Version 1.3 — Effective date: 27 March 2026 | Last updated: 27 March 2026
This Privacy Policy explains how Outpeek processes personal data when you use the App and related services. It covers what data we collect, why we collect it, how we use it, who we share it with, and how long we keep it.
We encourage you to read this policy before creating an account or making any purchase through the App.
The data controller for personal data processed through the Outpeek mobile application is:
Outpeek S.R.L.
Corso Re Umberto, 56
Torino (TO), Italy
P.IVA 13326820019
For any privacy-related question, request, or complaint, you can contact us at:
Email: support@outpeek.it
PEC: outpeeksrl@pec.it
This policy applies to all personal data we process in connection with:
This policy does not govern the independent data processing carried out by event organisers in connection with their own events, or by third-party platforms whose listings may appear in the App as External Events. Outpeek's obligations regarding the data it shares with organisers are described in Section 8.
We use limited internal operational metrics and admin-dashboard data to monitor platform stability, API performance, error rates, and basic usage patterns. We have not adopted external analytics tools at launch. No external behavioural profiling or advertising tracking is performed.
We collect personal data in the following ways:
We process personal data for the following purposes:
We rely on the following legal bases under the EU General Data Protection Regulation (GDPR) and applicable Italian law:
Processing necessary to provide the App and its features to you. This includes:
Processing necessary for our legitimate operational interests, where those interests are not overridden by your rights. This includes:
Processing required by law, including Italian and EU accounting, tax, and data retention obligations.
Where we rely on consent — for example, for foreground location access and, if introduced in future, optional marketing communications — we request your consent separately and clearly. You may withdraw consent at any time without affecting prior processing.
For Native Ticketed Events, the event organiser is the seller of the ticket and your contractual counterparty for the event itself. Outpeek provides platform infrastructure and operational support. Outpeek is not the seller by default and is not the merchant of record for Native Ticketed Events unless expressly stated otherwise for a specific event.
Payments for Native Ticketed Events are processed through Stripe, an integrated third-party payment provider. Outpeek does not store your payment card data. Stripe processes payment card data directly under Stripe's own terms and privacy policy. Outpeek may receive limited payment-related metadata — such as payment status, transaction identifiers, and payout-related records — for booking confirmation, platform fee reconciliation, and fraud prevention purposes.
Organisers who collect payments through the App are subject to Stripe Connect onboarding and Stripe's requirements. Stripe handles payouts to organisers independently of Outpeek.
When you purchase a ticket or register for a Native Ticketed Event, certain limited personal data may be made available to the organiser solely for the purposes of managing that event. This may include:
This data is shared only to the extent necessary for check-in, access control, identity verification at entry, attendance tracking, and event administration. You are informed of this sharing within the App before completing a purchase or registration.
Organisers are not permitted to use this data for unrelated purposes such as marketing, profiling, or commercial outreach, unless you have separately agreed to such use. Organisers are contractually required to handle attendee data in accordance with applicable data protection law and to retain it only for as long as reasonably necessary for the management of the event and any directly related post-event administration.
Where an organiser uses the attendee data they receive through the App to manage their own event, they act as an independent data controller for that processing under applicable data protection law. Each organiser is solely responsible for ensuring that their own processing of attendee data complies with applicable law. Outpeek defines and limits the scope of data shared with organisers through the App, but does not control and is not responsible for any processing carried out independently by organisers beyond that scope.
Your profile picture is displayed to the organiser or their authorised staff through the App's check-in interface solely for identity verification at the event entrance. It is not shared with organisers for any other purpose.
The App requests foreground-only location permission on your device. We do not request or collect background location.
If you grant location permission, your approximate device coordinates are used to show you events near your current location and to support distance-based sorting in the event discovery feed. If permission is not granted or coordinates are not available, the App defaults to a reference location for distance-based queries.
Location data is used transiently for query purposes. We do not maintain a persistent location history. You can revoke location permission at any time through your device settings.
If you grant notification permission, the App registers your device and stores an Expo push notification token linked to your account. This token is used to deliver push notifications via Expo's push notification infrastructure, which in turn uses APNs (Apple) or FCM (Google Firebase) as the underlying delivery layer.
