Privacy statement

General
Domtoren.nl is the official website of Utrecht’s Dom Tower and is part of Stichting Utrecht Marketing, the organisation responsible for processing your personal data.

Stichting Utrecht Marketing (also known as Utrecht Marketing) is the central tourist organisation for the city of Utrecht. Utrecht Marketing is located in Utrecht at Ganzenmarkt 1 (3512 GC). Utrecht Marketing organises, supports and coordinates various activities and campaigns and is responsible for processing your personal data in this context. This privacy statement relates to the collection and use of this personal data.

We believe it is important that you are aware of what personal data we request from you in which situations and why. We therefore ask you to read this privacy statement. Is anything unclear? Or are we missing something? Feel free to send an email to privacy@utrechtmarketing.nl and ask your question.

Newsletter
Sign up
When you sign up for the newsletter via this website (via an opt-in), you can expect to receive a monthly digital newsletter with news related to the Dom Tower.

Purpose of processing and legal basis
The purpose is to send you the newsletter on the legal basis of consent.

What personal data do we process and use?
Email address (mandatory): the email address is obviously necessary to send you the digital newsletter.

First name (optional): we like to address you personally and want to personalise our newsletters, e.g. “Dear Robin”.

Other data (optional): if provided by you and with your consent, we may link additional data (such as purchase information) to your email address in order to better tailor our newsletters to your interests.

If you wish to subscribe to this newsletter, you will receive an opt-in from us. By using this opt-in, you give us permission to use the personal data mentioned above to send you the newsletter. We store the aforementioned data in our email system, Spotler Mail+, and use it exclusively for sending the newsletter.

Unsubscribe
You may withdraw your consent to receive our newsletter at any time. At the bottom of each mailing, there is a link labelled “Change your details or unsubscribe”. Via privacy@utrechtmarketing.nl, you can indicate that you wish to unsubscribe from the newsletter or have your details amended or deleted.

Data processing
We use a processor, Spotler Mail+, with whom we have concluded a processing agreement, exclusively for sending our newsletter and mailings.

When you register for personal services (such as the newsletter), purchase tickets in the webshop or make a booking for a group visit or reception, personal data such as your name, address and contact details, including your telephone number and email address, will be collected. Payment details will also be collected if necessary.

We use this personal data exclusively for access to the relevant services to which registration or payments are linked. The data is only requested and processed within the limits of the agreement we enter into with you. Personal data is also processed if this is necessary to comply with a legal obligation incumbent on us.

Visual material
Domtoren.nl features images of the Dom Tower and related subjects that help tell the story of this iconic monument. These images may include portraits, which constitute personal data. Utrecht Marketing bases the processing of this personal data on the GDPR principle of “legitimate interest”. The photos published on Domtoren.nl are used for journalistic (or artistic) purposes. Utrecht Marketing wants to use them to share information about the Dom Tower and its associated heritage. Utrecht Marketing carefully considers privacy when selecting photos. If you appear in a published photo without your consent, you can submit a request for removal via privacy@utrechtmarketing.nl.

Social media
Photographs may be taken at events organised or co-organised by Utrecht Marketing around the Dom Tower and at locations in and around the Dom Tower. These photographs may then be shared on the social media channels of Domtoren.nl. Utrecht Marketing bases this on the legitimate interest of promoting the Dom Tower and related activities. If you appear in a published photo without your consent, you can submit a request for removal via privacy@utrechtmarketing.nl.

Cultural Target Group Model (Cultureel doelgroepenmodel)
One of Utrecht Marketing’s tasks is to contribute to stimulating cultural participation among all residents of Utrecht (multi-year plan 2022-2025). Knowledge gained through research is essential for promoting participation. Utrecht Marketing works together with cultural partners in this regard. Utrecht Marketing processes personal data with a view to stimulating cultural participation through research. Utrecht Marketing processes the postcodes and house numbers of visitors to, and those interested in, cultural activities in Utrecht, including visitors to the Dom Tower. The cultural organisations in Utrecht involved – which are also controllers themselves – share this visitor data with Utrecht Marketing for the purposes of the research conducted by Utrecht Marketing. More information about the processing of personal data by these cultural organisations can be found in the privacy statements on the websites of these third parties.

Utrecht Marketing maps the cultural participation of the sector based on postcodes and house numbers, in collaboration with the Utrecht cultural sector. Utrecht Marketing uses this personal data from visitors to conduct research into interest and participation in cultural activities in Utrecht. In addition, Utrecht Marketing conducts research through surveys, interviews, polls and other methods.

