This is a translation. The Slovak version is legally binding.

Effective from 29 September 2026

This policy explains how we process your personal data when you shop in the e-shop, use remote IT support, use the contact form and visit the website e-digiroot.net. We comply with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on the Protection of Personal Data.

1. Controller

e – digiroot, s. r. o.
Winterova 1733/17, 921 01 Piešťany
Company ID (IČO): 44008872 · Tax ID (DIČ): 2022779077 · VAT ID (IČ DPH): SK2022779077
Registered in the Commercial Register of the District Court Trnava, Section: Sro, Insert No. 21949/T

Please send questions about personal data and requests to exercise your rights to contacts@e-digiroot.net or by post to our registered office address. We have not appointed a data protection officer (DPO), as we are not required to do so by law.

2. What data, for what purpose, on what legal basis and for how long

Purpose	Data	Legal basis	Retention period
Processing orders, delivery of goods, communication regarding the order	first name and surname, address, e-mail, telephone; for businesses, business name, Company ID (IČO), Tax ID (DIČ), VAT ID (IČ DPH); order contents, payment and delivery method	performance of a contract – Art. 6(1)(b) GDPR	for the duration of the contract, then until the expiry of the limitation periods (usually 4 years)
Customer account (My account)	login e-mail, password (stored only in encrypted form), billing and delivery details, order history, remote IT support credit balance	performance of a contract – Art. 6(1)(b) GDPR	until the account is closed; order data thereafter as stated in the rows on orders and accounting
Invoices and accounting	data on tax and accounting documents	legal obligation – Art. 6(1)(c) GDPR; Act No. 431/2002 Coll. on Accounting, Act No. 222/2004 Coll. on Value Added Tax	10 years from the end of the year to which the document relates
Complaints and withdrawal from the contract	contract data, description of the defect, communication, method of resolution	legal obligation – Art. 6(1)(c) GDPR; Act No. 108/2024 Coll. on Consumer Protection, the Civil Code (Občiansky zákonník)	during the warranty period and until the expiry of the limitation periods (usually 4 years from resolution)
Remote IT support	customer identification and contact details; device name and operating system, address in the private support network; requests, time and duration of sessions, what was done; credit usage	performance of a contract – Art. 6(1)(b) GDPR	for the duration of the contract and until the expiry of the limitation periods (usually 4 years); we remove access to the device in accordance with the terms of service
Contact form and e-mail	name, e-mail, telephone, message content, sender’s IP address	steps prior to entering into a contract – Art. 6(1)(b) GDPR, otherwise legitimate interest in answering questions – Art. 6(1)(f) GDPR	12 months from resolution; if a contract is concluded, as stated in the rows above
Remote IT support promo offer	the e-mail address to which we send the promo; code, date of sending, redemption and validity; the order for which the promo was issued	performance of a contract, if the promo arose from an order – Art. 6(1)(b) GDPR; for a trial promo following mutual communication, legitimate interest – Art. 6(1)(f) GDPR	until redemption or expiry and then 12 months
Website and server security	IP address, time of access, visited address, browser type, failed login attempts	legitimate interest in protecting the website and customers – Art. 6(1)(f) GDPR	usually 14 days; in the event of a security incident, until it is resolved
Establishment and defence of legal claims	data necessary to substantiate the claim	legitimate interest – Art. 6(1)(f) GDPR	until the proceedings are concluded

The provision of data necessary for the order, invoice and remote IT support is a contractual and statutory requirement. Without it, we cannot conclude or perform the contract. You provide other data voluntarily.

We do not send advertising e-mails or newsletters without your consent.

3. Remote IT support – data on your device

During a session, the technician works on your computer or server. We look at your files only if the task requires it. We do not copy or store any data from them.

The connection is encrypted and runs through our private support network. We connect only at your request. You can revoke access at any time in accordance with the terms of service.

The technician is assisted by the artificial intelligence assistant Claude by Anthropic (see section 4). The assistant sees only the output of commands that the technician runs during the session. The session is always directed and approved by the technician.

If you are a business and we come into contact with personal data of your employees or clients during a session, we process it as a processor under Art. 28 GDPR. We do so in accordance with the terms of service for businesses and your instructions.

4. To whom we disclose data

We do not sell your data. We disclose it only to the extent necessary:

server, web hosting and e-mail provider – INTERNET CZ, a.s. (FORPSI), Ktiš č. p. 2, 384 03 Ktiš, Czech Republic (processor),
Anthropic (Anthropic, PBC, San Francisco, USA) – artificial intelligence assistant for remote IT support (processor; see section 5),
carriers and delivery services – name, delivery address, telephone and e-mail, depending on the delivery method you choose,
suppliers of goods – if they ship the goods to you directly from their warehouse, they receive the data necessary for delivery,
banks and payment service providers – data necessary to receive and refund payments,
external accounting firm – data on accounting documents,
public authorities – where required by law (e.g. the Financial Administration, the Slovak Trade Inspection (Slovenská obchodná inšpekcia), courts).

We have a contract or contractual terms with our processors that oblige them to protect the data in accordance with Art. 28 GDPR.

5. Transfers of data outside the European Union

E-shop, account and e-mail data are stored in the European Union.

In the course of remote IT support, command output from your device may reach Anthropic in the USA. The transfer is safeguarded by standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR). We will provide you with a copy of the safeguards on request. We do not make any other transfers to countries outside the EU and the EEA.

6. Cookies and browser storage

We use only strictly necessary cookies. We do not need your consent to use them (Section 109(8) of Act No. 452/2021 Coll. on Electronic Communications):

Name	Purpose	Validity
woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_*	cart contents and order	until the browser is closed, at most 2 days
wordpress_logged_in_, wordpress_sec_, wordpress_test_cookie	login to the account	until logout, at most 14 days
edr_promo	redeeming a promo link after login	1 day
edr-sound (browser storage)	remembers whether you have muted the sound on the home page	until you delete it in your browser

We do not currently use analytics or advertising cookies. If we introduce them, we will first ask for your consent and update this policy.

7. Your rights

You have the right:

of access to your data and to a copy of it (Art. 15),
to rectification of inaccurate data (Art. 16),
to erasure, if we no longer need the data or are not permitted to process it (Art. 17),
to restriction of processing (Art. 18),
to portability of data you have provided to us on the basis of a contract (Art. 20),
to object to processing based on legitimate interest (Art. 21),
to withdraw consent where processing is based on consent – at any time and without affecting the processing carried out before the withdrawal.

Send your request to contacts@e-digiroot.net. We will handle it without undue delay and at the latest within one month. For complex requests, we may extend this period by a further two months and will inform you accordingly.

If you believe that we are processing your data in breach of the law, you may file a petition to initiate proceedings (complaint) with the Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava 27, tel. +421 2 32 31 32 14, dataprotection.gov.sk.

8. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal effects concerning you.

The promo offer is generated automatically based on the order value or the type of package. The conditions are published in advance and have no other effect on your rights.

9. How we protect data

The website runs only over an encrypted HTTPS connection.
We store account passwords only in encrypted form.
Access to the server is protected by a key and by automatic blocking of attacks.
Only an authorised person has access to the data, to the extent necessary for their work.
In the event of a personal data breach, we proceed in accordance with Articles 33 and 34 GDPR.

10. Changes to this policy

We update this policy when our services, suppliers or regulations change. The current version is always published on this page. We inform registered customers of material changes by e-mail.