Last updated: 29 July 2026
This policy explains what personal data bratislavacastle.eu collects when you book a ticket, why we collect it, who we share it with, and what rights you have over it. It should be read together with our Terms & Conditions.
Who we are
bratislavacastle.eu is operated by Europe Places, an independent booking service. We are not the museum and are not affiliated with the Slovak National Museum (SNM) or the Bratislava Castle administration.
Data controller: [LEGAL ENTITY NAME], [REGISTERED ADDRESS], company number [COMPANY NUMBER].
Contact for any privacy question: info@bratislavacastle.eu
What we collect
When you book
- Your name — required, because the ticket is purchased from the museum in your name
- Your email address — to send your order confirmation and your ticket
- Your phone number — to send you a booking confirmation by SMS
- Booking details — the ticket type, the date of your visit and the number of visitors
- Any notes you choose to add to your booking
When you pay
Payments are processed by Stripe. Your card details are entered directly with Stripe and never reach our servers. We receive only a confirmation that payment succeeded, together with the amount and a transaction reference.
Automatically
- IP address and browser information, recorded in web-server logs and by our security plugin to detect and block attacks. These logs are not used for marketing.
- A referral cookie (
lpcs_attribution), set for 90 days, which records how you arrived at the site so we can tell which channels bring bookings. - Session cookies required for the booking form to work.
We do not record your IP address against your booking, and we do not use advertising or profiling cookies.
Why we are allowed to hold it
- To perform our contract with you (Article 6(1)(b) GDPR) — your name, email, phone and booking details. Without them we cannot buy your ticket or deliver it.
- Our legitimate interests (Article 6(1)(f)) — security logging, fraud prevention and understanding which channels bring bookings.
- Legal obligation (Article 6(1)(c)) — retaining transaction records for accounting and tax purposes.
We do not send marketing email, and we do not sell or rent your data to anyone.
Who we share it with
Only where it is necessary to deliver your booking:
- SNM – Historické múzeum (the museum) — your name, because the ticket is issued in your name.
- Stripe — payment processing.
- Brevo — sending your confirmation and ticket emails.
- BulkGate — sending your booking confirmation by SMS.
- Hetzner Online GmbH — our hosting provider. The server is located in Germany.
- Defiant Inc. (Wordfence) — security scanning and attack blocking.
If you use the language switcher, that translation is provided by Google Translate and your page request is sent to Google to perform it.
Where your data is held
Your booking data is stored on a server in Germany, inside the EU. Some of the processors above may process data outside the EEA; where they do, they rely on the European Commission’s Standard Contractual Clauses or an adequacy decision.
How long we keep it
- Booking records — kept for [RETENTION PERIOD, e.g. 5 years] to meet accounting and tax obligations.
- Security logs — approximately 30 days.
- Email delivery logs — 14 days.
- The referral cookie — 90 days from your visit.
Your rights
Under the GDPR you may ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our use of it, and you may ask for it in a portable format. Email info@bratislavacastle.eu and we will respond within one month.
Please note that we cannot delete records we are legally required to keep for tax purposes, and that deleting a booking record before your visit may mean we cannot deliver your ticket.
If you are unhappy with how we have handled your data you can complain to your national data protection authority. In Slovakia this is the Úrad na ochranu osobných údajov Slovenskej republiky (dataprotection.gov.sk).
Changes
If we change this policy we will update the date at the top of this page.