I. Personal Data Controller
1. The controller of personal data within the meaning of Art. 4 paragraph 7 of the GDPR regulation (EU) 2016/679 is: Kvido Bystroň — 3D B-prints, Jarcová 241, 757 01 Jarcová | IČO: 23876824. E-mail: info@3dbprints.cz | Web: www.3d-bprints.com.
2. The controller has not appointed a data protection officer (DPO), as this obligation does not arise from Art. 37 of the GDPR.
II. What Personal Data We Process
1. We process only personal data that you provide to us yourself — through the inquiry form, e-mail, or during the fulfillment of the order: Identification details (name and surname, possibly company name), Contact details (e-mail address, phone number), Billing and address details, and Order details (3D models, specifications).
2. We do not process any special categories of personal data (health status, political opinions, etc.).
III. Purposes and Legal Bases for Processing
1. We process your personal data for the following purposes: processing inquiry and pre-contractual communication (Art. 6 par. 1 lit. b GDPR), fulfillment of the contract for work (Art. 6 par. 1 lit. b GDPR), invoicing and fulfillment of tax obligations (Art. 6 par. 1 lit. c GDPR), and protection of legal claims (Art. 6 par. 1 lit. f GDPR).
IV. Recipients of Personal Data
1. We do not sell or provide personal data to third parties for their own marketing purposes. Data may be transferred only to categories of recipients: Accountant / Tax Advisor, Transport Company for order delivery, Google LLC (only if cookie consent is granted), and E-mail service provider.
V. Your Rights
1. In relation to your personal data, you have the following rights: Right of access (Art. 15 GDPR), Right to rectification (Art. 16 GDPR), Right to erasure (Art. 17 GDPR), Right to restriction of processing (Art. 18 GDPR), Right to portability (Art. 20 GDPR), and Right to object (Art. 21 GDPR).
VI. Right to File a Complaint
1. If you believe that the processing of your personal data violates GDPR, you have the right to file a complaint with the Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7.
VII. Security of Personal Data
1. The controller has taken appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction — especially data transfer encryption (HTTPS), restriction of access to data, and regular backups.
VIII. Final Provisions
1. The controller reserves the right to update these principles, especially in case of changes in processed data, tools used, or legal requirements.
2. These principles become effective on July 1, 2026.