01Personal data processed & sources
When you use our Services, we may process personal data from different sources. This includes data automatically collected when you access our websites or applications, as well as data you voluntarily provide when using our Services.
1.1 · Data collected automatically (Usage Data)
When you access our websites or applications, technical information is automatically transmitted to our servers and stored in log files. This applies regardless of whether you subsequently contact us or use our Services. The following data may be collected:
- Date and time of access, and duration of use
- IP address
- Referrer URL
- Pages or features accessed
- Device information (device type, browser, operating system, installed plug-ins)
Purpose & legal basis
We process Usage Data to ensure the functionality and security of our Services, analyse performance and improve user experience, and prevent misuse, fraud and security incidents. Legal basis: legitimate interest — Art. 6(1)(f) GDPR. Log files are deleted after a maximum retention period, unless longer storage is required for security or legal reasons.
Cookies. We may use cookies and similar technologies to collect Usage Data. Further information is available in our Cookie Policy.
1.2 · Data you provide voluntarily
We process personal data that you voluntarily provide — for example when you contact us via a form or email, create an account, use our Services, or communicate with our support team. This may include name, email, company details, account-related information, and support communications.
Purpose & legal basis
We process this data to respond to requests, provide our Services, and manage customer relationships. Legal basis: Art. 6(1)(b) GDPR (performance of a contract) or Art. 6(1)(a) GDPR (consent), where applicable.
02When Delibari is integrated by a merchant
When Delibari is integrated into a merchant's online store or platform, the merchant remains the data controller for personal data relating to their customers. In this context, Delibari acts as a data processor and processes personal data solely on the merchant's documented instructions and in accordance with a data processing agreement.
Merchants are responsible for informing their customers about data processing in their own privacy policies.
03Purposes of processing
We process personal data for the following purposes:
- Providing and operating our Services
- Account management and authentication
- Customer support and communication
- Improving and securing our Services
- Compliance with legal obligations
- Establishing, exercising, or defending legal claims
Legal basis
Either contractual necessity Art. 6(1)(b), legal obligation Art. 6(1)(c), consent Art. 6(1)(a), or legitimate interests Art. 6(1)(f).
04Sharing with third parties
We only share personal data with third parties where necessary to provide our Services or where legally required. This may include:
- Hosting and infrastructure providers
- Analytics and security providers
- Payment or billing service providers
- Support and communication tools
All third parties are contractually bound to process personal data in compliance with applicable data protection laws.
05International transfers
We do not transfer personal data outside the EU/EEA without appropriate safeguards. Where data is transferred to service providers located outside the EU/EEA, we ensure adequate protection through:
- Standard Contractual Clauses approved by the European Commission
- Additional safeguards where required
An appropriate level of data protection is ensured at all times.
06Data retention
We retain personal data only for as long as necessary to:
- Fulfil contractual obligations
- Comply with legal requirements
- Resolve disputes or enforce agreements
When data is no longer required, it is deleted or anonymised in accordance with applicable laws.
07Your rights under GDPR
You have the following rights:
- Right of access — Art. 15
- Right to rectification — Art. 16
- Right to erasure — Art. 17
- Right to restriction of processing — Art. 18
- Right to data portability — Art. 20
- Right to object to processing — Art. 21
You may also withdraw your consent at any time, without affecting the lawfulness of processing prior to withdrawal. You have the right to lodge a complaint with a competent data protection authority — Art. 77 GDPR. To exercise your rights, contact us at privacy@delibari.co.
08Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our data processing practices or legal requirements. The updated date at the top of this page reflects the most recent revision.