Privacy Policy

The controller responsible for data processing on this website is:

We collect personal data only when you voluntarily provide it:

• Contact form inquiries: Name, email address, phone number (optional), travel dates, group size, and your message.
• Email correspondence: Your email address and the content of your messages when you contact us directly.
• Booking information: Names, travel dates, dietary requirements, and payment details necessary to arrange your tour.

We process your data for the following purposes:

• Responding to inquiries (Art. 6(1)(b) GDPR) — to answer your questions and provide tour information.
• Fulfilling tour bookings (Art. 6(1)(b) GDPR) — to organize and deliver the services you have booked.
• Legal obligations (Art. 6(1)(c) GDPR) — to comply with tax and accounting requirements.

We do not sell your personal data. We may share your information with:

• Tour partners: Hotels, restaurants, and local guides involved in delivering your tour, only to the extent necessary.
• Payment processors: For secure payment handling (e.g., Stripe).
• Hosting providers: Our website is hosted on servers that may process technical data (IP addresses, browser type).

This website uses only technically necessary cookies required for the website to function. We do not use tracking cookies, analytics services, or third-party advertising tools.

We retain your personal data only for as long as necessary to fulfill the purposes described above, or as required by law. Booking records are retained for 10 years in accordance with German tax regulations. Contact form inquiries are deleted after 12 months unless they lead to a booking.

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data (“right to be forgotten”)
• Restrict processing of your data
• Data portability — receive your data in a structured format
• Object to processing based on legitimate interests

To exercise any of these rights, please contact us at info@europeancastlestours.com.

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for our business is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de

We may update this privacy policy from time to time. The latest version will always be available on this page with the date of the last update.