Privacy policy

Who is responsible for the data

For this website, the service is presented under the name GoViaWay. Privacy questions and requests can be sent to privacy@goviaway.com. The site owner should add the full legal entity name and registered address here before publication where local law requires those details.

Data we may handle

If you contact us, we receive the information you include, such as your name, email address, message, page URL and details of a correction. Our hosting environment may also process technical request data such as IP address, date and time, browser information and error or security logs.

The site uses a currency preference cookie named gw_currency so that your selected display currency can be remembered. It may also use a goviaway_location cookie containing location information derived from the request environment for site personalisation. These values are used for the service experience; they are not a booking record.

Purposes and legal bases

We use contact data to answer a request, investigate a correction or discuss a partnership. We use technical data to deliver, secure and troubleshoot the website. We use preference and location information only to provide the requested display or personalisation features.

Depending on the situation, the legal basis may be taking steps at your request, providing a feature you asked for, our legitimate interest in operating and securing the site, or consent where consent is legally required. Non-essential analytics or advertising should not be introduced without an appropriate consent mechanism.

Google Analytics and measurement

If Google Analytics 4 is enabled for this website, it loads only after you grant the Analytics category in the cookie banner. It may process information such as pages viewed, approximate location, device and browser details, interaction events and online identifiers, including Google Analytics cookies. We use it to understand site performance and improve route and travel content; advertising personalisation and Google Signals are disabled in the site configuration.

The Google Analytics Measurement ID is supplied through the production configuration. Google acts as a separate service provider under its own terms and privacy information. The operator should configure the property retention period and data-sharing settings to match this policy and applicable law.

Aviasales and booking partners

When you enable Partner search or follow an external flight-search link, the partner may receive the route context you selected, such as origin airport, destination airport and departure date, together with the referring page and normal technical request data. The embedded search widget is provided by a Travelpayouts/Aviasales partner service and is not loaded before the relevant choice in the cookie banner.

After you leave GoViaWay, Aviasales or another booking partner controls the search, cookies, availability, booking data, payment and final price under its own privacy and cookie notices. GoViaWay does not receive payment details or control a reservation made on the partner website.

Partners, retention and international transfers

Hosting, security, email, analytics and booking-partner providers may process data only as needed to provide their service. If a provider processes data outside the EEA, the operator should document the applicable transfer safeguard, such as an adequacy decision or approved contractual safeguards.

We keep contact messages while they are being handled and for a reasonable period afterwards, keep security and technical records according to the hosting and security policy, and let cookies expire according to their configured lifetime.

Your GDPR rights

Subject to legal limits, you may ask for information about your data, access a copy, correct inaccurate data, request deletion or restriction, receive portable data where applicable, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Send a request to privacy@goviaway.com. You may also complain to the data-protection supervisory authority in the country where you live, work or believe an infringement occurred. We may need enough information to verify the request and will respond within the period required by applicable law.