Skip to content
GoingOutly
Language: English

Privacy policy

Last updated: 15 October 2026

This policy explains which personal data GoingOutly processes when you visit goingoutly.com, why we do it and what rights you have. The short version: there are no user accounts and no advertising trackers, we measure visits in aggregate with Google Analytics and Yandex Metrica, and we keep as little as we can.

Who is responsible

The controller within the meaning of the GDPR is the operator of GoingOutly. For anything related to privacy, write to privacy@goingoutly.com.

What we process

  • Server logs: IP address, browser user agent, the requested URL and the time of the request. They are written by our web server and by Cloudflare, which sits in front of it.
  • Outbound click records: when you follow a ticket or hotel link, it passes through a /go/ redirect that records only which event, which type of link and when. No IP address or other identifier is stored with that record, so it does not identify you.
  • Emails you send us: your address, your message and anything you choose to include.
  • Strictly necessary security cookies that Cloudflare may set to protect the site from automated abuse (details in our cookie policy).
  • Usage data collected through Google Analytics and Yandex Metrica on every visit: which pages you view and how you use them (details in the sections on web analytics below).
  • Map requests: maps stay unloaded until you open one. When you do, your browser fetches the map tiles and style directly from OpenFreeMap (tiles.openfreemap.org), which receives your IP address and browser details, as any website you visit does.
  • Your location, only if you ask for it: when you tap “Use my location”, your browser asks for your permission and then sends coordinates rounded to about 100 metres to our server, which uses them once to find the nearest city and does not store them. Otherwise we suggest a city based on the country that Cloudflare derives from your connection.
  • Calendar feeds and the venue widget: when you subscribe to one of our calendar links (.ics), or visit a website that embeds our venue widget, your calendar app or browser requests these files from our server like any other page, so the usual server logs apply. The widget sets no cookies and runs no scripts.

What we do not do

  • No user accounts or log-ins.
  • No advertising features in Google Analytics and no advertising use of Yandex Metrica.
  • No advertising and no ad tracking.
  • No newsletter or marketing emails.
  • We never sell or rent personal data.

Purposes and legal bases

  • Server logs and Cloudflare security features: keeping the site secure, available and free of attacks. Legal basis: our legitimate interest, art. 6(1)(f) GDPR.
  • Click records: counting how often partner links are used and reconciling affiliate commissions. As they contain no identifier, they are not personal data in our hands; to the extent they ever were, art. 6(1)(f) GDPR applies.
  • Emails: answering your question or request, art. 6(1)(f) GDPR; where your message concerns a contract or a possible partnership, art. 6(1)(b) GDPR; where we must keep correspondence or handle a request to exercise your rights, art. 6(1)(c) GDPR.
  • Web analytics with Google Analytics and Yandex Metrica: measuring visits and page use in aggregate so we can improve the site. Legal basis: our legitimate interest in understanding how the site is used, art. 6(1)(f) GDPR. You can object at any time (see the web analytics sections below).
  • Maps, location and calendar feeds: providing the map, the nearby events or the calendar you asked for. Legal basis: art. 6(1)(f) GDPR; your device only shares its location after you allow it in the browser.

Web analytics (Google Analytics)

We use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). We use it only to measure aggregated visits and how pages are used, so that we can improve GoingOutly. The Google Analytics script loads on every visit and sets its cookies when the page loads. Our cookie notice informs you about this; it does not ask for your consent.

  • Data processed: a pseudonymous identifier stored in the _ga cookies, the pages you view, the referring page, interactions such as clicks and scrolling, time and session information, device type, browser, operating system, screen size, language and an approximate location such as country or city. Google Analytics 4 does not log or store IP addresses.
  • No advertising features: Google Signals and ad personalisation are switched off, there is no remarketing and there are no ads on the site. We do not combine analytics data with other data about you.
  • Legal basis: our legitimate interest in measuring the reach and use of our site in aggregate, art. 6(1)(f) GDPR.
  • Retention: analytics data is deleted in Google Analytics after 14 months. Details of the cookies and their duration are in our cookie policy.
  • Transfer to the USA: Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision; Google's standard contractual clauses also apply.
  • Your right to object: you can object to this processing at any time (art. 21 GDPR). The simplest way is to block Google Analytics in your browser, for example with a content blocker or with Google's opt-out add-on: https://tools.google.com/dlpage/gaoptout. You can also write to privacy@goingoutly.com; we will examine your objection and, as far as we can identify data about you, ask for it to be deleted.

Web analytics (Yandex Metrica)

We also use Yandex Metrica, a web analytics service. For visitors in the EU, the EEA, Switzerland and the UK, it is provided by Air Smart Advertising Solutions FZ-LLC, Dubai, United Arab Emirates, a company of the Yandex group, which processes the data on our behalf under Yandex's data processing agreement. We use it for the same purpose as Google Analytics: to measure aggregated visits and how pages are used, so that we can improve GoingOutly. The Yandex Metrica script (mc.yandex.ru) loads on every visit and sets its cookies when the page loads.

