Applies to: https://3d-ing.si/ · last updated: 24 September 2026
1. Controller
Personal data in connection with the 3D ING website is processed by 3D-ING, prodaja in storitve, d.o.o., Podbreznik 15, 8000 Novo mesto, Slovenia, registration number 6889239000, tax number 82416257. For privacy questions and requests, write to scanner@3d-ing.si or to the postal address above.
2. Data, purposes and legal bases
Enquiries from individuals. We process your name, contact details, the selected product, solution or service and the message content to reply and prepare a quote. Where these are steps at your request before entering into a contract with you, the basis is Article 6(1)(b) GDPR.
Business communication. For company contact persons and general business questions, the basis is Article 6(1)(f) GDPR: our interest in handling business communication, preparing replies and maintaining business relations. We limit processing to data needed for this purpose and respect your rights.
Support. We process contact details, device model, software version, problem description and any material you provide voluntarily. If support is part of a contract with you, Article 6(1)(b) applies; for a business customer's contact person, our legitimate interest in providing support under Article 6(1)(f). We do not use the requested evidence for unrelated purposes.
Site operation and security. When you visit, the server automatically logs technical data: IP address, time of access, requested URL, browser and operating system type. Article 6(1)(f) is used for necessary system protection and handling abuse, with a documented assessment of necessity and proportionality. Cookies and similar technologies are also assessed under electronic communications rules; legitimate interest does not replace the consent required for non-essential tracking.
Legal obligations and claims. Where the law requires retention or disclosure, the basis is Article 6(1)(c); this applies in particular to accounting and tax records. Data needed to establish or defend claims may be kept on the basis of legitimate interest under Article 6(1)(f), limited to the relevant purpose and period.
Optional services. The website uses no analytics or advertising tools; the only optional service is the Google Maps map, which loads only after consent. For any consent-based newsletter and non-essential technologies, we define specific purposes and obtain the necessary consent separately. Submitting an enquiry does not by itself subscribe you to marketing messages.
3. Obligation to provide data
Required fields are marked in the form. To reply we need a valid contact and a description of the request; without them we may not be able to handle it. Phone and company are optional unless the form explicitly explains a valid reason. Providing data for a normal enquiry is not a legal obligation. Do not include health data, passwords, identity documents or other people's personal data not needed for the request.
4. Sources of data
As a rule you provide data yourself via the form, email or other contact; technical data arises from using the site. If we obtain data about an individual from their company or another source, we must also provide information on the source and processing under Article 14 GDPR where it applies.
5. Recipients and processors
Authorised persons and processors have access to the extent needed for the purpose. Processors are the website and email hosting provider and the IT support provider. Contract processors handle data on documented instructions and under an appropriate agreement.
We disclose data to equipment manufacturers only where needed for technical support, service or a warranty claim. Presenting a brand on the site does not in itself mean your enquiry is forwarded to it. Disclosure for technical support must be limited to necessary data. We disclose data to authorities where there is a legal obligation or other valid basis.
Google Maps. The site has a location map that loads only after your consent. When it loads, your browser connects to Google's servers, which may process your IP address and technical data and use cookies. You can withdraw consent with the "Turn off map" button. More details are in the cookie policy.
6. Transfers outside the EEA
We do not intentionally transfer data outside the EEA. The exceptions are Google when the map is loaded (adequacy decision for the USA, EU-US Data Privacy Framework) and the equipment manufacturer for technical support where required (standard contractual clauses). For transfers we state whether they rely on an adequacy decision or other valid safeguards, and how you can obtain information or a copy of them. Send requests to scanner@3d-ing.si. A server located in the EU does not by itself exclude access from a third country.
7. Retention
• Enquiries without a contract: 2 years from last contact.
• Support requests and attachments: 3 years after the request is closed.
• Security and access logs: up to 12 months.
• Cookie choice: stored in your browser until withdrawn or deleted.
• Contractual and accounting documentation: 10 years after the end of the year it relates to.
• Backups: up to 30 days.
After the applicable period we delete or irreversibly anonymise the data. If part of the data is needed for a specific dispute or legal obligation, we limit it to that purpose and keep it only as long as necessary or required. The periods also apply to uploaded attachments and copies in connected systems, in line with their deletion cycle.
8. Your rights
Under the conditions of the GDPR you can request access, rectification, erasure, restriction of processing and portability. Portability applies to automated processing based on consent or contract. You can object to processing based on legitimate interest on grounds relating to your particular situation. You can object to direct marketing at any time; processing for that purpose then stops.
You can withdraw consent at any time without affecting the lawfulness of earlier processing. Change cookie settings via the "Cookie settings" link when consent-based services are included on the site. For other requests use scanner@3d-ing.si.
We reply without undue delay, as a rule within one month. Where the legal conditions for an extension are met, we inform you of it and the reasons within the first month. We verify identity only to the necessary and proportionate extent. You can lodge a complaint with the Information Commissioner of the Republic of Slovenia; information and contact at https://www.ip-rs.si/.
9. Automated decision-making
We do not carry out automated decision-making or profiling within the meaning of Article 22 GDPR.
10. Security and changes
We use organisational and technical measures appropriate to the risk and restrict access to data. We update the policy when processing changes. The date of the valid version is shown at the top; where a new purpose requires a new legal basis or consent, publishing the change alone is not enough.