Privacy Policy
# Privacy Policy
We only process personal data we need to deliver your tour (name, email, phone, payment details).
## What we store
- **Booking data** (name, email, phone): to run the tour and reach you.
- **Payment data** (via our payment provider Mollie B.V., Netherlands): to process payment. We do not store card details ourselves.
- **Cookies**: session cookies and language settings only. No tracking cookies without your opt-in.
## Your rights (GDPR)
You have the right to access, correct, delete, restrict and port your data at any time. Email us: hallo@kumm-mit-koeln.example.
## Retention
We delete booking data 36 months after the tour, unless tax law requires longer (§147 AO: 10 years for invoices).
> This is illustrative copy. For a real-world tenant, have a lawyer review.