Privacy policy

We respect your privacy and collect as little personal data as possible. This policy explains what we process when you visit delex.eco, when you are or may become our customer, when we assess your roof for a quote, when you call us and when you pay one of our invoices, why, and what your rights are under the General Data Protection Regulation (GDPR).

1. Who is responsible?

DELEX Belgium BV/SRL, Brixtonlaan 9, 1930 Zaventem, Belgium — enterprise number 0739.925.797, e-mail contact@delex.eco, phone +32 2 880 70 86 — is the controller of the personal data described below.

2. What we process, why, and on what legal basis

Contact form

• Data: your name, e-mail address, optionally your phone number and postal code, the topic you choose and your message.
• Purpose: to answer your question and, if you ask for it, to prepare a site visit or a quote.
• Legal basis: steps taken at your request before entering into a contract (art. 6.1.b GDPR) and our legitimate interest in answering enquiries (art. 6.1.f GDPR).
• Storage: your request is saved in our customer database on our own server in the EU and e-mailed to our team. Only DELEX staff can read it, through a secured connection.
• Retention: up to two years after our last contact. If we prepare an offer for you, your request becomes part of our customer records (see “Customers and prospects” below).

To protect the form against abuse we temporarily keep your IP address in memory only to limit the number of submissions (at most a few minutes; it is never written to disk), and we use Cloudflare Turnstile (see below).

Solar simulator

• Data: your postal code (or your town and country if your home is outside Belgium), what your roof is covered with and which way it faces, your yearly electricity consumption or the number of panels you want, whether you would like a home battery (and which capacity) and a home charger, whether you drive an electric car, the age of the building (for the VAT rate), your first name, optionally your last name, your e-mail address and your phone number.
• Purpose: to calculate and show your estimate, e-mail you a copy, contact you about it and, if you wish, prepare a quote.
• Legal basis: steps taken at your request before entering into a contract (art. 6.1.b GDPR) and our legitimate interest in following up your request (art. 6.1.f GDPR).
• Storage: your answers and contact details are saved in our customer database on our own server in the EU and e-mailed to our team. Only DELEX staff can read them, through a secured connection.
• Retention: up to two years after our last contact: a request without any activity for two years is deleted automatically, together with your simulator answers. If we prepare an offer for you, your request becomes part of our customer records (see “Customers and prospects” below).

The simulator is protected against abuse in the same way as the contact form: we temporarily keep your IP address in memory only to limit the number of submissions (at most a few minutes; it is never written to disk), and we use Cloudflare Turnstile (see below).

Spam protection — Cloudflare Turnstile

On the contact page and in the solar simulator we use Cloudflare Turnstile to check that a form is sent by a human. Turnstile processes technical data such as your IP address and browser characteristics. It does not use cookies for advertising. Provider: Cloudflare, Inc. (USA), certified under the EU-US Data Privacy Framework. Legal basis: our legitimate interest in protecting the website against spam and abuse (art. 6.1.f GDPR).

Website statistics — Plausible (optional)

If you accept statistics, we use Plausible Analytics, a privacy-friendly tool that does not use cookies and does not build profiles. It only gives us aggregated figures (pages viewed, referring websites, country, device type). Legal basis: your consent (art. 6.1.a GDPR). Without your consent, no statistics are collected.

Payments to our bank account

• Data: the movements of DELEX's own business account at ING Belgium: when you pay us, your name and account number (IBAN), the amount, the date and the payment communication. The same applies to the payments we make to our suppliers.
• Purpose: to record which invoices have been paid and to keep our accounts.
• Legal basis: the performance of our contract with you (art. 6.1.b GDPR) and our accounting obligations (art. 6.1.c GDPR).
• How: our internal management system reads these movements from our ING account through Enable Banking Oy (Espoo, Finland), an account information service provider registered with the Finnish Financial Supervisory Authority. Its access is read-only, authorised by us and can be withdrawn at any time. The movements can also come from the bank statements ING sends us. They are stored on our own server in the EU; only DELEX staff can read them.
• Retention: as long as required by Belgian accounting and tax law.

Assessment of your roof for a quote

• Data: the address of the installation, or the point of the building on the map.
• Purpose: when we prepare your quote, to see on aerial and satellite images how your roof faces, how many panels fit on it and how much they would produce, shade included.
• Legal basis: steps taken at your request before entering into a contract (art. 6.1.b GDPR).
• How: our internal management system sends only this address or point — never your name or contact details — to Google Maps Platform, which returns the data of the roof.
• Retention: Google's answer is kept for at most 30 days, then deleted automatically. What our sales team takes from it for your installation (orientation, number of panels, expected production, and a drawing of the proposed panels on Google's aerial photo of your roof) becomes part of your quote and is kept with it. The aerial images themselves are not kept.

