Home

Privacy Policy

Last updated: 1 January 2026

BuggyZone ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use and safeguard your information when you visit buggyzone.ro or book one of our tours, in compliance with the EU General Data Protection Regulation (Regulation (EU) 2016/679 — "GDPR") and Romanian Law 190/2018.

1. Data Controller

BuggyZone, Livada Steluța, Cluj-Napoca 400253, Romania · office@buggyzone.ro · +40 751 133 805

2. What data we collect

  • Booking data: name, email, phone number, tour selection, date and number of participants.
  • Payment data: handled by our payment processor — we do not store full card numbers.
  • Communication data: messages you send us via the contact form, WhatsApp, email or phone.
  • Technical data: IP address, browser type, device, pages visited, referring URL — collected via Google Analytics 4 and Google Tag Manager (cookies).
  • Marketing data: if you subscribe to our newsletter, your email and consent record.

3. Legal basis

  • Contract (Art. 6(1)(b) GDPR) — for processing bookings.
  • Legal obligation (Art. 6(1)(c)) — for invoicing and accounting records.
  • Consent (Art. 6(1)(a)) — for analytics cookies and marketing emails.
  • Legitimate interest (Art. 6(1)(f)) — for fraud prevention and service improvement.

4. How long we keep your data

  • Booking records: 10 years (Romanian tax law).
  • Marketing data: until you unsubscribe.
  • Analytics data: up to 14 months (GA4 default).

5. Sharing your data

We share data only with: (a) our payment processor; (b) email/SMS/WhatsApp delivery providers; (c) accounting and legal advisors; (d) authorities when legally required. We never sell your data.

6. Your rights under GDPR

  • Right of access, rectification, erasure ("right to be forgotten").
  • Right to restrict or object to processing.
  • Right to data portability.
  • Right to withdraw consent at any time.
  • Right to lodge a complaint with ANSPDCP (the Romanian DPA — dataprotection.ro).

To exercise any right, email office@buggyzone.ro. We respond within 30 days.

7. Cookies

We use cookies for analytics (Google Analytics 4) and essential functionality. You can disable analytics cookies via the consent banner or your browser settings.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date above will always reflect the latest version.