Privacy Policy

Buda Castle District | buda-castle-district.hu Operated by Tickets LLC, 5150 Mae Anne Ave. Ste 405 #5253, Reno, NV 89523, United States Last updated: June 18, 2026

1. Introduction

Tickets LLC (“we,” “us,” or “our”) operates buda-castle-district.hu and is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use it, who we share it with, and what rights you have over it.

This policy applies to all visitors to our website and all customers who purchase our concierge service, regardless of where they are located. Specific additional rights for EU/EEA residents and California residents are set out in Sections 10 and 11 respectively.

If you have any questions about this policy, contact us at: Email: buda.castle.district@gmail.com Postal address: Tickets LLC, 5150 Mae Anne Ave. Ste 405 #5253, Reno, NV 89523, United States

2. Data We Collect and Why

2a. Data you provide directly

Data	Purpose	Legal basis (EU)
Full name	To process your booking and deliver tickets	Performance of contract
Email address	To deliver tickets, send booking confirmation, and provide customer support	Performance of contract
Payment information	To process your payment via Stripe (we do not store card details — see Section 5)	Performance of contract
Communication content	If you contact us by email or contact form, to respond to your enquiry	Legitimate interests
Newsletter subscription	If you opt in, to send you updates about Budapest attractions and offers	Consent

2b. Data collected automatically

When you visit our website, we and our third-party partners automatically collect certain technical data:

Data	Source	Purpose	Legal basis (EU)
IP address	Our servers / Google Analytics	Security, analytics, fraud prevention	Legitimate interests / Consent
Browser type and version	Google Analytics	Analytics and site optimisation	Consent
Pages visited, time on site, referral source	Google Analytics	Understanding how visitors use the site	Consent
Device type and operating system	Google Analytics	Site optimisation	Consent
Cookie identifiers	Google Analytics, Facebook Pixel, Google Ads, retargeting platforms	Analytics, advertising, retargeting	Consent
Ad interaction data	Facebook Pixel, Google Ads	Measuring ad performance, retargeting visitors	Consent

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on this website. Cookies are small text files stored on your device that help us and our partners understand how you use our site and show you relevant advertising.

3a. Types of cookies we use

Strictly necessary cookies: Required for the website to function (e.g. maintaining your session during checkout). These cannot be disabled.

Analytics cookies: Used by Google Analytics to collect anonymous statistical data about how visitors use our site. Google Analytics may use first-party cookies (such as the _ga cookie) and third-party cookies (such as Google advertising cookies) together to understand user behaviour and improve our website. This helps us improve the website experience.

Marketing and advertising cookies: Used by Facebook Pixel, Google Ads, and retargeting platforms to track your visits to our site and show you relevant advertisements on other websites across the internet. These cookies enable Google and other third-party vendors to serve ads to you on other websites based on your past visits to buda-castle-district.hu. These cookies may track you across websites and sessions.

Google Remarketing / Similar Audiences: We use Google Ads remarketing features to advertise to previous visitors of our website across the Google Display Network and other websites. This means that Google and other third-party vendors use cookies and device identifiers to show our ads to you on sites across the internet after you have visited buda-castle-district.hu. The ads you see are based on your past visits to our website.

Functional cookies: Used to remember your preferences and improve your experience.

Google Consent Mode: We implement Google Consent Mode on this website. This technology adjusts the behaviour of Google tags (including Google Analytics and Google Ads) based on the consent status of each visitor, ensuring that data collection and advertising are only activated in accordance with your cookie preferences.

3b. Your cookie choices and opt-out options

Depending on your location and applicable law, you may be presented with a cookie consent banner when you first visit our website. You may accept all cookies, reject non-essential cookies, or customise your preferences. You may change your cookie preferences at any time via the cookie settings link in our website footer.

EU/EEA visitors: We will not set non-essential cookies without your prior consent, in accordance with the ePrivacy Directive and applicable national law.

All visitors — how to opt out of Google’s use of cookies and personalised advertising:

Google Ads Settings: You can opt out of Google’s use of cookies for personalised advertising by visiting Google’s Ads Settings. This allows you to control the ads Google shows you across websites.
Google Analytics opt-out: You can prevent Google Analytics from collecting data about your visits by installing the Google Analytics Opt-out Browser Add-on.
Google Marketing Platform opt-out: If you wish to opt out of Google Marketing Platform advertising features, visit https://www.google.com/settings/ads.
Network Advertising Initiative (NAI) opt-out: You can opt out of personalised advertising from NAI member companies (including Google) by visiting the NAI Consumer Opt-out page.
Digital Advertising Alliance (DAA) opt-out: You may also opt out via the DAA’s consumer opt-out tool at https://optout.aboutads.info.

Please note that opting out of personalised advertising does not mean you will stop seeing ads entirely — it means the ads you see will be less tailored to your interests. Opting out through these tools sets an opt-out cookie in your browser; if you clear your cookies, you may need to opt out again.

