LEGAL
Privacy Policy
This policy explains what personal data Outly collects when you join our waitlist or apply as a creator, why we collect it, who processes it on our behalf and what rights you have. We keep it short and specific on purpose — if anything here is unclear, write to us and we will explain it.
1. Who is responsible for your data
The controller of your personal data is NEXT DIMENSIONS, družba za marketing, d.o.o., Trebče 81, 3256 Bistrica ob Sotli, Slovenia, registration number 7238274000 (“Outly”, “we”, “us”).
For any question about this policy or about your data, contact luka@outly.si.
2. What we collect
If you join the waitlist:
- your email address;
- the date and time you signed up and the date and time you confirmed;
- a random confirmation token used only to verify that the inbox is yours.
We do not ask for your name, phone number, address or date of birth, and we do not buy or import email addresses from anywhere else. You give us your address yourself.
If you apply as a creator:
- the business and contact details you enter in the creator application;
- any documents you choose to attach to that application.
The creator application is sent to us by email. It is not stored in the waitlist database.
3. Why we use it and on what legal basis
We use your email address for one purpose only: to tell you when Outly launches in your city, and to send you the confirmation email that verifies your address.
The legal basis is your consent under Article 6(1)(a) of the General Data Protection Regulation (GDPR). You give that consent by entering your address and clicking the confirmation link in the email we send you. Until you click that link, your address is not added to our waitlist and is deleted as described in section 5.
We do not use your data for profiling, we do not make automated decisions about you, and we never sell or rent your address to anyone.
4. Who else processes your data
We use a small number of service providers who process data on our behalf, under data processing agreements, and only on our instructions:
- Supabase — database hosting. Your address is stored on servers in the European Union (Frankfurt, Germany).
- Brevo (Sendinblue SAS, France) — sending our emails. Brevo records delivery events and, for the emails we send you, whether the email was opened and whether a link in it was clicked. We use this only to check that our emails actually arrive.
- GitHub Pages (GitHub, Inc. / Microsoft) — hosting of this website. GitHub processes the technical data any web server receives when you open a page, such as your IP address.
This website loads its typeface from Google Fonts. When a page loads, your browser requests the font files from Google servers, which means your IP address is transmitted to Google.
Your waitlist data is stored inside the European Union. We do not transfer it to countries outside the EU or the EEA.
5. How long we keep it
- Confirmed sign-ups: until Outly launches in your city and we have sent you the launch email, and in any case no longer than 24 months from the day you confirmed. After that we delete your address.
- Unconfirmed sign-ups: deleted no later than 90 days after sign-up if you never click the confirmation link.
- Creator applications: kept for as long as needed to assess the application and, if we work together, for as long as our business relationship and any statutory retention periods require.
If you ask us to delete your data earlier, we do it earlier. See section 6.
6. Your rights
Under the GDPR you have the right to:
- ask what data we hold about you and get a copy of it;
- have inaccurate data corrected;
- have your data deleted;
- ask us to restrict how we use it;
- receive your data in a machine-readable format, or have it sent to another controller;
- withdraw your consent at any time. Withdrawing it does not affect the lawfulness of what we did before you withdrew it.
To exercise any of these, write to luka@outly.si from the address you signed up with, or tell us which address to look for. We answer within one month. Getting off the waitlist takes one sentence — you do not need to give a reason.
7. Complaints
If you think we are handling your data unlawfully, you can lodge a complaint with the Slovenian supervisory authority:
Informacijski pooblaščenec Republike Slovenije
Dunajska cesta 22, 1000 Ljubljana, Slovenia
gp.ip@ip-rs.si ·
www.ip-rs.si
8. Cookies
This website does not set advertising or analytics cookies and does not track you across other sites. We do not use Google Analytics, advertising pixels or similar tools.
9. Security
The site is served over HTTPS. Full email addresses are held in a private database table that the website itself cannot read: the public waitlist counter on our home page shows only masked addresses such as j***@example.com, and the full address never leaves the server.
10. Changes to this policy
If we change how we handle your data, we update this page and change the date at the top. If the change is significant, we will tell the people on the waitlist by email before it takes effect.