Privacy policy

General
Domplein.nl is a joint initiative of:

• Stichting Utrecht & Partners (Ganzenmarkt 1, 3512 GC Utrecht)
• Stichting Ondergronds Domplein (Domplein 9, 3512 JC Utrecht)
• The Dom Church (Achter de Dom 1, 3512 JN Utrecht)

For certain processing activities, these organisations act as joint controllers within the meaning of Article 26 of the GDPR. This means they jointly determine the purposes and means of processing. Together, these organisations facilitate Domplein.nl, and when we process personal data, this is done in accordance with applicable privacy legislation (GDPR). Visitors are informed through this privacy statement about which personal data is processed, for what purpose, and on what legal basis.

The Domplein organisations have made agreements among themselves regarding their responsibilities. The essence of these agreements is:

• Utrecht & Partners acts as the central point of contact for privacy questions and requests.
• Privacy requests are handled in mutual coordination by the organisation(s) responsible for the relevant processing.
• All organisations ensure that appropriate technical and organisational measures are in place.

We believe it is important that you are aware of which personal data we request from you in which situations and why. Therefore, we ask you to read this privacy statement. Is something unclear? Or are we missing something? Please feel free to send an email to privacy@utrechtpartners.nl with your question.

For each section below, it is indicated which organisation(s) is/are responsible for the relevant processing.

Images
Domplein.nl contains images of Domplein and related subjects that help tell the story of this location. These images may include portraits, which are personal data. Utrecht & Partners, Stichting Ondergronds Domplein, and the Dom Church are jointly responsible for processing this visual material.

The Domplein organisations base the processing of this personal data on the GDPR legal basis of “legitimate interest.” The photos published on Domplein.nl are used for journalistic (or artistic) purposes. The organisations aim to share information about Domplein and its heritage. When selecting photos, careful consideration is given to privacy. If you appear in a published photo without your consent, you can request its removal via privacy@utrechtpartners.nl
.

Social media
Photos may be taken at events around Domplein organised (in part) by the Domplein organisations and at locations in and around Domplein. These photos may be shared on Domplein.nl social media channels. This is based on the legitimate interest of promoting Domplein and its activities. If you appear in a published photo without your consent, you can request its removal via privacy@utrechtpartners.nl
.

Ticket sales
When you purchase a ticket via Domplein.nl for an activity, tour, or visit, Utrecht & Partners is the controller for the personal data you provide during the order process. This includes, for example, your name, email address, (optional) phone number, and payment details.

This personal data is processed exclusively by employees of Stichting Utrecht & Partners who work with Vintia’s ticketing systems. The other administrators of Domplein.nl (Stichting Ondergronds Domplein and the Dom Church) do not process this data.

We use this data for the following purposes:

• to establish and perform the agreement (ticket sales);
• to send tickets and service messages about your visit;
• to process payments;
• to respond to questions about your order.

The legal basis for this processing is the performance of the agreement you enter into when purchasing a ticket.

For ticket sales, we use external service providers such as a ticketing system and payment provider. Data processing agreements have been concluded with these parties to protect your personal data.

Cultural Audience Model
One of the tasks of Utrecht & Partners is to contribute to stimulating cultural participation among all residents of Utrecht. Research-based knowledge is essential for encouraging participation. Utrecht & Partners collaborates with cultural partners in this regard.

For the purpose of promoting cultural participation through research, Utrecht & Partners processes personal data. This includes postcodes and house numbers of visitors to, and those interested in, cultural activities in Utrecht, including Domplein visitors. These data are shared with Utrecht & Partners by Utrecht-based cultural organisations, which are also controllers. More information can be found in the privacy statements of those organisations.

Based on postcodes and house numbers, Utrecht & Partners maps cultural participation together with the Utrecht cultural sector. These data are used for research into interest and participation in cultural activities. Additional research is conducted through surveys, interviews, polls, and other methods.

Results that cannot be traced back to individuals are shared so that institutions and partners can use the insights. These results support policy development and advisory purposes and are also used by cultural organisations for reporting and programming and marketing strategies.

