Privacy statement

General
Domtoren.nl is the official website of the Dom Tower in Utrecht and is managed by Stichting Utrecht Marketing, the organization responsible for processing your personal data. Stichting Utrecht Marketing is located at Domplein 9, 3512 JC Utrecht, the Netherlands.

On domtoren.nl, you will find all information about Utrecht’s most iconic landmark and the various activities taking place there. This Privacy Statement pertains to the collection and use of your personal data.

Newsletter

Subscription
When you subscribe to our newsletter via this website, you can expect to receive it on a regular basis. We store your personal data in our email system Mailinglijst (with which we have a data processing agreement) and use it solely for the purpose of sending the newsletter. The information is used as follows:

Email address (required): Necessary for delivering the newsletter.
First name, last name, and gender (optional): If provided, these details are only stored within the Mailinglijst system.

Upon subscribing, you will receive an opt-in confirmation. By using this opt-in, you grant us permission to use your email address for sending the newsletter. We value transparency regarding the data we collect and why. If anything is unclear or missing, feel free to email us at domtoren@utrechtmarketing.nl.

Unsubscribe
You can withdraw your consent to receive our newsletter at any time. Every newsletter includes a link at the bottom to unsubscribe.

Data Processing
When registering for personalized services (such as the newsletter), purchasing tickets via our webshop, or booking group visits or events, personal data such as your name, address, and contact details (phone number and email) will be collected. If applicable, payment data may also be collected.

We use this personal data exclusively to provide access to services for which registration or payment is required. Data is only collected and processed within the scope of the agreement we enter into with you. In addition, personal data may be processed if required by law.

CCTV Surveillance
During your visit to our museum or store, security cameras may record your presence. This is based on our legitimate interest in ensuring the safety of visitors, staff, and our premises. No personal data is linked to these recordings.

Sharing of Personal Data with Third Parties
Your information may be shared with third parties when:

• You have explicitly given your consent;
• The information is anonymized and cannot be traced back to you;
• Required by law;
• Necessary for fulfilling an agreement with you;
• There is a legitimate interest.

This includes the providers of our booking system, newsletter platform, and ongoing visitor research.

Your personal data will never be shared with third parties for marketing purposes without your explicit consent.

Additionally, we use various software tools whose providers may have access to personal data. Stichting Utrecht Marketing ensures all data exchanges fall within legal boundaries and has signed data processing agreements with all involved parties. This ensures organizational and technical measures are in place to safeguard your privacy.

Retention Periods
Your data is not stored longer than necessary for the purposes for which it was collected, unless legally required or until you request its deletion. Personal data related to bookings involving financial or fiscal information is retained for 7 years. CCTV footage from the museum or store is stored for two weeks and then automatically deleted (unless there is an incident during a specific period, in which case footage may be retained longer).

Your Rights
As of 25 May 2018, data protection rules have been further tightened under the General Data Protection Regulation (GDPR). If your data is no longer necessary for the purposes for which it was processed, you may request that it be deleted. Some exceptions apply, such as our legal obligation to retain certain data for tax purposes.

If you would like us to delete your data from our systems, email domtoren@utrechtmarketing.nl with the subject line „Remove my data from domtoren.nl“, and include your last name and the email address used for registration. To prevent misuse, we may ask for proper identification. If it concerns data linked to a cookie, include a copy of that cookie, which can be found in your browser settings. All communications are sent via SSL encryption.

Other rights under the GDPR include the right to access or correct your data, or to object to its processing. To exercise these rights, email infoavg@utrechtmarketing.nl.

Complaints
If you believe we are not complying with applicable privacy regulations, we are happy to help resolve the issue. If we cannot reach a solution together, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes
This privacy statement came into effect on 25 May 2018. Stichting Utrecht Marketing reserves the right to amend and update this privacy statement.

Questions, Requests, and Complaints
If you have any questions, comments, or complaints about this privacy statement or the processing of personal data by Utrecht Marketing Domtoren, please call us at +31 (0)30 2360010 or email domtoren@utrechtmarketing.nl.

Cookie Statement

What is a cookie?
This website uses cookies. A cookie is a small file sent along with pages of this website and stored by your browser on your device’s hard drive. The information stored in it can be sent back to our servers on a subsequent visit.

Google Analytics 4 (GA4)
On our website we use Google Analytics 4 (GA4), a web analytics service provided by Google LLC, to collect statistics and analyze user behavior in order to optimize the user experience. GA4 is linked with Google Ads and can import triggers and events from Analytics to optimize advertising campaigns. It can also apply User-IDs to track website visits across multiple sessions and devices.

Please note that the data collected via GA4 may be shared with and combined with other Google services—such as Google Signals, Firebase and Google Ad Manager—to enable cross-platform analysis, remarketing and reporting. These integrations allow us to enrich insights from various sources and build more relevant remarketing audiences.

GA4 is only activated once users have given their explicit consent for analytics, personalization and advertising cookies. Without this opt-in, GA4 remains disabled and no data are collected.

Data Retention Periods

• Event-level data: retained for up to 2 months
• User-level data (including User-ID and Google Signals): retained for up to 14 months

Where possible, data are anonymized before being stored by Google; IP anonymization is enabled by default so that full IP addresses are never transmitted. Data may be transferred to and stored on Google’s servers in the United States or other third countries. Google is certified under the EU–U.S. Data Privacy Framework, ensuring an adequate level of protection for the transfer of personal data.

For users who wish to opt out of tracking entirely, please see the Google Analytics Opt-out Browser Add-on.

Use of Meta Conversions API and Meta Pixel
Our website uses the Meta Pixel and Meta Conversions API to optimize and personalize ad campaigns on Meta platforms, such as Facebook. These technologies enable us to share lawfully obtained data, such as information about your interactions with our website, helping us display more relevant and targeted advertisements.

We take your privacy seriously and ensure that your data is handled securely and confidentially. The Meta Conversions API respects your privacy settings within Meta, such as the Off-Facebook Activity tool. This means your preferences are honored in how data is used.

These technologies allow us to better tailor our advertising while complying with applicable privacy legislation and protecting your personal data.

Use of Google Tag
We use a Google Tag to retarget visitors via Google Ads and other Google platforms. This includes a Google Ads retargeting tag, enabling us to show tailored ads based on your prior interactions with our website. This only takes place if you have agreed to the use of marketing cookies.

Enabling, Disabling, and Deleting Cookies
More information on how to enable, disable, or delete cookies can be found in your browser’s help function or instructions.

More Information About Cookies
For additional information about cookies, visit:
Consumentenbond (Dutch Consumer Association):
What are cookies? | Purpose of cookies | Delete cookies | Disable cookies
Your Online Choices: A guide to online behavioural advertising

This cookie statement was partly based on the statement provided by cookierecht.nl. It has been compiled with the utmost care. However, Domtoren.nl accepts no liability for any direct or indirect damage resulting from the use of the information provided herein. No rights can be derived from the contents of this statement.

This privacy statement was last (partially) updated on: May 9, 2025

Cookies