PRIVACY POLICY

LEGAL INFORMATION

I. Data Protection at a Glance

I.I. General Information


The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data refers to any data by which you can be personally identified. Detailed information on the subject of data protection can be found in the privacy policy below.

I.II. Data Collection on This Website

  • Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the section “Note on the Responsible Party” in this privacy policy.

  • How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may include, for example, data entered into a contact form.
Other data is automatically collected by our IT systems when you visit the website, either with your consent or automatically. This mainly includes technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

  • What do we use your data for?

Some of the data is collected to ensure the website is provided without errors. Other data may be used to analyze your user behavior and, in part, for marketing and sales purposes. If contracts can be concluded or initiated via the website, the data submitted will also be processed for contractual offers, orders, or other inquiries.

  • What rights do you have regarding your data?

You have the right at any time to obtain free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you may withdraw this consent at any time with future effect. Furthermore, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.

For this and other questions concerning data protection, you can contact us at any time.


I.III. Analysis Tools and Tools from Third Parties


When visiting this website, your browsing behavior may be statistically evaluated. This is primarily done using analytics programs. Detailed information about these tools can be found in the following privacy policy.

II. Hosting


II.I. Hosting by Amazon Web Services (AWS)


We host the content of our website with the following provider:
Amazon Web Services (AWS)
Provider: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter "AWS").

When you visit our website, your personal data is processed on AWS servers. Personal data may also be transferred to AWS’s parent company in the USA. This data transfer is based on the EU Standard Contractual Clauses.

Details can be found here:
https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/

Further information can be found in AWS’s Privacy Policy:
https://aws.amazon.com/de/privacy/?nc1=f_pr

The use of AWS is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website. If consent has been obtained, processing is based solely on Art. 6(1)(a) GDPR and § 25(1) TDDDG, to the extent that consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). Consent can be revoked at any time.

The company is certified under the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards in the United States. Each company certified under the DPF commits to compliance with these standards. More information is available here:
https://www.dataprivacyframework.gov/participant/5776


II.II. Use of Vercel (Hosting Provider)


We use Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA, to deliver and host our website.

When visiting our site, Vercel automatically processes technical data such as your IP address, access time, device and browser information, and error logs.

This processing ensures a secure, fast, and stable provision of our online offerings through a global Content Delivery Network (CDN). The legal basis is Art. 6(1)(f) GDPR. Data transfers to third countries (especially the USA) may occur.

Vercel ensures an adequate level of data protection through standard contractual clauses and compliance with the Data Privacy Framework:
Vercel Data Processing Addendum

Vercel also uses AWS infrastructure. For users in the EU, requests are typically processed via AWS data centers in Frankfurt am Main. This ensures that most technical processing takes place within the European Union.
AWS EU Data Privacy

  • Data Processing Agreement
    A data processing agreement (DPA) has been concluded with Vercel Inc. in accordance with GDPR. This contract ensures that Vercel processes the personal data of website visitors only in accordance with our instructions and in compliance with the GDPR.

III. General Information and Mandatory Disclosures


III.I. Data Protection


The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this privacy policy.

When you use this website, various personal data is collected. Personal data refers to data that can be used to identify you personally. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this occurs.

Please note that data transmission over the internet (e.g., communication via email) can have security vulnerabilities. Complete protection of your data from access by third parties is not possible.

  • Information About the Responsible Party
    The responsible entity for data processing on this website is:

ModellTechnik Rapid Prototyping GmbH
Ziegeleistraße 3b
D-99880 Waltershausen
Phone: +49 3622 44 24 0
Email: info@modelltechnik.de

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).


  • Storage Duration
    Unless a specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you request deletion or revoke your consent, your data will be deleted unless we are legally obligated to retain it (e.g., due to tax or commercial retention periods). In the latter case, deletion will occur after these obligations no longer apply.

III.II. Legal Basis for Data Processing on This Website


If you have given consent, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR (for special categories of data). If consent includes the transfer of data to third countries, processing is also based on Art. 49(1)(a) GDPR. If you consent to cookie storage or device access (e.g., device fingerprinting), § 25(1) TDDDG also applies.

If your data is required for contractual purposes or pre-contractual actions, we process it on the basis of Art. 6(1)(b) GDPR. If required for legal compliance, Art. 6(1)(c) GDPR applies. In other cases, processing is based on our legitimate interest (Art. 6(1)(f) GDPR). The specific legal basis will be stated in this policy where applicable.

