Privacy Policy
The protection of your personal data is important to us. In this privacy policy we explain which personal data we process, for what purposes, on what legal basis, how long we retain it and what rights you have. Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and applicable Slovenian legislation.
1. Data Controller
The controller of your personal data is:
- ADITUM, trgovsko, proizvodno in storitveno podjetje, d.o.o. (Plast3D)
- Puštal 132, 4220 Škofja Loka, Slovenia
- Company registration number: 6517021000
- VAT ID: SI35755628
- Email for privacy inquiries: anze.peko@gmail.com
2. Which Personal Data We Process
Depending on how you use the online store, we process the following categories of data:
- Order and delivery data: first and last name or company name, address, email address, telephone number, and for legal entities also the tax number.
- Payment data: data required to process and record the payment (payments themselves are generally processed by external payment service providers; we do not store full card details).
- Uploaded 3D files and order specifications: models and parameters you provide for production.
- Technical data: data generated when you visit the website (e.g. IP address, browser information, cookies – see the Cookie Policy).
- Communication: the content of your messages and inquiries.
3. Purposes and Legal Bases of Processing
- Order and contract fulfilment (production, delivery, order-related communication) – legal basis: performance of a contract (Article 6(1)(b) GDPR).
- Compliance with legal obligations (issuing and retaining invoices, tax obligations) – legal basis: legal obligation (Article 6(1)(c) GDPR).
- Handling complaints and asserting legal claims – legal basis: legitimate interest or legal obligation (Article 6(1)(f) and (c) GDPR).
- Website analytics and operation – legal basis: consent where required (Article 6(1)(a) GDPR), or legitimate interest in essential operation.
- Notifications (e.g. newsletter), if you subscribe to them – legal basis: consent (Article 6(1)(a) GDPR).
4. Uploaded 3D Files
The 3D files and specifications you upload for production are used exclusively to fulfil your order (price calculation, production preparation, manufacturing and quality control). We do not use these files for any other purpose and do not share them with third parties unless this is necessary to fulfil the order.
Uploaded 3D files are deleted once the order is completed or after a reasonable period required for possible complaints and reprints. Data we are required to retain by law (e.g. invoice data) is kept for the legally prescribed retention periods.
5. Recipients and Data Processors
We may share personal data with trusted external processors who help us provide our services, for example:
- delivery and postal service providers (to deliver your order),
- payment service providers (to process payments),
- IT service and website hosting providers,
- accounting and legal advisors, where necessary.
These processors process data on our behalf and according to our instructions and are bound by confidentiality obligations. We do not sell personal data.
6. Retention Periods
We retain personal data only for as long as necessary to achieve the purpose for which it was collected, or for as long as required by law (e.g. accounting and tax regulations for invoice data). Uploaded 3D files are deleted in accordance with Section 4 of this policy. Once the retention periods expire, we delete or anonymise the data.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- the right of access to your data,
- the right to rectification of inaccurate data,
- the right to erasure (“right to be forgotten”),
- the right to restriction of processing,
- the right to data portability,
- the right to object to processing,
- the right to withdraw consent where processing is based on consent (withdrawal does not affect the lawfulness of processing carried out before the withdrawal).
You can exercise your rights by contacting us at anze.peko@gmail.com or by post at the company’s registered address. We will respond to your request within the legally prescribed time limit.
8. Right to Lodge a Complaint
If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with the supervisory authority – the Information Commissioner of the Republic of Slovenia (Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si).
9. Contact
For any questions regarding the processing of personal data, please contact us at anze.peko@gmail.com or by post: ADITUM d.o.o., Puštal 132, 4220 Škofja Loka.