3D Gallery
Data protection information
Deutsche Version
3D-Shape GmbH
Am Weichselgarten 21
D-91058 Erlangen

Phone: +49-9131-977 959-0
Fax: +49-9131-977 959-11
E-mail: info@3d-shape.com

Data protection information

Data protection information from 3D-Shape GmbH for www.3d-shape.com
Valid as of May 25, 2018

We take your privacy very seriously and we process your personal data in accordance with the respectively applicable statutory data protection requirements. Personal data in the meaning of this information includes all information that can infer a reference to you, hence, for example, your name, address, email and IP address, and usage behavior.
In the following data protection information we would like to inform you on how we process your personal data. In addition, we will provide you with an overview of your data protection rights. Which data is specifically processed and in which form significantly depends on the used, requested or agreed services.

1. Controller and data protection officer
(1) The controller in accordance with Article 4 Para. 7 of the EU General Data Protection Regulation (GDPR) or service provider in accordance with § 13 of the German Telemedia Act (TMG) is:

3D-Shape GmbH
Am Weichselgarten 21
91058 Erlangen

(2) The data protection officer for the controller can be contacted at:

The Group Data Protection Officer
Industriestraße 14
64297 Darmstadt
Email: dataprivacy@isravision.com

2. Source of personal data
We process your personal data which we receive from you during the course of your visit to our website, as part of your contacting us by email or via a contact form.

3. Categories of the processed personal data
(1) If you visit or use our website strictly for informative purposes, i.e. if you do not register or provide us with information in another form, we only collect the personal data which your browser passes on to our server. When you want to view our website, we collect the following data which is required from a technical standpoint to display our website to you and which ensures its stability and security:
- your IP address,
- date, time and duration of your visit,
- content of your request (specific page),
- respectively transmitted data volume and access status (files transmitted / not transmitted),
- website from which the request comes,
- your browser type,
- your operating system,
- your device type.
This data is solely used for internal statistical purposes.

4. Other functions and offers on our website
(1) Along with the purely informative use of our website, we also offer different services which can be used when of interest to you. This generally requires that you provide additional personal data, which we then use to perform the respective service and to which the previously defined principles on data processing apply.
(2) When contacting us by email, the following personal data must be given: name, telephone number and email address.
This personal data is saved by us for the purpose of responding to your request.

5. Categories of recipients of personal data
(1) Some of the above-mentioned processes and services are performed on our behalf by third-party service providers which have been carefully selected according to data protection principles. These external service providers are bound to our instructions and are checked on a regular basis.
(2) With regard to transferring data to other recipients, we shall only provide information on you when legal provisions require this, you have consented or when we are authorized to transfer such data. If these requirements are met, recipients of personal data may include:
public bodies and institutions (e.g. financial authorities, law enforcement authorities) when there is a legal or official obligation,
other companies within the Group.

6. Purposes for which personal data is to be processed and legal basis for processing
We process your personal data in compliance with the respectively applicable statutory data protection regulations. The processing is lawful when the following conditions are met:
Consent (Article 6, Para. 1 (a) of the GDPR):
The processing of personal data is lawful when the consent to process the data for defined purposes (e.g. processing of your query, use of the data for marketing purposes) has been given. The granted consent can be revoked at any time with effect for the future. This also applies to the revocation of declarations of consent that were issued to us before the GDPR entered into force, hence before May 25, 2018.
Based on compliance with contractual obligations (Article 6, Para. 1 (b) GDPR):
We process personal data in order to fulfill our contractual obligations or to carry out precontractual measures performed upon request. The purposes of the data processing primarily arise from your query.
Based on compliance with legal obligations (Article 6, Para. 1 (c) GDPR):
3D-Shape GmbH is subject to various legal obligations. These include:
Commercial and tax-related retention regulations in accordance with the German Commercial Code and Tax Code.
Compliance with tax law-related control and notification obligations.
For the purposes of legitimate interests (Article 6, Para. 1 (f) GDPR):
If required, we process your personal data beyond the actual fulfillment of the contract to safeguard our legitimate interests or those of third parties. Examples:
Assertion of legal claims and defense in case of legal disputes,
Ensuring IT security and IT operations,
For the analysis and improvement of the use of our website.

7. The intention of transferring personal data to a third country or an international organization
An active transferring of personal data to a third country shall only take place when this has been explicitly pointed out as part of the above-mentioned services.

8. Criteria for specifying the duration for which the personal data is stored
(1) The data is stored in accordance with legal provisions governing data processing and in consideration of statutory retention periods. We process and use your personal data exclusively for the purposes you have authorized and for as long as the data is required for these purposes.
(2) If the personal data is no longer needed for the purpose or to comply with legal obligations, such data will generally be deleted unless their temporary and possibly restricted processing is required for the following purposes:
Compliance with commercial and tax-related retention obligations: The German Commercial Code (HGB) and the Tax Code (AO) shall be named in this regard. These stipulate retention or documentation periods of up to 10 years.
The preservation of evidence under the statutory limitation regulations. In accordance with §§ 195 et seq. of the German Civil Code (BGB), the regular limitation period is three years; however, this can be up to 30 years under special circumstances.

9. Your data protection rights
(1) Every affected person has the right of access in accordance with Article 15 GDPR, the right to rectification in accordance with Article 16 GDPR, the right to erasure in accordance with Article 17 GDPR, the right to restriction of processing in accordance with Article 18 GDPR, the right to object in accordance with Article 21 GDPR and the right to data portability as per Article 20 GDPR. The restrictions in accordance with §§ 34 and 35 of the German Federal Data Protection Act (BDSG) apply to the right of access and the right to erasure. Furthermore, there is a right to lodge a complaint with a responsible data protection supervisory authority (Article 77 GDPR in conjunction with § 19 BDSG).
(2) You can revoke the consent granted to us for the processing of personal data at any time with effect for the future. This also applies to the revocation of declarations of consent that were issued to us before the General Data Protection Regulation entered into force, hence before May 25, 2018.
(3) You have the right, based on reasons arising from your special situation, to assert your objection to the processing of data related to your person, collected based on Article 6, Para. 1 (e) GDPR (data processing carried out in the public interest) and Article 6, Para. 1 (f) GDPR (data processing for the purposes of legitimate interests) at any time.
Should you file an objection, we shall no longer process your personal data, unless we can provide verification of the legitimate grounds for the processing that override your interests, rights and freedoms, or when the processing serves the assertion, execution or defense of legal claims.
The objection is free of form and should be directed to:

The Group Data Protection Officer
Industriestraße 14
64297 Darmstadt
Email: dataprivacy@isravision.com

10. Obligation for the provision and possible consequences of a non-provision of personal data
Within the scope of using our offers, you must provide the personal data which is required to fulfill the purpose or which we are obligated to collect by law. Without this data, we will generally not be able to conclude the contract with you or execute such contract.

11. Data security
We also use technical and organizational security measures to protect incoming or collected personal data, in particular against accidental or intentional manipulation, loss, destruction or against attacks by unauthorized persons. Our security measures are continuously improved in line with technological advances.

12. Changes to the data protection information
We develop and optimize our services on an ongoing basis. Therefore, new functionalities may be added. Should this influence the way we process your personal data, we will inform you of this in our data protection information in a timely manner.


print version