Etiäinen 3D

Privacy notice

This notice explains how Etiäinen 3D handles the personal data of website visitors and people who get in touch, in line with the EU General Data Protection Regulation (GDPR).

Controller

Etiäinen 3D, business ID 3582145-8

Email: etiainen3d@protonmail.com. Questions and requests about privacy can be sent to the same address.

What data is processed

  • Contact form: name, email address, phone number (optional), the service chosen and the message.
  • Contact by email or phone: the details given in the message or call.
  • Server logs: IP address, time, the page requested, the referring page and the browser and operating system identifier.

The details marked as required in the contact form (name, email address and message) are needed to reply to you. The form cannot be sent without them.

The price estimate is calculated entirely in your browser. The STL file you choose and the dimensions you enter are not sent to the server. If you press “Request an exact quote”, the estimate and the file name are copied into the form's message field, which you can edit before sending.

The site uses one session cookie, needed to protect the contact form against forged submissions. No analytics or advertising cookies are used, and the site loads no content from third-party services.

Purposes and legal basis

  • Replying to messages and quote requests: steps taken before entering into a contract (GDPR Art. 6(1)(b)) or the controller's legitimate interest in handling and replying to messages sent to the business on the sender's own initiative (Art. 6(1)(f)).
  • Delivering and invoicing orders: performance of a contract (Art. 6(1)(b)) and legal obligations concerning accounting (Art. 6(1)(c)).
  • Server logs: legitimate interest in keeping the site secure and preventing misuse (Art. 6(1)(f)).

The data is not used for direct marketing, profiling or automated decision-making.

How long data is kept

  • Messages and quote requests are kept for at most two years after the last contact.
  • If a message leads to an order, the data related to the order and invoicing is kept for the period required by the Finnish Accounting Act.
  • Server logs are deleted after 14 days.

Contact form data is not stored on the website's server: it is forwarded to the controller by email.

Recipients and processors

The data is not sold or disclosed to anyone else unless the law requires it. The following service providers process data on the controller's behalf:

  • Resend (United States): delivers contact form messages by email. Messages are sent through a sending region in the EU, but Resend stores message content and delivery logs in the United States, normally for 30 days.
  • Proton (Proton AG, Switzerland): the email service where messages are received.
  • Hetzner (Hetzner Online GmbH, Germany): the website's server, which also holds the server logs. The server is located in Germany.

Transfers outside the EU and EEA

  • Resend processes and stores data in the United States. Transfers are based on the EU Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework.
  • Proton processes data in Switzerland, which the European Commission has found to provide an adequate level of data protection.

Your rights

You have the right to:

  • know what data about you is processed and get a copy of it
  • have incorrect data corrected
  • have your data erased when there is no longer a legal basis for keeping it (for example, invoicing records are kept for the period required by the Accounting Act)
  • have the processing of your data restricted
  • object to processing based on legitimate interest
  • receive the data you provided yourself in a machine-readable format where processing is based on consent or a contract and is carried out by automated means

Requests can be sent to etiainen3d@protonmail.com. If you believe your data is processed unlawfully, you can lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).

Security

Traffic to the site and the contact form is encrypted (HTTPS). Only the controller has access to the server and the mailbox, and the server's software is updated regularly.