PRIVACY POLICY – BUZZ EXPERIENCE SRLS

Last update: January 21, 2026

This policy is provided pursuant to Article 13 of Regulation (EU) 2016/679 ("GDPR") and describes how the personal data of users who browse and use the website www.buzzexperience.it (hereinafter, the "Website").

1) Data controller

The Data Controller is:

Buzz Experience SRLS
Headquarters: Corso Garibaldi, 63 – 72100 Brindisi BR), Italy
Email: info@buzzexperience.it
(hereinafter, the "Data Controller").

2) Types of personal data processed

The Data Controller may process the following categories of personal data:

2.1 Browsing data

During normal operation, the IT systems and software procedures used to operate the Website acquire some personal data, including:

2.2 Data provided voluntarily by the user

The Data Controller processes the data provided directly by the user through:

Examples of data: first name, last name, email address, telephone number, message content, preferences, dates, number of participants, information useful for providing the service.

2.3 Data relating to orders and reservations (WooCommerce / Booking)

In the event of a purchase or reservation through the Website, data such as the following may be processed:

2.4 Payment details

Online payments are made through external providers (e.g., Stripe).
The Data Controller does not normally process or store complete payment card details, which are managed directly by the provider in accordance with its own security standards.

2.5 Data collected through cookies and tracking tools

The Website may collect data through cookies and similar technologies (e.g., pixels, tags), including:

3) Purpose of processing and legal basis

Personal data is processed for the following purposes:

3.1 Request and contact management

To respond to requests for information, quotes, and assistance.

3.2 Reservations, purchases, and management of tourist services

To manage orders, reservations, vouchers, tours, experiences, and related activities.

3.3 Legal and tax obligations

To comply with legal obligations (e.g., accounting and invoicing).

3.4 Online payments (Stripe)

To enable payment for services purchased on the Website.

3.5 Newsletters and promotional communications

To send commercial and promotional communications (newsletters, offers, updates).

The user may revoke their consent at any time by clicking on the unsubscribe link in each email or by contacting the Data Controller.

3.6 Statistical analysis and performance (Google Analytics)

To analyze traffic and improve the content and performance of the Website.

3.7 Advertising and remarketing (Meta Pixel)

To measure conversions, create audiences, and perform remarketing activities via Meta (Facebook/Instagram).

3.8 Protection of the Owner (security and defense)

To prevent abuse, handle complaints, and protect the rights of the Data Controller.

4) Processing methods and security measures

The processing is carried out using electronic and/or paper-based tools, in accordance with the principles of lawfulness, fairness, transparency, and data minimization.

The Data Controller shall take appropriate technical and organizational measures to protect data from unauthorized access, loss, alteration, or disclosure.

5) Provision of data

The provision of data is:

Failure to provide this information may make it impossible to provide the requested service.

6) Data recipients and suppliers involved

Personal data may be disclosed to external parties involved in the provision of services and/or in the technical and commercial management of the Website.

6.1 Marketing and newsletter service providers

The Data Controller uses:

6.2 Booking engine and channel manager

The Data Controller uses:

6.3 E-commerce and order management

The Website uses:

6.4 Online payments

The Data Controller uses:

6.5 Advertising and analytical tools

The Website may use:

6.6 Contact and support

The Website may use:

6.7 Maps and reviews

The Site may incorporate:

These subjects may act as Data Processors (Article 28 of the GDPR) or as independent Data Controllers, depending on the service and the respective purposes.

7) Cookies and consent management

The Website uses technical cookies necessary for its operation and, subject to consent, analytics and marketing cookies.

The user may:

8) Transfer of data outside the EU/EEA

Some services used (e.g., marketing, analytics, and advertising platforms) may involve data transfers to countries outside the European Economic Area (EEA), such as the United States.

In such cases, the Data Controller shall implement appropriate safeguards as provided for in the GDPR, such as:

9) Data retention period

The data is stored for the time necessary for the purposes for which it was collected, in particular:

10) Rights of the data subject

The user may exercise the rights provided for in Articles 15-22 of the GDPR, including:

To exercise your rights, you can write to: c.buzzerra@buzzexperience.it

11) Complaint to the Data Protection Authority

Users who believe that their data is being processed in violation of the law may lodge a complaint with:

Personal Data Protection Authority
www.garanteprivacy.it

12) Changes to this policy

The Data Controller reserves the right to update this policy. Any changes will be published on this page with the date of the update.