  • Recipients of Personal Data
    In the course of our business operations, we collaborate with external parties, some of whom may receive personal data. Data is only shared when necessary for contract fulfillment, when legally required (e.g., tax authorities), when there is a legitimate interest under Art. 6(1)(f) GDPR, or another legal basis allows the transfer. Data processors act on the basis of valid data processing agreements. In the case of joint processing, a joint controller agreement is concluded.

  • Withdrawal of Your Consent to Data Processing
    Many data processing operations are only permitted with your explicit consent. You may withdraw any previously granted consent at any time. The legality of data processed up until the withdrawal remains unaffected.

  • Right to Object to Data Collection in Special Cases and Direct Marketing (Art. 21 GDPR)
    If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time on grounds relating to your particular situation. This also applies to profiling based on these provisions. The specific legal basis is outlined in this privacy policy.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (Art. 21(1) GDPR).

If your personal data is processed for direct marketing, you have the right to object at any time to such processing. This also applies to profiling associated with direct marketing. After you object, your data will no longer be used for these purposes (Art. 21(2) GDPR).


  • Right to Lodge a Complaint with a Supervisory Authority
    If you believe that your rights under the GDPR have been violated, you have the right to lodge a complaint with a supervisory authority, especially in the member state of your habitual residence, your place of work, or the location of the alleged infringement. This does not affect any other administrative or judicial remedies.

  • Right to Data Portability
    You have the right to receive data that we process based on your consent or in fulfillment of a contract in a common, machine-readable format. If you request a direct transfer to another controller, this will be done only if technically feasible.

  • Right to Access, Rectification, and Erasure
    Within the scope of applicable legal provisions, you have the right at any time to request information about your stored personal data, its origin, recipient, and purpose. You may also request correction or deletion of this data. For this and other questions, you may contact us at any time.

  • Right to Restriction of Processing
    You have the right to request restriction of processing of your personal data. This applies in the following cases:
  • You contest the accuracy of the data – processing will be restricted while this is verified.
  • Processing is unlawful, and you oppose erasure and instead request restriction.
  • We no longer need the data, but you require it for legal claims.
  • You have objected under Art. 21(1) GDPR – processing will be restricted while the balance of interests is assessed.

Where the processing of your personal data has been restricted, such data – apart from storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.


  • SSL or TLS Encryption
    This site uses SSL or TLS encryption for security and to protect transmission of confidential content (e.g., orders or inquiries). You can recognize an encrypted connection by the change in the browser address bar from “http://” to “https://” and the lock icon. When encryption is active, transmitted data cannot be read by third parties.

  • Objection to Promotional Emails
    We hereby object to the use of contact data published under the legal notice obligation for the purpose of sending unsolicited advertising and information materials. We reserve the right to take legal action against unsolicited promotional emails (spam).

IV. Data Collection on This Website

IV.I. Cookies


Our website uses “cookies.” Cookies are small data packets that do not harm your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are deleted automatically after your visit. Persistent cookies remain stored until you delete them or they are automatically deleted by your browser.

Cookies may be placed by us (first-party cookies) or by third-party providers (third-party cookies). Third-party cookies enable integration of certain services from third-party companies (e.g., payment service providers).

Cookies serve various purposes. Many are technically necessary to enable core website functions (e.g., shopping cart or video display). Others are used to analyze user behavior or for advertising purposes.

Cookies necessary for electronic communication, requested functions (e.g., shopping cart), or website optimization (e.g., measuring website audience) are stored based on Art. 6(1)(f) GDPR unless another legal basis is stated. The website operator has a legitimate interest in the storage of necessary cookies for technically error-free and optimized service provision. Where consent is required, processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG; consent can be revoked at any time.

You can configure your browser to notify you when cookies are set, allow cookies only in individual cases, block them in general or in specific cases, and activate automatic deletion when the browser is closed. Deactivating cookies may limit website functionality.

Details on the specific cookies and tools used can be found in this privacy policy.

  • CookieFirst
    We use CookieFirst, a service provided by Digital Data Solutions B.V., Plantage Middenlaan 42a, 1018 DH Amsterdam, Netherlands. CookieFirst enables us to transparently obtain and manage consent for the use of cookies and third-party services on our website in a GDPR-compliant manner.

  • Data Processing by CookieFirst
    When using CookieFirst, certain technical information such as your IP address, browser used, and information about granted consents is collected and stored on CookieFirst’s servers. This information is processed exclusively for documentation and management of your consents and in accordance with data protection regulations.

