Privacy Policy

Controller: PortalWeb GmbH, Kornmattstrasse 24, 6460 Altdorf (UR), Switzerland · info@colosseumatnight.com · full details in the Imprint. We process personal data in line with the Swiss Data Protection Act (FADP) and, where applicable to visitors from the EU/EEA, the GDPR.

This website is hosted by Vercel Inc. (USA). When you visit, technical data (IP address, date/time, requested page, browser) is processed in server logs for delivery and security and deleted automatically after a short period. Transfers to the USA are safeguarded by EU standard contractual clauses.

We only set non-essential cookies after you agree via the cookie banner. You can change your choice at any time via "Cookie settings" in the footer. Cookies in use: cain_consent (stores your choice, essential, max. 12 months) and — only after consent — Google Analytics cookies (_ga, _ga_*, up to 14 months). During checkout, Stripe sets technically necessary cookies for fraud prevention.

With your consent we use Google Analytics 4 (Google Ireland Ltd. / Google LLC, USA) to understand anonymously how the site is used (pages, clicks on tour links). IP addresses are shortened by Google; we have concluded the standard data processing terms. Legal basis: your consent, revocable at any time via the cookie settings.

If you contact us, we process your name, e-mail address and message to answer your request. The message is stored in our database (Neon/Vercel Postgres, EU region Frankfurt) and forwarded to us by e-mail (Resend). We keep requests no longer than 12 months after completion.

When commenting you provide a name, optionally an e-mail address (never published, only for queries) and your text. Comments are published only after manual review and can be deleted on request at any time — just contact us.

Purchases are processed by Stripe Payments Europe Ltd. on Stripe's own checkout pages; we never see your full payment details. To fulfil your order we share your name and shipping address with our production and shipping partner. Order data is retained as required by commercial law.

Tour links lead to GetYourGuide and Viator. From the moment you click, those providers are responsible for data processing on their sites.

To protect the admin area, the IP address of failed login attempts is stored for a maximum of 15 minutes.

You have the right to access, rectification, deletion, restriction and data portability, and — where processing is based on consent — the right to withdraw it with future effect. EU/EEA residents may also complain to their supervisory authority. Contact for all privacy matters: info@colosseumatnight.com.

Last updated: July 2026