Privacy Policy

How we collect, use, and protect your information

Last updated: 17.01.2026

1. Introduction

This Privacy Policy explains how 3DBerg Ltd. ("3DBerg", "we", "us", or "our") collects, uses, stores, and protects personal data when you visit or use https://www.3dberg.com (the "Website") and our related services.

We are committed to protecting your privacy and processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable data protection laws.

This Privacy Policy applies to all visitors, registered users, customers, suppliers, and business partners.

2. Data Controller

Data Controller:

3DBerg Ltd.

Registered address: Bulgaria, Haskovo, ul.Ivan Vazov 9

Company registration number: 205573319

Email: privacy@3dberg.com

General contact email: office@3dberg.com

3. Scope of This Policy

This Privacy Policy covers personal data processed when you:

  • Visit our Website
  • Request quotations
  • Create an account
  • Upload design files (CAD, STEP, STL, DXF, etc.)
  • Place orders for manufacturing services
  • Communicate with us
  • Subscribe to newsletters or marketing communications

4. Categories of Personal Data We Collect

4.1 Personal Data You Provide Directly

We may collect the following data when you voluntarily provide it:

  • Identity data: name, surname
  • Contact data: email address, phone number
  • Business data: company name, VAT number, billing address, shipping address
  • Account data: username, password (stored in encrypted/hashed form)
  • Order and quotation data: project details, quantities, materials, tolerances
  • Uploaded files: CAD files, drawings, specifications
  • Payment and invoicing data: billing details (payment processing handled by third-party providers)
  • Communications: emails, messages, support requests

4.2 Data Collected Automatically

When you visit our Website, we may automatically collect:

  • IP address
  • Browser type and version
  • Operating system
  • Device information
  • Date and time of access
  • Pages visited and usage patterns
  • Cookies and similar tracking technologies

5. Legal Basis for Processing Personal Data

We process personal data only where a legal basis exists under Article 6 GDPR:

  • Performance of a contract – to provide quotations, process orders, manufacture parts, and deliver services
  • Consent – for cookies, newsletters, and marketing communications
  • Legitimate interests – to improve our platform, ensure security, prevent fraud, and operate our business
  • Legal obligation – accounting, tax, and regulatory compliance

Where consent is used, you may withdraw it at any time.

6. Purposes of Processing

We process personal data for the following purposes:

  • Operating and maintaining the Website
  • Providing instant quotations and manufacturing services
  • Managing customer accounts
  • Processing orders, payments, and deliveries
  • Communicating with customers and business partners
  • Providing technical and customer support
  • Improving our services, platform performance, and user experience
  • Ensuring security and preventing misuse
  • Complying with legal and regulatory obligations

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our Website.

7.1 Types of Cookies Used

  • Strictly necessary cookies – required for Website functionality
  • Functional cookies – remember preferences and settings
  • Analytics cookies – understand how users interact with the Website
  • Marketing cookies – used for advertising and remarketing

7.2 Cookie Consent

Non-essential cookies are used only after your explicit consent via our cookie consent banner.

You can manage or withdraw cookie consent at any time through your browser settings or the cookie management tool on our Website.

8. Data Sharing and Third-Party Processors

We do not sell personal data.

We may share personal data with trusted third parties acting as data processors, including:

  • Hosting and cloud infrastructure providers
  • Payment service providers
  • Analytics and performance monitoring services
  • Email and communication platforms
  • Logistics and shipping partners
  • IT and security service providers

All processors act under contractual agreements ensuring GDPR compliance and data protection.

9. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

  • EU Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission

10. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

  • Account data: for the duration of the account
  • Order and transaction data: as required by commercial and tax laws (typically 5–10 years)
  • Uploaded files: retained for project execution and limited post-delivery support unless deleted earlier
  • Marketing data: until consent is withdrawn

When data is no longer required, it is securely deleted or anonymized.

11. Data Subject Rights

Under GDPR, you have the following rights:

  • Right of access – obtain a copy of your personal data
  • Right to rectification – correct inaccurate or incomplete data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing based on legitimate interests
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

To exercise your rights, contact us at privacy@3dberg.com.

12. Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Access control and authentication
  • Secure storage and backups
  • Regular system monitoring
  • Limited access on a need-to-know basis

Despite our efforts, no system is completely secure, and we cannot guarantee absolute security.

13. Confidentiality of Uploaded Files

Uploaded design files and project data are treated as confidential and used solely for quotation, manufacturing, and related services.

We do not share files with third parties except where required for manufacturing or logistics under confidentiality obligations.

14. Children's Privacy

Our services are intended for business and professional users.

We do not knowingly collect personal data from individuals under the age of 16.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes will be posted on this page with an updated "Last updated" date.

Material changes may be communicated via email or Website notice.

16. Contact Information

If you have questions about this Privacy Policy or how we process personal data, please contact:

3DBerg Ltd.

Email: privacy@3dberg.com

Website: https://www.3dberg.com