Eurhosting SHPK, Sallmone, Shijak, 2001 Durrës, Albania (NIPT M52305043P) operates deliveru.eu and is the controller of the personal data described in this policy. Contact: legal@deliveru.eu
Our representative in the European Union. We are established outside the European Union. Under Article 27 GDPR we have designated as our representative in the Union:
Padovani s.r.o., Příkop 843/4, Zábrdovice, 602 00 Brno, Czech Republic (IČO 03835341, VAT CZ03835341). Contact for data protection matters: privacy@padovani.cz
Padovani s.r.o. is a separate company and is not part of Eurhosting SHPK. It acts as the point of contact through which supervisory authorities and data subjects may address us on all matters relating to the processing of personal data. You may address our representative in addition to us, not instead of us: either route is valid, using one does not prevent you from using the other, and contacting our representative does not limit your right to contact us directly at legal@deliveru.eu.
We process your personal data for the following purposes, each on the legal basis stated:
Where we rely on our legitimate interests, you have the right to object: see section 6.
We do not use your personal data for automated decision-making that produces legal effects concerning you, and we do not sell it.
Is providing your data obligatory? Providing your account data — name, email address, company and billing details — is not required by law, but it is necessary in order to enter into and perform the contract with us. Without it we cannot open an account or provide the Service. Everything else is optional, and leaving it out affects only the feature that uses it.
Contact data that you upload for your campaigns is processed by us on your instructions as processor, not as controller. Your obligations towards those people are set out in the Data Processing Agreement.
All personal data processed through the Service is stored exclusively in the European Union. Our servers are located in Germany, in a data centre operated by Keyweb AG.
We are established in Albania, which is not covered by an EU adequacy decision. Our authorised personnel access the production infrastructure remotely from Albania to administer and support the Service. Under GDPR this counts as a transfer to a third country, and it is covered by appropriate safeguards under Article 46. Details are available on request at legal@deliveru.eu. Apart from that access, personal data is not transferred outside the European Economic Area.
If we add or change infrastructure providers in the future, personal data will remain within the EEA and we will update this policy and notify affected customers before the change takes effect.
We engage a small number of third parties to process personal data on our behalf. Each of them is bound by a data processing agreement and may use the data only to provide their service to us.
We will update this list before engaging any new sub-processor. For the current list at any time, contact legal@deliveru.eu.
You have the right of access to your personal data, and the rights to rectification, erasure, restriction of processing, data portability, and objection.
What you can do in the Service. At any time you can view and correct your account details, and view, correct and delete the contact data you have uploaded.
Getting a full copy of your data (portability). The Service does not provide a self-service export. To receive a copy of your data in a structured, commonly used and machine-readable format, write to legal@deliveru.eu from the email address registered on your account. We produce the export ourselves and provide it within one month of your request, as the GDPR requires.
Closing your account, and anything else. Contact legal@deliveru.eu, or our representative in the Union (section 1).
Objection. Where we process your personal data on the basis of our legitimate interests (section 3), you have the right to object at any time on grounds relating to your particular situation. We will then stop that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or that we need it to establish, exercise or defend legal claims.
Withdrawing consent. Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew it.
Lodging a complaint. You also have the right to lodge a complaint with a data protection supervisory authority. Because our representative in the Union is established in the Czech Republic, the authority competent in respect of our representative is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic — uoou.gov.cz, posta@uoou.gov.cz. You may equally lodge a complaint with the supervisory authority of the EU Member State where you habitually reside, where you work, or where the alleged infringement took place. You are not required to contact us first.
We keep your account data for as long as your account is active. Within the Service, the following periods apply:
If you close your account, you may request a full export of your data within 30 days by writing to legal@deliveru.eu. Your data is then deleted within 90 days of termination.
Two things are kept beyond that, because the law requires it: invoices and their supporting accounting records, for the period required by tax law (at least 10 years); and audit log entries proving that a deletion took place, which record identifiers and actions rather than the data that was deleted.
Alongside those records, running the Service produces technical logs. These are kept for short, fixed periods and are not used to build any profile:
We measure how our public website is used with Umami, a privacy-focused analytics tool that we host ourselves on our own infrastructure. Your visit data is not sent to any third-party analytics provider, is not sold, and is not shared.
Umami sets no cookies and does not use any other form of persistent device identifier. It does not track you across websites and does not build a profile of you. We collect only aggregate information such as page URL, referring website, browser and operating system family, device type, screen size, and country of origin. IP addresses are used only transiently to derive the country and are not stored.
Because this processing involves no cookies and no identification of individual visitors, it does not require your consent. The legal basis is our legitimate interest in understanding and improving our website (GDPR Art. 6(1)(f)).
This section describes our own public website only. It does not apply to campaigns sent by our customers through the Service, nor to any tracking those customers may enable within their own campaigns.
We use only essential cookies for session management and language preferences. No advertising or tracking cookies are used, and our website analytics (section 8) sets no cookies at all.
For privacy inquiries: legal@deliveru.eu, or our representative in the Union, Padovani s.r.o. — privacy@padovani.cz (section 1).