Jahreskarte Erwachsener

Jahreskarte Kind (7-16 Jahre)

Jahreskarte Kind (0-6 Jahre)

JAHRESKARTE - DIGITAL 2026

JAHRESKARTE - KLASSISCH

Roční permanentka

JAHRESKARTE

>>> English version of the General Terms and Conditions

Vielen Dank für Ihre Bestellung der Jahreskarte/n der Festung Königstein. Die Aktivierung erfolgt an der Kasse der Festung Königstein - erst dann beginnt die Gültigkeitsdauer von 365 Tagen. Bitte tragen Sie vorab Ihre persönlichen Daten auf der Karte ein. Die Jahreskarte gilt nur in Verbindung mit einem Lichtbildausweis.
Für den Historisch-romantischen Weihnachtsmarkt benötigen Sie zusätzlich kostenfreie Jahreskarten-Inhabertickets!


DOWNLOAD IN ADVANCE: Download your tickets to your device well before your visit and ensure you can present them at the entrance even when offline or without mobile data reception. Mobile data reception is limited at the entrances to Königstein Fortress!

Welcome to the ticket shop of Königstein Fortress!

Welcome to the ticket shop of Königstein Fortress! Book your tickets easily online - here you can buy tickets for visiting the fortress and also for guided tours, readings, and other activities 

FLEX-TICKETS for a unique visit to the fortress during high or low season

Book FLEX-TICKETS for a visit to the fortress, which allow you to visit Königstein Fortress and all its exhibitions once during the relevant period (low season, high season or saver price period). You do not have to specify the exact day of your visit. 

When booking guided tours, readings and other events, you must select a date. Please note: these events are always in German language.

Telefon: 035021 64-607
E-Mail: info@festung-koenigstein.de

Tax No. 203/145/03016
VAT ID No.: DE226399248

Festung Königstein gGmbH

Privacy Policy for the Online Ticket Shop of Festung Königstein gGmbH

The confidentiality and integrity of your personal data are of particular concern to us. With the help of our privacy policy in accordance with the GDPR, we explain which of your personal data is collected, processed and used.

The following information provides a simple overview of what happens to your personal data when you visit the website of our online ticket shop. Personal data is any data by which you can be personally identified. Detailed information on data protection can be found in the privacy policy set out below this text.

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the legal notice of this website.

Your data is collected, on the one hand, when you provide it to us during the online ticket booking process.

Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you enter our website.

Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification, blocking or deletion of this data. You may contact us at any time at the address stated in the legal notice for this purpose and for any further questions on data protection. You also have the right to lodge a complaint with the competent supervisory authority.

General Information and Mandatory Information

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

The scope of the GDPR covers only personal data. We understand this to mean all information relating to an identified (specific) or identifiable (determinable) natural person.

For a better overview, the scope of data processing is presented according to the various purposes:

•	for answering queries about the booking process (see 6.)

•	for processing bookings in the online ticket shop (see 7.)

We point out that data transmission on the internet (e.g. communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

The controller responsible for data processing on this website is:

Festung Königstein gGmbH
Festung Königstein 1

Telephone: 035021 64-607
Email: info@festung-koenigstein.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses or similar).

Data Security Using SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address line changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Many data processing operations are possible only with your express consent. You may withdraw consent you have already given at any time.

Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you also have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data with effect for the future, provided that there are reasons arising from your particular situation.

In both cases, an informal notification by email to datenschutz@festung-koenigstein.de is sufficient. The lawfulness of the data processing carried out up to the withdrawal remains unaffected by the withdrawal.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR). The competent supervisory authority for data protection matters is the state data protection officer of the federal state in which our company has its registered office. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a structured, commonly used and machine-readable format (Art. 20 GDPR). If you request the direct transfer of the data to another controller, this will be done only insofar as it is technically feasible.

Within the scope of the applicable statutory provisions, you have the right at any time to receive information free of charge about your stored personal data, its origin and recipients and the purpose of data processing and, where applicable, a right to rectification, blocking or deletion of this data (Art. 15, 16 and 17 GDPR). You may contact us at any time at the address stated in the legal notice for this purpose and for any further questions on personal data.

We hereby object to the use of contact details published within the scope of the legal notice obligation for sending advertising and information material that has not been expressly requested. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example by spam emails.

•	where there is a legal obligation to disclose it pursuant to Art. 6(1)(c) GDPR,

•	where this is legally permissible and is necessary pursuant to Art. 6(1)(b) GDPR for the performance of contractual relationships with you, and

•	where disclosure pursuant to Art. 6(1)(f) GDPR is necessary for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed.

In addition, we disclose your personal data to third parties only if you have given your express consent to this pursuant to Art. 6(1)(a) GDPR.

Where personal data is processed in a third country (outside the European Union or the European Economic Area) or this occurs in the context of the use of third-party services, this is done on the basis of our legitimate interest.

Personal data is transferred only to third countries with a recognised level of data protection, where there is a contractual obligation through so-called standard contractual clauses of the EU Commission, or where certifications or binding internal data protection rules are in place.