All visitors: You may also control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the website. For more information about managing cookies generally, visit www.allaboutcookies.org.

4. How We Use Your Data

We use your personal data for the following purposes:

Fulfilling your order: Processing your booking, procuring attraction tickets on your behalf, and delivering them to you by email
Customer support: Responding to your enquiries, complaints, and requests
Legal compliance: Meeting our obligations under applicable law, including tax, consumer protection, and data protection law
Fraud prevention and security: Detecting and preventing fraudulent transactions and protecting our systems
Analytics and site improvement: Understanding how our website is used in order to improve it
Marketing and advertising: Sending you our newsletter (if you have opted in); showing you targeted advertising on platforms such as Facebook and Google (based on your cookie consent)
Remarketing and retargeting: We use Google Ads remarketing and Similar Audiences features to show advertisements to people who have previously visited buda-castle-district.hu. Third-party vendors, including Google, use cookies and device identifiers to serve our ads to previous visitors on other websites across the internet. We may also use Facebook Pixel for equivalent retargeting purposes on Meta platforms. These features allow us to reach users who have shown interest in our service but have not yet completed a booking.
Google Analytics Advertising Features: We use Google Analytics Advertising Features, which may include Remarketing with Google Analytics, Google Display Network Impression Reporting, DoubleClick Platform integrations, and Google Analytics Demographics and Interest Reporting. These features use both first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as Google advertising cookies) together to inform, optimise, and serve ads based on past visits to our website.

We will not use your personal data for any purpose incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

5. Google Advertising Features — Specific Disclosures

This section provides the specific disclosures required by Google’s policies for advertisers using Google Ads, Google Analytics Advertising Features, and remarketing tools.

5a. How we use Google remarketing

We use Google Ads Remarketing to advertise our concierge service to people who have previously visited buda-castle-district.hu. This means that after you visit our website, you may see our advertisements on other websites across the internet, including websites in the Google Display Network.

These ads are served by Google and are based on your past visit(s) to our website. Google uses cookies and device identifiers to recognise your browser or device and serve these ads.

5b. How Google and third-party vendors use cookies in our advertising

Google and other third-party vendors, including Facebook (Meta), use cookies and/or device identifiers to:

Identify that you have previously visited buda-castle-district.hu
Show you our advertisements on other websites and apps across the internet
Measure the performance of our advertisements (e.g. how many people saw or clicked an ad)
Help us understand the demographics and interests of our website visitors (Google Analytics Demographics and Interest Reporting)

First-party cookies set by Google Analytics and third-party cookies set by Google Ads work together on our site to provide these advertising features.

5c. Similar Audiences

We may use Google’s Similar Audiences feature, which allows Google to show our ads to new users who share characteristics with our existing website visitors. This feature uses aggregated and anonymised data and does not involve sharing personally identifiable information with Google beyond what is described in this policy.

5d. How to opt out of Google advertising

You can opt out of Google’s personalised advertising at any time using the following methods:

Google Ads Settings: https://adssettings.google.com
Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
Network Advertising Initiative (NAI) opt-out: https://optout.networkadvertising.org
Digital Advertising Alliance (DAA) opt-out: https://optout.aboutads.info

Opting out prevents Google from showing you personalised ads based on your visit to our website, but does not remove all ads from your browsing experience.

5e. Google’s own privacy policy

For full information on how Google collects and uses data in connection with its advertising products, please refer to Google’s Privacy Policy at https://policies.google.com/privacy and Google’s Advertising page at https://policies.google.com/technologies/ads.

6. Payment Processing — Stripe

All payments are processed by Stripe, Inc. We do not collect, store, or have access to your full payment card details. Card data is entered directly into Stripe’s secure payment interface and processed by Stripe in accordance with PCI DSS standards.

Stripe acts as an independent data controller with respect to payment data. For information about how Stripe processes your data, please refer to Stripe’s Privacy Policy at stripe.com/privacy.

7. Third-Party Services and Data Sharing

We share your personal data with the following categories of third parties:

Third party	Purpose	Location
Stripe	Payment processing	USA (EU-US Data Privacy Framework)
Google Analytics	Website analytics	USA (EU-US Data Privacy Framework)
Google Ads	Advertising and retargeting	USA (EU-US Data Privacy Framework)
Facebook (Meta) Pixel	Advertising and retargeting	USA (EU-US Data Privacy Framework)
Mailchimp (Intuit)	Email newsletter distribution	USA (EU-US Data Privacy Framework)
GoDaddy Inc.	Website hosting	USA
Attraction ticket providers	Procuring tickets on your behalf	Hungary

We do not sell your personal data to third parties. We do not share your personal data with third parties for their own independent marketing purposes without your consent.

We may also disclose your data where required by law, court order, or regulatory authority, or where necessary to protect our legal rights.

