Last updated
29 October 2026.
Who runs this website
This website is operated by Grand Duchy Castles / All Castles Luxembourg, 1 Rue Münster, 2160 Grund Luxembourg, Grand Duchy of Luxembourg.
Data you send to us
When you send an enquiry, the site collects the details you submit: name, email, optional phone or WhatsApp number, travel date, group size, pickup location, tour interest, company or travel agency details when relevant, and your message.
Job applications
When you apply through our Careers page, we receive your name, email, languages, driving experience, vehicle details, availability, introduction and confirmation that you are eligible to work in Luxembourg. We use these details to assess your application and contact you about work with Grand Duchy Castles. Applications are delivered through Resend to our recruitment email inbox and kept for as long as needed to handle recruitment. You can request access, correction or deletion using the recruitment email address on our Careers page.
How the data is used
Enquiry data is used to reply to your request, prepare a private tour proposal, manage booking communication, answer follow-up questions and keep basic business records. It is not sold, dressed up as “growth hacking”, or used for random mailing list theatre.
Service providers
The site may use Vercel for hosting, analytics and performance insights, Resend for contact form email delivery, and communication platforms such as WhatsApp when you choose to contact us there. If you book through an external tour platform, that platform processes its own booking data under its own terms.
Analytics and technical data
Basic technical data may be processed to keep the website working, measure page performance, understand which pages are useful and protect the service from abuse. This can include page views, device and browser information, approximate region and timestamps.
Retention
Enquiry and booking communication is kept for as long as needed to handle the request, complete the tour, answer later questions and meet ordinary business record needs. Irrelevant or duplicate messages may be deleted sooner.
Your choices
You can ask to access, correct or delete personal data connected with your enquiry. Use the contact page and identify the enquiry clearly enough to find it without archaeological excavation.
Changes
This policy can be updated when the website, booking flow or service providers change. The current version is published on this page.