In the case of transfer to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, standard contractual clauses have been concluded.

We have appointed a data protection officer for our company. For further questions about our data protection, you may contact our internal data protection officer:

Email: datenschutz@festung-koenigstein.de

In order to provide you with our website and the associated services, we process your data on the basis of the following legal grounds:

Where we obtain the consent of the data subject for the processing of data, Art. 6(1)(a) GDPR serves as the legal basis.

If the processing of data is necessary for the performance of a contract, processing is based on Art. 6(1)(b) GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures.

If we are subject to a legal obligation that requires the processing of data, processing is based on Art. 6(1)(c) GDPR.

Processing operations based on a balancing of interests pursuant to Art. 6(1)(f) GDPR are generally permitted if processing is necessary to safeguard our legitimate interest or that of a third party, provided that the interests or fundamental rights and freedoms of a data subject requiring the protection of personal data do not override them.

If data is processed on the basis of your consent, you have the right to withdraw your consent from us at any time with effect for the future.

If your data is processed on the basis of a balancing of interests, you have the right to object to the processing of the data, taking into account the requirements of Art. 21 GDPR.

When this website is used solely for information purposes, without entering or transmitting information, only the data that your browser automatically transmits to our server is collected. This data is stored in the server log files. In this respect, the following data is collected:

•	the Internet Protocol address (IP address)

•	date and time of access to the website

•	the website visited and any file downloaded

•	the amount of data transferred in each case

•	website/referrer from which you reach our website

The above data is logged on the basis of a balancing of interests. Access data is processed in order to be able to display the contents of our website to you at all, to ensure a stable connection to the website and for reasons of system security and functionality of our website. This data is not combined with other data sources or assigned to specific persons.

The website is stored with the hosting service provider commissioned by our service provider vivenu GmbH, Kesselstraße 3, 40221 Düsseldorf, which provides the necessary infrastructure for operating the website. In addition to careful monitoring and selection, a data processing agreement pursuant to Art. 28 GDPR has been concluded with the service provider vivenu GmbH. Data processing is carried out for the purpose of ensuring the operational readiness of our online presence, in which we have a legitimate interest, Art. 6(1)(f) GDPR.

Information about the privacy policy of vivenu GmbH is available at: 

The websites partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted after the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can configure your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate automatic deletion of cookies when closing the browser. If cookies are disabled, the functionality of this website may be restricted.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Where other cookies (e.g. cookies for analysing your browsing behaviour) are stored, these are addressed separately in this privacy policy.

We do not use social media plugins on the website. If our website contains icons of social media providers (e.g. Facebook, Instagram, TikTok, YouTube), we use these solely as passive links to the pages of the respective providers.

Data Processing for Answering Queries About the Booking Process

You have the option of contacting us via the email address provided. The voluntary data transmitted in this context, such as your email address, postal address, telephone number and name, is used solely for the purpose of processing your enquiry and for follow-up questions.

We would like to point out that communication by email may have security vulnerabilities. It guarantees only limited confidentiality.

Your data is processed for the purpose of handling your enquiry and providing the services you request. The legal basis for data processing is Art. 6(1)(b) GDPR insofar as this concerns the initiation and, where applicable, performance of a contract. Otherwise, Art. 6(1)(a) and/or Art. 6(1)(f) GDPR is the legal basis. Our legitimate interest lies in answering and processing your enquiry.

The service provider commissioned by us, together with its hosting service provider, ensures not only the hosting of the website but also the sending, receiving and storage of emails. For these purposes, the addresses of recipients and senders as well as further information relating to email transmission (e.g. the providers involved) and the content data are processed. The legal basis for this is our legitimate interest, Art. 6(1)(f) GDPR.

Contact details are deleted after your or our enquiry has been finally processed. Beyond this, storage takes place only insofar as this is necessary to comply with legal obligations, in particular retention obligations, or to establish, exercise and defend possible legal claims in connection with our services within the applicable limitation periods, or if you have given us your consent to do so.

Data Processing for Handling Bookings in the Online Ticket Shop

As part of the booking of online admission tickets, the personal and other data required for the booking process is requested from the user and stored. This includes information such as the name of the person placing the order, account and payment data, data on the desired admission tickets, postal address and email address. All data that is mandatory for processing the order is marked as required information.

Data processing pursuant to Art. 6(1)(b) GDPR is necessary for the stated purposes of processing the offer/order and for the mutual fulfilment of obligations arising from the order. Failure to provide this data may result in the contract not being concluded.

The personal data collected by us for processing and carrying out the order is stored until expiry of the statutory retention period and then deleted, unless we are obliged to store it for a longer period pursuant to Article 6(1)(c) GDPR due to tax and commercial law retention and documentation obligations (under the German Commercial Code, VAT Act or Fiscal Code), are entitled to do so to safeguard our legitimate interests, or you have consented to storage beyond this pursuant to Art. 6(1)(a) GDPR.