International data transfers (EU/EEA residents)

Where we transfer your personal data outside the EU/EEA — including to our U.S.-based service providers — we rely on one or more of the following safeguards:

The EU-US Data Privacy Framework (where the recipient is certified)
Standard Contractual Clauses approved by the European Commission
Your explicit consent

8. Email Marketing — Newsletter

If you subscribe to our newsletter, we will use your email address to send you updates about Budapest attractions, offers, and travel tips. We use Mailchimp to manage and send our newsletter communications.

Opt-in: We will only send you marketing emails if you have actively subscribed. We do not add customers to our newsletter list automatically as a result of making a purchase.
Opt-out: You may unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us at buda.castle.district@gmail.com. Unsubscribing from marketing emails does not affect transactional emails related to your booking.
Legal basis (EU): Consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

9. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected:

Data type	Retention period
Booking and transaction data	7 years (for tax and accounting compliance)
Customer support communications	3 years from the date of communication
Newsletter subscriber data	Until you unsubscribe, then deleted within 30 days
Analytics and cookie data	As set by the relevant third-party platform (typically 14–26 months for Google Analytics)
Payment data	Held by Stripe in accordance with their retention policy

After the applicable retention period, data is securely deleted or anonymised.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

HTTPS encryption across the entire website
Secure payment processing via Stripe (PCI DSS compliant)
Access controls limiting who within Tickets LLC can access personal data
Use of reputable, security-certified third-party services

No method of transmission over the internet is completely secure. While we take data security seriously, we cannot guarantee absolute security.

11. Rights of EU/EEA Residents (GDPR)

If you are located in the EU or EEA, you have the following rights under the General Data Protection Regulation (GDPR):

Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may ask us to correct inaccurate or incomplete data.
Right to erasure (“right to be forgotten”): You may ask us to delete your personal data, subject to certain legal exceptions (e.g. where we are required to retain it by law).
Right to restriction of processing: You may ask us to restrict how we use your data in certain circumstances.
Right to data portability: You may request your data in a structured, commonly used, machine-readable format.
Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will stop processing immediately.
Right to withdraw consent: Where processing is based on your consent (e.g. newsletter, non-essential cookies), you may withdraw consent at any time without affecting prior lawful processing.
Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. In Hungary, this is the National Authority for Data Protection and Freedom of Information (NAIH):

NAIH — Nemzeti Adatvédelmi és Információszabadság Hatóság Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary Website: www.naih.hu Email: ugyfelszolgalat@naih.hu

To exercise any of these rights, contact us at buda.castle.district@gmail.com. We will respond within 30 days. We may ask you to verify your identity before processing your request.

Legal bases for processing (summary):

Contract performance: booking fulfilment and ticket delivery
Legal obligation: tax and accounting retention requirements
Legitimate interests: fraud prevention, customer support, site security
Consent: newsletter, non-essential cookies, advertising and retargeting

12. Rights of California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the categories of third parties with whom we share it.
Right to delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
Right to correct: You may request correction of inaccurate personal information.
Right to opt out of sale or sharing: We do not sell your personal information for monetary consideration. However, our use of Facebook Pixel and Google Ads may constitute “sharing” of personal information for cross-context behavioural advertising under the CPRA. You may opt out of this by adjusting your cookie preferences via our cookie consent tool or by visiting:
- https://optout.aboutads.info
- https://optout.networkadvertising.org
Right to limit use of sensitive personal information: We do not collect sensitive personal information as defined under the CPRA.
Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise your California privacy rights, contact us at buda.castle.district@gmail.com. We will respond within 45 days as required by law.

Categories of personal information collected (CCPA categories):

Identifiers (name, email address, IP address)
Commercial information (purchase history)
Internet or other electronic network activity (browsing behaviour, cookie data)
Geolocation data (approximate location derived from IP address)

13. Children’s Privacy

Our website and services are directed at adult users only. We do not market to, or knowingly solicit personal data directly from, children under the age of 16.

However, because our concierge service procures attraction tickets on behalf of customers — including families visiting with children — a parent or guardian using our service may provide us with limited personal data about their minor children — specifically names and ages — solely for the purpose of fulfilling the booking. This data is provided by the parent or guardian, not collected directly from the child, and is used exclusively to procure the correct tickets. It is not used for marketing, profiling, advertising, or any purpose beyond order fulfilment, and is retained only for the period specified in Section 9 (Data Retention).

If you are a parent or guardian and have concerns about personal data relating to your child that you have provided to us, or if you believe we have inadvertently collected data about a minor without parental authorisation, please contact us immediately at buda.castle.district@gmail.com and we will address your request promptly.

14. Links to Third-Party Websites

Our website may contain links to third-party websites, including the official websites of attraction operators. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal data.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Your continued use of the website after any update constitutes acceptance of the revised policy.

16. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact:

Tickets LLC Email: buda.castle.district@gmail.com Postal address: 5150 Mae Anne Ave. Ste 405 #5253, Reno, NV 89523, United States

This Privacy Policy has been prepared with reference to: EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679); EU ePrivacy Directive (2002/58/EC); California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA); Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (Hungary); and U.S. Federal Trade Commission guidelines on online privacy.