AASP Conference 2027 : Faculty of Pharmacy Chiang Mai University

1. Introduction

Welcome to the official website of The 13^th Asian Association of Schools of Pharmacy (AASP) Conference 2027 (hereinafter referred to as "the Conference", "we", "us", or "our"). We are committed to protecting the privacy and personal data of all visitors, participants, and contributors to our website.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or register for the Conference, in accordance with:

The Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA")
The General Data Protection Regulation (EU) 2016/679 ("GDPR") for European Union visitors
Chiang Mai University's institutional data protection policies

                            
                            By using our website, you acknowledge that you have read and understood this Privacy
                                Policy.
                            If you do not agree with our practices, please do not use our website.
                        

2. Data Controller

For the purposes of PDPA and GDPR, the data controller responsible for your personal data is:

Faculty of Pharmacy

Chiang Mai University

Suthep Rd. Chiang Mai 50200, Thailand

Email: registration.aasp2027@cmu.ac.th

3. Information We Collect

We may collect the following categories of personal data:

3.1 Information You Provide Directly

Category	Examples
Identity Data	Full name, title, academic credentials
Contact Data	Email address, phone number, mailing address
Professional Data	Institution, position, department, research interests
Registration Data	Conference registration details, session preferences, dietary requirements
Submission Data	Abstracts, papers, presentations, co-author information
Financial Data	Payment information (processed via secure third-party providers only)

3.2 Information Collected Automatically

Category	Examples
Technical Data	IP address (anonymized), browser type, operating system, device type
Usage Data	Pages visited, time spent, click patterns, referring website
Location Data	Approximate geographic location (country/city level only)
Cookie Data	See Section 6 for details

4. Purposes of Processing

We process your personal data for the following purposes:

Conference Administration: Processing registrations, managing submissions, issuing certificates
Communication: Sending confirmation emails, program updates, and important announcements
Website Improvement: Analyzing usage patterns to enhance user experience
Academic Program: Publishing conference proceedings, abstracts, and presenter information (with consent)
Legal Compliance: Meeting legal obligations and academic requirements
Marketing: Sending newsletters about future conferences (only with explicit opt-in consent)

5. Legal Basis for Processing

Under PDPA and GDPR, we rely on the following legal bases:

Consent

For marketing communications, non-essential cookies, and optional data collection.

Contract

To fulfill our obligations when you register for or participate in the Conference.

Legal Obligation

To comply with applicable laws, regulations, and institutional policies.

Legitimate Interest

For website security, fraud prevention, and academic research purposes.

6. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic.

6.1 Types of Cookies We Use

Type	Purpose	Duration	Consent Required
Essential	Website functionality, security, session management	Session	No
Analytics	Google Analytics 4 (_ga, _gid, _gat)	Up to 2 years	Yes
Functional	Video playback (YouTube), embedded content	Session	Yes

6.2 Managing Your Cookie Preferences

When you first visit our website, a cookie consent banner will appear. You can:

Accept all cookies
Decline non-essential cookies
Customize your preferences

You can change your preferences at any time by clicking 🍪 Cookie Preferences in the footer of any page.

Google Analytics 4: We use GA4 with IP anonymization enabled. Learn more at Google's Privacy Policy.

7. Data Sharing & Disclosure

We do not sell your personal data. We may share your information with:

Conference Partners: Co-organizing institutions and academic sponsors (with your consent)
Service Providers: Payment processors, email service providers, hosting providers (under strict data processing agreements)
Google (Analytics): Anonymized usage statistics only
Legal Authorities: When required by law, court order, or government request
Academic Publications: Conference proceedings may include author information as consented

8. International Data Transfer

Important Notice: Your data may be transferred to and processed in countries outside Thailand, including the United States (Google Analytics servers), and other jurisdictions where our service providers operate.

Under PDPA Section 28, we ensure such transfers comply with:

Adequate data protection standards in the receiving country
Standard Contractual Clauses (SCCs) approved by the PDPC
Your explicit consent where required
Google's compliance with EU-US Data Privacy Framework

9. Data Retention

We retain your personal data only as long as necessary:

Data Type	Retention Period
Registration & participation records	5 years after the Conference
Financial records	10 years (as required by Thai law)
Conference proceedings & publications	Indefinitely (academic archive)
Google Analytics data	14 months
Marketing consent records	Until consent is withdrawn
Website server logs	90 days

10. Security Measures

We implement appropriate technical and organizational measures to protect your data:

Encryption

TLS 1.3 encryption for all data in transit (HTTPS)

Access Control

Role-based access with authentication logs

Secure Hosting

ISO 27001 certified data centers with backup systems

Data Minimization

We collect only what is necessary for stated purposes

11. Your Rights Under PDPA & GDPR

You have the following rights regarding your personal data:

Right to Access

Request a copy of your personal data we hold.

Right to Rectification

Correct inaccurate or incomplete data.

Right to Erasure

Request deletion of your data ('right to be forgotten').

Right to Restrict

Limit how we process your data.

Right to Portability

Receive your data in a portable format.

Right to Object

Object to processing based on legitimate interest.

Right to Withdraw

Withdraw consent at any time.

Right to Complain

File a complaint with the Personal Data Protection Committee.

How to exercise your rights: Contact us at secretary.aasp2027@cmu.ac.th with your request. We will respond within 30 days as required by PDPA.

12. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from children under 18 without verifiable parental consent. If you believe we have collected data from a minor, please contact us immediately for prompt deletion.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated via:

Email notification to registered users
Prominent notice on our website
Updated "Last Modified" date at the top of this policy

Continued use of our website after changes constitutes acceptance of the updated policy.

14. Contact Us

For any privacy-related questions, concerns, or requests, please contact:

Data Protection Officer (DPO)

Email:
secretary.aasp2027@cmu.ac.th

Phone:
+66-53-9443-42

Postal Address:
Faculty of Pharmacy
Chiang Mai University
Suthep Rd. Chiang Mai 50200
Thailand

Regulatory Authority: You may also contact Thailand's Personal Data Protection Committee (PDPC) at www.pdpc.or.th or file a complaint if you believe your rights have been violated.

This Privacy Policy was last updated on August 1^st , 2026.

Contents