Privacy Policy

1. Controller

Макс Трейдър ЕООД, Bulgarian company registration number (EIK) 204228551, with registered office and business address: гр. София 1715, район Младост, ж.к. Младост 4, бул. „Бизнес парк София“ № 1, бл. 7, ет. 5. For enquiries and requests: sales@3dpoint.bg.

2. Data we process

Model upload and analysis

File, original filename and format, size, checksum, storage key, upload time, analysis result or error, volume, surface area, overhangs, expected supports, overall dimensions, triangle count and whether the surface is closed.

Abuse prevention

A shortened, irreversible fingerprint of the IP address when available, and a log of upload attempts with that fingerprint and time. The log limits attempts per minute and hour; entries are removed after the one-hour window expires.

Quote

Selected material, colour, quality, infill and quantity; calculated weight, time, price and tax amounts; currency, breakdown, validity and whether the quote has been used.

Order and delivery

Name, email, phone number, selected courier, collection point or address, notes, order number and status, status history, amount and currency, payment status and identifier, consignment note and courier.

Correspondence and claims

Email content, supporting evidence and actions taken on the request.

3. Purposes and legal bases

• Quotes, orders, payment, production, notifications, delivery and claims: steps at your request before entering a contract and performance of the contract, Article 6(1)(b) GDPR.
• Accounting, tax and consumer documents: compliance with a legal obligation, Article 6(1)(c) GDPR.
• Abuse prevention, security, defence and establishment of legal claims: our legitimate interest in protecting the service and our rights, Article 6(1)(f) GDPR. You may object on grounds relating to your particular situation.

We do not make consent a condition of fulfilling an order, and we do not use these data to send advertising. The form data are necessary for the contract and delivery; without them, we cannot accept and fulfil the order.

4. Recipients

• Stripe: email, order number and amount, currency and payment data to process payment. Card details are entered with Stripe and are not stored by us.
• Econt or Speedy: name, phone number, collection point or address, weight and order number needed for the consignment note and delivery. The consignment note may currently be created manually in the selected courier’s system.
• Email provider: name, email and transactional notification content when sending is enabled. Outgoing mail currently passes through a mail server in Bulgaria.
• Hetzner Online GmbH (Germany; data centre in Helsinki, Finland): server, database and file storage, to the extent necessary for maintenance and security.
• Accountants, legal advisers and public authorities where required by law or necessary to protect rights.

We do not sell personal data or share them for third-party advertising.

5. Transfers outside the European Economic Area

Some providers may process data outside the European Economic Area. In that case, we use an applicable GDPR mechanism: an adequacy decision or standard contractual clauses and supplementary measures. For our providers specifically, the website, database and uploaded files are located in Hetzner Online GmbH’s Helsinki, Finland data centre, within the European Economic Area. Payments are processed by Stripe Payments Europe, Ltd. (Ireland), which transfers data to Stripe, Inc. (USA) when necessary under the European Commission’s standard contractual clauses. Outgoing mail passes through a mail server in Bulgaria.

6. Retention periods

The upload-attempt log is kept for the one-hour abuse-prevention window. The following periods apply to other data:

• Uploaded files without an order: 30 days from upload. Files for a fulfilled order: 12 months from dispatch, to allow reprinting and handling claims;
• Quotes without an order: 30 days after their 7-day validity expires;
• Orders, status history, delivery data and correspondence: 5 years from fulfilment, corresponding to the general limitation period under Article 110 of the Bulgarian Obligations and Contracts Act;
• Accounting and tax documents: the applicable mandatory periods under the Bulgarian Accounting Act, VAT Act and Tax and Social Security Procedure Code, including 10 years for accounting registers and financial statements and no less than the relevant tax period.

After the period expires, data are deleted or anonymised unless the law or a pending dispute requires longer retention.

7. Your rights

You have rights of access, rectification, erasure, restriction, portability of data you provided, and objection to processing based on legitimate interests. Where processing is necessary under a contract or law, erasure and objection may not apply. There is no automated decision-making with legal or similarly significant effects. The instant price is determined by selected settings and technical analysis; cases unsuitable for an instant quote are referred for human review.

Send your request to sales@3dpoint.bg. We may ask for additional information to confirm your identity. We will respond without undue delay and normally within one month.

8. Complaint to the supervisory authority

You may complain to the Bulgarian Commission for Personal Data Protection, Sofia 1592, 2 Prof. Tsvetan Lazarov Boulevard, through cpdp.bg, or to the supervisory authority where you habitually reside in the European Union.

9. Cookies

The p3d_locale cookie remembers your chosen language for 180 days. It stores a functional preference and is not used for advertising.

The public upload, quote and order flow uses no advertising cookies or advertising tracking. The protected administration area uses a strictly necessary secure cookie for the signed-in session. This cookie does not require consent.