Privacy policy

This page explains what personal data we process when you send us a request or order a print, why we do it, and what rights you have. We follow Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll. on personal data processing. If the Czech and English versions differ, the Czech version prevails.

Controller

The data controller is Martin Roub, registered office Na Vršku 356, Sedlec, 332 02 Starý Plzenec, Czech Republic, company ID (IČO) 24871826, who runs 3D tisk Šroubci. Contact: [email protected], +420 603 216 912.

We have not appointed a data protection officer, as the GDPR does not require us to.

What data we process and why

Handling your request

When you write to us through the form or by email, we process your name, email, phone and company name if you give them, the content of your message and any attached files (models, drawings, photos). We need them to assess your request and send a quote.

Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). If you write on behalf of a company, we process your contact details based on our legitimate interest in communicating with that company (Article 6(1)(f) GDPR).

Producing and delivering your order

For an order we also process the delivery and billing address, a company's ID and VAT number, order details and payment details.

Legal basis: performance of a contract (Article 6(1)(b) GDPR). For company contact persons, it is our legitimate interest (Article 6(1)(f) GDPR).

Accounting and tax

We issue and archive invoices and other documents because tax law requires it.

Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

Complaints and disputes

After an order is completed, we keep the communication and order details so we can handle a complaint or defend our rights.

Legal basis: legitimate interest (Article 6(1)(f) GDPR).

Running and securing the website

When you visit the website, our hosting provider processes technical connection data: IP address, time of the request, browser type and the page requested. It is used to deliver the page and to protect the website against attacks.

Legal basis: legitimate interest in running the website securely (Article 6(1)(f) GDPR).

We collect the data directly from you. We do not use it for marketing, we do not send you newsletters or offers, we do not profile you and we make no automated decisions about you.

Do you have to provide the data?

Without your email and a description of what you need, we cannot reply. Without a delivery address we cannot ship the part, and without billing details we cannot issue the document the law requires. Phone and company name are optional.

How long we keep it

  • A request that did not lead to an order: 1 year after our last contact.
  • Communication and order details: 4 years after the order is completed. This follows from the general three-year limitation period (Section 629 of the Czech Civil Code) plus time for a claim to be filed.
  • Invoices and other tax documents: for the period required by tax law, no longer than 10 years.
  • The copy of a form message kept by Formspree: no longer than 30 days.
  • Hosting technical logs: only as long as needed to run and secure the website.

We then delete the data. If a complaint, dispute or inspection is ongoing, we keep it until it is resolved.

Who handles the data

We share data only with these recipients, and only as much as they need:

  • Formspree, Inc. (USA) receives form messages and delivers them to our mailbox. It acts as our processor.
  • Webglobe, s.r.o., Pobřežní 620/3, 186 00 Prague 8, Czech Republic, company ID 26159708, runs our mailbox. It acts as our processor.
  • Cloudflare, Inc. (USA) hosts the website. It acts as our processor.
  • The carrier we ship with receives your name, delivery address, phone and email.
  • Public authorities, such as the tax office, where the law requires it.

We have data processing agreements with our processors under Article 28 GDPR. We never sell your data.

Transfers outside the EU

Formspree and Cloudflare are based in the USA, so your data may also be processed there.

  • Formspree transfers it under standard contractual clauses approved by the European Commission (Article 46(2)(c) GDPR).
  • Cloudflare is certified under the EU–US Data Privacy Framework, which is covered by a European Commission adequacy decision (Article 45 GDPR). Its agreement also includes standard contractual clauses.

We will send you a copy of the contractual clauses on request.

Cookies

The website uses no analytics or advertising tools and does not itself store cookies on your device. For security, our hosting provider may set a technical cookie that protects the website against automated attacks. Under Section 89(3) of Czech Act No. 127/2005 Coll. on electronic communications, no consent is needed for it.

Your rights

You have the right:

  • to access your data (Article 15 GDPR),
  • to have it corrected (Article 16 GDPR),
  • to have it erased (Article 17 GDPR),
  • to restrict processing (Article 18 GDPR),
  • to data portability (Article 20 GDPR),
  • to object to processing based on legitimate interest (Article 21 GDPR).

Just email [email protected]. We will reply without undue delay and within one month at the latest. We may first check that the request really comes from you.

If you believe we process your data unlawfully, you can complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.

Changes to this policy

We will update this policy when our processing or the law changes. The version published on this page applies.

Effective from 8 November 2026.