1. Controller

Daniel Amadeo, Bavarian Baroque, Paul-Heyse-Straße 34, 80336 München, Germany, is responsible for processing personal data for this tour service. Contact: [email protected], telephone +49 179 1651887.

2. Website hosting and security

The public website uses Cloudflare Pages and Cloudflare’s network to deliver pages and protect the service. Requests involve technical data such as IP address, requested URL, time of access, browser information and response information. Cloudflare processes these data to provide and secure its services. The legal basis for our use is Art. 6(1)(f) GDPR: our legitimate interest in operating a reliable, secure website.

The website application does not maintain its own visitor database or a separate archive of access logs. Infrastructure and security records are retained according to the relevant Cloudflare service, security needs and legal obligations; no uniform automatic deletion period is promised. See Cloudflare’s privacy information.

3. Tour enquiries

We process the details you provide by email or telephone to answer enquiries and plan tours, such as your name, contact details, agency, dates, party size, language and interests. We need sufficient contact and planning information to prepare an offer.

For enquiries about your own booking, the legal basis is Art. 6(1)(b) GDPR (pre-contractual steps and performance of a contract). For agency contacts and other business correspondence, it is Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries and coordinating services). Merely acknowledging this privacy notice is not consent to advertising.

Please avoid sending medical diagnoses, identification documents or other sensitive information by email. Practical route preferences can be described without such details.

4. How messages reach us

The website provides email links and a telephone number. Clicking an email link opens your chosen email application; you decide what information to include and whether to send it. The website does not collect or submit enquiry form data.

Email addressed to [email protected] is received and sent through IONOS Mail (IONOS SE, Germany). Incoming messages are also forwarded to our Microsoft Outlook.com/Hotmail mailbox. Microsoft stores and processes received correspondence as part of that mailbox service. Your own email provider also processes messages you send. Telephone enquiries are used to answer your request.

Service information: IONOS, Cloudflare and Microsoft.

5. Retention

Enquiry correspondence is kept for as long as needed to answer the enquiry, agree and carry out the visit, and handle related follow-up. When these purposes end, correspondence is deleted unless a statutory retention obligation or the establishment, exercise or defence of legal claims requires continued storage. Documents required for tax or accounting purposes are retained for the period applicable to the document concerned. These are retention criteria, not an automatic mailbox deletion feature.

Cloudflare, IONOS and Microsoft also apply service-specific retention, security and backup arrangements as described in their privacy notices. Deleting a message from one system does not automatically delete copies held by its sender.

6. Processing outside the EEA

Cloudflare and Microsoft operate international services; personal data may be processed outside the European Economic Area, including in the United States. Their published safeguards include the EU–US Data Privacy Framework where applicable to the recipient and processing, and EU Standard Contractual Clauses for relevant transfers. Cloudflare publishes data-processing terms; Microsoft describes its transfer mechanisms in its privacy statement.

Details and safeguards are available in the Cloudflare Data Processing Addendum and Microsoft privacy statement. You may contact us for information about safeguards relevant to your data.

7. Cookies and fonts

The website code does not use advertising or analytics cookies, or browser storage to save enquiries. Fonts and photographs are served with the website; there are no embedded maps, social feeds or videos. Cloudflare may process technical security data and, depending on its enabled protections, use necessary security cookies; see Cloudflare cookie information.

No AI service or automated tour recommendation system is used. Sending an enquiry does not add you to an advertising mailing list.

8. Your rights

Subject to the applicable requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you may withdraw it for the future. Contact us using the details above.

You may lodge a complaint with a data protection supervisory authority, including the Bavarian State Office for Data Protection Supervision (BayLDA). Mandatory retention requirements may prevent immediate deletion of some records.