Privacy Policy
This policy explains what happens with your personal data when you use colosseum-rome-tickets.org. The short version: the site collects as little as it can, sets no tracking cookies of its own, and never sees your ticket purchase. The longer version follows, because you are entitled to it.
Who is responsible for your data
The data controller is Travel Ticket Box, the publisher of this site, operating from France and Spain. Contact for anything in this policy: [email protected], or +33 7 45 01 49 05 (Visitor Planning Support, Monday to Friday, 09:00-18:00 CET). Site-specific questions can also go to [email protected].
What data we collect - and what we do not
- Contact form and email - your name, email address and the message you send. Used only to answer you. Kept for up to 12 months after the last exchange, then deleted, unless a legal obligation says otherwise.
- Server logs - the hosting provider keeps standard access logs (IP address, browser type, pages requested, timestamps) for security and troubleshooting. Retained for a limited period by the host, then rotated. We do not use them to build profiles.
- Nothing else. No accounts, no newsletter, no payment data. Tickets are bought on the partner platform, not here - we never see your name on an order, your card or your voucher.
Cookies: none of ours, some from partner widgets
This site does not set first-party tracking or analytics cookies. If that changes, this page changes first and a consent banner appears before anything is set.
What the site does embed is booking widgets from Tiqets (the availability and product cards you see on ticket pages). When a widget loads, Tiqets may set its own cookies for functionality and for attributing a later purchase to this site. Those cookies are governed by Tiqets' privacy policy, not ours. To avoid them: block third-party cookies in your browser, or open partner pages in a private window. The widgets degrade gracefully - the text of every page reads fine without them.
Affiliate links and what leaves this site
Booking buttons link to Tiqets with a partner identifier in the URL. That identifier tells the partner the click came from this site so a commission can be paid; it carries no personal data about you. Once you are on the partner platform, their privacy policy applies to everything you enter there.
Legal basis and where data is processed
Contact messages are processed on the basis of your consent and our legitimate interest in answering you. Server logs are processed on the basis of the host's legitimate interest in security. Data is processed within the European Union; where a provider processes outside the EU, it does so under standard contractual clauses.
Your rights under GDPR
- Access - ask what we hold about you and get a copy.
- Rectification - have inaccurate data corrected.
- Erasure - have your contact messages deleted.
- Portability - receive your data in a common machine-readable format.
- Objection and restriction - object to processing based on legitimate interest, or ask us to pause it.
- Complaint - lodge a complaint with a supervisory authority; for France that is the CNIL (cnil.fr). We would rather hear from you first: [email protected].
Requests are answered within one month. We may ask you to confirm your identity before releasing data.
Children
The site is not directed at children and we knowingly collect nothing from anyone under 16. If a minor has written to us, a parent can ask for the message to be deleted at the address above.
Changes to this policy
If this policy changes, the updated version is published here with a new revision date. Material changes to what we collect would also be announced on the page where the change applies.