The results, which cannot be traced back to natural persons, are shared so that all institutions and partners can make use of this knowledge. The results of the research are used for policy development and policy advice. The cultural organisations also use the results to report to their funders and, for example, as input for their programming and marketing policy.

The legal basis for the processing of visitor data is the legitimate interest of Utrecht Marketing, the Municipality of Utrecht and the cultural organisations in Utrecht to shape cultural and events policy and to stimulate cultural participation among as large and diverse an audience as possible. Where required, Utrecht Marketing or one of the cultural organisations with which Utrecht Marketing collaborates will ask for your consent to process your personal data.

What personal data do we process for the Cultural Target Group Model?
Utrecht Marketing obtains visitor data from cultural organisations in Utrecht. This data consists (only) of postcodes and house numbers, including visitors to the Dom Tower. This visitor data is linked to the Cultural Target Group Model in order to generate statistical data about the audience that visits the cultural organisation. The statistical data generated cannot be traced back to natural persons.

The Cultural Target Group Model was developed in collaboration with Whooz, based on their Whize database. For more information, please visit the Whooz B.V. website (https://www.whooz.nl/privacy-en-voorwaarden).

In the context of surveys, interviews and polls, the data processed is that which the participant in the research voluntarily provides (the answers to the questions).

Camera systems
During your visit to our museum or shop, our security cameras may record your presence. We have a legitimate interest in doing so. We do this for the safety of visitors, staff and our buildings. No personal data is linked to these camera images.

Sharing data with third parties
Your information may be provided to third parties when:

• you give your consent;
• this information cannot be traced back to you as a person / has been anonymised;
• it is required by law;
• it is deemed necessary for the performance of an agreement with you
• there is a legitimate reason for doing so.

This concerns the supplier of the booking system, the newsletter and the executor of the continuous visitor survey.

Your personal data will not be provided to third parties for marketing purposes without your consent.

In addition, a number of software programmes are used. The suppliers of these programmes have access to personal data. Stichting Utrecht Marketing ensures that the exchange of data falls within the legal framework and a processing agreement has been concluded with all parties. This means that organisational and technical measures have been taken to ensure that your privacy is guaranteed.

Retention periods
Utrecht Marketing will not retain your data for longer than is necessary for the purposes for which it was collected, unless this data must be retained on the basis of a legal obligation or until you request us to delete your data. Personal data relating to bookings with financial and tax data will be retained for seven years. Camera images from the museum or shop are retained for two weeks and then automatically deleted (unless there is an emergency during a certain period, in which case images may be retained for longer on an incidental basis). We retain the email addresses we use to send our newsletters for as long as you are registered as a newsletter subscriber. Unsubscribed email addresses are deleted from the system annually. To validate the Cultural Target Group Model, we retain your data for a maximum of three years.

Rights
The GDPR grants you various rights. If your data is no longer needed for the purpose for which it was processed, you have the right to request that this data be deleted. There are a number of exceptions to this, such as our obligation to retain certain data for the tax authorities, among others. Would you like us to delete your data from our system? Please send an email to privacy@utrechtmarketing.nl stating “Delete my data from Utrechtmarketing.nl” and include your surname and the email address you used to register. To prevent misuse, we may ask you to identify yourself adequately.

When it comes to accessing personal data linked to a cookie, you must send a copy of the cookie in question. You can find this in your browser settings. Based on this information, we can look you up and delete your data. All data is sent via an SSL connection.

Other rights you have under the General Data Protection Regulation are the rights to access or change your personal data or the right to object to the processing of your personal data. If you wish to exercise any of these rights, please email privacy@utrechtmarketing.nl.

Complaints
If you believe that we are not complying with the applicable privacy regulations, we will be happy to help you find a solution. In addition, you always have the right to submit a complaint to the Data Protection Authority.

Changes
This privacy statement came into effect on 1 September 2024. Utrecht Marketing reserves the right to change and update this privacy statement. The last (partial) revision took place on 19 September 2025.

Questions and requests
Do you have a question, comment or complaint about this privacy statement or about the processing of personal data by Utrecht Marketing? Please contact us by calling 030 232 3080 or sending an email to privacy@utrechtmarketing.nl.

Cookie statement
At Utrecht Marketing, we want to share with you how we collect and use your data when you visit our website. This cookie policy explains how we use cookies and how you can consent to our cookies.

What are cookies?