  • Legal Basis and Purpose
    The processing is based on Article 6(1)(c) GDPR, as we are legally required to obtain consent for certain cookies and ensure proper documentation. Additionally, the use of CookieFirst is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in complying with legal requirements and ensuring transparent consent management.

  • Storage Duration
    Data stored by CookieFirst will be retained as long as necessary to prove consent. You may change or withdraw your consent at any time.

For more information: CookieFirst Privacy Policy

  • Server Log Files
    The provider of this website automatically collects and stores information in server log files, which your browser transmits to us. This includes:
  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing device
  • Time of server request
  • IP address

This data is not merged with other data sources.
The collection of this data is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website; for this purpose, server log files must be collected.


IV.II. Contact Form


If you submit inquiries via the contact form, your details (including contact information) will be stored to process your request and follow-up questions. This data is not shared without your consent.

The processing of this data is based on Article 6(1)(b) GDPR if your inquiry is related to the performance of a contract or necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where requested. Consent may be withdrawn at any time.

The data you enter in the contact form will remain with us until you request deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.


IV.III. Inquiries via Email or Phone


If you contact us via email or telephone, your inquiry and related personal data (e.g., name, inquiry details) will be stored and processed for handling your request. This data will not be shared without your consent.

The processing of this data is based on Article 6(1)(b) GDPR if the inquiry is related to a contract or required for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where requested. Consent may be withdrawn at any time.

The data you send us via inquiries will remain with us until you request deletion, withdraw your consent to storage, or the purpose of data storage no longer applies (e.g., after completion of your request). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.


V. Plugins and Tools

V.I. Google reCAPTCHA


We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to verify whether data entered on this website (e.g., in a contact form) is made by a human or by an automated program. reCAPTCHA analyzes the behavior of website visitors based on various characteristics. This analysis starts automatically once the visitor enters the website. For the analysis, reCAPTCHA evaluates information such as IP address, time spent on the website, or mouse movements. The data collected is transmitted to Google.

The reCAPTCHA analyses run entirely in the background, and website visitors are not advised that such analysis is taking place. Storage and analysis of data are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its web services from abusive automated spying and spam. Where consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes storage of cookies or access to information in the user’s device (e.g., device fingerprinting). Consent can be withdrawn at any time.

For further information, please refer to Google's privacy and terms pages:
Privacy Policy
Terms of Use

The company is certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing carried out in the United States. Each company certified under the DPF commits itself to comply with these data protection standards. Further information is available from the provider at the following link:
DPF Certification

V.II. Google Tag Manager


Our website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager allows us to manage website tags via an interface. The tool itself does not set cookies or collect personal data. It merely triggers other tags that may themselves collect data. However, Google Tag Manager does not access this data. If a deactivation has been carried out at the domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager.

  • Legal Basis and Purpose
    The use of Google Tag Manager is based on our legitimate interest in efficient tag management and website optimization according to Art. 6(1)(f) GDPR.

Further details: https://support.google.com/tagmanager/answer/9323295


  • Server Data
    For technical reasons, the following data transmitted by your browser to our web space provider and/or collected by Google Tag Manager–triggered requests may be recorded in server log files:
  • Browser type and version
  • Operating system
  • Referrer URL (the previously visited website)
  • Pages visited on our site
  • Date and time of access
  • Public IP address

This data is stored separately from any personal data you may have provided and is evaluated for statistical and operational purposes to improve stability, security, and performance of our website. The legal basis is Article 6(1)(f) GDPR (legitimate interest).


V.III. Sanity.io


To protect our website and ensure efficient delivery of content, we use services provided by Sanity AS, Trondheimsveien 2K, 0560 Oslo, Norway (“Sanity”).

Sanity provides a Content Delivery Network (CDN) that allows large media files such as graphics and scripts to be delivered through a network of servers, improving website loading times

  • Personal Data Processed by Sanity
    When using Sanity’s CDN, the following personal data may be processed:
  • IP address
  • Browser type and version
  • Operating system
  • Referrer URL
  • Date and time of request

Data is usually stored on servers within the EU or the USA.

Sanity processes this data in accordance with applicable data protection laws, including the GDPR.

More information: Sanity Privacy Policy

  • Legal Basis
    The use of Sanity is based on our legitimate interest (Art. 6(1)(f) GDPR) to ensure secure, efficient, and stable website performance.
  • Data Transfers to Third Countries
    Sanity ensures that appropriate safeguards are implemented when transferring your data to the United States in order to maintain an adequate level of data protection.
    By using our website, you consent to the processing of your personal data by Sanity in the manner and for the purposes described above.

