> How the GetYourGuide booking widget and affiliate tracking work, which cookies they set, how data reaches the US, GDPR consent duties and how to stay compliant. > > Canonical: https://www.flowconsent.com/en/services/ecommerce/getyourguide E-commerce # GetYourGuide Preferences · [Official website](https://partner.getyourguide.com) GetYourGuide is a Berlin based online marketplace for tours, activities and attraction tickets. Its embeddable booking widgets and affiliate links set cookies for session handling, conversion attribution and analytics, and load third party scripts. Under the GDPR and the ePrivacy Directive, prior consent is required before these non essential cookies and trackers are activated. [Block GetYourGuide until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [E-commerce](https://www.flowconsent.com/en/services/ecommerce) - Consent Preferences - Prior consent Required - Documented cookies 4 - Third-party domains 3 - Servers European Union (Amazon Web Services, Frankfurt) with global CDN Overview ## What does GetYourGuide do? ## **What is GetYourGuide?** GetYourGuide is an online travel marketplace founded in 2009 and headquartered in Berlin. It connects travellers with tours, activities, excursions and skip the line attraction tickets worldwide. Many websites integrate GetYourGuide through embeddable booking widgets or affiliate links so visitors can search and book experiences without leaving the page, while the publisher earns a commission. ## **What data and cookies does it collect?** When the booking widget or affiliate script loads, GetYourGuide sets cookies and reads device information such as IP address, browser type, language and screen size. It uses persistent identifiers to attribute bookings to the referring website, remember search context and support remarketing. Depending on the configuration it also loads partner tags for analytics and advertising. ## **GDPR and ePrivacy implications** The identifiers stored and read by the widget qualify as personal data under the GDPR, and storing them on the user device is governed by Article 5(3) of the ePrivacy Directive. Because these cookies are used for attribution, analytics and advertising rather than strict necessity, they require freely given, specific, informed and unambiguous consent before they are set. ## **Consent requirements** You must block the GetYourGuide widget and its partner scripts until the visitor has accepted the relevant cookie categories in a Consent Management Platform. The booking iframe should load only after consent, and consent records must be logged so you can demonstrate compliance. Visitors must be able to refuse as easily as they accept and to withdraw consent later. ## **Data transfers** GetYourGuide and its advertising partners may process personal data outside the European Economic Area, including in the United States. These transfers must be covered by an appropriate safeguard such as Standard Contractual Clauses or the EU US Data Privacy Framework, supported by a Transfer Impact Assessment that considers access by foreign authorities. ## **Practical compliance steps** List every GetYourGuide cookie and partner domain in your cookie policy, classify them correctly and gate them behind consent. Use a CMP that defers the widget until opt in, document your legal basis and data transfer safeguards, and review the integration periodically as GetYourGuide updates its tags. Provide a clear way for users to manage and revoke their choices. Compliance ## GetYourGuide and the GDPR GetYourGuide is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR) - Risk level medium - Applicable regulations GDPR, ePrivacy Directive (Cookie Law) ### Impact assessment (DPIA) GetYourGuide widgets process IP addresses, device and browser data, booking details and persistent identifiers used for affiliate attribution and remarketing. Key DPIA considerations: (1) third party scripts from analytics and advertising partners can read or set identifiers used for cross site tracking; (2) attribution cookies enable profiling of booking intent over time; (3) data may be transferred to the United States, requiring a Transfer Impact Assessment; (4) embedding the widget loads content before consent unless deferred. A DPIA is advisable when the widget is used at scale or combined with your own marketing tags. ### Sample text for your banner > We use GetYourGuide to let you browse and book tours and activities directly on our site. The GetYourGuide widget sets cookies and may share data with analytics and advertising partners, including transfers to the United States, to measure bookings and personalise offers. You can withdraw your consent at any time through our cookie settings. Cookies and trackers ## What GetYourGuide sets and contacts - Tracking method JavaScript booking widget, affiliate links and cookies - Server location European Union (Amazon Web Services, Frankfurt) with global CDN - Data transferred outside the EU GetYourGuide embeds third party analytics and advertising partners (including Google and Meta) and may transfer personal data to the United States. Such transfers rely on Standard Contractual Clauses under Article 46 GDPR and, where applicable, the EU US Data Privacy Framework. ### Cookies set (4) | Name | Type | Duration | Purpose | | ---------------- | ----------------------- | -------- | ---------------------------------------------------------------------------------------------------------------------------- | | gyg\_visitor\_id | Attribution / Analytics | 1 year | Assigns a unique visitor identifier used to attribute bookings to the referring website and to recognise returning visitors. | | \_\_gyg\_csrf | Functional | Session | Security token that protects the booking widget against cross site request forgery during a session. | | \_ga | Analytics | 2 years | Set by an integrated Google Analytics tag to measure