1. Scope
1.1. This website provides information about visiting the Royal Palace and you can book admission tickets online here. This website is operated by the Civil List of HM the King, with address at Hertogstraat 2, B-1000 Brussels, and with company number 0850.553.705 (‘we’ or ‘us’).
1.2. This website processes personal data about you as a website visitor. We hereby make every effort to respect data protection legislation and, in particular, the General Data Protection Regulation 2016/679 of 27 April 2016 (‘GDPR’) and strive to treat your personal data with the necessary care and confidentiality at all times.
1.3. By means of this privacy Statement, we wish to inform you about how and why we process your personal data as a website visitor, to whom we pass on this information, what your rights are and who you can contact for more information.
1.4. This website may contain links to other websites. Although we try to provide links only to secure websites, we are not responsible for the content and data protection policies of these websites.
When visiting other websites, we strongly recommend that you read the Privacy Policies on these websites before disclosing personal data.
2. What personal data can we process?
2.1. When you make a reservation to visit the Royal Palace, we process the following data :
- first name;
- surname;
- email address;
- telephone number;
- postcode;
- surname and first name of additional visitors;
- indication whether the visitor has already reached the age of 12;
- payment ID, payment method, payment status, transaction;
2.2. During the visit to the Royal Palace, the following personal data is processed:
- Detailed reservation data;
- Images from the security cameras;
2.3. When you contact us in relation to this website, we will collect any personal data you provide (name, address or email address, content of the message, IP address, language etc.)
2.4. We may also collect data on the use of this website via cookies and log files in order to improve its performance and appearance. For more information about this, please consult the cookie statement.
3. For what purposes may we process your personal data?
3.1. We may process personal data for legitimate purposes. These purposes include, but are not limited to:
- reserving admission tickets to visit the Royal Palace;
- processing the payment of admission tickets;
- organising the visit to the Royal Palace;
- ensuring safety and order during the visit to the Royal Palace;
- compliance with applicable healthmeasures;
- handling of questions, requests and complaints regarding this website;
- collecting statistics on the use of this website;
- improving the performance and appearance of this website and ensuring its security.
4. On what legal grounds do we process your personal data?
We may process personal data for the above purposes on the basis of the following processing grounds:
4.1. Necessary for the performance of a contract:
entering into, executing or terminating the agreement with visitors to the Royal Palace, including answering your questions about the visit and the reservation, requesting relevant information within the framework of the agreement, fulfilling our pre-contractual obligations, concluding the agreement and communicating about our services.
4.2. Legal obligations:
To fulfil the obligations imposed on the Controller under legal and administrative obligations and to comply with tax and accounting obligations.
4.3. Legitimate interest:
- Improving the quality of our services and website; Ensuring the security of the website and the visit;
Preserving and using evidence in the context of liability, litigation or disputes and with a view to archiving the company’s activities.
4.4. Consent
For the placement of cookies that are not strictly necessary, explicit consent is requested.
5. To whom may we pass on your personal data?
5.1. The employees of the Royal Palace will have access to your personal data on a strict need-to-know basis for the purposes described above.
5.2. Where necessary, we use external service providers, so-called ‘processors’, to support our operational purposes, such as the management of this website and the execution of payments on this website. These external service providers carry out certain data processing operations on our behalf as necessary. We will only share your data with these external service providers to the extent necessary for the respective purpose. The data may not be used by them for other purposes. Furthermore, these service providers are contractually bound to guarantee the confidentiality of your data by means of a so-called ‘processor’s agreement’ concluded with these parties.
5.3. Your data will not be transferred outside the European Economic Area (EEA).
6. Is your personal data protected?
6.1. We take strict technical and organizational (security) measures to protect your personal data from access by unauthorized persons, unlawful processing, misuse, damage, loss and destruction.
6.2. These measures include:
- information for relevant staff to ensure they are aware of our data protection obligations when handling personal data;
- administrative and technical controls to limit access to personal data to what is necessary;
- technical security measures, including passwords, fire walls, anti-virus software and encryption.
6.3. Although we take appropriate security measures as soon as we receive your personal data, the transmission of data via the Internet (including email) in particular is never completely secure. Consequently, we can never fully guarantee the security of the personal data sent to us.