Push notifications may include ticket purchase confirmations, event reminders, and other notifications related to your use of the App. You can manage notification preferences through your device settings.
We send transactional emails via Amazon SES in connection with: email address verification, password reset codes, change-of-email verification, and booking or registration confirmations. These communications are necessary for the operation of your account.
You can update your profile, interests, bio, and profile picture from within the App. If you signed up with email and password, you can change your email address via the in-app flow. This option is not available for accounts created via Google or Apple OAuth.
You can request deletion of your account from within the App. Deletion may be restricted or blocked in certain cases:
Where deletion proceeds, it is implemented as a soft-delete: your account is deactivated and made inaccessible to you, but certain records are retained for the periods described in Section 14 for legal, accounting, fraud-prevention, ticketing, and dispute-handling reasons.
We do not sell your personal data. We share data only as described below.
As described in Section 8.3, limited attendee data may be shared with organisers for event operations, subject to the conditions described in that section.
We use third-party service providers who process data on our behalf under data processing agreements. These providers act as data processors on our behalf, except where they operate as independent controllers under their own terms. These include:
We may disclose personal data where required by law, court order, or other legal obligation, or where necessary to protect the rights, safety, or property of Outpeek, our users, or the public.
In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the successor entity, subject to equivalent protections.
Outpeek is established in Italy. Our infrastructure relies on cloud and third-party services that may store or process data outside the European Economic Area (EEA), including in the United States.
Where personal data is transferred outside the EEA, we rely on appropriate safeguards under applicable law — including, where relevant, Standard Contractual Clauses adopted by the European Commission, or other recognised transfer mechanisms. Our service providers maintain their own transfer safeguards and, where applicable, rely on adequacy decisions or equivalent mechanisms.
You can request further information about the safeguards applicable to a specific transfer by contacting us at support@outpeek.it.
We retain personal data for as long as necessary for the purposes described in this policy, or as required by law. The following periods apply:
Retained while your account is active. Following a deletion request, the account is soft-deleted and deactivated; residual account data is retained for up to 30 days before further deletion or anonymisation, except where longer retention is required for legal, accounting, fraud-prevention, ticketing, or dispute-handling reasons.
Retained for up to 10 years where required for accounting, tax, legal, and dispute-related purposes under applicable Italian and EU law.
Retained for up to 24 months after the closure of the relevant support request.
Retained while your account is active and the token remains valid. Tokens are removed or deactivated when they become invalid, when you disable notifications, when you log out, or through periodic cleanup as part of routine maintenance.
Used transiently for query purposes only. We do not store a persistent location history.
Attendee data made available to organisers through the App is accessible only for event management purposes and for as long as reasonably necessary for event management and related post-event activities, including support, disputes, refunds, and legal obligations. Organisers are required not to use or retain attendee data beyond what is necessary for those purposes.
Retained for up to 12 months.
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include:
No system is completely secure. If you believe your account has been compromised, please contact us immediately at support@outpeek.it.
Under the GDPR and applicable Italian law, you have the following rights in relation to your personal data:
To exercise any of these rights, please contact us at support@outpeek.it or outpeeksrl@pec.it. We will respond within the timeframe required by applicable law (generally within 30 days). We may need to verify your identity before acting on a request.
You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority in your place of habitual residence.
Outpeek is not intended for use by persons under the age of 16. We do not knowingly collect personal data from individuals under 16.
If we become aware that we have collected personal data from a person under 16 without an appropriate legal basis, we will take steps to delete that data. If you believe a child under 16 has created an account or provided personal data to us, please contact us at support@outpeek.it.
We may update this Privacy Policy from time to time to reflect changes to our practices, the App, or applicable law. When we make material changes, we will notify you through the App or by other appropriate means before the changes take effect. The updated policy will be published at outpeek.it/privacy with the new effective date.
The updated policy will apply from its effective date. If you have questions about any changes, or if you do not wish to continue using the App under the revised policy, you may request deletion of your account as described in Section 11.
For any question, concern, or request relating to this Privacy Policy or to our data processing practices, please contact us:
Outpeek S.R.L.
Corso Re Umberto, 56
Torino (TO), Italy
Email: support@outpeek.it
PEC: outpeeksrl@pec.it