When you use Digihry, you entrust us with your personal data. Here we explain what data we process, why we need it and what your rights are.
The operator of Digihry and controller of your personal data is:
The data we process depends on how you use our services. We primarily collect data directly from you and when you use the website.
| Processing purpose | Legal basis |
|---|---|
| Creating and managing your account | Performance of the service agreement — Article 6(1)(b) GDPR. |
| Assessing your offer and communicating before buyback | Steps at your request before entering into a contract — Article 6(1)(b) GDPR. |
| Buyback contract, card handover and payment | Performance of a contract — Article 6(1)(b) GDPR. |
| Accounting and related legal obligations | Compliance with legal obligations — Article 6(1)(c) GDPR. Applicable legislation must be completed based on the controller’s obligations. |
| Service security, preventing abuse and protecting legal claims | Our legitimate interest in secure operations and protecting our rights — Article 6(1)(f) GDPR. |
| Optional analytics and marketing through cookies | Your consent — Article 6(1)(a) GDPR. |
Required data is necessary to provide the relevant service. Without it, we may be unable to create an account, assess an offer, enter into a contract or pay the buyback price. Consent to optional cookies is not required for buyback.
Where necessary, data may be processed by hosting, database, technical support, email, accounting and legal service providers. Payment and shipping providers may receive data for a particular buyback. Analytics and marketing providers may receive data if optional tools are enabled. We disclose data to public authorities where required by law.
To be completed: confirm the service providers and scope of their services.
To be completed based on actual providers: whether data is transferred outside the European Economic Area, the destination countries, legal basis and how to obtain a copy of the safeguards used.
After the relevant period, we delete or anonymise the data. Retention periods must also match backup settings and the services used.
We use necessary cookies and similar technologies for login, security and remembering preferences. Your draft card list may be stored in your browser. Optional analytics and marketing tools are enabled only with your consent. You can change your choice at any time.
Subject to the conditions of the GDPR, you may:
Withdrawing consent does not affect the lawfulness of earlier processing. We cannot erase data where retention is required by law or necessary to establish or defend legal claims.
Exercise your rights at [COMPLETE CONTACT EMAIL]. We will respond without undue delay and within one month of receipt. For complex or numerous requests, we may extend the period by two further months and will explain why within the first month.
If you believe we process data unlawfully, you may complain to a supervisory authority, particularly in the country of your habitual residence, workplace or the alleged infringement. In Slovakia, this is the Office for Personal Data Protection of the Slovak Republic.
Slovak data protection authorityPreliminary card prices may be calculated automatically using catalogue data and the selected condition. Our team then reviews the offer. Buyback decisions are not made solely by automated means.
We may update this notice when our services or data processing change. The current version will be available on this page. We will give appropriate notice of material changes to processing.
Effective from: [COMPLETE DATE AFTER APPROVAL]
Document version: 2026-10-27.2
Back to cards
