Privacy Policy
How we collect, use, and protect your information
Last updated: 17.01.2026
1. Introduction
This Privacy Policy explains how 3DBerg Ltd. ("3DBerg", "we", "us", or "our") collects, uses, stores, and protects personal data when you visit or use https://www.3dberg.com (the "Website") and our related services.
We are committed to protecting your privacy and processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable data protection laws.
This Privacy Policy applies to all visitors, registered users, customers, suppliers, and business partners.
2. Data Controller
Data Controller:
3DBerg Ltd.
Registered address: Bulgaria, Haskovo, ul.Ivan Vazov 9
Company registration number: 205573319
Email: privacy@3dberg.com
General contact email: office@3dberg.com
3. Scope of This Policy
This Privacy Policy covers personal data processed when you:
- Visit our Website
- Request quotations
- Create an account
- Upload design files (CAD, STEP, STL, DXF, etc.)
- Place orders for manufacturing services
- Communicate with us
- Subscribe to newsletters or marketing communications
4. Categories of Personal Data We Collect
4.1 Personal Data You Provide Directly
We may collect the following data when you voluntarily provide it:
- Identity data: name, surname
- Contact data: email address, phone number
- Business data: company name, VAT number, billing address, shipping address
- Account data: username, password (stored in encrypted/hashed form)
- Order and quotation data: project details, quantities, materials, tolerances
- Uploaded files: CAD files, drawings, specifications
- Payment and invoicing data: billing details (payment processing handled by third-party providers)
- Communications: emails, messages, support requests
4.2 Data Collected Automatically
When you visit our Website, we may automatically collect:
- IP address
- Browser type and version
- Operating system
- Device information
- Date and time of access
- Pages visited and usage patterns
- Cookies and similar tracking technologies
5. Legal Basis for Processing Personal Data
We process personal data only where a legal basis exists under Article 6 GDPR:
- Performance of a contract – to provide quotations, process orders, manufacture parts, and deliver services
- Consent – for cookies, newsletters, and marketing communications
- Legitimate interests – to improve our platform, ensure security, prevent fraud, and operate our business
- Legal obligation – accounting, tax, and regulatory compliance
Where consent is used, you may withdraw it at any time.
6. Purposes of Processing
We process personal data for the following purposes:
- Operating and maintaining the Website
- Providing instant quotations and manufacturing services
- Managing customer accounts
- Processing orders, payments, and deliveries
- Communicating with customers and business partners
- Providing technical and customer support
- Improving our services, platform performance, and user experience
- Ensuring security and preventing misuse
- Complying with legal and regulatory obligations
7. Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve our Website.
7.1 Types of Cookies Used
- Strictly necessary cookies – required for Website functionality
- Functional cookies – remember preferences and settings
- Analytics cookies – understand how users interact with the Website
- Marketing cookies – used for advertising and remarketing
7.2 Cookie Consent
Non-essential cookies are used only after your explicit consent via our cookie consent banner.
You can manage or withdraw cookie consent at any time through your browser settings or the cookie management tool on our Website.
8. Data Sharing and Third-Party Processors
We do not sell personal data.
We may share personal data with trusted third parties acting as data processors, including:
- Hosting and cloud infrastructure providers
- Payment service providers
- Analytics and performance monitoring services
- Email and communication platforms
- Logistics and shipping partners
- IT and security service providers
All processors act under contractual agreements ensuring GDPR compliance and data protection.
9. International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:
- EU Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
10. Data Retention
We retain personal data only as long as necessary for the purposes described in this policy:
- Account data: for the duration of the account
- Order and transaction data: as required by commercial and tax laws (typically 5–10 years)
- Uploaded files: retained for project execution and limited post-delivery support unless deleted earlier
- Marketing data: until consent is withdrawn
When data is no longer required, it is securely deleted or anonymized.
11. Data Subject Rights
Under GDPR, you have the following rights:
- Right of access – obtain a copy of your personal data
- Right to rectification – correct inaccurate or incomplete data
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
To exercise your rights, contact us at privacy@3dberg.com.
12. Security Measures
We implement appropriate technical and organizational measures to protect personal data, including:
- Encrypted data transmission (HTTPS/TLS)
- Access control and authentication
- Secure storage and backups
- Regular system monitoring
- Limited access on a need-to-know basis
Despite our efforts, no system is completely secure, and we cannot guarantee absolute security.
13. Confidentiality of Uploaded Files
Uploaded design files and project data are treated as confidential and used solely for quotation, manufacturing, and related services.
We do not share files with third parties except where required for manufacturing or logistics under confidentiality obligations.
14. Children's Privacy
Our services are intended for business and professional users.
We do not knowingly collect personal data from individuals under the age of 16.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Changes will be posted on this page with an updated "Last updated" date.
Material changes may be communicated via email or Website notice.
16. Contact Information
If you have questions about this Privacy Policy or how we process personal data, please contact:
3DBerg Ltd.
Email: privacy@3dberg.com
Website: https://www.3dberg.com