Privacy policy

This policy explains what personal data royaledinburgh.com processes, why, and what your rights are. The site has no forms, accounts or newsletter, and doesn't set cookies of its own.

Who is responsible

The controller of your data is the owner of this site, Joaquim Castella, based in Spain. For anything about your data, email hello@royaledinburgh.com.

What we process and why

Visiting a page

To deliver pages and protect the site from attacks, Cloudflare, which hosts the site, processes your IP address and the technical data your browser sends, such as the page you ask for, your browser and the time.

Legal basis: our legitimate interest in running a site that works and is secure (article 6.1.f of the GDPR).

Visit statistics

We count visits with Plausible Analytics, which we run on our own server (stats.afeli.net), hosted by Amazon Web Services in Ireland. Plausible doesn't use cookies and doesn't store your IP address. It records the page you visit, the site that sent you, your browser, operating system, device type and country. To count unique visitors, it uses a code derived from your IP address and browser that changes every day, so it can't recognise you from one day to the next.

Legal basis: our legitimate interest in knowing how the site is used without identifying you (article 6.1.f of the GDPR).

Some pages show a Tiqets availability widget and Google Maps. They load from Tiqets' and Google's servers, so Tiqets and Google receive your IP address, details of your browser and which page of this site you're on. Tiqets also records how the widget is used. What they do with this data is up to them: see the Tiqets privacy policy and the Google privacy policy.

Legal basis: our legitimate interest in showing you ticket availability and where each attraction is (article 6.1.f of the GDPR).

Links to Tiqets and Civitatis

Links to Tiqets and Civitatis carry our partner code, so they know a booking came from this site and can pay us a commission. When you follow one, you leave this site: Tiqets and Civitatis process your data and set cookies under their own privacy policies (Tiqets, Civitatis).

Emails

If you email us, we use your email address and message to reply. Legal basis: our legitimate interest in answering you (article 6.1.f of the GDPR).

Who receives data

Cloudflare, which hosts this site, and Amazon Web Services, which hosts our statistics server. They process the data only on our behalf.
Tiqets and Google, when their widget or map loads on a page you visit.

We don't sell your data or share it with anyone else, unless the law requires it.

Cloudflare, Amazon Web Services and Google are US companies, so data may be transferred to the United States. These transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.

How long we keep data

Visit statistics: while the site runs. They can't identify you.
Emails: as long as we need them to deal with your message, unless the law requires us to keep them longer.

Your rights

You can ask us to access your data, to correct or erase it, to restrict or object to its processing and, where it applies, to receive it in a portable format. Email hello@royaledinburgh.com; we'll reply within one month.

If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD, aepd.es) or to the data protection authority where you live.

Cookies and similar technologies

This site doesn't set cookies, and Plausible doesn't store anything on your device. The only thing the site stores itself is your language: when you pick one in the language menu or the language suggestion bar, or close that bar, it saves an entry called preferredLocale in your browser's local storage, so it doesn't suggest another language again. It holds only the language code, never leaves your browser, and stays until you clear your browsing data.

The Tiqets widget and Google Maps come from other companies, which can store or read information on your device. This is what they did when we checked on 30 September 2026, loading our pages in Chrome with no earlier cookies:

Tiqets widget (tiqets.com): saves an entry called __EventQueue in your browser's local storage, which holds usage statistics until they're sent to Tiqets; it stays until you clear your browsing data. It also tries to set a cookie called l10n (the widget's language and currency, 30 days); Chrome blocks it, but other browsers may keep it.
Google Maps (google.com): stored nothing. If you're signed in to Google or already have Google cookies, your browser sends them to Google when the map loads.

These companies can change what they store. You can delete or block cookies and site data in your browser settings.

Changes

If we change how we use your data, we'll update this page.

Last updated: 1 October 2026.