Liability advice

In spite of careful content control, we will not take over any liability for contents of external links. Exclusively the originators of linked content will assume full liability.

The Muenchener Tierpark Hellabrunn AG reserves all rights in terms of content. Reproduction and publication are only permitted in accordance with the Muenchener Tierpark Hellabrunn AG.

Privacy Policy

We are pleased that you have chosen to visit our website. In this privacy policy, we explain how we handle your personal data in a clear, easily understandable manner.

In Part 1, we explain how we, Münchener Tierpark Hellabrunn AG, process and protect your personal data, and in Part 2 we provide information on the privacy policies of external service providers that are linked to our website, or whose services are used by us.

Part 1: Privacy Policy of Münchener Tierpark Hellabrunn AG

Data controller

Data controller responsible for the processing of personal data according to Art. 4 para. 7 GDPR is:

Münchener Tierpark Hellabrunn AG

Tierparkstr. 30
DE - 81543 Munich
Represented by Rasem Baban (Zoo Director)
Further information can be found in our imprint.

Purpose of data collection

The primary purpose of processing personal data is to ensure the smooth running of our website. We collect, process and store data in order to provide you, as a visitor to our website, with interesting, up-to-date information online, as well as to facilitate contact with you, and allow you to order entry tickets via an external service provider.

You can use our website without having to enter your personal details. Users are not required to register to access the website.

Under data protection law, we are obliged to guarantee the confidentiality and integrity of the personal data processed by our IT systems.

We process the following data: 

  • IP address of the visitor's computer (for a maximum of 7 days)
  • Operating system used by the visitor's computer
  • Browser version of the visitor's computer
  • Path and query string of the requested URL
  • Date and time of the visit
  • Size of the data transfer
  • Referring URL
  • Request type (e.g. GET or POST) and status code

The IP address will be deleted within no later than 7 days from all systems used in connection with the operation of this website. Thereafter, any remaining data we store is no longer personally identifiable, i.e. cannot be used to identify you.

The data is also used to fix errors on the website.

The legal basis for data processing in this context is Art. 6 para. 1 letter f) GDPR. Our legitimate interests pursuant to Art. 6 para. 1 letter f) are the operation of this website and the implementation of protection measures for the confidentiality, integrity and availability of the data.

Contact forms are provided for visitors to send messages to us via the internet or to register for a service we provide (e.g. to book a guided tour or children's birthday party). You can also contact us via e-mail.

The use of the contact forms provided is voluntary.

The legal basis for data processing in this context is Art. 6 para. 1 sentence 1 letter b) GDPR (execution of pre-contractual measures for the preparation of orders) or Art. 6 para. 1 letter f), the communication with customers or prospective customers.

We store the following data via our contact form to process and answer your enquires: 

  • Name
  • Email address 

We store the following data via our press accreditation form to process and approve your application: 

  • Title, first name, last name
  • Email address, phone number
  • Information on planned report 

We store the following data via our booking form for guided tours to process your request and book your tour:

  • First name, last name (and company name where applicable)
  • Address
  • Email address, phone number

How we handle your personal data

Personal data that you have submitted to us via a contact form or registration form or via email will be stored on our servers in Munich. Data backups are only carried out on computers within the European Union, which are subject to European data protection law.

If you send us an email, please be aware that the transmission path from your computer to us is not encrypted and that unauthorised persons may be able to access and read such emails. In this respect, sending us an email is analogous to sending a postcard. If you need to send us data you consider particularly sensitive or confidential, please contact us by phone. We will then explain to you how best to proceed.

The legal bases for data processing in this context can be found in Art. 6 para. 1 sentence 1 letter b) GDPR (contract fulfilment), Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interests) or order processing through a service provider, provided this personal data is processed on our behalf (Art. 28 GDPR).

Recipient/Transfer of data

We generally do not pass on personal data provided to us by you to a third party. In particular, your data will not be transferred to third parties for their advertising purposes.

However, in cases where we use service providers for the maintenance of this website or to provide service offered by us, it may occur that a service provider needs to receive personal data from us in order to provide the service. We carefully select our service providers - in particular with regard to data protection and data security - and take all data protection measures necessary for the permissible processing of such data.

Data processing outside the European Union

With the exception of our use of Google Analytics, YouTube, Facebook and Instagram, your personal data will not be processed in countries outside the European Union and European Economic Area, also known as third countries.

With regard to Google and YouTube, we would like to point out that an adequate level of data protection is in place for Google through its participation in the Privacy Shield as well as Google's privacy policy and its other data protection measures.

For Facebook and Instagram, the legal bases are stipulated in the standard contractual clauses under European law

You can find more information about how our service providers handle your data in Part 2 of this Privacy Policy.

