1. Data controller
Nakhon Pathom Province, as the organiser of the “The Taste of the First City — Nakhon Pathom: A Harmony of Flavours” logo design competition (International Logo Art & Design Competition 2026), is the controller of the personal data collected through this website. [Specify the official name of the agency / address / personal data coordinator]
2. Data we collect
- Account data — name, email address and password (stored using one-way hashing; administrators cannot read your password)
- Applicant data — application type, full name or team name, list of team members, display name, country, applicant type, telephone number, organisation, portfolio link and social media handles (if any)
- Artwork — logo files, mockup files, artwork title and concept statement
- Contact data — name, email address and messages sent via the contact form
- Technical data — IP address and time of use, used to limit the number of log-in / sign-up / password-reset attempts and to protect the system against attacks, as well as the cookies described in section 6
We do not collect sensitive personal data such as religion, health or biometric data, and we ask applicants not to include such data in their artwork or descriptions.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Receiving applications, checking eligibility and judging entries (the judging panel scores entries using entry codes instead of names) | Performance of a contract / the competition rules that applicants agree to when entering |
| Contacting applicants, sending confirmation emails, notifying results and announcing finalists and winners | Performance of a contract |
| Publishing the TOP 10 and winning entries, together with the name the applicant has chosen to be published, on the website, at the exhibition and in Facebook posts for public voting | Performance of a contract (in accordance with the competition guidelines) |
| Responding to enquiries sent via the contact form | Legitimate interests |
| Maintaining system security and preventing password guessing and misuse | Legitimate interests |
4. Disclosure of data
We will not sell or rent personal data, and will disclose it only to the extent necessary to the following recipients:
- Judging panel — sees entries and descriptions via entry codes, without seeing applicants’ names during scoring
- Project working team — to check eligibility, coordinate and organise the exhibition
- Technology service providers — website hosting and email service providers, who process data solely on our instructions
- The public — only the TOP 10 / winning entries and the names applicants have chosen to be published, via the website, the exhibition and the project’s Facebook page
- Government authorities — where disclosure is required by law
Applicants from outside Thailand acknowledge that their data will be stored and processed in Thailand.
5. Retention period
- Account and application data of applicants who are not shortlisted — retained for no longer than [1 year] after the results announcement (22 December 2026), then deleted or anonymised
- TOP 10 and winning entries — retained as a record of the project and in accordance with the officially announced copyright conditions
- Messages from the contact form — retained for no longer than [6 months]
- IP logs for security — retained only for the short period necessary for rate limiting [no longer than 30 days]
6. Cookies
This website uses only strictly necessary cookies and does not use advertising or tracking cookies.
| Cookie | Purpose | Duration |
|---|---|---|
PTSESS | Keeps you logged in and protects against cross-site request forgery (CSRF) | Until the browser is closed / you log out |
pt_logged | Tells the menu to show “My Account” instead of “Log in” (contains no personal data) | Until the browser is closed / you log out |
The fonts on this website are loaded from Google Fonts, which may result in Google receiving visitors’ IP addresses, in accordance with Google’s privacy policy.
7. Data security
We apply appropriate measures, including encrypted connections (HTTPS), password hashing, restricting access to authorised administrators only, storing artwork files in an area that cannot be accessed directly from the web, and limiting the number of log-in attempts.
8. Minors
Applicants who have not yet reached the age of majority must obtain the consent of the person exercising parental authority before applying and submitting data. [Specify the method for verifying parental consent, if necessary]
9. Data subject rights
You have the following rights under the law:
- To access and obtain a copy of your personal data
- To have your data rectified (you can edit your application data yourself in the dashboard until the submission deadline)
- To request erasure, restriction of use, or to object to the processing of your data
- To request data portability and to withdraw consent (where processing is based on consent)
- To lodge a complaint with the Personal Data Protection Committee (PDPC) Office
If you request erasure of your data before the results are announced, your entry will be withdrawn from the competition.
10. Contact
For matters concerning personal data, please contact pathomtaste@gmail.com [or the email address of the Data Protection Officer, if any]. We will respond within 30 days.
We may update this policy from time to time; the date of the most recent update will be shown at the top of this page.