GoGetParty Privacy Policy

GoGetParty Privacy Policy

1. Who is responsible for the data

1.1. The personal data controller is GO GET PARTY SIA, registration number 40203667883, Putnu iela 14-14, Rīga, LV-1058, Latvija. For privacy enquiries: [email protected].

2. What data we use

2.1. We process account and profile information, contact details, supplier information, service listings, reviews, correspondence and event data provided by users when using the platform. Some information is required for the selected feature; additional information is provided voluntarily.

2.2. When users sign in through Google or Facebook, we receive their first name, surname, email address, profile photo and information needed to link accounts. The photo may be loaded from the relevant service’s servers, which consequently receive the visitor’s IP address.

2.3. We also receive technical information about the device, pages visited and use of the website. For listings created by our team, supplier information may come from their websites and social media.

2.4. Information about a child in an event is optional. Events are not published for all visitors and are accessible to the organiser through their account. Users must have a lawful basis for providing other people’s data.

3. Why we use data

3.1. Data needed for registration, communication, publishing offers and other requested features is processed to perform a contract or take steps at the user’s request before entering into a contract — Article 6(1)(b) GDPR.

3.2. Necessary data may be used for security, protecting rights and business communication with suppliers’ representatives on the basis of legitimate interests, taking account of the rights of the individuals concerned — Article 6(1)(f). Article 6(1)(c) applies to compliance with specific legal obligations.

3.3. Optional analytics, session recording and marketing technologies are used on the basis of consent — Article 6(1)(a). Acceptance of the Terms of Use does not constitute consent to every type of data processing.

3.4. Marketing newsletters are not currently sent. Service emails support account operation and correspondence. Voluntary subscriptions require email confirmation.

4. Cookies and analytics

4.1. We use necessary cookies for sign-in, saving settings and consent choices, as well as protection against bots. The optional categories “Analytics”, “Session recordings” and “Marketing” are disabled by default.

4.2. Analytics uses our self-hosted Umami installation. With the user’s consent, information on visits and activity on the website is collected. Session recording on certain public pages requires a separate selection; forms, chats and account areas are not recorded. Names, email addresses and account identifiers are not included in analytics events.

4.3. With marketing consent, the source of an advertising referral is saved; after sign-in, it may be linked to the account. Sign-in cookies last from 15 minutes to 7 days, language and consent settings up to one year, menu settings 7 days, and advertising-source cookies 90 days. Advertising-source data in the account is retained until the account is deleted.

4.4. Choices can be changed through “Cookie settings” on the website and in the customer profile. After withdrawing consent, the page must be reloaded; previously stored marketing cookies are not currently deleted automatically and can be removed through browser settings.

4.5. Visits through the platform’s short links are recorded separately on the server regardless of the choice in the banner; this involves processing the IP address, browser information and link parameters.

5. Access and disclosure

5.1. A review author’s first name, surname and photo are public and visible to their chat counterpart. The customer’s profile contact details are not automatically shown to the supplier, but the customer may share them in correspondence. Supplier contact details published in a listing are accessible to visitors. Public materials may be indexed by search engines.

5.2. Employees and technical service providers have access within the scope of their tasks. Correspondence is not displayed in the administration panel, but technical access to it is possible. To notify the recipient of a new message, its opening text is sent to the email provider together with the recipient’s details.

5.3. We engage service providers for data storage, website delivery and protection, technical support, email and SMS delivery, social sign-in and maps. Data may be disclosed to competent authorities on a lawful basis. We do not sell personal data or give contact details to other companies for their own marketing mailings.

5.4. Primary storage is located in the EU. Some service providers’ activities may involve transferring data or accessing it outside the European Economic Area. Such operations require the grounds and safeguards provided for by the GDPR. Information on recipients and applicable safeguards can be requested via [email protected].

6. Retention and deletion

6.1. Account deletion can be requested via [email protected] or [email protected] and is carried out by an administrator.

6.2. Deletion removes the account, reviews, the user’s own messages and events from the live database. The other party retains their own messages and previously received emails. Certain files, administrative records, subscriptions and backups may remain; account deletion does not mean that every copy of the data is deleted immediately.

6.3. The account and associated advertising data are retained until deletion. The supplier notification log is retained for 90 days; daily backups for approximately 30 days. Necessary information may be retained on an appropriate basis in the event of a dispute or a legal obligation.

7. Your rights

7.1. In the cases provided for by the GDPR, you may request access, rectification, erasure, restriction of processing and data portability, and object to processing. Consent can be withdrawn; you may object to direct marketing at any time.

7.2. Requests should be sent to [email protected]. Where necessary, we will ask for proportionate proof of identity. A response is normally provided within one month; a lawful extension by a further two months is accompanied by notification within the first month. Complaints may be lodged with Datu valsts inspekcija or another competent supervisory authority.

7.3. Users are informed of material changes to the policy. Updating the text does not replace obtaining fresh consent where required.