Privacy policy
1. Controller
Authorized representatives / management:
Marc Aeschbach | Chair of the management team ([email protected])
Daniel Aeschbach | Managing director ([email protected])
2. Scope
This privacy policy explains the nature, extent and purpose of our processing of personal data when you use our 3D printing service and website.
3. Data we collect
Customer data
- First and last name
- Address (street, postcode and town)
- Phone number
- Email address
- Payment data, such as account or credit-card information
- Billing address, if different from the delivery address
Order data
- Uploaded 3D models and design data
- Other files required for production
Cloud slicing: Your 3D models must be sent to the automated CloudSlicer3D service for binding price calculation and technical model analysis. This transfer is required to use our service.
Note: If 3D models potentially depict unlawful content, such as weapons, we may send data to the responsible authorities where necessary.
Usage data (website and online service)
Our hosting provider automatically records technical server logs, including the IP address and timestamp. We also collect:
- IP address
- Browser type and version
- Time of access
- Pages and subpages visited
Cookies
- Functional cookies, for example for the cart and sign-in, which are required to operate the website
- Analytics, tracking and advertising cookies for Google Analytics 4 and Google Ads, which are loaded only after your explicit consent. The choice is stored in LocalStorage under
cookie-consent.answer = "allow".
4. Purposes of processing
Contract performance
- Preparing quotes
- Producing and shipping 3D-printed products
- Communicating with you, for example about designs or payment arrangements
Analytics and statistics
- Analysing website visits and user behaviour to improve our offering
- Measuring the effectiveness of our Google Ads advertising through conversion tracking
- Tools: Google Analytics 4 and Google Ads (Google LLC), only with your consent
Customer account
When you register, additional data such as a username and encrypted password may be stored so you can view your orders and projects.
If you place an order as a guest without registering first, we automatically create a customer account with the email address you provide so the order can be processed. You receive a link to set a password. Until then, access to the account depends on access to your email. If an account with that address already exists, the order is assigned to it.
We also use an external email provider, Resend, for system communication and sending invoices.
Cart and order reminders
If you are signed in, add items to the cart or save a configuration but do not complete the order, we may send a reminder to the email address stored in your account after a few hours and once more after roughly one day. We send no more than two reminders per incomplete cart. The recovery link in the email is tied to your account, expires after 7 days and is stored by us only as a cryptographic hash. Uploaded 3D files are neither included nor attached. You can object at any time through the unsubscribe link in the email or by contacting [email protected]. You will then receive no further cart reminders.
Review requests
After an order has been completed and delivered, we may send you one email asking for a review. You can also object to these messages at any time.
Newsletter and welcome voucher
If you subscribe to our newsletter, we process your email address to send a confirmation email using double opt-in and, after confirmation, a one-time welcome voucher and occasional information about materials, products and promotions. The legal basis is your consent. Until confirmation, the entry is stored as pending and the confirmation link is stored only as a cryptographic hash. You can withdraw consent at any time for the future through the unsubscribe link in every newsletter email or by contacting [email protected]. After withdrawal, the entry is marked as unsubscribed and is no longer used for sending.
Disclosure to third parties
- For payment processing through Stripe, including credit card, TWINT, Klarna, PayPal, Apple Pay and Google Pay
- For delivery through Swiss Post
3D printing itself takes place exclusively on our own printer in Küsnacht. Your 3D models are not passed to third-party companies for production.
Disclosure required by law
We may disclose data where a legal obligation applies, for example for criminal prosecution or under an official order.
5. Legal bases
Consent
We obtain consent before disclosing data to third parties where required.
Performance of a contract
We need your data to perform and process the 3D printing contract, for example for shipping and invoicing.
Legitimate interests
We store 3D models and data so we can cooperate in the event of possible legal violations or requests from authorities, for example concerning unlawful content.
We communicate directly with existing customers as part of the business relationship, particularly through reminders about incomplete carts and one-time review requests after an order. You can object to this processing at any time; see section 8.
6. Disclosure of data
External service providers
- Payment processing: Stripe, Inc. (credit card, TWINT, Klarna, PayPal, Apple Pay and Google Pay, all processed through Stripe)
- Delivery: Swiss Post
- Hosting and server infrastructure: Railway Corp. (USA)
- Database, authentication and file storage: Firebase / Google Cloud (Google LLC)
- Email delivery for system, invoice, reminder, review and newsletter emails: Resend, Inc.
