LEGAL
Privacy policy
Effective date: 17 August 2026 — version 2.0
At Delivera, we respect and protect your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your personal data. By using our website and services, you agree to the practices described below.
Who is responsible for your data
The data controller is Delivera S.r.l., Via Errico Petrella 8, 20124 Milan (MI), Italy — C.F. and P.IVA 14389230963 — info@delivera.ai. We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 of the GDPR.
This policy covers the personal data we process as data controller through this website. It does not cover personal data we process as data processor on behalf of our client organisations inside the Delivera platform, which is governed by the data processing agreement with each client.
Information we collect
When you interact with Delivera, we may collect personal information such as your name, email address, phone number, and company details when you submit them through forms or communications. We also collect information about how you use our website, including pages visited, time spent, and features accessed. In addition, we gather technical information such as IP address, browser type, operating system, and device details. To enhance your experience, our site may also use cookies and similar technologies.
How we use your information
The information we collect is used to provide and improve our services, respond to your inquiries, and deliver support when needed. It also helps us communicate updates, product news, and marketing content if you have chosen to receive them. We analyze usage patterns to better understand how visitors interact with our website and to improve performance, reliability, and user experience. In certain cases, your information may also be used to maintain security and prevent fraudulent or unlawful activity.
Legal basis for processing
We process your personal data only where we have a legal basis under Article 6 of the GDPR.
We rely on steps taken at your request before entering into a contract (Article 6(1)(b)) to respond to your enquiry, provide information about our services and arrange a demonstration where you ask for one.
We rely on our legitimate interest (Article 6(1)(f)) to manage the relationship with you as a client or prospective client contact and to follow up on the service you enquired about; to keep this website available, secure and functioning correctly and to prevent abuse; to produce aggregated statistics about how the website is used so that we can improve it; and to establish, exercise or defend a legal claim. Where we rely on legitimate interest we have assessed that interest against your rights and freedoms and concluded that our processing does not override them. You may object at any time, and you may ask us for information about that assessment.
We rely on compliance with a legal obligation (Article 6(1)(c)) where we must keep records for accounting, tax or other statutory purposes.
We do not process personal data collected through this website on the basis of consent, and we do not use it for automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
How we share information
We do not sell or rent your personal information. However, we may share it with trusted service providers who assist us in running our operations, such as hosting, analytics, or communication tools. If required by law, we may disclose information to authorities to comply with regulations or legal processes. In the event of a business transfer, such as a merger, acquisition, or restructuring, your information may be included as part of the transferred assets.
Transfers outside the European Economic Area
Personal data collected through this website is stored within the European Economic Area. Some of our service providers are established outside the EEA, principally in the United States. Where personal data is transferred to them, the transfer is protected by the standard contractual clauses adopted by the European Commission under Article 46(2)(c) of the GDPR, together with additional technical and organisational measures. We assess each such transfer before it begins and review the assessment at least annually. You may request further information at info@delivera.ai.
Data retention
We keep enquiries that do not lead to a business relationship for up to 24 months from our last contact. We keep the contact data of clients and their representatives for the duration of the contractual relationship and for 10 years afterwards, in line with statutory limitation and accounting record-keeping periods. Technical and usage records are kept for up to 12 months.
Your rights
Depending on where you are located, you may have certain rights over your data. These may include the right to access, update, or delete your personal information, the right to opt out of marketing communications, the right to restrict or object to certain processing, and the right to request a copy of your personal data in a portable format. To exercise these rights, you can contact us at info@delivera.ai.
Right to lodge a complaint. If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. In Italy this is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it. Instructions for making a complaint are available at https://www.garanteprivacy.it/diritti/come-agire-per-tutelare-i-tuoi-dati-personali/reclamo. You may also complain to the supervisory authority of the EU Member State where you live or work, or where you believe the infringement occurred, and you may bring proceedings before a competent court.
We will reply to any request within one month. That period may be extended by up to two further months where a request is particularly complex; if so we will tell you within the first month and explain why. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessive.
Cookies and tracking technologies
This website uses only technical cookies and equivalent technologies necessary to deliver the site and keep it secure and functioning. We do not use profiling, advertising or third-party tracking cookies, and we do not build advertising profiles about you. Our hosting provider collects aggregated statistics about visits to the site; these do not identify you individually and are not shared with third parties for their own purposes. Because we use no profiling or advertising cookies, no consent banner is required under Article 122 of Legislative Decree 196/2003. You can in any case block or delete cookies through your browser settings, although doing so may affect how parts of the site work.
Security
We take appropriate technical and organizational measures to protect your information from unauthorized access, misuse, or disclosure. However, please note that no online transmission or storage system is completely secure.
Third-party links
Our website may contain links to other websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their policies before providing any personal information.
Updates to this policy
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with a revised “Effective Date.” We encourage you to review this page periodically to stay informed about how we handle your information.
