Who is responsible
PBDigi s. r. o. · Dolinka 135/28, 903 01 Hurbanova Ves, Slovakia. Company number (IČO): 57 896 526. Tax number (DIČ): 2123321200.
We are the controller for business enquiries, client account administration, support correspondence and website security. This notice covers pbdigi.com, its client portal and our pbdigital.pages.dev website.
What we use and why
Enquiries: your name, work email, optional company name, screen requirements, message and language. We use them to answer you and prepare a business offer. For company representatives, our legal basis is the legitimate interest in communicating with potential business clients (GDPR Article 6(1)(f)); for a sole trader enquiring on their own behalf, steps requested before a contract (Article 6(1)(b)).
Accounts and support: account email, access role, password verification data, requests, messages, attachments and service history. We use these to provide access and manage the business service. The basis is performance of a contract with an individual business customer, or our legitimate interest in delivering the contracted service to a company and its authorised staff. Accounting and other legally required records are processed to meet the relevant legal obligations (Article 6(1)(c)).
Security: connection and request information, including IP addresses and sign-in events, helps protect accounts and prevent abuse. The enquiry database stores a keyed hash of the network address for rate limiting, rather than a raw IP address. Other hosting and account security logs can contain raw IP addresses. The basis is our legitimate interest in protecting the service (Article 6(1)(f)).
Where data comes from
You provide enquiry and support details directly. Your employer or another authorised company contact may arrange your portal account and supply your work email and role. Technical data comes from your browser and use of the service. Required form fields are needed to understand and answer the enquiry; company name is optional. Without the required details, the form cannot be submitted. You can also contact us by phone or email.
Do not include passwords, payment-card details or sensitive personal information in messages. Submitting an enquiry does not subscribe you to advertising. A privacy-notice acknowledgement is not consent to marketing.
Who receives the data
Our authorised team handles enquiries and service requests. Cloudflare provides website hosting, application infrastructure and data storage. Resend delivers transactional emails, including enquiry notifications and account messages. Messages also reach our business email service. Uploaded service files are stored in infrastructure operated by us and, where configured, Cloudflare object storage. Professional advisers or public authorities may receive records where necessary for legal duties or claims.
Cloudflare and Resend operate internationally, so processing can involve countries outside the European Economic Area, including the United States. Their published data-processing terms include standard contractual clauses for relevant international transfers. Contact us for information about the safeguards applicable to your data and how to obtain a copy.
Cloudflare data-processing terms ↗ · Resend data-processing terms ↗
How long records are kept
Enquiries are needed while we answer them and conduct the resulting business discussion. If a service follows, the relevant correspondence becomes part of the customer record. Account and support records are needed during the service and afterwards only where required for outstanding requests, legal obligations or establishing, exercising or defending claims. Retention depends on the record, the end of the business relationship and any applicable statutory period or ongoing dispute.
The current enquiry and support databases do not automatically expire records. Retention and deletion therefore require review by our team, including related email and file copies. Contact us to request deletion or the retention criteria for a particular record. Browser session durations are listed in the storage notice.
Your rights and how to contact us
You can request access to and a copy of your personal data, correction, erasure or restriction, and data portability where the GDPR conditions apply. You may object to processing based on legitimate interests because of your particular situation. If processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. These rights have legal conditions and exceptions.
Send your request to info@pbdigi.com or our registered address. Identify the account or enquiry concerned; do not send a password. We may ask for proportionate information to verify your identity. We respond without undue delay and normally within one month. If a lawful extension is needed because of complexity or the number of requests, we explain it within that month.
We do not use enquiry or portal data to make solely automated decisions with legal or similarly significant effects.
People featured on client screens
Where a client decides to display employee names, birthdays or photographs and asks us to manage that content, the client is normally the controller and we act on its instructions as a processor. The client must establish a lawful basis, inform the people concerned and agree the required data-processing terms with us. A website privacy notice does not replace that agreement. If you appear in a client’s content, contact that organisation first; we can help route your request.