V.IV. amfg.ai

We use the services of AMFG (Autonomous Manufacturing) to optimize our production processes.
AMFG provides an Additive Manufacturing Execution System (MES) and workflow automation solutions that allow seamless integration into existing ERP, PLM, and CAD software. (amfg.ai)


  • Processing of Personal Data by AMFG
    In the context of using AMFG, the following personal data may be processed:
  • IP address
  • Browser type and version
  • Operating system used
  • Referrer URL (previously visited page)
  • Date and time of the server request

These data are generally transferred to an AMFG server located in the EU or the United States and stored there.

AMFG supports U.S., European, and U.K. GovCloud infrastructures for the defense sector and provides business consulting as well as onboarding teams in the United States, Europe, and Asia. (amfg.ai)


  • Legal Basis for the Use of AMFG

The use of AMFG’s services is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in ensuring the efficient and secure execution of our manufacturing processes.


  • Data Transfer to Third Countries

Please note that the use of AMFG’s services may involve the transfer of personal data to the United States.

AMFG ensures that appropriate safeguards are implemented when transferring your data to the United States in order to maintain an adequate level of data protection.

Further information on data protection at AMFG can be found at:
https://amfg.ai/policy/

By using our website, you consent to the processing of your personal data by AMFG in the manner and for the purposes described above.


V.V. Webanalyse durch Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable an analysis of your use of the website.

The information generated by these cookies — for example, time, location, and frequency of your visits to the website, including your IP address — is transmitted to Google servers in the United States and stored there.

We use Google Analytics on our website with IP anonymization enabled. In this case, your IP address is shortened by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area, and thereby anonymized.

Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and Internet usage. Google may also transfer this information to third parties where required by law or where such third parties process the data on Google’s behalf.

According to Google, your IP address will not be associated with other Google data under any circumstances. You can prevent cookies from being installed by adjusting the settings of your browser software; however, please note that in such cases you may not be able to fully use all features of our website.

In addition, Google offers a deactivation option for the most common browsers, giving you greater control over which data are collected and processed by Google. If you enable this option, no information about your website visit will be transmitted to Google Analytics. However, enabling this option does not prevent data from being transmitted to us or to other web analytics services we may use.

Further information about the deactivation option provided by Google and how to activate it can be found at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en


V.VI. Nutzung von Google Ads

We use Google Ads, an online advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to display targeted advertisements in Google search results and within the Google advertising network. Conversion tracking is used to measure the effectiveness of our advertising campaigns.

  • Processing of Personal Data by Google Ads
    When you click on one of our Google Ads, Google stores a conversion cookie on your device. This conversion cookie allows us to analyze whether users take specific actions on our website after clicking on an ad, such as making a purchase or completing a registration.

The following data may be processed:

  • Your IP address
  • Information about your browser and device
  • Pages visited and click behavior
  • Your approximate geographic location
  • Information about completed purchases or inquiries

This data helps us optimize our advertising campaigns but does not enable us to personally identify users.

  • Legal Basis for Processing
    The processing of your personal data in the context of Google Ads is based on your consent pursuant to Article 6(1)(a) GDPR, which you provide via our cookie banner. You may withdraw your consent at any time or adjust your cookie settings.
  • Data Sharing and Transfers to Third Countries
    The collected data are processed by Google and may be transferred to the United States. Google relies on EU Standard Contractual Clauses and is certified under the EU-U.S. Data Privacy Framework (DPF), which ensures an adequate level of data protection for transfers to the United States. Further information on Google’s data processing practices can be found in Google’s Privacy Policy:
    https://policies.google.com/privacy
  • Control and Deactivation of Google Ads Tracking
    You can prevent the storage of cookies and tracking by Google Ads by taking the following steps:
  • Adjust your cookie settings on our website
  • Disable the use of cookies in your browser settings
  • Modify your Google Ads preferences at https://adssettings.google.com
  • Install a browser add-on to disable personalized advertising: https://support.google.com/ads/answer/7395996

  • Your Rights as a Data Subject
    Under the GDPR, you have the following rights:
  • Right of access (Article 15 GDPR) to your stored personal data
  • Right to rectification (Article 16 GDPR) of inaccurate data
  • Right to erasure (“right to be forgotten,” Article 17 GDPR)
  • Right to restriction of processing (Article 18 GDPR)
  • Right to object to processing (Article 21 GDPR)
  • Right to data portability (Article 20 GDPR)

