Privacy Policy

Last Updated: April 28, 2025


Ludwig's Original Tours ("LOT," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website (ludwigsoriginaltours.com), book tours or activities, or interact with us. This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws in the Netherlands, Germany, and other EU countries.


1. Data Controller

Ludwig's Original Tours, located at Postbus 15707, 1001NE Amsterdam, Netherlands, is the data controller responsible for your personal data. For questions or concerns, contact us at:


2. Personal Data We Collect

We collect the following types of personal data:

  • Booking Information: Name, email address, phone number, nationality, and payment details (processed securely via Stripe) when you book a tour or activity.
  • Contact Information: Data provided when you contact us, such as your name, email, and any information included in your message.
  • Website Usage Data: IP address, browser type, device information, and pages visited, collected via cookies and similar technologies (see Section 7).
  • Tour-Related Data: Photos or videos taken during activities (if you consent), feedback, or reviews you provide.
  • Special Categories: Health information or special requirements (e.g., mobility needs) if voluntarily provided to ensure your safety during activities.


3. How We Use Your Personal Data

We process your personal data for the following purposes, based on the legal grounds outlined in the GDPR:

  • To Fulfill Contracts (Article 6(1)(b) GDPR): Process bookings, issue confirmations, and provide tour-related services.
  • With Your Consent (Article 6(1)(a) GDPR): Use photos or videos for promotional purposes, send marketing emails, or process special categories of data (e.g., health information).
  • For Legitimate Interests (Article 6(1)(f) GDPR): Improve our website and services, analyze booking trends, prevent fraud, and respond to inquiries.
  • To Comply with Legal Obligations (Article 6(1)(c) GDPR): Retain financial records for tax purposes or respond to lawful requests from authorities.


4. Sharing Your Personal Data

We may share your personal data with:

  • Service Providers: Third-party platforms like Bokun (booking management), Stripe (payment processing), GetYourGuide, Eventbrite, and Konfetti for booking and payment services. These providers are GDPR-compliant and process data only on our instructions.
  • Tour Partners: Venues or suppliers (e.g., bike rental companies) to facilitate your tour, limited to necessary information.
  • Legal Authorities: If required by law or to protect our rights, safety, or property.
  • Marketing Partners: With your consent, for promotional campaigns or social media posts.

We do not sell your personal data to third parties.


5. International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or we verify that the recipient is in a country with an adequacy decision (e.g., for certain Stripe services in the US).


6. Data Retention

We retain personal data only as long as necessary for the purposes outlined:

  • Booking Data: Kept for 7 years to comply with Dutch tax laws.
  • Contact Data: Retained for 1 year after your last interaction, unless further communication is required.
  • Marketing Data: Kept until you withdraw consent or opt out.
  • Photos/Videos: Stored indefinitely for promotional use unless you request deletion.

After retention periods expire, data is securely deleted or anonymized.


7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyze performance:

  • Essential Cookies: Necessary for website functionality (e.g., session management).
  • Analytics Cookies: Track website usage (e.g., Google Analytics) to improve our services.
  • Marketing Cookies: Used for targeted advertising, only with your consent.

You can manage cookie preferences via our cookie banner. For more details, contact us at ludwigsoriginaltours@gmail.com.


8. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data, subject to legal retention obligations.
  • Restriction: Limit how we process your data in certain circumstances.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests or for direct marketing.
  • Withdraw Consent: Revoke consent at any time, without affecting prior processing.

To exercise these rights, contact us at ludwigsoriginaltours@gmail.com. We will respond within one month, extendable by two months for complex requests. If you are unsatisfied with our response, you may lodge a complaint with a supervisory authority, such as the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the German Federal Commissioner for Data Protection and Freedom of Information (BfDI).


9. Data Security

We implement technical and organizational measures to protect your personal data, including encryption, access controls, and secure servers. However, no system is completely secure, and we cannot guarantee absolute security.


10. Third-Party Links

Our website may contain links to third-party sites (e.g., GetYourGuide, Eventbrite). We are not responsible for their privacy practices. Please review their privacy policies before providing personal data.


11. Children's Privacy

Our services are generally not directed to individuals under 16, except for certain activities like our walking tours, which have no age restriction. For participants under 16, we collect personal data only with verifiable parental consent or when provided by a parent or guardian during booking. If we learn that we have collected personal data from a child under 16 without parental consent, we will delete it promptly.


12. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The updated policy will be posted on our website with the revised "Last Updated" date. For significant changes, we will notify you via email or a website notice.


13. Contact Information

For questions, concerns, or to exercise your data protection rights, please contact us at:

Still have a question?

Contact