Privacy Policy

Last updated: September 2026.

1. Data controller

The controller of your personal data is NALG GmbH — Cra 7 #71-52, Bogotá, Colombia ("the Controller"), reachable by replying to your order confirmation email.

2. Data we collect

• Order data: name, email, phone, country, visit date and time slot — used to deliver your tickets and provide support.
• Payment data: payment is processed by your bank and the card network; we never see or store your CVV or full card number.
• Technical data: IP address, browser, pages visited — used for security and to improve the site.
• Technical cookies: display preferences (e.g. cookie-banner dismissal), stored locally in your browser.

3. Purposes and legal basis

• Performance of the contract (ticket delivery, support, refunds).
• Legitimate interest (service security, fraud prevention, site improvement).
• Legal obligations (accounting and tax).

4. Retention

• Order data: 24 months.
• Technical logs: 12 months.

5. Sharing

Your data is never sold or shared with third parties for commercial purposes. It is processed by the technical providers that make the service possible (hosting, payment processing) under GDPR-compliant processing agreements. Data is hosted in Europe.

6. Your rights (GDPR)

You have the right of access, rectification, erasure, restriction, objection and portability of your data. Exercise them by writing to the Controller. You may also lodge a complaint with your country's data-protection authority.

7. Cookies

This site uses only strictly necessary technical cookies (for example, remembering your cookie-banner choice). We do not use third-party advertising or profiling cookies.