Privacy Policy

Last updated: January 2026

GalwayBeat Guide, located at 22 Shop Street, Galway, H91 W8T7, Ireland, is the data controller responsible for the personal data collected through this website, https://galwaybeatguide.com, and any related communications. We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Irish Data Protection Act 2018.

1. Information We Collect

We may collect and process the following categories of personal data:

• Contact data: your name, email address, phone number and any other details you provide when completing a contact or quote request form.
• Enquiry content: the content of messages you send to us, including information about events you wish to promote or listings you submit.
• Usage data: information about how you use our website, including pages visited, time spent on pages, referral source, and approximate location derived from your IP address.
• Technical data: device type, browser type and version, operating system and screen resolution.
• Marketing preferences: your choices regarding cookies and communications from us.

2. How We Use Your Information

We use your personal data for the following purposes and legal bases:

• To respond to enquiries and provide quotes (performance of a contract or steps prior to entering a contract, Art. 6(1)(b) GDPR): we use your contact details and message content to answer your questions, prepare promotion quotes and process event submissions.
• To operate and improve the website (legitimate interests, Art. 6(1)(f) GDPR): we analyse aggregated usage data to improve site content, performance and user experience.
• To send marketing communications (consent, Art. 6(1)(a) GDPR): where you have opted in, we may send you newsletters or updates about Galway events. You may withdraw consent at any time.
• To comply with legal obligations (legal obligation, Art. 6(1)(c) GDPR): we may retain records where required by Irish or EU law.

3. Cookies and Similar Technologies

We use cookies and similar tracking technologies on our website. Essential cookies are necessary for the site to function and do not require consent. Analytics and marketing cookies are only set where you have given your consent through our cookie banner. You can change or withdraw your cookie preferences at any time via the cookie banner displayed on our website. For full details of the cookies we use, please refer to our Cookies Policy.

4. Data Sharing and Transfers

We do not sell, rent or trade your personal data. We may share your data only with:

• Service providers: trusted third parties who provide hosting, email delivery, analytics and related services on our behalf, acting as data processors under written data processing agreements in accordance with Art. 28 GDPR.
• Legal and regulatory bodies: where disclosure is required by law, court order or to protect our legal rights.

Where data is transferred outside the European Economic Area (EEA), we ensure an adequate level of protection through appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact and enquiry data: up to 24 months after our last correspondence with you.
• Marketing consent records: until you withdraw consent, plus up to 3 years to evidence compliance.
• Cookie consent records: up to 12 months from the date consent was given.
• Analytics data: in aggregated or pseudonymised form, for up to 26 months.

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access (Art. 15): to request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): to have inaccurate or incomplete data corrected.
• Right to erasure (Art. 17): to request deletion of your personal data where there is no legal reason for us to retain it.
• Right to restriction of processing (Art. 18): to request that we limit the processing of your data in certain circumstances.
• Right to data portability (Art. 20): to receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent (Art. 7(3)): where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month of receipt, as required by Art. 12(3) GDPR. This period may be extended by a further two months where necessary, taking into account the complexity and number of requests.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or destruction, including encryption in transit, access controls, and regular review of our security practices.

8. Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission (DPC) without undue delay and, where feasible, no later than 72 hours after becoming aware of the breach, in accordance with Art. 33 GDPR. Where the breach is likely to result in a high risk to you, we will also inform you directly, in accordance with Art. 34 GDPR.

9. Children's Privacy

Our website is not directed at children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The most recent version will always be published on this page, together with the date of the last update. Where changes are material, we will provide a more prominent notice on our website.

11. Contact Us and Right to Complain

If you have questions about this Privacy Policy, wish to exercise your rights, or would like to make a complaint about how we handle your personal data, please contact us at:

You also have the right to lodge a complaint with the Irish supervisory authority, the Data Protection Commission (DPC), if you believe our processing of your personal data infringes data protection law.