Privacy policy
1. Data controller
The controller is Paweł Woźniak, operating 3DConceptStudio. Correspondence address: Privacy contact email: Tax identification number (NIP):
2. Data we process
We process your name, email address, enquiry, printing and collection preferences, uploaded 3D models, photos and information within those files. Operating and securing the website also involves technical data such as IP addresses, session identifiers, browser information and security events. Please avoid submitting sensitive information or unnecessary information about other people.
3. Purposes and legal bases
Handling enquiries, preparing quotes and taking steps at your request before entering a contract: GDPR Article 6(1)(b). General correspondence, website operation, security and abuse prevention: Article 6(1)(f); our legitimate interests are communicating with interested people and protecting the service. If an order creates legal obligations, relevant data is processed under Article 6(1)(c). Providing data is voluntary, but a name and email address are needed to use the enquiry form. An enquiry does not place an order. Quotes are reviewed by a person; we do not make decisions with legal effects solely through automated processing.
4. Providers and recipients
We use Vercel and OVHcloud (hosting infrastructure), Turso (database), Cloudflare R2 / S3-compatible storage (files), Resend (email delivery), and Cloudflare Turnstile (bot protection). Providers receive the data needed for their services; authorised people can access enquiries and files. Turnstile may analyse device, browser and network information to detect abuse. The website loads fonts from Google Fonts, disclosing connection data, including your IP address, to Google. Data may also be disclosed to competent authorities where legally required.
5. Transfers outside the EEA
Global providers may process data outside the European Economic Area, including in the USA. Such transfers require a basis under GDPR Chapter V, such as an adequacy decision or European Commission standard contractual clauses with any necessary safeguards. You may ask the controller for details of applicable safeguards and how to obtain a copy.
6. Retention
The retention period for enquiries, attachments and quote correspondence is 30 days from receipt. Access to uploaded files expires after 30 days; deletion within the application takes place when the next cleanup procedure runs. Removing mailbox copies requires separate action by the controller. Provider backups and logs follow their retention cycles. Records subject to a legal retention obligation are kept for the period required by law.
7. Your rights
Subject to the conditions in the GDPR, you can request access, correction, erasure, restriction of processing and data portability. You can object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. You can complain to the President of Poland’s Personal Data Protection Office (uodo.gov.pl), or your competent supervisory authority. Contact the controller to exercise your rights.
8. Cookies and browser storage
The f3d_session cookie connects your enquiry form to your session and expires after 24 hours. The f3d_admin cookie supports administrator login and expires after 8 hours. We store your cookie notice preference locally in your browser under forma3d-cookie-consent until you remove it. You can delete these items using your browser settings; blocking cookies may prevent form submission. The current website includes no advertising tools, marketing analytics or newsletter.
9. Updates
Last updated: 3 November 2026. This policy covers the website and quote enquiries. Publishing customer photos or projects in a portfolio requires a separate arrangement and an appropriate legal basis.
Provider information: Vercel · OVHcloud · Turso · Cloudflare R2 · Turnstile · Resend · Google Fonts