Phone calls with our team

• Data: when you call one of our company phones or we call you: the date and time, the direction (incoming, outgoing, missed), the duration and your phone number. Never the content of the conversation: calls are not recorded.
• Purpose: to see your earlier calls with us when we help you, to call you back when we missed your call, and to organise our team's work.
• Legal basis: our legitimate interest in following up our customers' requests and organising our work (art. 6.1.f GDPR).
• How: an app on our company phones sends these details over our own encrypted network to our internal management system, on our own server in the EU, which links the call to your customer record or request when we know your number. Only DELEX staff can read them.
• Retention: a number that is not in our records is erased after 14 days. The details of a call are kept for 3 months; after that only daily totals per employee remain, with nothing about you.

Customers and prospects (our customer records)

• Data: your name, address, e-mail address and phone numbers and your language; for a company, its name, legal form and VAT number and the people we deal with there (name, function, e-mail address, phone number); the notes of our contacts with you (requests, visits, offers, the details of your installation); the DELEX employee who follows your file; and how you found us (our website, a form on social media, a quote platform such as Bobex, Solvari, Trustlocal or Bambelo, a trade fair or a recommendation). When you give us the details of a family member or a colleague as a contact person, theirs too.
• Source: you, or the platform, the fair or the person who passed your request on to us. Our records from before November 2026 come from the customer software we used until then (Akti, by Unifiedpost).
• Purpose: to answer your request, prepare offers, carry out and invoice the work, give warranty and after-sales service, and organise our work.
• Legal basis: the contract and the steps before it that you ask for (art. 6.1.b GDPR); our legal obligations, for our accounts and VAT (art. 6.1.c GDPR); our legitimate interest in following up requests and offers and in keeping in touch with the contact persons of the companies we work for (art. 6.1.f GDPR).
• Storage: in our internal management system, on our own server in the EU, which only DELEX staff can reach, through our own encrypted network.
• Retention: if you ordered from us, as long as we work for you and then 10 years after the last invoice (Belgian accounting and VAT law), and as long as the warranty on your installation runs. If you did not order from us, and for a contact person who belongs to no customer and appears on no document: 7 years after our last contact, then erased automatically. Our encrypted backups are renewed regularly; erased data disappears from them as they are.
• Your rights: you can ask for a copy of everything we hold about you or have it corrected, and you can object at any time to our keeping your data as a prospect: we then erase it, and it is not added again. A customer's invoices, and the data they contain, are kept for as long as the law requires.

Server logs

When you visit the website, our server automatically records technical data (IP address, date and time, requested page, browser type) to keep the website secure and working. Legal basis: our legitimate interest (art. 6.1.f GDPR). These logs are deleted after at most 14 days, unless they are needed to investigate a security incident.

3. Cookies and similar technologies

By default the website sets no cookies. We only store:

• delex-consent — remembers your cookie choices. Duration: 6 months. Strictly necessary, so it does not require consent.

The website places no third-party cookies. On the contact page and the simulator's last step, Cloudflare Turnstile may store a technical value in your browser, inside Cloudflare's own frame, only to tell people from bots; it is strictly necessary for the security of the form you use and needs no consent. You can change your choice at any time via Cookie settings in the footer.

4. Who receives your data?

We never sell your data. We only share it with:

• our hosting provider netcup GmbH (Karlsruhe, Germany), which hosts the website and our mail server under a data processing agreement;
• Cloudflare, Inc., as described above;
• Enable Banking Oy (Espoo, Finland), which passes the movements of our own bank account to our management system, as described above;
• Google (Google Cloud EMEA Limited, Dublin, Ireland, and Google LLC, USA, certified under the EU-US Data Privacy Framework), which only receives the address of an installation to assess its roof, as described above;
• Unifiedpost (Akti), the customer software we used until November 2026, as long as it still holds our earlier records;
• authorities, if we are legally required to.

Where data is transferred outside the European Economic Area, this happens on the basis of an adequacy decision (such as the EU-US Data Privacy Framework) or standard contractual clauses.

5. Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. Send your request to contact@delex.eco; we answer within one month.

You may also lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels — www.dataprotectionauthority.be.

6. Security

The website is served exclusively over HTTPS with strict security headers. Access to your data is limited to the people at DELEX who need it to help you.

7. Changes

We may update this policy when our website or the law changes. The date at the top of this page shows the latest version.