This Privacy Policy explains how City Story processes personal data in connection with its website, inquiries, bookings, and guided culinary and market tours. It applies to visitors, prospective guests, and customers who interact with our services in Denmark and, where relevant, in the European Economic Area.
Under the GDPR, we process personal data only where we have a lawful basis, such as performance of a contract, compliance with legal obligations, legitimate interests, or consent where required. The data we use is limited to what is relevant for inquiries, bookings, tour coordination, payment handling, and related administration.
Where the GDPR applies, it governs our processing of personal data of individuals in the European Economic Area and, in relevant cases, other users whose data is handled from Denmark.
Where the GDPR applies, you may have the right to access your data, request correction or deletion, restrict or object to certain processing, and receive a copy of data you provided in a portable format where applicable. If processing is based on consent, you may withdraw that consent for future processing. You may also raise concerns with the competent supervisory authority.
Depending on the circumstances, you may have rights to access, correct, delete, restrict, or object to processing of your personal data. You may also have the right to data portability for information you provided to us. Where consent is used, you can withdraw it for future processing without affecting prior lawful processing.
To exercise a privacy right, please submit a clear request using the contact details in this policy and include enough information for us to identify the relevant data. We may ask for additional details to verify identity and to understand the scope of the request. If a request cannot be fully satisfied, we will explain the reason where permitted by law.
We retain personal data for the period needed to handle inquiries, manage bookings, provide tours, maintain business records, and meet legal, accounting, or dispute-related obligations. When data is no longer needed, we delete it or anonymize it unless a longer retention period is required by law or justified by a specific operational need.
If we make material changes, we will update the policy text and, where appropriate, provide a notice through the website or another reasonable channel. The version in force is the one published at the time of your visit or interaction, unless a later version is stated to apply.
Privacy overview
This section outlines the main categories of information processed, where it may come from, the cookie technologies in use, and the choices available to users.
We may process identification and contact details, booking and payment information, group and date preferences, dietary information you choose to provide, communication records, and limited technical data such as device and usage information. We also process information needed to confirm route suitability, meeting arrangements, and service delivery for private culinary and market tours.
We receive data from website inquiries, consultation requests, email or phone communications, booking and payment steps, and information shared during planning for a tour. Some technical data is collected automatically when the website is used, and some operational information may be created internally when we confirm availability, route details, or service administration.
The website may use strictly necessary cookies to support core functions, preference cookies to remember selected settings, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent depending on their purpose. We do not rely on cookies to collect more information than is needed for the stated purposes.
You may block or delete cookies through your browser settings. If you do so, some parts of the website may not function as intended. Where the website provides a cookie preference tool, you can use it to manage non-essential cookies. Browser controls remain available even if no preference tool is used.
We use personal data to respond to inquiries, manage date and group requests, collect dietary and route preferences, confirm venue availability, arrange booking payment, communicate meeting details, and deliver guided tasting walks. We also use data for customer support, recordkeeping, website security, service improvement, and compliance with legal obligations.
We may share personal data with payment providers, website and IT service providers, communication tools, and other operational partners that help us run the website, process bookings, or administer customer records. Where a third party acts on our behalf, it may process data only under our instructions and for the agreed purpose.
We may disclose personal data where necessary to comply with applicable law, lawful requests from public authorities, or obligations related to accounting, fraud prevention, or dispute handling. We may also share information to establish, exercise, or defend legal claims when that is necessary and proportionate.
