Privacy policy
Last updated: 10 October 2026
Short version: we collect only what you type into our forms, we use it solely to answer you or to invoice you, we do not track you, and we sell nothing about you to anyone. The long version is below and is deliberately readable.
Who we are
The controller is Digital Symbio spol. s r.o., Karpatské námestie 7770/10A, 831 06 Bratislava – Rača, Slovakia. Company ID 51 224 968, registered at the Municipal Court Bratislava III, section Sro, insert no. 182899/B.
Write to us at info@digitalsymbio.com.
We have no Data Protection Officer, and under Art 37 GDPR we are not required to have one — we do not monitor people systematically or at scale, and we process no special categories of data.
What we process, and why
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Name, email and message from the contact form | So we can answer the thing you asked about. | Art 6(1)(b) GDPR — steps taken at your request prior to entering a contract. You write to us in order to be contacted; that is precisely this basis. | 12 months if nothing comes of the enquiry. If we end up working together, the documentation follows the regime for contractual and accounting records (10 years, §35 of Act 431/2002). |
| Billing details you send us for an invoice: name, address, company ID, tax ID, VAT ID, e-mail and the items you picked | So we can invoice you for what we agreed on. | Art 6(1)(b) GDPR — performance of a contract, and Art 6(1)(c) — the legal duty to issue and keep an accounting record. | 10 years as part of the accounting record (§35 of Act 431/2002). They are not stored on the website — they reach us by e-mail. |
| IP address | To keep spam out of the form. We count how many messages came from one connection — and only as an irreversible fingerprint, never the address itself. | Art 6(1)(f) GDPR — legitimate interest in preventing abuse, which Recital 49 recognises explicitly. | 24 hours at most. |
We collect nothing else. No profiling, no automated decision-making, no ad targeting.
Cookies and tracking
We have no third-party analytics. No advertising or tracking cookies. We serve our fonts from our own server, so your IP address never reaches a font CDN. That is why there is no cookie banner here: there is nothing to consent to.
We set two cookies and neither one tracks you. The first is ds_lang. It holds nothing but the value sk or en — no identifier — and it is set only when you click the language switcher yourself. It lasts six months. It is strictly necessary to provide a function you explicitly requested, so under §109 of Act 452/2021 it requires no consent.
The second, PHPSESSID, is set only by pages with a form. It holds a one-time security token that stops another site from submitting the form on your behalf. It contains nothing about you and disappears when you close the browser. It is strictly necessary too, so no consent is asked for it either.
If you switch the site to dark mode, that preference is stored locally in your browser (localStorage) and is never sent to our server.
Who else sees it
Your email is delivered and your mailbox hosted by WebSupport, s. r. o., which acts as our processor under Art 28 GDPR for that purpose and is bound by contract. We give your data to nobody else, we sell it to nobody, and it never leaves the European Union.
One exception concerns the invoice form. When you type a company ID into it, our server looks it up in public registers to fill in the name, address, tax ID and VAT ID for you. It asks the Register of Financial Statements (registeruz.sk), the Register of Legal Entities of the Statistical Office of the Slovak Republic, and the European Commission's VIES system, which confirms the VAT ID from the register's tax ID. It sends them only the company ID or tax ID — nothing else from the form and not your IP address, because our server asks, not your browser. The server keeps the register's answer for 24 hours; it keeps no record of who asked. We do this at your request before issuing an invoice (Art 6(1)(b) GDPR), and you do not have to use it — you can always type the details yourself.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, and to data portability. For data processed on legitimate interest (the IP address) you have the right to object.
Just write to info@digitalsymbio.com. We answer within a month and we want nothing for it.
If you think we are handling your data badly, you may complain to the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk. We would rather you told us first — but it is your right, not our permission to give.
Changes
When this policy changes, we change the date at the top. We will not chase you with a box asking you to accept updated terms, because there is nothing here to accept.