Privacy
Policy

For matters relating to the processing of personal data, please contact the Controller at: kontakt@w3d.net.pl.

The Controller has not appointed a Data Protection Officer.

This Privacy Policy sets out the principles for processing personal data of persons visiting the w3D website, contacting w3D, submitting enquiries, entering into contracts and using the services of w3D.

This Privacy Policy covers only matters relating to personal data, cookies and similar technologies. Commercial terms, cooperation rules, liability, complaints, withdrawal from contract and technical conditions for the performance of orders are governed by the separate w3D Terms and Conditions of Cooperation.

Depending on the purpose of contact and cooperation, the Controller may process in particular:

1. identification data, including first name, surname, company name and VAT number
2. contact data, including e-mail address, phone number, correspondence address or delivery address
3. billing and transaction data, including data required to issue an invoice and information about payments
4. data contained in correspondence, including the content of e-mail messages, attachments, history of arrangements, offer acceptances, project comments, enquiries, complaints and responses
5. technical and design data provided by the client, including STL, STEP, CAD files, photographs, drawings, application descriptions, samples and other materials necessary to fulfil the order
6. technical data related to the use of the website, including IP address, device and browser data, server logs, information about activity on the site and data collected via cookies or similar technologies

The Controller does not intend to process special categories of personal data or data relating to criminal convictions, unless such an obligation arises directly from applicable law or the nature of the matter reported.

The Controller processes personal data only to the extent necessary for specified purposes.

Data is processed for the purpose of responding to messages, conducting correspondence, providing information, preparing initial arrangements and organising cooperation.

The legal basis is Art. 6(1)(b) GDPR (actions prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interests of the Controller).

Data is processed for the purpose of preparing quotations, agreeing on the scope of the order, performing the project, 3D modelling, reverse engineering, 3D printing, delivery, billing and fulfilment of contractual obligations. The legal basis is Art. 6(1)(b) GDPR.

Data is processed for the purpose of issuing and storing accounting and tax documents. The legal basis is Art. 6(1)(c) GDPR.

Data is processed for the purpose of securing evidence, archiving correspondence and protecting the rights of the Controller in the event of a dispute. The legal basis is Art. 6(1)(f) GDPR.

If the user gives consent, the Controller may process data for the purpose of analysing website traffic and measuring visit statistics. The legal basis is Art. 6(1)(a) GDPR.

If the user gives separate consent or initiates commercial contact, the Controller may process data for the purpose of presenting offers and maintaining a business relationship. The legal basis is Art. 6(1)(a) or Art. 6(1)(f) GDPR.

The Controller does not make decisions regarding users based solely on automated processing that would produce legal effects or similarly significantly affect their situation.

As a rule, the Controller receives personal data directly from the data subject. Data may also come from:

1. a client representing a company or organisation
2. a person acting on behalf of the client
3. publicly available sources and registers — only to the extent necessary for B2B contact or contractor verification
4. technical logs and tools used on the website

Personal data may be transferred only to entities supporting the Controller in conducting its business, in particular:

1. providers of hosting, e-mail, backup and IT support services
2. payment operators and entities providing accounting or invoicing services
3. carriers and logistics operators, including InPost, to the extent necessary for delivery
4. providers of analytical tools — only after obtaining the required user consent
5. law firms and advisors supporting the Controller in pursuing or defending claims
6. public authorities, where the obligation to disclose data arises from applicable law

The Controller aims to use solutions located within the European Economic Area. However, if the use of certain tools results in the transfer of data outside the EEA, this will occur only with the appropriate legal basis and required safeguards in place.

When using Google Analytics 4, some data may also be processed by Google using infrastructure outside the EEA, in accordance with the principles applied by that provider.

Personal data is retained for no longer than necessary to fulfil the purpose of processing, in particular:

1. data from correspondence and enquiries — for the duration of discussions and for the time needed to secure any potential claims
2. data related to the performance of a contract — for the duration of the contract and for the period during which claims may be pursued
3. accounting and tax data — for the period required by applicable law
4. data processed on the basis of consent — until consent is withdrawn or the purpose ceases to apply
5. technical data and cookie data — in accordance with the retention period of the relevant solution or until settings are changed or consent is withdrawn

The data subject has the right to:

1. access their data
2. rectification of their data
3. erasure of their data
4. restriction of processing
5. data portability
6. object to processing based on legitimate interests
7. withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal
8. lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland

Requests concerning data protection may be directed to: kontakt@w3d.net.pl.

Providing data is voluntary, but in many cases necessary to:

1. receive a response to an enquiry
2. obtain a quotation
3. enter into and perform a contract
4. issue accounting documents
5. process a delivery or complaint

Failure to provide data may prevent the conclusion of a contract or the performance of a specific service.

The w3D website uses cookies or similar technologies only to the extent necessary for the operation of the site and — following consent — for analytical purposes.

Certain technical solutions may be used to ensure the proper functioning of the website, security and the recording of decisions regarding consent to analytics.

If the user gives consent, the website may use Google Analytics 4 to analyse visit statistics and usage of the site. As part of the tool's operation, information about visited subpages, traffic source, time of visit, events on the site and technical identifiers may be processed.

1. if the user has not yet given consent, Google Analytics 4 does not load at all
2. until the user makes a decision, a cookie banner is displayed
3. after clicking "Accept", the analytics tool loads only at that moment
4. after clicking "Reject", the analytics tool does not load
5. the user's decision is stored locally so that the site remembers the choice made

The user may at any time change or withdraw their decision regarding analytics by using the "Cookie preferences" link available in the footer of the website.

The Controller processes the content of e-mail correspondence, attachments, acceptances, drafts, revisions and the history of arrangements as part of the performance of cooperation, as evidence of the parties' agreements and as a safeguard for claims.

Project materials provided by the client are processed solely for the purpose of fulfilling the order, handling changes and complaints, technical archiving and protecting the rights of the Controller.

The Controller applies appropriate technical and organisational measures to protect personal data, including access controls, restriction of permissions, backups, system updates and measures to reduce the risk of unauthorised disclosure of data.

The website may contain links to external services, including social media. The Controller is not responsible for the data processing rules applied by the external operators of those services.

The Controller may update this Privacy Policy in the event of changes in law, technological changes or changes to the way the website and services operate. The current version of the document is published on the w3D website together with its effective date.