Privacy Policy

When you use our Services, we may process personal data from different sources. This includes data that is automatically collected when you access our websites or applications, as well as data you voluntarily provide when using our Services.

When you access our websites or applications, technical information is automatically transmitted to our servers and stored in log files. This applies regardless of whether you subsequently contact us or use our Services.

The following data may be collected (“Usage Data”):
- Date and time of access and duration of use
- IP address
- Referrer URL
- Pages or features accessed
- Device information (device type, browser type and version, operating system, settings, installed plug-ins)

‍Purpose and legal basis
‍We process Usage Data to:
- Ensure the functionality and security of our Services
- Analyze performance and improve user experience
- Prevent misuse, fraud, and security incidents


The legal basis for this processing is our legitimate interest pursuant to Article 6(1)(f) GDPR.
Log files are generally deleted after a maximum retention period, unless longer storage is required for security or legal reasons.
‍
‍Cookies
‍We may use cookies and similar technologies to collect Usage Data. Further information is available in our Cookie Policy.

We process personal data that you voluntarily provide, for example when you:
- contact us via a contact form or email
- create an account
- use our Services
- communicate with our support team

This may include:
- name
- email address
- company details
- account-related information
- support communications

‍Purpose and legal basis
We process this data to respond to requests, provide our Services, and manage customer relationships.
The legal basis is Article 6(1)(b) GDPR (performance of a contract) or Article 6(1)(a) GDPR (consent), where applicable.

When Delibari is integrated into a merchant’s online store or platform, the merchant remains the data controller for personal data relating to their customers. In this context, Delibari acts as a data processor and processes personal data solely on the merchant’s documented instructions and in accordance with a data processing agreement.

Merchants are responsible for informing their customers about data processing in their own privacy policies.

We process personal data for the following purposes:
- providing and operating our Services
- account management and authentication
- customer support and communication
- improving and securing our Services
- compliance with legal obligations
- establishing, exercising, or defending legal claims

The legal basis is either contractual necessity (Article 6(1)(b) GDPR), legal obligation (Article 6(1)(c) GDPR), consent (Article 6(1)(a) GDPR), or legitimate interests (Article 6(1)(f) GDPR).

We only share personal data with third parties where necessary to provide our Services or where legally required.
‍
This may include:
- hosting and infrastructure providers
- analytics and security providers
- payment or billing service providers
- support and communication tools

All third parties are contractually bound to process personal data in compliance with applicable data protection laws.

We do not transfer personal data outside the EU/EEA without appropriate safeguards.
‍
Where data is transferred to service providers located outside the EU/EEA, we ensure adequate protection through:
- Standard Contractual Clauses approved by the European Commission
- additional safeguards where required

An appropriate level of data protection is ensured at all times.

We retain personal data only for as long as necessary to:
- fulfil contractual obligations
- comply with legal requirements
- resolve disputes or enforce agreements

When data is no longer required, it is deleted or anonymized in accordance with applicable laws.

You have the following rights under the GDPR:
- Right of access (Article 15)
- Right to rectification (Article 16)
- Right to erasure (Article 17)
- Right to restriction of processing (Article 18)
- Right to data portability (Article 20)
- Right to object to processing (Article 21)

You may also withdraw your consent at any time, without affecting the lawfulness of processing prior to withdrawal.You have the right to lodge a complaint with a competent data protection authority (Article 77 GDPR). To exercise your rights, contact us at privacy@delibari.co.

We may update this Privacy Policy from time to time to reflect changes in our data processing practices or legal requirements.