Skip to content

Privacy policy

1. Controller

The controller responsible for processing personal data on this website (londoncitypass.com) is:

Patrick Kühne
Kolpingstr. 12
04416 Markkleeberg
Germany
E-mail: patrick@101places.de

2. The essentials in brief

This website provides information about travel experiences, tickets and tours and links to our booking partners for booking. Bookings are not made here but on the partner's website.

  • We do not set any cookies and therefore do not ask for consent.
  • We do not use any third-party analytics or advertising services, so no Google Analytics and no advertising pixels.
  • There is no contact form, no newsletter and no user account.
  • Our visitor statistics run on our own server and do not store IP addresses (section 4).
  • Your browser connects to third-party servers in only two cases: for the product images of our booking partners (section 6) and when you follow a link to a partner (section 7).

3. Hosting and server log files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Every request is delivered through the host's servers. In the process, the host handles the technically necessary data: your IP address, date and time, the requested address, the previously visited page (referrer) and your browser and operating system.

Such information is usually recorded in server log files, which serve security and troubleshooting. The host decides how long it keeps log files. Details can be found in its privacy policy. Where data is processed outside the EEA, this is based on the EU Standard Contractual Clauses.

We have concluded a data processing agreement with the host in accordance with Art. 28 GDPR. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website. Further information can be found in the host's privacy policy.

4. Visitor statistics without cookies

We count visits to this website with our own script on our web server. It does not set cookies, does not read anything from your device and does not create user profiles. No data is passed on to anyone.

For each page view we record the page, the language version, the date and time to the minute, whether a phone or a computer was used and where the visit came from. The origin is the domain of the referring website (for example a search engine) or a campaign parameter in the link. When you click a link to one of our booking partners, we also record the target address without its parameters. We do not record your IP address, the full browser identifier or any identifier that would let us recognise you on a later visit.

The origin of the visit is passed on within this website as a short parameter in the page address (for example ?src=google) and is added to the campaign code of links to our booking partners. This lets us see which sources lead to bookings. The parameter and the campaign code contain no personal data.

We evaluate the data only in aggregated form, for example the number of visits from search engines per day. The raw data is deleted automatically after 400 days. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to understand how visitors find this website and which content is useful to them.

5. Fonts

The fonts on this website are stored on our own web server. Loading a page does not establish a connection to Google Fonts or any other font provider.

6. Prices, ratings and product images

Our server regularly retrieves prices, ratings and availability of the tours itself through the interfaces of our booking partners. No data about you is transmitted in the process.

The photos of the tours, however, are loaded by your browser directly from the image servers of GetYourGuide (GetYourGuide Deutschland GmbH, Sonnenburger Straße 73, 10437 Berlin, Germany) and Tiqets (Tiqets International B.V., James Wattstraat 77, 1097 DL Amsterdam, the Netherlands) and Headout (Headout, Inc., 82 Nassau St #60351, New York, NY 10038, USA). The provider receives your IP address, the address of the page you are viewing and technical information about your browser. It processes this data under its own responsibility; we have no influence on it.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to show current photos of the bookable tours exactly as our booking partners provide them. More information can be found in the providers' privacy policies linked in section 7.

7. Links to booking partners and affiliate programs

This website is financed through affiliate programs. If you book a tour through one of our links, the partner pays us a commission. The price for you stays the same.

The links contain our partner ID and a campaign code. The campaign code shows the website, the source of the visit and the language, for example londoncitypass-google-en. It contains no personal data.

By clicking, you leave this website. On its own website, the partner may use cookies or similar technologies to attribute a booking to our link. The partner is responsible for this, and its privacy policy applies. From our partners we only receive aggregated information on bookings and commissions, such as date, tour, amount and campaign, but no names or contact details of the people who book.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the correct settlement of commissions.

We participate in the following affiliate programs:

  • GetYourGuide (GetYourGuide Deutschland GmbH, Sonnenburger Straße 73, 10437 Berlin, Germany): privacy policy
  • Tiqets (Tiqets International B.V., James Wattstraat 77, 1097 DL Amsterdam, the Netherlands): privacy policy
  • Headout (Headout, Inc., 82 Nassau St #60351, New York, NY 10038, USA): privacy policy
  • Awin (AWIN AG, Otto-Ostrowski-Straße 1A, 10249 Berlin, Germany, affiliate network used among others for Turbopass): privacy policy
  • Partnerize (Performance Horizon Group Limited, 6th Floor, West One, Forth Banks, Newcastle upon Tyne NE1 3PA, United Kingdom, affiliate network used among others for Go City): privacy policy

8. Google Ads

For some of our websites we run ads on Google Ads from time to time, an advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Our ads appear in Google search results when someone searches for certain terms.

We do not use Google's conversion tracking or remarketing, and this website does not load any Google Ads script. When you click one of our ads, Google adds a click identifier (gclid) to the address of the page you land on. Our visitor statistics only register that the visit came from an ad (section 4). We do not store or pass on the identifier itself.

Google processes data about the display of and clicks on ads under its own responsibility. More information can be found in Google's privacy policy. You can adjust which ads Google shows you at adssettings.google.com.

9. Contact by e-mail

If you send us an e-mail, we store your message and your details in order to answer your enquiry. If it concerns a contract or steps prior to a contract, the legal basis is Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR, in which case our legitimate interest is answering enquiries. We delete the message once the enquiry has been dealt with, unless a statutory retention obligation applies.

10. Storage period, legal bases and your rights

We store personal data only for as long as is necessary for the respective purpose or required by law. The periods are given in the sections above. Where we rely on a legitimate interest (Art. 6(1)(f) GDPR), it is named there.

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An informal e-mail to the address in section 1 is sufficient.

Where processing is based on a legitimate interest, you may object to it at any time on grounds relating to your particular situation (right to object under Art. 21 GDPR). We will then no longer process the data unless there are compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte), Maternistraße 17, 01067 Dresden, Germany, www.datenschutz.sachsen.de.

11. Encryption, changes, version

This website is delivered exclusively over an encrypted connection (TLS). You can recognise this by "https://" in the address bar.

We update this privacy policy when the technology of the website or the legal situation changes.

Version: October 2026