+37257431807 info@digilema.com
Favorites0 Cart0

Privacy policy

Privacy Policy

Last updated: 22 July 2026

1. Controller

This Privacy Policy explains how personal data are collected and processed when you use the online store at https://digilema.sk.

The controller of personal data is Gelardo OÜ, registration code 17038053, address: Jõe tn 9, Kesklinna linnaosa, 10151 Tallinn, Harju maakond, Estonia.

For privacy-related questions or requests, contact us at info@digilema.com.

2. What personal data we process

We process personal data that are necessary to run the online store, accept and fulfil orders, provide customer support, handle returns and complaints, comply with legal obligations, and protect the website.

Depending on how you use the store, we may process the following categories of data:

  • identification and contact data, such as first name, surname, e-mail address and telephone number;
  • billing and delivery data, such as billing address, delivery address and country;
  • order data, such as purchased products, order value, order date, payment status, delivery method, invoice data and communication about the order;
  • payment-related data needed to confirm and administer payment, while full card details are processed by the payment provider and are not stored by us;
  • customer service data, such as messages, return requests, complaint descriptions and related evidence provided by the customer;
  • technical data, such as IP address, browser/device information, security logs, cookie identifiers, cart/session information and language preferences;
  • marketing preference data, if you voluntarily subscribe to newsletters or offers.

3. Purposes and legal bases

We process personal data for the following purposes and legal bases under the GDPR:

  • placing, confirming and fulfilling orders – performance of a contract or steps before entering into a contract;
  • delivery of goods and communication about delivery – performance of a contract;
  • payment processing and payment confirmation – performance of a contract and our legitimate interest in secure payment administration;
  • returns, complaints and warranty handling – performance of a contract and legal obligations;
  • accounting, tax, invoicing and statutory record keeping – legal obligation;
  • website security, fraud prevention, service diagnostics and protection of legal claims – legitimate interest;
  • newsletter and direct marketing – consent, where consent is required;
  • non-essential analytics or marketing cookies – consent, if such cookies are used.

4. Payment and delivery partners

Payments in the online store may be processed through Revolut and the payment methods available at checkout. Payment providers process payment data according to their own security and compliance requirements. We do not store full payment card data.

For delivery, we may share the data needed to deliver the order with Packeta, members of the Packeta Group and contracted courier, pickup point or logistics partners used for the order, as well as other delivery providers shown at checkout.

Depending on the selected delivery method, these data may include the customer name, delivery address or selected pickup point, phone number, e-mail address, order number and value, shipment and tracking data and, for cash on delivery, the amount to be collected. The data are shared to process and deliver the order, communicate about the shipment and collect cash on delivery where applicable. Information about Packeta personal data processing is available in its customer documents.

5. Recipients and processors

We share personal data only where necessary and only to the extent required for the relevant purpose. Recipients may include:

  • payment service providers;
  • courier, pickup point and logistics providers;
  • website hosting, IT support and security service providers;
  • accounting, tax, legal and business administration service providers;
  • public authorities, courts or supervisory authorities where disclosure is required by law.

Service providers may process personal data only under applicable data protection obligations and only for the purposes for which the data were shared.

6. Retention periods

We keep personal data only for as long as necessary for the purpose for which they were collected, or for as long as required by law.

  • Order, invoice, accounting and tax records are kept for the period required by applicable accounting and tax laws.
  • Customer support, return and complaint communication is usually kept for up to 24 months after the matter is closed, unless a longer period is needed for legal claims or statutory obligations.
  • Marketing data are kept until consent is withdrawn or the data are no longer needed for the marketing purpose.
  • Technical, security and diagnostic logs are kept for a limited period needed to protect and maintain the website, unless a longer period is required to investigate abuse, fraud or legal claims.
  • Cart and session data are kept for the period necessary to provide the shopping cart, checkout and language functions.

7. Cookies and similar technologies

The website uses cookies and similar technologies to make the store work correctly. Essential cookies may be used for cart contents, checkout, login/session handling, language selection, security and remembering basic preferences.

If non-essential analytics or marketing cookies are used, they are used only where permitted by law and, where required, based on consent. You can restrict or delete cookies in your browser settings. Some parts of the online store, such as cart and checkout, may not work properly without essential cookies.

8. Marketing communication

We send newsletters or marketing offers only if you have subscribed or otherwise given the required consent. You can unsubscribe at any time by using the unsubscribe link in the message or by contacting us at info@digilema.com.

9. International transfers

We aim to process personal data within the European Union and the European Economic Area. If a service provider processes personal data outside the EU/EEA, we use appropriate safeguards required by the GDPR, such as standard contractual clauses or another valid transfer mechanism.

10. Automated decision-making

We do not use personal data for automated decision-making that would produce legal effects concerning you or similarly significantly affect you.

11. Children

The online store is intended for customers who can legally enter into purchase contracts. We do not knowingly collect personal data from children for marketing purposes.

12. Your rights

Subject to the conditions set out in the GDPR, you have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request erasure of personal data;
  • request restriction of processing;
  • object to processing based on legitimate interest;
  • object to direct marketing at any time;
  • request data portability where applicable;
  • withdraw consent where processing is based on consent.

To exercise your rights, contact us at info@digilema.com. We may need to verify your identity before processing the request.

13. Complaints

If you believe that your personal data have been processed unlawfully, you can contact us first so that we can try to resolve the issue.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or with another competent supervisory authority in your EU member state.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is always available on the website of the online store.