Privacy Policy

Last updated: April 2026

This policy describes how we collect and process personal data of users who visit the website brindeasy.it and purchase products or services offered by Brindeasy Solutions S.r.l..

1. Data Controller

• Brindeasy Solutions S.r.l.
• Address: Via Cristoforo Colombo, 72100 Brindisi (BR)
• VAT: IT00000000000
• Email: info@brindeasy.it
• Phone: +39 0831 000000

2. Personal Data Collected

2.1 Data provided voluntarily

• First name, last name and tax code
• Email address
• Phone number
• Shipping and billing address
• Payment data (handled by PCI-DSS certified providers: Stripe, PayPal)

2.2 Data collected automatically

• IP address
• Browser type and device
• Operating system
• Pages visited and visit duration
• Referral source

3. Purpose of Processing

• Order management: processing, confirmation and shipping of purchases
• Booking management: confirmation and organization of booked experiences
• Transactional communications: confirmation emails, order status updates
• Legal compliance: tax and accounting obligations
• Marketing (with consent): newsletters, offers and promotions
• Security: fraud prevention and unauthorized access

4. Legal Basis for Processing

• Contract performance: to process orders and bookings
• Legal obligations: for tax and accounting requirements
• Consent: for newsletters and marketing (revocable at any time)
• Legitimate interest: to prevent fraud and improve services

5. Data Retention

• Order/billing data: 10 years (tax obligations)
• Booking data: 5 years
• Browsing data: 30 days
• Marketing data: until consent withdrawal

6. Data Sharing

Your data is not sold to third parties. It may be shared with:

• Couriers and shippers: for order delivery (e.g. DHL, GLS, Poste Italiane)
• Payment providers: Stripe, PayPal (PCI-DSS certified)
• Cloud services: for hosting and backup (EU servers)
• Competent authorities: if required by law

7. Your Rights (GDPR)

Under EU Regulation 2016/679 you have the right to:

• Access: obtain a copy of your data
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of data ("right to be forgotten")
• Restriction: limit processing in specific circumstances
• Portability: receive data in a structured format
• Objection: object to processing for legitimate interests
• Consent withdrawal: at any time for marketing

To exercise these rights, write to privacy@brindeasy.it. We will respond within 30 days.

8. Data Security

• SSL/TLS encrypted connection across the entire site
• Payments handled exclusively by PCI-DSS certified providers
• Data access limited to authorized personnel
• Regular backups and monitoring systems

9. International Transfer

Data is processed primarily within the European Union. Any transfers to third countries occur with the safeguards provided by GDPR (standard contractual clauses or adequacy decisions).

10. Changes to this Policy

We reserve the right to update this policy. In case of substantial changes we will inform you by email. The updated version will always be available on this page.

11. Contact

• Privacy email: privacy@brindeasy.it
• General email: info@brindeasy.it
• Phone: +39 0831 000000
• Address: Via Cristoforo Colombo, 72100 Brindisi (BR)