This page explains how we process your personal data when you buy in the Edulo shop, when you email yourself a free activity, when we measure our ads and when you contact us. We follow Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Slovak Act No. 18/2018 Coll. on personal data protection.
1. Controller
Ing. Miroslav Juro
Place of business: Tehliarska 3751/21, 071 01 Michalovce, Slovakia
Company ID (IČO): 57964378, Tax ID (DIČ): 1120313876
Registered in the Trade Register (Živnostenský register) of the District Office Michalovce, Slovakia, No. 840-34948
Email: objednavky@edulo.eu, Phone: +421 903 701 355
We have not appointed a data protection officer, as the law does not require us to. Please send questions about personal data to objednavky@edulo.eu.
2. What data we process and why
| Purpose | Data | Legal basis | How long |
|---|---|---|---|
| Handling the order and delivering the activities | email, first and last name, country, order contents, price, language, time of order and payment, record of the consents given at checkout, download link and number of downloads | performance of a contract, Art. 6(1)(b) GDPR | 4 years after purchase |
| Issuing the receipt or invoice, accounting and tax | first and last name or name of the organisation invoiced (school, company or its founder), contact person, name of the preschool or site, address (for private individuals only if you want it on the receipt), country, company ID, tax ID, VAT ID or the equivalent numbers in other countries (e.g. NIP), the school's purchase order number, email for the invoice, order contents, price, payment details | legal obligation, Art. 6(1)(c) GDPR (accounting and tax rules, including VAT) | 10 years from the end of the year the document relates to |
| Complaints, withdrawals and requests for redress | order details, content of the notice or complaint, our correspondence | legal obligation and performance of a contract, Art. 6(1)(c) and (b) GDPR | 4 years after it is resolved |
| Answering questions (email, contact form) | name, email, content of the message | legitimate interest in replying to you, Art. 6(1)(f) GDPR; questions before a purchase: Art. 6(1)(b) GDPR | 1 year after it is resolved, unless an order follows |
| Protecting our legal claims | order and correspondence details | legitimate interest, Art. 6(1)(f) GDPR | during the limitation period, at most 4 years after purchase |
| Emailing you a free activity | email, website language, activity, time of the request, where you came from (e.g. an ad) | performance of a contract – we send you what you asked for, Art. 6(1)(b) GDPR | 1 year after the last request, unless you signed up for news about new activities |
| News about new activities by email | email, website language, time and exact wording of the consent | consent, Art. 6(1)(a) GDPR | until you withdraw your consent |
| Measuring ads on Facebook and Instagram (Meta pixel) | pages visited, activities viewed, cart, payment started and purchase (order number, activities, amount), request for a free activity (without the email), browser and device information, IP address, Meta cookies | consent, Art. 6(1)(a) GDPR and Section 109(8) of Slovak Act No. 452/2021 Coll. | cookies 90 days; at Meta under its own rules |
| Website security and operation | IP address, time and address of the request (server logs), a hash of the IP address to protect forms from abuse | legitimate interest, Art. 6(1)(f) GDPR | server logs according to the hosting settings, IP hash at most 1 day |
We process the billing details from the checkout to issue the receipt or invoice. We also need your country to determine how VAT applies to the sale: for sales to private individuals in other EU countries we monitor the annual €10,000 threshold, above which VAT is due in the customer's country.
We only send you news about new activities with the consent you give by ticking the box next to a free activity. You can withdraw it at any time by replying to any of our emails or writing to objednavky@edulo.eu; this does not affect processing before the withdrawal. We only start the Meta pixel for measuring ads with your consent in the cookie bar; you can change it with the Cookie settings link in the website footer. We do not use the name, address or billing details from orders for advertising.
3. Where the data comes from
You give us the data yourself when ordering, at checkout, through a form or by email. If you agree to cookies, the Meta pixel collects data about your visit. From the Stripe payment gateway we only receive the payment result and its identifier. We never receive your card details.
4. Who we share data with
- Stripe Payments Europe, Limited (Ireland) – payment gateway. It processes the payment as an independent controller under its privacy policy. We pass on your email, order number, items and amount.
- Websupport s.r.o. (Slovakia) – website hosting, mailbox and sending the shop's emails (order confirmation, invoice, free activity, contact form messages). It processes data on our behalf as a processor.
- Brevo SAS (France) – backup sending of the shop's emails when our mail server is unavailable. We pass on your email address and the content of the email or message. It counts email opens and link clicks only anonymously and in aggregate, not per person. It processes data on our behalf as a processor.
- The operator of the Doklado app (doklado.com) – issuing invoices. It processes data on our behalf as a processor.
- Meta Platforms Ireland Limited (Ireland) – ads on Facebook and Instagram. If you agree to cookies, the Meta pixel sends it the data listed in section 2 (never your email or other contact details). We are jointly responsible with Meta for collecting and passing on this data; Meta then processes it as a separate controller under its privacy policy.
- An accountant or accounting firm, if one keeps our accounts.
- Public authorities, where the law requires it (for example the tax office or the Slovak Trade Inspection).
We do not sell data. We only pass pixel data to Meta, and only with your consent.
5. Transfers outside the European Union
Stripe may transfer payment data, Brevo email data and Meta pixel data to the United States and other countries. Such transfers are protected by a European Commission adequacy decision (the EU-US Data Privacy Framework) or by standard contractual clauses. All other recipients process data in the European Union.
6. Automated decision-making
We do not carry out automated decision-making or profiling. The Stripe payment gateway may automatically assess the risk of fraud during payment under its own rules. If you agree to cookies, Meta may use the pixel data to choose automatically who sees our ads.
7. Do you have to give us your data?
We need your email, name and country to conclude the contract, deliver the activities and issue the receipt. Without them a purchase is not possible. Giving the address of a private individual is voluntary – only if you want it on the receipt. For purchases by a school or company we need the name of the organisation invoiced, its address and its identification number where the country uses one (e.g. IČO or NIP). The other billing details (name of the site, tax ID, VAT ID, purchase order number, email for the invoice) are optional. We need your email for a free activity so that we can send it to you; you can also download it directly without an email. Consent to news about new activities and to cookies is voluntary.
8. Your rights
- Access: you have the right to know what data we process about you and to receive a copy.
- Rectification: we will correct inaccurate or incomplete data.
- Erasure: we will delete data we no longer need and are not required to keep by law.
- Restriction of processing: for example while we check that the data is accurate.
- Portability: we will send you your order data in a commonly used format.
- Objection: you may object to processing based on legitimate interest.
- Withdrawing consent: you can withdraw your consent to news about new activities and to cookies at any time (news by email to objednavky@edulo.eu, cookies via Cookie settings in the website footer).
- Complaint: if you think we are not handling your data properly, you may lodge a complaint with a supervisory authority. Our authority is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Galvaniho 7/B, 821 04 Bratislava, Slovakia, statny.dozor@pdp.gov.sk, dataprotection.gov.sk. You may also complain to the supervisory authority in the EU country where you live.
To exercise your rights, email objednavky@edulo.eu. We will reply without undue delay and within one month at the latest.
9. Activities and children
The activities you download run on your computer without the internet. They send nothing, contain no ads and collect no data about children or teachers.
10. Cookies
We always use essential cookies and browser storage; Meta cookies for measuring ads only with your consent. Details are on the Cookies page.
11. Changes
We may update this information, for example when we start using a new service. The date of the last change is shown below.
Last updated: 30 October 2026