This notice explains how Delice Automatics Ltd processes personal data when you use this website, contact us, book a demo, subscribe to Delice services, or use RaConnect / Smart Office Tools.
Data controller
Delice Automatics Ltd (Автоматика Делис ЕООД), EIK 200536555, VAT BG200536555, Golden Class 20, Stara Zagora, Bulgaria.
Privacy contact: office@delice.bg
Legal contact: Alexey Petrov, a.petrov@delice.bg
Support: service@delice.bg, +359 885 821 784.
Controller and processor roles
Role separation (summary):
• Public website enquiries, demo bookings, and marketing leads — Delice is controller.
• Customer account, billing, and direct support for Delice-invoiced services — Delice is controller.
• Smart Office Tools / hosted Delice services where you upload customer or employee data — you are controller; Delice is processor under the DPA.
• RA Workshop licences sold under Pyramid's contract — Pyramid is controller/licensor for its contractual relationship; Delice processes data only as needed for representation, invoicing where applicable, and support instructed by the contract.
• Security logging and fraud prevention on Delice systems — Delice is an independent controller for those logs.
Personal data we process
Identity and contact data (name, email, phone, company, role); enquiry and support content; demo booking preferences; subscription and billing identifiers where applicable; technical logs (IP address, browser, device identifiers, session metadata); RaConnect / MicroAPI agent diagnostics and integration metadata where enabled; cookie and consent preferences.
Purposes, lawful bases, and typical retention
• Respond to enquiries and demos — legitimate interests / pre-contract steps; contract when you become a customer. Retention: typically 24 months for unresolved leads unless you become a customer.
• Provide Delice products and support — contract performance. Retention: contract term plus statutory limitation periods.
• Billing and accounting — legal obligation / contract. Retention: statutory accounting periods.
• Security, abuse prevention, and service logs — legitimate interests / legal obligation. Retention: per security policy, generally limited to operational need.
• Non-essential cookies and analytics — consent. Retention: per Cookie Policy.
• Marketing communications — consent or soft opt-in where permitted. Retention: until opt-out plus audit trail.
Contact and demo forms — no mandatory marketing consent
Submitting a basic contact, quote, or demo request requires only the information needed to respond. Marketing or non-essential cookie consent is separate and optional. Refusing marketing consent does not prevent Delice from answering your request.
Recipients
Authorised Delice staff; subprocessors listed in the DPA Schedule 3; professional advisers where required. We do not sell personal data.
International transfers
Where subprocessors process personal data outside the EEA, Delice uses appropriate safeguards required by GDPR Chapter V. The current transfer mechanisms for Article 28 subprocessors are set out in Schedule 3 of the DPA (version 1.0), including EU Standard Contractual Clauses via the Google Workspace Data Processing Amendment for Google LLC when Google Workspace integrations are enabled for your tenant.
Retention and deletion
Personal data is kept only as long as needed for the purposes above, then deleted or anonymised unless longer retention is required by law. Customer offboarding: active production deletion within 30 days after termination instructions, followed by up to 90 days of encrypted, inaccessible backups subject to legal hold or restoration obligations.
Supervisory authority
You may lodge a complaint with the Commission for Personal Data Protection (CPDP / КЗЛД), Bulgaria: https://www.cpdp.bg
Your rights (DSAR)
You may request access, rectification, erasure, restriction, portability, and object to processing where applicable. Submit requests to office@delice.bg. We respond within one month unless complexity requires extension under GDPR Article 12. You may withdraw consent at any time without affecting prior lawful processing.
Legitimate interests
Where we rely on legitimate interests (for example operating and securing our services, responding to business enquiries, or improving products), you may object where GDPR Article 21 applies. We balance our interests against your rights and provide details on request.
Automated decision-making
Delice does not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects concerning you within the meaning of GDPR Article 22 for the processing described in this notice.
Cookies and on-site telemetry
See the Cookie Policy for details. Non-essential analytics on the public marketing site run only after you opt in through the cookie banner or Cookie settings control.
Contact
Privacy requests: office@delice.bg. Support: service@delice.bg.