traffic and interactions with the booking widget. | | \_fbp | Advertising | 3 months | Set by an integrated Meta pixel to support conversion measurement and remarketing for booking campaigns. | ### Third-party domains contacted (3) - `getyourguide.com` - `widget.getyourguide.com` - `cdn.getyourguide.com` Questions ## Frequently asked questions about GetYourGuide Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does the GetYourGuide widget set? The widget sets cookies for session handling, search context, conversion attribution and, depending on setup, analytics and advertising. These are persistent identifiers that let GetYourGuide and the referring site link a booking to a visit. Because they are not strictly necessary, they require consent. ### Does GetYourGuide require cookie consent? Yes. The booking widget and affiliate scripts set non essential cookies and may share data with advertising partners, so under the GDPR and the ePrivacy Directive you must obtain prior consent. The widget should not load until the visitor has accepted the relevant categories. ### What is the legal basis for GetYourGuide tracking? For the analytics and advertising functions the appropriate legal basis is consent under Article 6(1)(a) GDPR, combined with Article 5(3) of the ePrivacy Directive for storing cookies. Legitimate interest is not sufficient for tracking that supports advertising and cross site attribution. ### Does GetYourGuide transfer data to the United States? It can. GetYourGuide works with analytics and advertising partners that operate globally, so personal data may be transferred to the United States. Such transfers must rely on Standard Contractual Clauses or the EU US Data Privacy Framework, backed by a Transfer Impact Assessment. ### Do I need a DPIA for GetYourGuide? A full DPIA is not always mandatory, but it is recommended when the widget is deployed at scale or combined with your own marketing tags. The combination of persistent identifiers, attribution and possible international transfers raises the risk profile enough to justify documenting the processing. ### How do I implement GetYourGuide compliantly? Load the widget through a Consent Management Platform that blocks it until the visitor opts in, disclose all cookies and partner domains in your cookie policy, and keep consent logs. Configure the integration to avoid loading partner tags before consent and review it after GetYourGuide updates. ### Are there alternatives to GetYourGuide? Other activity booking and affiliate platforms include Viator, Tiqets, Civitatis and Klook, and each carries similar cookie and transfer considerations. There is no fully cookieless equivalent for live booking widgets, so the compliance focus should be on consent gating rather than switching provider. ### How do I update my cookie policy for GetYourGuide? Add an entry describing the GetYourGuide cookies, their purpose and duration, name the third party domains involved and state that data may be transferred outside the EEA. Keep the list in sync with the widget current behaviour and link to GetYourGuide own privacy information. Same category ## More services: E-commerce [See the whole category](https://www.flowconsent.com/en/services/ecommerce) ### [Book N Pay](https://www.flowconsent.com/en/services/ecommerce/book-n-pay) [Book N Pay is a secure payment processing solution that enables businesses to accept online payments through multiple methods including credit cards, digital wallets, and bank transfers. It provides PCI-compliant transaction processing, fraud detection, and automated invoicing. Book N Pay supports recurring billing, multi-currency payments, and seamless checkout experiences, helping merchants increase conversion rates while maintaining the highest standards of payment security and compliance.](https://www.flowconsent.com/en/services/ecommerce/book-n-pay) [Preferences](https://www.flowconsent.com/en/services/ecommerce/book-n-pay) · ### [Grappos](https://www.flowconsent.com/en/services/ecommerce/grappos) [Grappos is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Grappos integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Grappos helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/grappos) [Preferences](https://www.flowconsent.com/en/services/ecommerce/grappos) · ### [DCKAP Commerce](https://www.flowconsent.com/en/services/ecommerce/dckap-commerce) [DCKAP Commerce offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. DCKAP Commerce integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.](https://www.flowconsent.com/en/services/ecommerce/dckap-commerce) [Preferences](https://www.flowconsent.com/en/services/ecommerce/dckap-commerce) · ### [Radial Ecommerce](https://www.flowconsent.com/en/services/ecommerce/radial-ecommerce) [Radial Ecommerce offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. Radial Ecommerce integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.](https://www.flowconsent.com/en/services/ecommerce/radial-ecommerce) [Preferences](https://www.flowconsent.com/en/services/ecommerce/radial-ecommerce) · ### [American Express](https://www.flowconsent.com/en/services/ecommerce/american-express) [American Express is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. American Express supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, American Express ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/american-express) [Preferences](https://www.flowconsent.com/en/services/ecommerce/american-express) · ### [ReConvert](https://www.flowconsent.com/en/services/ecommerce/reconvert) [ReConvert is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. ReConvert supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, ReConvert ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/reconvert) [Preferences](https://www.flowconsent.com/en/services/ecommerce/reconvert) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)