Privacy policy

1. Controller

The controller under the General Data Protection Regulation is Maciej Suchowski, Niederbornstraße 35, 60435 Frankfurt am Main, Germany. Email: info@3ddruckenlassen.online, phone: 069 / 59776735.

2. Hosting, server logs and technical delivery

When the website is accessed, technically necessary data is processed to deliver and secure the page. This may include IP address, date and time, requested URL, referrer, browser and operating system information and transferred data volume. The legal basis is Art. 6(1)(f) GDPR.

For technical quality and stability measurement, we collect Web Vitals exclusively through our own first-party endpoint. The measurement record contains only a fixed route template instead of the concrete page path, locale, metric name, value, rating and navigation type. Query parameters, referrer, cookies, load ID and client user agent are not included in the Web Vitals record. These records follow the same retention criteria and are kept only as long as the server logs.

3. Contact

When you contact us by email, phone or a future contact function, we process the data you provide to answer the request. This includes name, contact details, request content and technical context.

4. 3D files, quoting and orders

If you submit 3D files, dimensions, material wishes, billing, delivery or payment data, we process them for review, quoting, production, delivery, invoicing and customer communication.

5. Local browser processing

The configurator processes 3D models locally in the browser where possible. Server-side quote items may transmit STL, OBJ or GLB files for renewed review, storage and pricing. The cart and checkout process contact, shipping, payment and technical item data.

6. Cookies and local storage

The website may use technically necessary cookies or local storage for cart and session settings. Non-essential analytics, marketing or tracking services are used only with valid consent. For Google Ads conversion tracking, the Google tag with ID AW-16472409434 is loaded only after consent. For a confirmed payment, the pseudonymous public order number as a deduplication key, order value, currency and a synthetic confirmation URL may be transferred to Google Ireland Limited or Google LLC. The secret status link or its token and customer or model data are not sent by this conversion event. Consent can be changed or withdrawn at any time via the privacy settings in the footer.

With your consent, we also store an HMAC-signed, HttpOnly first-touch cookie for no more than 90 days. The browser immediately classifies the landing page and acquisition channel into fixed coarse categories; full URLs, referrers, query or UTM parameters and click IDs are neither sent to our attribution endpoint nor stored in the cookie. At checkout, only the page category and channel class are attached to the pending order until the original cookie expiry, so the total period never exceeds 90 days from first touch. As soon as a PayPal or bank payment is confirmed as captured, these two values are atomically transferred to a daily aggregate without an order ID and immediately removed from the order; only the conversion time and payment provider remain there for deduplication. Pending attribution is cleared by the original 90-day deadline at the latest. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25 TDDDG. Withdrawing consent in the footer deletes the cookie and blocks future collection and Google transfers. A coarse assignment already attached to a pending order before withdrawal may still be aggregated if payment is confirmed later; it is removed during that processing or by the original 90-day deadline at the latest.

7. Recipients and service providers

Data may be transferred to service providers where required for hosting, communication, production, shipping, payment or accounting. PayPal processes payment data under its own responsibility.

8. Retention period

Personal data is deleted once the purpose no longer applies and no statutory retention periods, warranty periods, evidence duties or legitimate interests prevent deletion.

9. Your rights

Under the GDPR you have in particular the following rights:

• Access to processed personal data
• Correction of inaccurate or incomplete data
• Deletion or restriction of processing
• Data portability
• Objection to processing based on legitimate interests
• Withdrawal of consent with future effect
• Complaint to a supervisory authority

10. Required data

Certain data is required for contract formation, quoting, production, delivery and invoicing. Without it, requests or orders may not be processed fully.

11. Automated decisions

No legally significant fully automated decision within the meaning of Art. 22 GDPR takes place. Automatic prices are technical estimates and do not replace final order review.

12. Customer reviews

Two days after an order is completed, we may send one voluntary review request by email. Rating, text and consent choices are stored with the order. A review is published only with explicit consent, showing the first name and the initial of the surname. A model thumbnail requires separate consent. Both consents can be withdrawn for the future via info@3ddruckenlassen.online or the contact page. The legal basis for publication is Art. 6(1)(a) GDPR; internal feedback processing for quality improvement is based on Art. 6(1)(f) GDPR.

13. Version

Version of this privacy policy: 19 August 2026.