Privacy policy
Last updated 7 September 2026.
Who the controller is
Digital Symbio spol. s r.o., Karpatské námestie 7770/10A, 831 06 Bratislava – Rača, Slovakia. Company ID (IČO) 51 224 968, Tax ID (DIČ) 2120641875, VAT ID SK2120641875, registered with the Bratislava III District Court, Section Sro, Insert No. 182899/B. Contact for anything about your data: info@digitalsymbio.com.
What we process, and why
Your name and e-mail let you have an account and let the app run: signing in, running your own things and packs, and mail you asked for yourself (registration confirmation, password reset, an "an account with this address already exists" notice). We briefly log your address (IP) at sign-in and when rate-limiting attempts, so the app can withstand abuse. None of it is used for anything else — no analytics, no advertising, no tracking.
On what legal basis
Performance of a contract — GDPR Art. 6(1)(b), not consent. Creating an account forms a contractual relationship (an app for packing your things), for which processing your name, e-mail and pack data is necessary. Security logs (IP addresses at rate-limiting) are processed on the basis of legitimate interest — protecting the app from abuse (Art. 6(1)(f)).
How long we keep it
- Your account and its content (things, packs, kits, events) — for as long as the account exists. You delete it yourself in Settings, any time.
- Sign-ins (sessions) — 90 days after they expire.
- Security and error logs (sign-in attempts, app errors) — 30 days.
- Pack activity history (who did what on a shared pack) — 1 year.
Who sees it
The app runs on hosting by WebSupport, s.r.o. (web hosting and the
database), our processor. If you sign in with Google, Google receives only what you
agreed to at sign-in — the scope openid email profile (name, e-mail,
identity verification); the app receives nothing more from Google. A regular database
backup is kept encrypted on the controller's own infrastructure, off the hosting
provider — this is not a separate recipient, as it is the same controller's data. We
do not share, sell or trade your data with anyone else.
Cookies
The app uses no analytics or advertising cookies — nothing tracks you across the
web. The cookies the app sets (fgr_s — sign-in, fgr_csrf —
form protection, fgr_g — Google sign-in flow state) are strictly necessary
for the app to work, so we do not need your consent for them.
Your rights
You have the right to access your data, to have it corrected, to have it erased, to restrict its processing, to receive a copy of it, and to object (GDPR Art. 15–21). You delete your account yourself in Settings — it is immediate and irreversible, and hard- deletes your identity and your own things and packs (a thing on somebody else's shared pack stays, just without your name on it). For anything else, write to info@digitalsymbio.com. If you believe we have mishandled your data, you may complain to the Slovak Data Protection Authority (Úrad na ochranu osobných údajov SR, Hraničná 12, 820 07 Bratislava 27, Slovakia, dataprotection.gov.sk).
What we do not have
The app has no Data Protection Officer — processing personal data is not its core activity at scale. We do not ask for bank details or payment information; the app has no price.