Contacting us via phone

If you call us, your phone number will be displayed on the screen of the receiving device (provided it is not hidden) and stored in our telephone system. The storage in our telephone system is required for billing purposes; the display on our phone's screen is necessary to improve the service and facilitate return calls. Access to the telephone data in our system is strictly regulated. Stored phone numbers are deleted within no later than six months.

The legal bases for data processing in this context can be found in Art. 6 para. 1 sentence 1 letter b) GDPR (fulfilment of contract or pre-contractual measures, or for the processing of your enquiry) and Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interests for the monitoring of invoices).

Your rights as a data subject

You have the right to information about the data stored on your person. You can contact our data protection officer for such information at any time.

You have the right to correction or deletion or restriction of processing of your personal data, to the extent permitted by law.

You have the right to object to the processing to the extent permitted by law. The same applies to the right to data portability.

Please note, however, that if you are an annual pass holder, any request for the deletion of your data from our server will cause your annual pass to become invalid, as it is no longer possible to confirm its validity.

We hereby assure you that we protect your personal data using the latest technology and in accordance with data protection requirements, in particular the European General Data Protection Regulation, and implement the necessary organisational and technical measures (such as the encryption of particularly sensitive data) to prevent data theft and the unauthorised use of your personal data.

Right to complain to a regulatory authority

You have the right to complain about how we process your personal data to a data protection regulator.

Contact details for the state data protection regulator:

Der Bayerische Landesbeauftragte für den Datenschutz
Wagmüllerstraße 18
80538 Munich

Or PO box address:
Der Bayerische Landesbeauftragte für den Datenschutz
Postfach 22 12 19
80502 Munich

Data protection office

Our data protection officer is:
Mr R. Müller
Münchener Tierpark Hellabrunn AG
Tierparkstr. 30
81543 Munich


Changes to our privacy policy

We reserve the right to change this privacy policy in the event of changes to this website or other circumstances that may require it. The current version is always available at:

Version dated: 24.05.2018

Part 2: External service providers

External service providers are always involved when using our website. These usually operate outside our direct control. For example, our website is linked to Facebook, Instagram and YouTube. In the following, we would like to provide you with the privacy policies of these companies, as provided to us. Please note that we assume no liability for the accuracy of this information.

We work in partnership with München Ticket

You can buy entry tickets for Hellabrunn Zoo online. We process ticket sales via the following external service provider:

München Ticket GmbH
Seidlstraße 30
80335 Munich
For information about the data protection measures of this provider please visit:

We use FundraisingBox

You can send us a donation via an online form. Your payment and contact details will be used for the transaction and stored by us. To process your donation, we use FundraisingBox and its online donation form, a product provided by Wikando GmbH. This external service provider always guarantees the highest data security for your data. The personal data you provide will be sent to us via a secure connection.

You can choose to make an online donation using one of the following payment methods:

Donations via direct debit
In case of a direct debit, we will transfer your account details to our bank, so that we can receive your donation.

Donations via electronic payment
For electronic payment donations, you will be forwarded to the website of the payment provider Sofort AG upon confirmation of the details entered in the donation form. We do not receive your account details with this payment method. We only receive a message confirming your donation.

We use the data provided by you in the online donation form to process the transaction and for fundraising. You can object to the use of your personal data at any time by sending an email to notifying us of which online form you have filled out.

We use Facebook and Instagram


Our website uses plug-ins to integrate the social network Facebook (provider: Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA). These plug-ins appear on our website as a Facebook logo or as a "Like" button.

For more information on Facebook plug-ins please visit:

For more information on Facebook's privacy policy please visit:

When you visit our website, Facebook plug-ins will create a direct link between your browser and the Facebook server. This identifies your IP address and enables Facebook to link your visit to our website with your Facebook account. We, as the operator of this website, have no knowledge as to what data is being transmitted to Facebook or of its use by the social network.

If you prefer not to have your visit to this website linked to your social network accounts such as Facebook or Instagram, we recommend you log out of Facebook or Instagram, etc. before you visit our website.

The legal bases for both providers are stipulated in the standard contractual clauses under EU law.

Instagram's privacy policy can be found at

We use YouTube

An enhanced privacy mode is enabled for YouTube videos embedded in this website. This mode allows us to prevent YouTube from storing cookies for a user who is viewing a web page with an embedded YouTube video, but does not actually click on the video to start playback. While YouTube will store cookies on the user's computer upon clicking on the YouTube video, it does not store personally identifiable cookie data for the playback of embedded videos in enhanced privacy mode.

For more information about YouTube's privacy policy please visit: