Privacy Policy

Data Controller

The Data Controller is B.E.E.R. Best Events Ever On Road di Redaelli Andrea, located at Via 1 Maggio 24, 22060 Carugo (CO), Italy, VAT number 04288400130. For information about the processing of personal data or to exercise rights under Articles 15–22 of the GDPR, please email [email protected].

Types of Data Collected

Personal data processed directly or through service providers may include: first name, last name, email address, telephone number, the content of enquiries submitted through forms, information about events and experiences of interest, IP address, technical and browsing data, usage data, online identifiers, cookies and other tracking technologies, and statistics relating to interactions with the website, where the relevant services are active.

Data provided voluntarily is used to handle enquiries received. Technical data necessary for the operation of the website may be collected automatically while browsing. Required fields, where applicable, are identified in the relevant forms. Information about cookies is available in the Cookie Policy. Users must only share third-party data when entitled to do so.

Methods of Processing

The Data Controller adopts appropriate technical and organisational measures to protect personal data. Processing is carried out using IT and organisational tools for the purposes described. Authorised personnel and providers of technical, hosting, maintenance, security, traffic analysis and communication services may access the data to the extent required by their roles and are appointed as data processors where necessary. An up-to-date list of processors may be requested from the Data Controller.

Place of Processing

Data is processed at the Data Controller’s operating offices and wherever the parties involved in processing are located. For further information, please contact the Data Controller. Users’ personal data may be transferred to a country other than the one in which they are located. Further information on the place of processing can be found in the section detailing the processing of personal data.

Where personal data is transferred outside the European Economic Area, such transfers are carried out in compliance with applicable data protection laws, including through Standard Contractual Clauses adopted by the European Commission or other appropriate safeguards provided for under the GDPR.

Retention Period

Unless otherwise stated in this document, personal data is processed and retained for as long as necessary for the purposes for which it was collected and may be retained for a longer period to comply with legal obligations or on the basis of the user’s consent.

Purposes of Processing the Data Collected

Data is processed to ensure the operation and security of the website, present road events and experiences, respond to information and contact requests, handle any requests to participate or obtain quotations submitted by users, comply with legal obligations and protect the Data Controller’s rights. If enabled, additional processing activities may include aggregated website usage statistics, advertising measurement, remarketing and the display of third-party content, in accordance with the applicable legal bases and consent preferences.

Details of Personal Data Processing

Contacting the User

Contact Form

By completing the contact form, users provide the data needed to receive a response concerning events, routes, experiences, availability, participation proposals or other requests specified in the form. Submitting the form does not automatically subscribe users to promotional communications.

Personal data processed: first name, last name, email address, telephone number (if requested) and any other information voluntarily included in the message.

Website Creation and Management

WordPress (self-hosted)

This website is built with WordPress (self-hosted), a content management system installed on the hosting infrastructure selected by the Data Controller. WPML is used to manage multilingual content.

Personal data processed: usage data; system logs; technical data required for the operation and security of the website.

WPML: a plugin used to provide pages and content in multiple languages. Depending on its configuration, it may store language preferences using technical cookies.

Tag Management

Google Tag Manager (Google Ireland Limited)

Google Tag Manager is a tag management service provided by Google Ireland Limited that enables the Data Controller to manage tags or scripts on this website centrally.

Personal data processed: usage data.

Place of processing: Ireland – Privacy Policy: https://policies.google.com/privacy.

Traffic Optimisation and Distribution

Cloudflare CDN and Security Services (Cloudflare, Inc.)

This type of service allows the website to distribute its content through servers located in different countries and to optimise performance and security. The personal data processed depends on the features and implementation of these services, which by their nature filter communications between the website and the user’s browser.

Personal data processed: usage data; tracking technologies; IP address; system logs.

Place of processing: United States and/or other locations indicated by the service provider – Privacy Policy: https://www.cloudflare.com/privacypolicy/.

Spam and Bot Protection

Cloudflare Turnstile (Cloudflare, Inc.)

The website uses Cloudflare Turnstile to protect the contact form against spam, bots and automated abuse. The service analyses technical and interaction-related information to distinguish legitimate requests.

Personal data processed: usage data; tracking technologies; device and browser information; interaction data; IP address.

Place of processing: United States and/or other locations indicated by the service provider – Privacy Policy: https://www.cloudflare.com/privacypolicy/.

Analytics

Google Analytics 4 (Google Ireland Limited)

Google Analytics 4 is a web analytics service provided by Google Ireland Limited. Google uses the personal data collected to track and analyse the use of this website, compile reports on its activity and share them with other Google services.

In Google Analytics 4, IP addresses are used at the time of collection and then discarded before the data is recorded in any data centre or server.

Personal data processed: usage data; number of users; session statistics; tracking technologies.

Place of processing: Ireland – Privacy Policy: https://policies.google.com/privacy – Opt-out: https://tools.google.com/dlpage/gaoptout.

Advertising

Google Ads Conversion Tracking (Google Ireland Limited)

Google Ads is an advertising service provided by Google Ireland Limited. Conversion tracking may be activated in the future to measure interactions with campaigns; it is not currently used. If activated, it will be subject to the prior consent required by applicable law.

Personal data processed: usage data; tracking technologies.

Place of processing: Ireland – Privacy Policy: https://policies.google.com/privacy.

Remarketing and Behavioural Targeting

Meta Pixel (Meta Platforms Ireland Limited)

Meta Pixel is an advertising measurement and remarketing service provided by Meta Platforms Ireland Limited. It may be introduced in the future; it is not currently used. If activated, it will be subject to the prior consent required by applicable law.

Personal data processed: usage data; tracking technologies.

Place of processing: Ireland – Privacy Policy: https://www.facebook.com/privacy/policy/.

Cookie Policy

The website may use technical, analytics and advertising cookies and other technologies, including those potentially associated with Cloudflare, Google Analytics 4, Google Ads and Meta Pixel, only to the extent that the respective services have actually been activated. Up-to-date information and details about consent are available in the Cookie Policy.

Legal Basis for Processing

Personal data is processed on the following legal bases, depending on the purpose:

Reference: Article 6(1) of the GDPR.

Further Information on Data Retention

Unless otherwise stated in this document, personal data is processed and retained for as long as necessary for the purposes for which it was collected and may be kept longer to meet legal obligations or on the basis of users’ consent. Accordingly:

• Personal data collected for purposes related to the performance of a contract between the Data Controller and the user will be retained until that contract has been fully performed.
• Personal data collected for purposes related to the Data Controller’s legitimate interests will be retained until those interests have been fulfilled. Users may obtain further information about the legitimate interests pursued by referring to the relevant sections of this document or contacting the Data Controller.
• Where processing is based on user consent, the Data Controller may retain personal data until consent is withdrawn. The Data Controller may also be required to retain personal data for longer to comply with a legal obligation or an order from an authority.

At the end of the retention period, personal data will be deleted. Once that period has expired, the rights of access, erasure, rectification and portability can no longer be exercised in relation to the deleted data.

User Rights under the General Data Protection Regulation (GDPR)

Users may exercise certain rights concerning their data processed by the Data Controller. In particular, and subject to applicable legal limitations, users have the right to:

• withdraw consent at any time;
• object to the processing of their data;
• access their data;
• verify their data and request rectification;
• obtain restriction of processing;
• obtain erasure or removal of their personal data;
• receive their data or have it transferred to another controller;
• lodge a complaint with the competent supervisory authority or seek a judicial remedy.

Users also have the right to obtain information about the legal basis for international data transfers and the security measures adopted by the Data Controller.

Details of the Right to Object

Where personal data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or for the legitimate interests pursued by the Data Controller, users have the right to object on grounds relating to their particular situation. Where their data is processed for direct marketing, users may object at any time, free of charge and without giving any reason.

How to Exercise Your Rights

Requests to exercise user rights may be sent to the Data Controller using the contact details provided in this document. Requests are free of charge and will be handled as soon as possible and, in any event, within one month.

Legal Defence

Users’ personal data may be used by the Data Controller in legal proceedings or in preparation for potential proceedings to defend against misuse of this website or related services. Users acknowledge that the Data Controller may be required to disclose personal data at the request of public authorities.

System Logs and Maintenance

For operation and maintenance purposes, this website and any third-party services it uses may collect system logs, i.e. files recording interactions that may also contain personal data such as the user’s IP address.

Changes to This Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy at any time by informing users on this page. Where changes concern processing based on user consent, the Data Controller will obtain consent again where required.