- Display of Google reviews through the review widget on the homepage: Elfsight LLC. The widget loads only when the review section enters the viewport.
- Error analysis and stability monitoring: Sentry (Functional Software, Inc.). Technical error data such as browser type, page viewed and stack trace may be processed. We do not knowingly transmit passwords or payment data.
- 3D slicing and price calculation: CloudSlicer3D
- Audience measurement and conversion tracking: Google Analytics 4 and Google Ads (Google LLC), only after consent in the cookie banner; see section 9
International data transfers
No 3D models are sent abroad for production. Printing takes place exclusively on our own printer in Küsnacht.
Our use of Railway, Firebase / Google Cloud, Resend, Stripe, Sentry, Elfsight, Google Analytics and Google Ads may also result in data being transferred to the USA and the EU, including Ireland. If a recipient country such as the USA does not provide an adequate level of data protection from a Swiss perspective, we safeguard the transfer using standard contractual clauses (SCCs) or the Swiss-U.S. Data Privacy Framework.
Publications
Reference images are published only with your explicit consent.
7. Retention periods
General retention period
3D files are generally retained for 5 years.
Invoice data
Invoice data is retained for 10 years in accordance with the statutory retention obligations under the Swiss Code of Obligations and is then deleted.
Cart and reminder data
Saved carts and configurations, as well as reminder delivery status, are deleted or anonymized when no longer required for the stated purpose. Recovery links, which are stored as hashes, expire after no more than 7 days.
Deletion
Data is deleted when it is no longer required and no statutory or contractual retention period applies.
8. Rights of data subjects
Right of access
You have the right to request information about your stored data at any time. Contact us at [email protected].
Correction and deletion
You may request the correction of inaccurate data or deletion of your personal data, provided no legal retention obligation prevents it. We confirm your request in writing.
Right to object
You may object to the processing of your data at any time, particularly for tracking and marketing. Contact us using the address above.
Data portability
If requested, we provide your data in a commonly used format.
9. Cookies and tracking
Types of cookies
- Functional cookies: These are strictly necessary for the basic operation of the website, for example to store the cart, sign-in status and dark-mode setting.
- Analytics, tracking and advertising cookies (Google Analytics 4 and Google Ads): These cookies and technologies let us analyse user behaviour in anonymized form and measure advertising effectiveness. This includes conversion tracking and enhanced conversions using hashed contact details; see “Analytics and advertising tools”. They load only after you consent in the cookie banner. The status is stored in LocalStorage under
cookie-consent.answer = "allow".
Analytics and advertising tools
Google Analytics 4 (GA4): If you consent, we use Google Analytics, a web analytics service from Google LLC. We use GA4 with IP anonymization enabled. Google shortens your IP address within EU member states or other states party to the Agreement on the European Economic Area before transfer to the USA.
Recorded interactions include page views, STL model uploads, price-calculation attempts, cart activity including “Add to cart”, checkout processes, successful orders and submitted bug reports.
Google Ads conversion tracking: If you consent, Google Ads lets us measure which advertisement led to an order. When an order is completed, a conversion containing the order value and transaction ID is sent to Google.
Enhanced Conversions: To improve advertising conversion attribution, when an order is completed your browser additionally sends the email address entered with the order and, if available, your phone number to Google Ads in cryptographically hashed form using SHA-256. Hashing takes place in your browser, and the plain-text details are not sent to Google. This processing occurs only if you consent to cookies and advertising technologies in the cookie banner, and is used solely to measure advertising performance.
10. Security and technology
Technical and organizational measures
SSL encryption, firewalls and access restrictions protect your data from unauthorized access.
People with access
Only authorized team members have access to personal data required to perform their duties.
Third-party systems
Where data is stored in cloud services or with external hosting providers, we ensure that they take appropriate technical and organizational security measures.
11. References and links
Our website may contain links to external websites and services. We accept no responsibility or liability for their content or privacy measures. Please consult the applicable privacy information on those websites.
12. Updates to this privacy policy
We reserve the right to update this privacy policy when necessary, for example following changes in the law or new services. The current version is published on our website. We will inform you appropriately of significant changes.
13. Contact
For questions or concerns about privacy, contact us at:
Email: [email protected]
Post: Printimir, Traubenweg 27, 8700 Küsnacht, Switzerland