Local services

We collect and process your personal data based on one or more of the following legal bases:

• Performance of a contract, where processing is necessary for your registration and participation in Events or Activities;
• Legitimate interests, to organize, manage, communicate, and improve our Events and Activities, including employee engagement and internal communications; and
• Consent, where required, in particular for photographs, recordings, surveys, polls, optional information, or where sensitive personal data is involved.

This includes processing necessary to:

• Manage participants and attendees
• Communicate with you about Events and Activities
• Administer quizzes, games, polls, surveys, results, rankings, or prizes (where applicable)
• Produce statistics, reports, and feedback in aggregated or anonymized form

Dietary and medical-related data:

Where catering is provided, information on food allergies or special dietary requirements is processed solely for catering purposes.

Providing such data is optional. Where this information constitutes sensitive or medical data, your explicit consent forms the legal basis for processing.

Within Lufthansa Services (Thailand) Ltd., your personal data is shared only with departments and staff who require access for the purposes described in this Notice.

We may share relevant personal data with external service providers involved in organizing Events and Activities (e.g. catering providers, event platforms, or activity tools). Any personal data shared:

• Will be used solely to provide the requested services; and
• Will not be retained by such external organizations after the Event or Activity has concluded, unless required by law.

We will retain your personal data only for as long as necessary, including:

• For the duration required to organize and manage Events and Activities, including audit and reporting purposes; and
• For periods required under applicable laws and regulations, including tax and audit obligations.

Information relating to dietary requirements, accessibility needs, or optional activity responses will be deleted after the Event or Activity, unless a longer retention period is required or the data has been anonymized.

You have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request restriction or erasure of your data in certain circumstances
• Object to the processing of your data
• Request data portability, where applicable

Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.