• Cookies are small data files that are stored in your browser or device. They can be provided by the entity that manages the website you are visiting (‘first-party cookies’) or by other companies (‘third-party cookies’). For example, we work with external analytics providers, such as Google, who place cookies when you visit our website. This helps us understand how you use our services so that we can improve them.
• Pixels are small images on a web page or in an email. Pixels collect information about your browser or device and may set cookies to enable us, for example, to learn more about your interactions with email or web content.
• Local storage allows data to be stored locally on your browser or device and includes local HTML5 storage and browser cache.

How we use cookies
We use cookies for various reasons – cookies help us see which pages are most popular on our site, count visitors to a page, improve our users’ experience, see how effective our advertisements are, tailor advertisements to the recipient and keep our site secure. The cookies we use fall into one of the following categories:

• Functional cookies: These cookies are essential for the proper functioning of our website. They remember your preferences, such as language settings or selected region, so that the website can be displayed according to your preferences and you have an optimal user experience.
• Analytical/performance cookies: These enable us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users can easily find what they are looking for.
• Tracking cookies: These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertisements displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

Our cookies by category:
Marketing cookies: Google Analytics 4 (GA4)
On this website, we use Google Analytics 4 (GA4), a web analytics service provided by Google LLC, to collect statistics and analyse user behaviour in order to optimise the user experience. GA4 is linked to Google Ads and can import triggers and events from Analytics to optimise advertising campaigns. In addition, GA4 can apply user IDs to track website visits across multiple sessions and devices.

Please note that the data collected via GA4 may be shared and combined with other Google services, such as Google Signals, Firebase and Google Ad Manager, to enable cross-platform analysis, remarketing and reporting. These links enable us to enrich insights from various sources and build targeted remarketing lists.

GA4 is only activated after users have explicitly consented to analytics, personalisation and advertising cookies (collectively falling under the category of marketing cookies). Without this opt-in, GA4 remains disabled and no data is collected.

Retention periods

• Event-level data: maximum 2 months.
• User-level data (including User ID and Google Signals): maximum 14 months.

Where possible, data is anonymised before being stored by Google; IP anonymisation is enabled by default, so that full IP addresses are not transmitted. The data may be transferred to Google servers in the United States or other third countries. Google is certified under the EU-U.S. Data Privacy Framework, which guarantees an adequate level of protection for the transfer of personal data.

You can limit the sharing of your data with Google Analytics by:

• Installing the Google Analytics Opt-out Browser Add-on
• Adjusting your cookie preferences at the bottom of this page

Marketing cookies: Meta Conversions API and Meta Pixel
On our website, we use Meta Pixel and Meta Conversions API to optimise and personalise our advertising campaigns on Meta platforms, such as Facebook. These technologies enable us to share data that we have obtained lawfully, such as information about your interactions with our website. This data helps us to display more targeted and relevant advertisements that are better suited to your interests.

We take your privacy seriously and ensure that your data is treated securely and confidentially. The Meta Conversions API is designed to respect the privacy choices you make within Meta, such as using the Off-Facebook Activity tool. This means that if you choose to limit your off-Facebook activities, these choices also apply to the data shared through the Conversions API.

These technologies enable us to tailor our advertisements more effectively to your preferences, while complying with applicable privacy laws and protecting your personal data.

Marketing cookies: Google Tag
We use a Google Tag that enables us to retarget visitors to our website via Google Ads and other Google platforms. This also involves the use of a Google Ads retargeting tag, which allows us to display targeted advertisements based on your previous interactions with our website. This only happens if you agree to the use of marketing cookies.

Enabling, disabling and deleting cookies
More information about enabling, disabling and deleting cookies can be found in the instructions and/or by using the Help function of your browser.

Change your cookie preferences here
At the bottom of this page, in the section “Detailed cookie statement from our Consent Management Platform, Cookiebot”, you will find the option to adjust your current cookie preferences.

More information about cookies?
You can find more information about cookies on the following websites:
Consumentenbond: What are cookies? | What are cookies used for? | Deleting cookies | Disabling cookies
Your Online Choices: A guide to online behavioural advertising

The cookie statement from cookierecht.nl served as the source for the creation of this document. This statement has been compiled with the utmost care. However, Ontdek-Utrecht is not liable for any direct or indirect damage that may arise from the use of the information provided herein. No rights or claims can be derived from the content of this statement in any way.

Detailed cookie statement from our Consent Management Platform, Cookiebot: