necessary cookies may stop parts of the site, such as signing in, from working.

Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal (Art. 7(3) GDPR).

Proof of your decision and how long we keep it

We save your decision in your browser together with a random consent ID, the date and the version of this policy. It is valid for 12 months; after that, or when the categories or providers change in a way that affects your consent, we ask again. To be able to demonstrate consent (Art. 7(1) GDPR), we also record every decision in our consent log: the consent ID, your choices, the date and time, the version, the page and language, how you decided (for example in the banner or in the settings), your browser’s user agent and a truncated IP address (we remove the last octet of an IPv4 address and the last 80 bits of an IPv6 address). If you are signed in, the entry is linked to your account. We keep the log for 3 years and then delete it.

Your rights and complaints

Where cookies involve your personal data, you have the rights set out in Articles 15 to 22 GDPR — access, rectification, erasure, restriction of processing, data portability and objection — and you can withdraw your consent at any time. To exercise them, write to the address below. The privacy policy explains each right in detail.

Privacy contact: privacy@tripinthai.com

Read the privacy policy

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU or EEA country where you live or work or where the alleged infringement took place (Art. 77 GDPR).

Supervisory authority: The data protection authority in the EU or EEA country where you live or work; in Poland, the President of the Personal Data Protection Office (UODO).

Changes to this policy

We update this policy when the cookies or providers we use change; the date at the top shows the current version. When a change affects what you consented to, we ask for your consent again.

This policy is published in several languages. If the language versions differ, the English version prevails.