The legal basis for processing visitor data is the legitimate interest of Utrecht & Partners, the Municipality of Utrecht, and cultural organisations to shape cultural and events policy and stimulate participation. Where required, consent is requested.

Which personal data is processed?
Utrecht & Partners receives visitor data from cultural organisations. This concerns only postcodes and house numbers, including those of Dom Tower visitors. These are linked to the Cultural Audience Model to generate statistical data that cannot be traced back to individuals.

The model was developed with Whooz, based on their Whize database. See https://www.whooz.nl/privacy-en-voorwaarden
for more information.

For surveys and interviews, only data voluntarily provided by participants is processed.

Camera systems
During your visit to our public locations, security cameras may record your presence. This is based on a legitimate interest to ensure the safety of visitors, staff, and buildings. No personal data is linked to these recordings.

Sharing data with third parties
Your information may be shared with third parties when:

• you have given consent;
• the data is anonymised and cannot be traced back to you;
• required by law;
• necessary for the execution of an agreement;
• there is a legitimate reason.

This may include the booking system provider and visitor research partners.

Without your consent, your personal data will not be shared with third parties for marketing purposes.

We also use various software systems. Their providers may have access to personal data. Utrecht & Partners ensures that all data exchange complies with legal requirements and that data processing agreements are in place.

Retention periods
Your data will not be retained longer than necessary unless required by law or until you request deletion. Financial data related to bookings is retained for 7 years. Camera footage is stored for two weeks and then automatically deleted (unless needed longer due to an incident). Data for the Cultural Audience Model is retained for a maximum of three years.

Rights
Under the GDPR, you have several rights, including the right to request deletion of your data when it is no longer needed. Some exceptions apply, such as legal retention obligations.

To request deletion, email privacy@utrechtpartners.nl
with the subject “Delete my data from Utrechtpartners.nl” and include your surname and the email address used.

For cookie-related data requests, include a copy of the cookie (found in your browser settings). All data is transmitted via an SSL connection.

You also have the right to access, correct, or object to the processing of your personal data. Contact privacy@utrechtpartners.nl
to exercise these rights.

Complaints
If you believe we are not complying with privacy regulations, we will gladly help find a solution. You also have the right to lodge a complaint with the Dutch Data Protection Authority.

Changes
This privacy statement took effect on 1 March 2026. Utrecht & Partners reserves the right to update it. Last updated on 05-03-2026.

Questions and requests
For questions, comments, or complaints, contact us at +31 30 232 3080 or via privacy@utrechtpartners.nl
.

Cookie statement
We explain how we collect and use your data when you visit our website and how cookies are used.

What are cookies?

• Cookies are small data files stored on your browser or device. They can be first-party or third-party cookies. We work with providers such as Google to analyse website use.
• Pixels are small images that collect browser or device information and may set cookies.
• Local storage allows data to be stored locally on your device, such as HTML5 storage and cache.

How we use cookies
We use cookies to analyse usage, improve user experience, measure effectiveness, personalise ads, and ensure security. Categories include:

• Functional cookies: essential for website functionality.
• Analytical cookies: help analyse website use.
• Tracking cookies: track browsing behaviour for relevant content and ads.

Marketing cookies: Google Analytics 4 (GA4)
We use GA4 for analytics and advertising optimisation. Data may be combined with other Google services. GA4 is only activated after user consent.

Retention:

• Event data: max. 2 months
• User data: max. 14 months

Data is anonymised where possible. Google may process data outside the EU but complies with the EU-U.S. Data Privacy Framework.

You can opt out via:

• Google Analytics Opt-out Browser Add-on
• Cookie settings on this page

Marketing cookies: Meta Pixel & Conversions API
Used for personalised advertising on Meta platforms. Data is processed securely and in line with privacy choices.

Marketing cookies: Google Tag
Used for retargeting via Google Ads, only with consent.

Managing cookies
You can enable/disable or delete cookies via your browser settings. You can also adjust preferences via the cookie settings on this page.

More information
See:
Consumentenbond and Your Online Choices for more details.

This cookie statement is based on cookierecht.nl. While compiled with care, no rights can be derived from its contents.

Detailed cookie declaration from our Consent Management Platform, Cookiebot: