Data Privacy

The Security of Personal Data

intuitive & practical 3D without CAD expertise
affordable & universal many 3D/2D interfaces

Data Privacy

English | Deutsch | Français | Español | Português | 한국어 | 中文 | Tiếng Việt | Bahasa Indonesia | العربية

Website /Contact / Inquiries

When accessing our Internet pages, our web providers log for us together with your IP address the names of the files you accessed, the Internet page from which you accessed our pages, the date and time of the access and some information on the web browser you used (together “access protocol”). The IP addresses in the access logs are anonymized as soon as they are collected. The storage and processing of the anonymous access logs is based on a legitimate interest in maintaining and improving the security, stability and quality of our website (Art. 6 para. 1 lit f. GDPR).

To comply with statutory export control and embargo regulations of the EU and the USA, we check the IP address of users accessing software downloads in order to block downloads from sanctioned countries. Blocked download attempts are logged by us (IP address, timestamp, destination country) to demonstrate our compliance in the context of official audits. The data will be deleted after the statutory retention period of 10 years has expired (Art. 6 para. 1 lit. c and lit. f GDPR in conjunction with the applicable foreign trade laws).

When you access our website, we log the access to certain content (clicks) for statistical purposes. If you access our website from an internet ad (Google Ads), along with your clicks we log the name of the ad and the search terms that led to the ad being displayed. The data collected is anonymous and does not allow individual visitors to be identified.

If you contact us by e-mail, your e-mail will be stored and processed by us to process your request. This processing takes place upon your request and is necessary for the execution of pre-contractual measures (e.g. general information on function, licensing and prices of our software) and, if necessary, for the establishment and execution of contracts (e.g. preparation of offers, communication with existing customers) (Art. 6 para. 1 lit b. GDPR) or based on our legitimate interest in maintaining contact with (potential) business partners or their employees (Art. 6 para. 1 lit f. GDPR). After 12 months at the latest, all e-mails are archived with very limited access. Business e-mail correspondence is subject to legal retention requirements that last between six and eight years.

If you report errors or request improvements your contact data (e-mail address, telephone number and name of the contact person) will be stored by us. The processing of personal data takes place for possible questions of our support team for the execution of the software support (Art. 6 para. 1 lit b. GDPR). If you are not our contractual partner yourself, but e.g. an employee of one of our customers, the legal basis for data processing is our legitimate interest in making our support services for customers and users as effective as possible (Art. 6 para. 1 lit f. GDPR). We store the contact data for this purpose only as long as it is needed to process the request, at most until the problem is solved or the improvement is implemented.

Offer and Order

Customer master data including customer contact data (e-mail address, telephone number and name of contact person) are stored and processed in the invoicing software of our sales team (Art. 6 para. 1 lit b. GDPR) for the establishment and execution of contracts within the scope of requests for quotations and orders. If you are not our contractual partner yourself, but e.g. an employee of one of our customers, the legal basis for data processing is our legitimate interest in making our contract management as effective as possible and having direct contact persons at our customers (Art. 6 para. 1 lit f. GDPR). All offers, orders, invoices and delivery notes are archived in the form of electronic documents until the end of the statutory retention period, which lasts between six and eight years.

When you order in our online shop, your order and your contact details are stored in the online shop’s database. The storage of personal data such as e-mail address, telephone number and name of the contact person serves to process the contract (Art. 6 para. 1 lit b. GDPR). If you are not our contractual partner yourself, but e.g. an employee of one of our customers, the legal basis for data processing is our legitimate interest in making our contract management as effective as possible and having direct contact persons at our customers (Art. 6 para. 1 lit f. GDPR). Registering in the online shop gives you access to your contact details for future orders. Unregistered customers and their orders will be deleted from the database of the online shop after 3 months at the latest. As a registered customer, your contact data and orders will remain stored in the online shop until you request their deletion.

If you pay by credit card, the card payment is sent directly to our PCI DSS-certified payment provider. We ourselves have no contact with credit card data. However, the type of credit card, the cardholder, as well as the purchase including the given contact data are stored by the payment provider. We need this data to check and book the payment (Art. 6 para. 1 lit b. GDPR). If you are not our contractual partner yourself, but e.g. an employee of one of our customers, the legal basis for the data processing is our legitimate interest in offering our customers the possibility of secure and fast online payment by credit card and thus at the same time reducing our risk of non-payment (Art. 6 para. 1 lit f. GDPR).

Each ordered license is stored together with the contact data of the licensee (company name or name, address, e-mail address, telephone) in our license database. The license database is used to generate license keys and to monitor usage and thus protect the license from unauthorized use. The storage of the licensee’s contact e-mail address and telephone number serves any queries that may be necessary in the event of activation problems or license inconsistencies (Art. 6 para. 1 lit b. GDPR). If you are not our contractual partner yourself, but e.g. an employee of one of our customers, the legal basis for data processing is our legitimate interest in making our license management as effective as possible and having direct contact persons at our customers (Art. 6 para. 1 lit f. GDPR). The contact data will be stored until we are informed of a new contact person, a new licensee or the termination of the license agreement.

If the contract for using our software is entered into between you or your company and one of our sales partners (resellers or so-called middlemen), we will still directly issue the license keys. In such cases, we (also) receive personal data from our sales partners for the purposes mentioned in the previous paragraph and in accordance with the applicable legal provisions.

Use of the Software

When requesting license keys to activate the program, we store the e-mail address to which the key was sent and the identification number of the computer on which the software was activated (Art. 6 para. 1 lit. b GDPR) in order to execute the contract for the use of our software. If license inconsistencies occur during the execution of the contract, this license usage data will be used and, if necessary, communicated to the licensee (Art. 6 para. 1 lit. b GDPR). If you are not our contractual partner yourself, but e.g. an employee of one of our customers, the legal basis for data processing is our legitimate interest in making our license management as effective as possible and having direct contact persons at our customers (Art. 6 para. 1 lit f. GDPR). The e-mail addresses of the license users are stored until we are notified of a new licensee or the termination of the license agreement. License keys can only be sent by e-mail or fax.

When requesting so-called demo keys to test the program free of charge, we store the e-mail address to which the demo key was sent, the identification number of the computer on which the software was tested, as well as the company name (or name) and the address of the demo licensee (Art. 6 para. 1 lit. b GDPR) in order to execute the contract for the test use of our software. When a new major version of the program is released, this data is automatically made anonymous or deleted. Demo keys can only be sent by e-mail.

If the contract for using our software is entered into between you or your company and one of our sales partners (resellers or so-called middlemen), we will still directly issue the license keys (or Demo keys, if applicable). In such cases, we (also) receive personal data from our sales partners for the purposes mentioned in the previous paragraphs and in accordance with the applicable legal provisions.

In case of serious program errors 3D-Tool creates an error log with information about the state of 3D-Tool and the operating system at the time of the error. The log does not contain any personal data. You can check the contents of the log in the error dialogue. The protocol is sent as an encrypted e-mail attachment. The e-mail is generated in your standard e-mail program and sent by you. Upon receipt of the error log, we will store your contact details as far as they are visible in the e-mail (e-mail address, telephone number and name of the contact person). The processing of personal data takes place within the scope of our software support for possible queries of our support team and to inform you about possible solutions (Art. 6 para. 1 lit. f GDPR). If you are not our contractual partner yourself, but e.g. an employee of one of our customers, or have entered into a contract for using our software with one of our sales partners, the legal basis for data processing is our legitimate interest in making our support services for customers and users as effective as possible (Art. 6 para. 1 lit. f GDPR). Your contact data will only be stored until the error processing is completed or you inform us that you do not wish to be contacted again. You can also inform us of this in the e-mail you use to send the error log. In this case your contact data will be deleted immediately, but, consequently, you will not receive any information about the error.

Contractual Resellers

(1) Accessing the 3D-Tool license database via the 3D-Tool Admin Portal results in the processing of your user data (name and email address). This is necessary for the performance of a contract (Art. 6 para. 1 lit. b GDPR).

(2) The 3D-Tool Admin Portal uses session cookies and stores details of the browser session in its database, including your IP address. The processing of session data is based on our legitimate interest in a functioning and secure Admin Portal (Art. 6 para. 1 lit. f GDPR). Session cookies and session data are only retained beyond the browser session if you specify this by activating the “Remember Me” option when logging into the portal. This function can be deactivated at any time by manually logging out of the portal.

Passing on of Personal Data

We never sell personal data to third parties. We do not share, transfer, or use personal data for personalized, targeted, or behavioral advertising purposes.

Personal data will only be passed on to third parties in the following cases and in principle limited to the minimum required:
( 1 ) We have your express consent.
( 2 ) The transfer is made to partners necessary for the execution of the contract, also within the framework of a commissioned data processing agreement and/or secured by appropriate measures within the meaning of Art. 28 GDPR.
( 3 ) We are legally obliged to pass on the data.

Personal data is transmitted to the following recipients or categories of recipients:

We use Microsoft 365, including the SharePoint and Teams applications, for location-independent communication and collaboration between our employees and service providers. This collaboration also involves our customers’ personal data. As a data processor, Microsoft is subject to our instructions as the responsible party within the meaning of the GDPR. Data processing takes place on servers in the EU and is based on this privacy policy as well as our technical and organizational measures. Data is stored and transmitted in encrypted form. A classification of customer data and role-based access control with multi-level authentication ensure that only authorized persons have access to our customers’ personal data.

We use the Storage Box from Hetzner Online GmbH, Germany, as our data backup solution. This data backup contains our customers’ personal data. The Hetzner Storage Boxes are located on servers within the European Union. Access to this data is strictly limited to a few authorized individuals.

Offers, invoices, delivery notes, credit notes and reminders are processed using software from sevDesk GmbH, Germany on German servers of Amazon Webservices EMEA SARL, Germany. The documents are sent by email via international servers of Twilio Inc. Ireland in compliance with all necessary security and data protection standards.

The usage data collected by 3D-Tool websites, your online shop orders, your license information and your emails are processed on European servers of IONOS SE.

Your credit card payments are processed by PCI-DSS certified payment providers IONOS SE iPayment and Elavon Financial Services DAC, Germany.

Invoices are stored on servers of DATEV eG, Nürnberg. Our tax consultants have access and, if necessary, the responsible tax authorities.

If you agree that your order will be billed through our authorized dealer Paddle, we will transmit your order details and contact information to Paddle.com Market Ltd., UK.

**Contact details of the controller and your rights according to the GDPR, in particular your right of objection Responsible for the collection, processing and use of your personal data within the meaning of the GDPR is 3D-Tool GmbH & Co. KG, Im Steiles 23/1, 69469 Weinheim, Germany represented by 3D-Tool Verwaltungs GmbH based in Weinheim, Managing Director Ingo Wulf.

You have the right:

  1. to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may obtain information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the envisaged storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details;
    We may only refuse to disclose information to you if and to the extent that such information would reveal information which must be kept secret in accordance with a legal provision or its nature, in particular because of the overriding legitimate interests of a third party (§ 29 para. 1 sentence 2 FDPA), the responsible public authority has stated to us that the disclosure of the data would endanger public security or order or otherwise be detrimental to the welfare of the Federation or a Land (§ 34 para. 1 no. 1 FDPA in conjunction with § 33 para. 1 no. 2 lit. b FDPA), or the data are stored only because they may not be deleted due to legal or statutory storage regulations, or exclusively serve purposes of data backup or data protection control and the provision of information would require disproportionate effort and processing for other purposes is excluded by suitable technical and organizational measures (§ 34 para 1 no. 2 FDPA).

  2. to immediately request the correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR;

  3. to request the erasure of your personal data stored with us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims;

  4. pursuant to Art. 18 GDPR, to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to establish, exercise or defend legal claims or you have filed an objection against the processing pursuant to Art. 21 GDPR;

  5. to receive your personal data provided to us in a structured, commonly used and machine-readable format in accordance with Art. 20 GDPR or to request its transfer to another person responsible;

  6. in accordance with Art. 7 para. 3 GDPR, to revoke your consent to us at any time. As a result, we are no longer allowed to continue the processing of data based on this consent in the future;

You may object to the processing of your personal data on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, pursuant to Art. 21 GDPR, insofar as there are reasons for this which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.

In addition, you have a general right to lodge a complaint with the data protection supervisory authority responsible for you. The authority responsible for 3D-Tool GmbH & Co KG is the “Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg”.

If you have any questions or would like to exercise your rights, simply send an e-mail or a letter to:

3D-Tool GmbH & Co. KG
Im Steiles 23/1
69469 Weinheim
Germany
E-Mail: team@3d-tool.de

Legal Notice

3D-Tool GmbH & Co. KG
Im Steiles 23/1
69469 Weinheim
Germany

Registered Office: Weinheim
Commercial Register Mannheim, HRA 703081
VAT ID No.: DE272278216

General Partner:
3D-Tool Verwaltungs GmbH, registered office Weinheim
Commercial Register Mannheim, HRB 709816
Managing Director: Ingo Wulf