Privacy & Cookies

1. Who is responsible

This personal website is operated solely by Suphanut Aneknumwong, Kyoto, Japan. I am its data controller. Kyoto University does not operate this website and is not its data controller.

Privacy contact: aneknumwong.suphanut.k25@kyoto-u.jp. No home address or telephone number is published on this website.

2. What is processed and why

Website delivery and security

Cloudflare provides hosting, content delivery, and security. It may automatically process an IP address, request date and time, requested URL, referring page, browser or device details, and network or security signals. This is necessary to deliver and protect the site, based on my legitimate interest in operating a safe and reliable personal website. The site may not work if this technical processing is blocked. I do not export or keep a separate copy of Cloudflare's underlying network logs.

Optional Google Analytics

Google Analytics 4 activates only after you select Accept. It may process a pseudonymous cookie identifier, pages and events visited, session statistics, referring source, approximate location, and browser or device details. Google may process an IP address during collection, but the raw IP address is not available to me.

I use this information only to understand general traffic and improve the site. The legal basis is your consent. It is not used for advertising, automated decisions, or profiling based on political opinions or other sensitive characteristics. Google Signals, ad storage, ad-user data, and ad personalisation are disabled. Analytics is also disabled on the archive listing, category pages, the archived CV, and individual archived articles. Declining has no effect on access to the website.

Your consent preference

Your choice and the time of that choice are stored only in this browser's local storage for up to 180 days, so the site can respect your preference. This strictly necessary preference is not used to identify you.

External media in archived articles

Some archived articles refer to YouTube, Instagram, Facebook, or Google Maps. These services are not contacted automatically. A provider receives technical data, and may set its own cookies, only after you choose to load that particular embed. The rest of the article remains available if you do not load it.

Email

The site has no contact form. If you email me, I process your email address, message, and correspondence to reply, manage your request, or protect legal rights. Providing it is voluntary, but I cannot reply without it. The site has no advertising and does not sell or rent visitor data.

3. Retention

• Google Analytics event data: 2 months.
• Google Analytics user-level data: 14 months.
• Analytics cookies: Google may set _ga and_ga_<container-id> for up to two years by default. This site asks again after 180 days and attempts to remove accessible Analytics cookies when consent is withdrawn or an expired choice is encountered on a later visit.
• Consent preference: up to 180 days.
• Email: until the matter is resolved and ordinarily no longer than 12 months afterward, unless a legal obligation or claim requires longer.
• Cloudflare technical and security data: under Cloudflare's service settings and policies for as long as reasonably necessary to deliver and secure the service or meet legal duties. I do not separately export these logs.
• External media: under the activated provider's policy.

Google's retention controls may not remove anonymous or aggregated standard reports, which may remain longer but are not intended to identify you.

4. Recipients and international transfers

Depending on what you use, data may be processed by Cloudflare and its affiliates for hosting and security; Google for Analytics after consent; Google/YouTube or Meta for an embed you activate; the email systems used to deliver correspondence; and authorities or advisers where required by law or necessary for a legal claim.

I operate the site from Japan. These providers operate globally, so data may be processed in Japan, the United States, the European Economic Area, or other countries outside Thailand. Their privacy laws may differ from Thai law. Providers process data under their applicable privacy terms and transfer safeguards. Optional Analytics and external media remain off until you consent or explicitly request them.

Cloudflare Privacy Policy ↗︎Google's partner-sites notice ↗︎Google Privacy Policy ↗︎Meta Privacy Policy ↗︎

5. Your choices and rights

Subject to applicable law and its conditions, you may withdraw consent; request access to or a copy of your data and information about its source; request correction, deletion, destruction, anonymisation, or restriction; object to processing based on legitimate interests; request portability where applicable; and complain to a competent data-protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal.

Email aneknumwong.suphanut.k25@kyoto-u.jp to exercise a right. I may ask for enough information to verify that a request concerns you and will respond within 30 days where the Thai Personal Data Protection Act applies.

6. Complaints, security, and changes

Please contact me first if you have a concern. Where Thai law applies, you may also complain to theOffice of the Personal Data Protection Committee of Thailand (PDPC)↗︎.

I use reasonable safeguards, including HTTPS and Cloudflare security services, but no internet service can guarantee absolute security. This general personal and academic site is not specifically directed at children, and I do not knowingly request their personal data. I may update this notice when the site changes; if a new purpose needs consent, I will ask before beginning that processing.