This is a translation. The Slovak version is legally binding.
Effective from 29 September 2026
This policy explains how we process your personal data when you shop in the e-shop, use remote IT support, use the contact form and visit the website e-digiroot.net. We comply with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on the Protection of Personal Data.
1. Controller
e – digiroot, s. r. o.
Winterova 1733/17, 921 01 Piešťany
Company ID (IČO): 44008872 · Tax ID (DIČ): 2022779077 · VAT ID (IČ DPH): SK2022779077
Registered in the Commercial Register of the District Court Trnava, Section: Sro, Insert No. 21949/T
Please send questions about personal data and requests to exercise your rights to contacts@e-digiroot.net or by post to our registered office address. We have not appointed a data protection officer (DPO), as we are not required to do so by law.
2. What data, for what purpose, on what legal basis and for how long
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Processing orders, delivery of goods, communication regarding the order | first name and surname, address, e-mail, telephone; for businesses, business name, Company ID (IČO), Tax ID (DIČ), VAT ID (IČ DPH); order contents, payment and delivery method | performance of a contract – Art. 6(1)(b) GDPR | for the duration of the contract, then until the expiry of the limitation periods (usually 4 years) |
| Customer account (My account) | login e-mail, password (stored only in encrypted form), billing and delivery details, order history, remote IT support credit balance | performance of a contract – Art. 6(1)(b) GDPR | until the account is closed; order data thereafter as stated in the rows on orders and accounting |
| Invoices and accounting | data on tax and accounting documents | legal obligation – Art. 6(1)(c) GDPR; Act No. 431/2002 Coll. on Accounting, Act No. 222/2004 Coll. on Value Added Tax | 10 years from the end of the year to which the document relates |
| Complaints and withdrawal from the contract | contract data, description of the defect, communication, method of resolution | legal obligation – Art. 6(1)(c) GDPR; Act No. 108/2024 Coll. on Consumer Protection, the Civil Code (Občiansky zákonník) | during the warranty period and until the expiry of the limitation periods (usually 4 years from resolution) |
| Remote IT support | customer identification and contact details; device name and operating system, address in the private support network; requests, time and duration of sessions, what was done; credit usage | performance of a contract – Art. 6(1)(b) GDPR | for the duration of the contract and until the expiry of the limitation periods (usually 4 years); we remove access to the device in accordance with the terms of service |
| Contact form and e-mail | name, e-mail, telephone, message content, sender’s IP address | steps prior to entering into a contract – Art. 6(1)(b) GDPR, otherwise legitimate interest in answering questions – Art. 6(1)(f) GDPR | 12 months from resolution; if a contract is concluded, as stated in the rows above |
| Remote IT support promo offer | the e-mail address to which we send the promo; code, date of sending, redemption and validity; the order for which the promo was issued | performance of a contract, if the promo arose from an order – Art. 6(1)(b) GDPR; for a trial promo following mutual communication, legitimate interest – Art. 6(1)(f) GDPR | until redemption or expiry and then 12 months |
| Website and server security | IP address, time of access, visited address, browser type, failed login attempts | legitimate interest in protecting the website and customers – Art. 6(1)(f) GDPR | usually 14 days; in the event of a security incident, until it is resolved |
| Establishment and defence of legal claims | data necessary to substantiate the claim | legitimate interest – Art. 6(1)(f) GDPR | until the proceedings are concluded |
The provision of data necessary for the order, invoice and remote IT support is a contractual and statutory requirement. Without it, we cannot conclude or perform the contract. You provide other data voluntarily.
We do not send advertising e-mails or newsletters without your consent.
3. Remote IT support – data on your device
During a session, the technician works on your computer or server. We look at your files only if the task requires it. We do not copy or store any data from them.
The connection is encrypted and runs through our private support network. We connect only at your request. You can revoke access at any time in accordance with the terms of service.
The technician is assisted by the artificial intelligence assistant Claude by Anthropic (see section 4). The assistant sees only the output of commands that the technician runs during the session. The session is always directed and approved by the technician.
If you are a business and we come into contact with personal data of your employees or clients during a session, we process it as a processor under Art. 28 GDPR. We do so in accordance with the terms of service for businesses and your instructions.
4. To whom we disclose data
We do not sell your data. We disclose it only to the extent necessary:
- server, web hosting and e-mail provider – INTERNET CZ, a.s. (FORPSI), Ktiš č. p. 2, 384 03 Ktiš, Czech Republic (processor),
- Anthropic (Anthropic, PBC, San Francisco, USA) – artificial intelligence assistant for remote IT support (processor; see section 5),
- carriers and delivery services – name, delivery address, telephone and e-mail, depending on the delivery method you choose,
- suppliers of goods – if they ship the goods to you directly from their warehouse, they receive the data necessary for delivery,
- banks and payment service providers – data necessary to receive and refund payments,
- external accounting firm – data on accounting documents,
- public authorities – where required by law (e.g. the Financial Administration, the Slovak Trade Inspection (Slovenská obchodná inšpekcia), courts).
We have a contract or contractual terms with our processors that oblige them to protect the data in accordance with Art. 28 GDPR.
5. Transfers of data outside the European Union
E-shop, account and e-mail data are stored in the European Union.
In the course of remote IT support, command output from your device may reach Anthropic in the USA. The transfer is safeguarded by standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR). We will provide you with a copy of the safeguards on request. We do not make any other transfers to countries outside the EU and the EEA.
6. Cookies and browser storage
We use only strictly necessary cookies. We do not need your consent to use them (Section 109(8) of Act No. 452/2021 Coll. on Electronic Communications):
| Name | Purpose | Validity |
|---|---|---|
| woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_* | cart contents and order | until the browser is closed, at most 2 days |
| wordpress_logged_in_*, wordpress_sec_*, wordpress_test_cookie | login to the account | until logout, at most 14 days |
| edr_promo | redeeming a promo link after login | 1 day |
| edr-sound (browser storage) | remembers whether you have muted the sound on the home page | until you delete it in your browser |
We do not currently use analytics or advertising cookies. If we introduce them, we will first ask for your consent and update this policy.
7. Your rights
You have the right:
- of access to your data and to a copy of it (Art. 15),
- to rectification of inaccurate data (Art. 16),
- to erasure, if we no longer need the data or are not permitted to process it (Art. 17),
- to restriction of processing (Art. 18),
- to portability of data you have provided to us on the basis of a contract (Art. 20),
- to object to processing based on legitimate interest (Art. 21),
- to withdraw consent where processing is based on consent – at any time and without affecting the processing carried out before the withdrawal.
Send your request to contacts@e-digiroot.net. We will handle it without undue delay and at the latest within one month. For complex requests, we may extend this period by a further two months and will inform you accordingly.
If you believe that we are processing your data in breach of the law, you may file a petition to initiate proceedings (complaint) with the Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava 27, tel. +421 2 32 31 32 14, dataprotection.gov.sk.
8. Automated decision-making
We do not carry out automated decision-making or profiling that produces legal effects concerning you.
The promo offer is generated automatically based on the order value or the type of package. The conditions are published in advance and have no other effect on your rights.
9. How we protect data
- The website runs only over an encrypted HTTPS connection.
- We store account passwords only in encrypted form.
- Access to the server is protected by a key and by automatic blocking of attacks.
- Only an authorised person has access to the data, to the extent necessary for their work.
- In the event of a personal data breach, we proceed in accordance with Articles 33 and 34 GDPR.
10. Changes to this policy
We update this policy when our services, suppliers or regulations change. The current version is always published on this page. We inform registered customers of material changes by e-mail.