7. How long is your personal data kept?
7.1. Your personal data will not be kept longer than necessary for the purposes described above.
- the data of the persons who visited the Royal Palace is kept for a fortnight after the closure of the Royal Palace;
- the payment data and the data related to the performance of the contract and our services is kept (i) as long as necessary for the activity or service concerned; (ii) the legally required retention period; or (iii) the limitation period for legal proceedings.
8. Is your personal data used for automated decision-making?
8.1. Automatic decisions are decisions about individuals which are based solely on the automated processing of personal data and produce legal effects which significantly affect the individuals concerned.
We do not use personal data on this website or during visits to the Royal Greenhouse for automated decision-making.
9. What rights do you have?
You have various rights with regard to the data we process about you. If you wish to exercise any of the rights set out below, please contact us using the contact details set out in Section 10 of this Privacy Statement.
9.1. Right of inspection and copying
You have the right to inspect your data and to receive a copy of it. This right also covers the possibility of requesting further information on the processing of your data, including the categories of data processed about you and for what purposes.
9.2. Recht van aanpassing of rectificatie
U heeft het recht om uw gegevens te laten aanpassen indien u meent dat wij beschikken over onjuiste gegevens.
9.3. Right to data erasure (right to be forgotten)
You have the right to request that we delete your data without unreasonable delay. However, we will not always be able to comply with such a request, for example, if we still need the data in connection with a current contract, or if the retention of certain data for a certain period of time is required by law.
9.4. Right to restriction of processing
You have the right to restrict the processing of your data. In this way, the processing is temporarily halted until, for example, there is certainty about its accuracy.
9.5. Right to withdraw your consent
If the processing is based on your consent, you have the right to withdraw this consent at any time by contacting us.
9.6. Right to object
You have the right to restrict the processing of your data. This should be done on the basis of specific reasons related to your situation. In this case, we must stop processing, unless we have compelling legitimate grounds to continue.
9.7. Right of transferability
You have the right to obtain your data, which you yourself have provided to us, in electronic form. In this way, it can be easily transferred to another organisation. You also have the right to ask us to transfer your data directly to another organisation, if this is technically possible.
9.8. How can you exercise your rights?
You may exercise the rights set out above by contacting us using the contact details provided in Section 10 of this Privacy Statement.
When you make a request to exercise your rights, if we have any doubt about your identity we will ask you to verify it. In this case, we will request the transmission of documents that allow for your identification beyond reasonable doubt, such as a copy of the front of your identity card. We do this to prevent your data from ending up in the wrong hands. It is sufficient for such a copy to show your name and date of birth clearly. You may then also delete the other data.
The exercise of your rights is in principle free of charge. However, if your request is manifestly unfounded or excessive, we may charge you a reasonable fee in light of the administrative costs we incurred. In the same situation, however, we may choose not to act on your request. You will be informed of the reasons for this, if applicable.
In any case, we will inform you of the action taken in relation to your request at the latest within one month of receipt. In the case of complex or multiple requests, this period may be extended to three months. In the latter case, you will be informed of the extension of the deadline for reply.
9.9. Right to complain to your supervisory authority
If you believe that we are incorrectly processing your data, you have the right to complain to your data protection supervisory authority. You can do this with the supervisory authority for the EEA Member State where you normally reside, have your place of work or where the alleged infringement was committed. As we operate mainly from Belgium, please find below the contact details of the Belgian Data Protection Authority.
Belgian Data Protection Authority (GBA) Rue de la Presse 35
B-1000 Brussels
+32 (0)2 274 48 00
contact@apd-gba.be
Website GBA – submit complaint
For further information and the contact details of the supervisory authority of each EEA Member State, please visit this website page of the European Data Protection Board with all relevant contact details. In addition, you can always go to the competent civil court to file a claim for compensation.
10. How to contact us?
10.1. If you have any questions about this Privacy Statement and this website in general, you can contact us by sending an email to privacy@monarchie.be or by sending a written request to : Royal Palace, Department of the Data Protection Officer, Rue de Brederode 16, B-1000 Brussels.
11. Changes to this Privacy Statement
11.1 We may amend this Privacy Statement from time to time. We will update the revision date of this page whenever a change is made. The amended Privacy Statement will then apply from this date.
Please check this page regularly for changes and additions.
Last update: 12/03/2025