Privacy Statement
What we collect
To confirm your booking we collect: full name, email, phone, country of residence, chosen date, time slot, tour type and number of visitors by category. We also record standard technical data (IP address, user-agent, referring page) for security and fraud-prevention purposes.
Payment
Card and payment-method data are entered directly on our payment processor's secure page. We never see or store your full card number; we receive only a tokenised reference to the successful charge.
Retention
Booking records are retained for 3 years for accounting purposes. Technical logs are retained for 90 days. You may request earlier deletion at any time; some data may need to be retained where German or EU tax law requires it.
Sharing
Booking data is shared exclusively with the palace administration to confirm your reserved slot and with our payment processor to complete the transaction. We do not sell data. We do not use marketing tracking cookies.
Your rights (GDPR)
You have the right to access, rectify, port and erase your personal data, and to object to processing based on legitimate interest. Contact privacy@[your-domain] to exercise any of these rights. You may also lodge a complaint with the Bavarian Data Protection Authority (BayLDA, Ansbach).
Cookies
We use only strictly-necessary session cookies to keep your booking form state and preferred language. No third-party analytics or advertising cookies are set.
Contact
privacy@[your-domain] · Response within 15 working days.