We appreciate your interest in our website. The protection of your personal data is very important to us. Below, we provide detailed information about how we handle your data in accordance with the provisions of the General Data Protection Regulation (GDPR).​

​

1. Responsible body

Bang Rak Thai Massage

Siri Ana GmbH

Musterstraße 12

12345 Berlin

Phone: +49 (0)163 8637692

Email: executive.berlin@siri-ana.de

The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.​

 

2. Collection and storage of personal data and the nature and purpose of its use

 

a) When visiting the website (Wix)

When you visit our website, the browser used on your device automatically sends information to our website's server. This information is temporarily stored in a so-called log file. Among other things, the following information is recorded:

• IP address of the requesting computer

• Date and time of access

• Name and URL of the file accessed

• Website from which access is made (referrer URL)

• Browser used and, if applicable, the operating system of your computer

We process the aforementioned data for the following purposes:

• Ensuring a smooth connection to the website

• Evaluating system security and stability

• For other administrative purposes

The legal basis for data processing is Art. 6 (1) lit. f GDPR.

​

b) Contacting us by email or phone

When you contact us, your details (e.g., name, email address, phone number) are stored for the purpose of processing your request. The legal basis is Art. 6 (1) lit. b GDPR.

 

c) Appointment booking via Shore

We use the service provider Shore GmbH for online appointment booking. When you book an appointment, personal data such as your name, telephone number, and email address will be processed. Processing is carried out on the basis of Art. 6 (1) lit. b GDPR for the fulfillment of the contract.

Further information can be found in Shore's privacy policy: https://www.shore.com/de/datenschutz

 

d) Social media (Instagram, Facebook, TikTok)

We operate pages on Instagram, Facebook, and TikTok. When you visit our social media pages, personal data may be transmitted to the operators of these platforms. Data processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in public relations.

For information about data processing by the platforms, please visit:

• Meta (Instagram & Facebook)

• TikTok

​

3. Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed. We will only disclose your personal data to third parties if:

• You have given your express consent (Art. 6 (1) (a) GDPR)

• The disclosure is necessary for the assertion, exercise, or defense of legal claims

• This is legally permissible and necessary for the processing of contractual relationships with you

​

4. Cookies and tracking

Our website uses cookies. These serve to make our offer more user-friendly, effective, and secure. For more information, please refer to Wix's cookie policy: https://de.wix.com/about/privacy

 

5. Your rights

You have the right:

• to request information about your personal data processed by us in accordance with Art. 15 GDPR

• to request the correction of incorrect or incomplete data stored by us in accordance with Art. 16 GDPR

• to request the deletion of your data stored by us in accordance with Art. 17 GDPR

• to request the restriction of the processing of your data in accordance with Art. 18 GDPR

• to receive your data in a structured, commonly used format in accordance with Art. 20 GDPR

• to revoke your consent at any time in accordance with Art. 7 (3) GDPR

• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR

​

6. Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 (1) lit. f GDPR, you have the right to object to the processing.

 

7. Data security

We use the widely used SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption during your visit to our website. We take appropriate technical and organizational measures to protect your data against loss, destruction, or unauthorized access.

​

8. Current status and changes to this privacy policy

This privacy policy is currently valid and was last updated in August 2025. Further development of our website or changes in legal requirements may make it necessary to amend this privacy policy. The current version can be found at any time on our website under the link “Privacy Policy.”