  • Data processed: a pseudonymous identifier stored in the _ym cookies, the pages you view, the referring page, clicks on our pages (which we see as an aggregated click map), clicks on links to other websites, time on page and session information, device type, browser, operating system, screen size and language. Yandex also receives your IP address, which it uses among other things to estimate an approximate location such as country or city. Yandex may also synchronise its identifiers across its own domains (cookie syncing); see our cookie policy.
  • Switched off: Session Replay (Webvisor), which would record mouse movements, scrolling and input, is disabled, and so is form analysis, so we do not see what you type into fields. We do not use Yandex Metrica for advertising and do not combine its data with other data about you.
  • Legal basis: our legitimate interest in measuring the reach and use of our site in aggregate, art. 6(1)(f) GDPR.
  • Retention: Yandex keeps the data for as long as we use Yandex Metrica. When we delete our counter, the data is deleted or returned under the data processing agreement, unless the law requires it to be kept longer. Details of the cookies and their duration are in our cookie policy.
  • Transfers outside the EEA: the provider is based in the United Arab Emirates and may store data with affiliated companies of the Yandex group, including data centres, outside the EEA; this may include Russia. The European Commission has not adopted an adequacy decision for either country, so these transfers rely on the EU Standard Contractual Clauses included in Yandex's data processing agreement. Even so, it cannot be ruled out that authorities in those countries could access the data without the safeguards and remedies available in the EU.
  • Your right to object: you can object to this processing at any time (art. 21 GDPR). You can block Yandex Metrica in your browser, for example with a content blocker or with Yandex's opt-out add-on (https://yandex.com/support/metrica/general/opt-out.html), or write to privacy@goingoutly.com; we will examine your objection and, as far as we can identify data about you, ask for it to be deleted.

How long we keep data

  • Server logs are rotated and deleted after about 14 days, unless a specific entry is needed to investigate a security incident.
  • Click records contain no personal data and are kept as aggregated statistics.
  • Google Analytics data is kept for 14 months and then deleted automatically.
  • Yandex Metrica data is kept for as long as we use the service; when we stop, it is deleted or returned under Yandex's data processing agreement.
  • Emails are kept for as long as needed to deal with your matter and deleted afterwards, unless the law requires us to keep them longer.
  • Coordinates sent through “Use my location” are not stored.
  • Data in your browser's localStorage stays on your device until you clear it.

Recipients and processors

We do not pass personal data to third parties for their own purposes. We use the following service providers, bound by data processing agreements under art. 28 GDPR: our hosting provider, which runs the virtual server the site lives on; Cloudflare, Inc. for content delivery, DNS and protection against attacks; Cloudflare Email Routing, which forwards messages sent to our addresses to the operator's mailbox; Google Ireland Limited for web analytics with Google Analytics, under Google's data processing terms; and Air Smart Advertising Solutions FZ-LLC (Yandex group, Dubai, United Arab Emirates) for web analytics with Yandex Metrica, under Yandex's data processing agreement. When you open a map, your browser also contacts OpenFreeMap directly to load the map tiles; OpenFreeMap is not our processor, and its own terms apply. We disclose data to authorities only where the law obliges us to.

International transfers

Cloudflare is based in the United States and serves the site from a worldwide network, so request data may be processed outside the European Economic Area and the United Kingdom. These transfers rely on the European Commission's Standard Contractual Clauses (and the UK addendum) included in Cloudflare's data processing terms. Through Google Analytics, data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, and Google's standard contractual clauses apply in addition. Through Yandex Metrica, data is processed by Air Smart Advertising Solutions FZ-LLC in the United Arab Emirates and may be stored with Yandex group companies outside the EEA, possibly including Russia. There is no EU adequacy decision for these countries; the transfers rely on the Standard Contractual Clauses in Yandex's data processing agreement (see the Yandex Metrica section above).

Partner sites

When you click through to a ticket seller or a hotel booking site such as Hotels.com or Booking.com (reached through our partner Stay22), you leave GoingOutly. Ticket and hotel links may carry affiliate tracking parameters so that the partner can attribute a purchase or booking to us. From that moment the partner is responsible for any data it collects, and it may set its own cookies, for example to attribute a booking to us. We have no influence over that processing, so please read the partner's own privacy policy.

Your rights under the GDPR and UK GDPR

  • Access to the personal data we hold about you.
  • Rectification of inaccurate data.
  • Erasure, where there is no longer a reason to keep the data.
  • Restriction of processing.
  • Objection to processing based on our legitimate interests.
  • Data portability, where processing is based on a contract and automated.
  • Objection to web analytics in particular, at any time (art. 21 GDPR): block it in your browser or with the add-ons named in the web analytics sections, or write to us.

To exercise any of these rights, email privacy@goingoutly.com. Because we hold so little, we may need a detail from you (for example the date and approximate time of a visit) to find anything at all. You also have the right to lodge a complaint with a supervisory authority, in particular in the country where you live or work; in the UK this is the Information Commissioner's Office (ICO).

US state privacy rights (CCPA/CPRA and similar laws)

We do not sell personal information and we do not share it for cross-context behavioural advertising, and we do not use sensitive personal information. Residents of California and other US states with privacy laws may ask to know, correct or delete the personal information we hold about them by emailing privacy@goingoutly.com, also through an authorised agent. We will confirm the request by email and will not treat you differently for making it.

Children

GoingOutly is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it.

Changes and contact

We update this policy when our processing changes; the current version is always published here. Questions: privacy@goingoutly.com. Last updated: 15 October 2026.