HH Tours GbR

Privacy Policy

We appreciate your interest in HH Tours GbR, operating as Haunted History Hamburg. This policy explains how we process personal data when you visit our website or book a tour.

01

Controller

HH Tours GbR
represented by:
Sara Armfield
Gabriel Nehrbass
Roter Hahn 17a
20457 Hamburg
Germany

Email: hhtourssj@gmail.com
Phone / WhatsApp: +49 1514 1370973

02

Website Access

When you visit our website, information may be automatically collected in server log files, including:

  • IP address
  • Date and time of access
  • Requested page or file
  • Referrer URL
  • Browser type and version
  • Operating system

This data is required for website functionality and security. Legal basis: Art. 6 (1) (f) GDPR.

03

Bookings

When you book a tour, we may process:

  • Name
  • Email address
  • Phone number
  • Optional WhatsApp number
  • Optional accessibility or support needs

Payment data is processed by Ticket Tailor and payment providers such as PayPal or Stripe. We do not store payment details ourselves.

Legal basis: Art. 6 (1) (b) GDPR.

04

Follow-Up Communication

After your tour, we may send a follow-up email containing additional historical information, resources, or recommendations related to your tour experience.

This is based on our legitimate interest in providing a complete service experience. Legal basis: Art. 6 (1) (f) GDPR. You may object to this at any time.

05

Communication

If you contact us by email or WhatsApp, we process your name, contact details, and message to respond to your request.

Legal basis: Art. 6 (1) (b) GDPR or Art. 6 (1) (f) GDPR.

06

Photos

We may occasionally take photos during tours. Photos of identifiable adults are only used with prior consent.

Photos of children are not used for marketing purposes. Legal basis for adult consent: Art. 6 (1) (a) GDPR.

07

Data Sharing

Your data is only shared when necessary:

  • with Ticket Tailor for booking processing
  • with payment providers such as PayPal or Stripe
  • if required by law

Legal basis where required by law: Art. 6 (1) (c) GDPR.

08

WhatsApp

If you provide your WhatsApp number, we use it only for communication related to your booking.

Communication via WhatsApp may involve data processing outside the European Union. Legal basis: Art. 6 (1) (a) GDPR. You may withdraw consent at any time.

09

Cookies

Our website uses cookies to ensure functionality and improve user experience.

Where required, cookies are only set with your consent via our cookie banner. Technically necessary cookies are based on Art. 6 (1) (f) GDPR.

10

Storage Period

We store personal data only for as long as necessary for the respective purpose or as required by law.

11

Your Rights

Under the GDPR, you have the right to:

  • Access your data, Art. 15 GDPR
  • Rectify incorrect data, Art. 16 GDPR
  • Erase your data, Art. 17 GDPR
  • Restrict processing, Art. 18 GDPR
  • Data portability, Art. 20 GDPR
  • Object to processing, Art. 21 GDPR
  • Lodge a complaint with a supervisory authority, Art. 77 GDPR

Supervisory authority:
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22
20459 Hamburg
Germany
www.datenschutz-hamburg.de

12

Data Security

We use SSL encryption to protect your data during transmission.

13

Changes

This privacy policy may be updated to reflect legal or operational changes. The most current version is always available on our website.