For questions regarding Google’s processing of your data, you may also contact Google directly:

Google Ireland Ltd.
Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://support.google.com


V.II. AMFG.AI Shop

  • Responsible Entity
    The responsible entity for the AMFG.AI Shop is:

ModellTechnik Rapid Prototyping GmbH
Ziegeleistraße 3b
D-99880 Waltershausen
Phone: +49 3622 44 24 0
Email: info@modelltechnik.de

  • Purpose of Data Processing

We use the AMFG.AI Shop to enable our customers to conveniently place orders online, request quotations, and upload 3D models for analysis and production. The processing of personal data within the AMFG.AI Shop serves the purpose of contract initiation, contract performance, and customer support. This includes:

  • Capturing and processing customer orders
  • Payment processing
  • Delivery of purchased products or services
  • Customer communication, including support requests
  • Processing uploaded 3D files for manufacturing
  • Fulfilling legal obligations (e.g., tax and commercial retention laws)

When creating a customer account, you consent to the use of your provided data (such as name, email address, and other contact details) for marketing and sales purposes. This includes receiving product updates, offers, and event information via email or other means. You may withdraw this consent at any time with future effect.

  • Processing of Uploaded 3D Files

Customers can upload 3D files to order customized products. These files are processed solely for:

  • Analyzing 3D files to verify manufacturability and, if needed, optimize them
  • Manufacturing the desired product using additive manufacturing or other processes

Processing is based on Art. 6(1)(b) GDPR (contract performance). If permanent storage is requested, it is based on the customer's consent in accordance with Art. 6(1)(a) GDPR.

3D files may be shared with technical service providers and production partners if necessary for manufacturing. Transfers to third countries only occur if appropriate data protection safeguards under the GDPR are in place.

  • Legal Basis

Data processing is based on the following legal grounds under the GDPR:

  • Art. 6(1)(b) GDPR (performance of a contract)
  • Art. 6(1)(c) GDPR (legal obligation to retain accounting and business data)
  • Art. 6(1)(f) GDPR (legitimate interests, e.g., IT security, fraud prevention, or user experience improvement)

  • Collected Data and Storage Duration

Depending on how you use the shop, we process the following data:

  • When placing an order: Name, billing and delivery address, payment information, email address, phone number
  • When creating an account: Username, email address, encrypted password
  • When using customer service: Email address, order history, communication content
  • When using the 3D upload function: Uploaded 3D models and metadata

Data is stored only for as long as necessary for the intended purpose. Legal retention obligations (e.g., HGB or AO in Germany) remain unaffected.

  • Disclosure to Third Parties

Personal data is only disclosed to third parties when necessary to fulfill a contract. Recipients include:

  • Payment service providers (e.g., PayPal, credit card companies)
  • Shipping providers (e.g., DHL, UPS)
  • IT service providers (for hosting and shop functionality)
  • Production partners (for manufacturing uploaded 3D files)

Data transfers to third countries are only made if an adequate level of data protection is ensured or if explicit consent is provided.


  • Cookies and Tracking Technologies

To enhance the user experience and for analytical purposes, we use cookies and similar technologies. Further information can be found in our Cookie Policy under Section IV of this Privacy Policy.


  • Data Subject Rights

You have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure ("right to be forgotten", Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to data portability (Art. 20 GDPR)

Requests regarding these rights can be sent to datenschutz@modelltechnik.de.



VI. Customer Account in the AMFG.AI Shop

  • Purpose of Processing

To provide you with a convenient and efficient shopping experience, we offer the option to create a personal customer account. The processing of your personal data serves the following purposes:

  • Managing your personal data for faster order processing
  • Displaying your order history and invoices
  • Managing billing and shipping addresses
  • Facilitating communication with our customer service
  • Personalizing your shopping experience
  • Processing uploaded 3D data for manufacturing your desired product

  • Legal Basis for Processing

The processing of your data is based on Art. 6(1)(b) GDPR (performance of a contract), as the customer account is necessary for handling and managing your orders.

If you voluntarily provide additional information (e.g., product preferences), processing is based on your consent under Art. 6(1)(a) GDPR. You may revoke your consent at any time.

