Privacy policy

Controller

Konkolics Márk e.v. (sole trader (egyéni vállalkozó) registered in Hungary, trading as Paris Art Guides), Visegrádi utca 84, 1133 Budapest, Hungary, support@parisartguides.com. Supervisory authority in Hungary: the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH, naih.hu); you can also complain to the authority of your own EU country.

What we collect and why

• Booking data — the lead visitor's name, email, optional phone, visit date, time and tickets: to book your admission, send your e-ticket and contact you about your booking (contract, Art. 6(1)(b) GDPR). For guided tours, your guide receives the lead visitor's name and phone number for the day of the tour.
• Visitor names — for tickets the venue issues in the visitor's name (the Louvre), the first and last name of every visitor and their ticket type. We pass these names to the venue when we buy the tickets, because it prints them on the tickets and may check them against an ID. The lead visitor provides the names and should tell the other visitors.
• Payment — handled by Stripe on its own page. We receive the payment status, the card brand and its last 4 digits, never the full card number or security code.
• Contact messages — to answer you (legitimate interest, Art. 6(1)(f)).
• Analytics and ad measurement — cookies and identifiers only with your consent (Art. 6(1)(a)). Before you choose, or if you decline, the Google tag sends only limited cookieless signals (Google Consent Mode); see the Cookie policy.
• Cookie consent record — a random identifier stored in your browser, your choice and the time, kept as proof of consent (legal obligation, Art. 6(1)(c)).

Service providers and other recipients

• Stripe Payments Europe (payments)
• Resend (email delivery)
• Vercel (website hosting) and Neon (database, hosted in Frankfurt, EU)
• Google (analytics and ad measurement; cookies only with consent)
• The venue (visitor names, when we buy tickets issued in a name)

Where data leaves the EEA, it is covered by the EU–US Data Privacy Framework or standard contractual clauses.

How long we keep it

Invoices and payment records: 8 years, as the Hungarian Accounting Act (2000. évi C. törvény, § 169) requires. Visitor names and contact details of a booking: until 12 months after the visit date (for questions, complaints and refunds), then deleted or kept only inside the accounting records. Contact messages: up to 2 years. Cookie consent records: 3 years.

Your rights

You can ask for access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time, by emailing support@parisartguides.com. You can also complain to your data protection authority.

No accounts, no passwords

We never ask you to create an account or to enter a password, and we never ask for card details by email or phone. If someone does so in our name, please tell us.