  • Collected Data

For the creation and use of your customer account, we process the following personal data:

  • First and last name
  • Company name
  • VAT ID number
  • Email address
  • Encrypted password
  • Billing and shipping addresses
  • Order history
  • Payment method (without storing full payment details)
  • Optional information (e.g., wish lists, preferences)
  • Uploaded 3D files for the production of custom products

  • Processing of Uploaded 3D Data

Customers can upload 3D files through their account to order personalized products. These files are processed for the following purposes:

  • Checking technical feasibility and optimizing the data
  • Manufacturing the desired product using the uploaded file
  • Temporary storage during the order process
  • Optional: Permanent storage of 3D files for future reorders (only with explicit consent)

The processing is based on Art. 6(1)(b) GDPR (contract fulfillment). Permanent storage for future use requires consent under Art. 6(1)(a) GDPR.

Uploaded files are deleted automatically after the order is completed, unless legal or contractual retention obligations apply. If permanent storage is desired, you may manage this in your customer account settings.

  • Disclosure to Third Parties

Personal data from your customer account is used solely for processing your orders. Data is only shared with third parties if necessary, e.g.:

  • To payment service providers for processing payments
  • To shipping providers for delivering goods
  • To IT service providers for platform operations
  • To production partners for manufacturing uploaded 3D models

Transfers to third countries are only made in compliance with applicable data protection regulations.

6. Data Subject Rights

You have the right to:

  • Access your stored data (Art. 15 GDPR)
  • Correct inaccurate data (Art. 16 GDPR)
  • Delete your data (“right to be forgotten”, Art. 17 GDPR)
  • Restrict processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)

You can exercise these rights by contacting us at datenschutz@modelltechnik.de.

  • Deletion of the Customer Account

You may delete your customer account at any time via your account settings. Alternatively, you can send a deletion request to [email address]. All data not subject to legal retention obligations will be deleted following account termination.


VIII. Payment Processing with Stripe


  • Use of Stripe as Payment Service Provider

To process payments in our online shop, we use Stripe Payments Europe, Ltd., Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland (“Stripe”).
Stripe handles payment data to complete transactions and offers various payment methods, including credit cards, SEPA direct debit, and digital wallets like Apple Pay and Google Pay.

  • Processing of Personal Data by Stripe

When using Stripe for payment processing, the following personal data may be collected:

  • Customer’s name
  • Company name
  • Billing and shipping address
  • Email address
  • Payment method (e.g., credit card, SEPA, invoice)
  • Transaction details (amount, date, currency)
  • IP address and device information (for fraud prevention)
  • Any other information required by Stripe to process the payment

These data are collected and processed directly by Stripe. AMFG.AI does not have access to full payment details such as credit card numbers.

  • Legal Basis for Processing

The processing of personal data as part of the payment process is based on:

  • Art. 6(1)(b) GDPR – necessary for the performance of a contract
  • Art. 6(1)(f) GDPR – legitimate interest in fraud prevention and secure payment processing

  • Data Storage and Disclosure

Stripe stores your payment information in accordance with applicable data protection laws and based on statutory retention periods (e.g., for tax and commercial law).

Stripe may share data with affiliated companies and service providers, where necessary for processing payments.
Data transfers to third countries (e.g., the United States) may occur. In such cases, Stripe relies on EU Standard Contractual Clauses to ensure adequate protection.

You can find more details in Stripe’s privacy policy:
🔗 Stripe Privacy Policy


  • Your Rights as a Data Subject

As a data subject, you have the following rights under the GDPR:

  • Right to access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR), provided no legal obligation prevents it
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to data portability (Art. 20 GDPR)

For requests regarding your payment data processed by Stripe, please contact:

Stripe Payments Europe, Ltd.
Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland
Email: privacy@stripe.com


  • Security and Encryption

Stripe complies with the Payment Card Industry Data Security Standard (PCI-DSS) and uses encryption and tokenization to protect your payment data.
AMFG.AI does not store complete payment details such as full credit card numbers.

IX. Changes to This Privacy Policy

This privacy policy may be updated to reflect changes in legal requirements or business processes.
The current version is always available on our website.

Source:
https://www.e-recht24.de and custom content


Con­tact us

Whether you’ve got technical, commercial or specialist questions – we’re here to help.

START A QUERY NOW

Con­tact us

Whether you’ve got technical, commercial or specialist questions – we’re here to help.

START A QUERY NOW
„ It is impressive how MODELLTECHNIK has set up complete small series production including quality assurance in a very short time.“
Stefan PulsfortLeiter Versuchsaufbau, Austattung und Prozesssteuerung, Volkswagen Osnabrück GmbH