Last updated: August 25, 2026

1. Who We Are

The website 3Dfabriq.com (the “Website”) is operated by:

URBlink sp. z o.o.
59 Złota Street, Skylight Building
00-120 Warsaw
Poland

URBlink sp. z o.o. is the controller of personal data processed in connection with the use of the Website, uploading 3D models, using the quotation system, submitting quotation requests and placing orders.

For matters related to personal data protection, you may contact the Controller in writing at the address above or using the contact details available on the Website.

2. Scope of This Privacy Policy

This Privacy Policy explains what data we may collect, for what purposes we use it, how long we retain it, with whom we may share it, and what rights users have in relation to their personal data.

This Policy applies in particular to persons who:

visit 3Dfabriq.com,
upload models and files for quotation,
use the calculator or automated quotation system,
contact us,
submit quotation requests,
purchase or order services,
have a user account, if such functionality is available,
subscribe to marketing communications, if such functionality is provided.

3. Personal Data We May Process

Depending on how you use the Website, we may process:

Contact details: name and surname, email address, telephone number, company name and other information provided in correspondence.

Quotation and order data: information regarding quotations, selected materials, colours, quality, quantity, printing parameters, delivery address, invoicing details and communication or order history.

Files uploaded to the Website: including STL, STEP, OBJ, 3MF, DXF files or other files related to 3D design and production.

Technical data: IP address, device information, operating system, browser, screen resolution, language, time spent on the Website and information stored in server logs.

Website usage data: visited pages, use of Website features and interactions with Website elements.

Cookie and similar technology data, as described further in this Policy.

4. 3D Models and Uploaded Files

One of the main functionalities of 3Dfabriq is the ability to upload models and technical files for analysis, quotation and 3D printing purposes.

Uploaded files may be automatically analysed in order to determine, among other things:

dimensions,
volume,
surface area,
required material,
estimated printing time,
estimated or final production price.

Uploaded files may also contain personal data if the user includes such information in the project, filename, metadata or file content.

The Controller uses uploaded models only to the extent necessary to:

perform technical analysis,
prepare a quotation,
communicate with the customer,
fulfil an order,
perform quality control,
handle complaints,
establish, pursue or defend legal claims.

Uploading a project does not transfer any copyrights, intellectual property rights or ownership rights in the project to the Controller.

Uploaded models and projects are not used to train artificial intelligence models, published, or shared with other customers without an appropriate legal basis or separate agreement with the project owner.

Where fulfilment of an order requires cooperation with a production subcontractor, a file may be shared with such subcontractor only to the extent necessary to perform the service.

5. Purposes and Legal Bases for Processing

We may process personal data for the following purposes:

Preparing a Quotation and Responding to an Enquiry

The legal basis is Article 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into a contract.

Fulfilling an Order or Contract

Personal data is processed for the purposes of delivering the ordered service, processing payments, production and delivery.

The legal basis is Article 6(1)(b) GDPR.

Accounting, Tax and Legal Obligations

The legal basis is Article 6(1)(c) GDPR – compliance with a legal obligation to which the Controller is subject.

Customer Communication and Support

The legal basis may be Article 6(1)(b) GDPR or Article 6(1)(f) GDPR – the Controller’s legitimate interest in communicating with and supporting customers.

Website Security

We may process IP addresses, system logs and technical information for the purposes of detecting abuse, cyberattacks, unauthorised access attempts and other security threats.

The legal basis is Article 6(1)(f) GDPR.

Establishing, Pursuing or Defending Claims

The legal basis is Article 6(1)(f) GDPR – the Controller’s legitimate interest in protecting its legal rights.

Website Analytics and Development

Where consent is required for the use of specific technologies, relevant data is processed only after such consent has been provided.

Marketing

Where the user has given the appropriate consent, we may use their data to send information about products, services, promotions and new 3Dfabriq features.

Consent may be withdrawn at any time.

6. Is Providing Personal Data Mandatory?

Providing personal data is generally voluntary.

However, certain information may be necessary in order to prepare a quotation, respond to an enquiry, enter into a contract or fulfil an order.

For example, failure to provide an email address may prevent us from sending a quotation or contacting the user regarding a project.

7. Cookies

The Website uses cookies and similar technologies.

Cookies are small pieces of information stored on a user’s device while using a website.

We may use the following categories of cookies:

Necessary cookies – required for the correct operation and security of the Website, including session handling, quotation processes, shopping cart or login functionality.

Functional cookies – enable the Website to remember user preferences and settings.

Analytics cookies – help us understand how users use the Website and which areas may require improvement.

Marketing cookies – may be used to measure advertising effectiveness and provide relevant marketing content.

Cookies other than strictly necessary cookies are used only after obtaining the user’s consent where such consent is legally required.

Users may change their cookie preferences at any time using the settings available on the Website.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

8. WordPress Cookies and User Accounts

If users have an account on the Website and log in, the system may create cookies required to store login information and interface preferences.

Login cookies may remain active for approximately two days. If the user selects the “Remember Me” option, the login session may remain active for a longer period.

When the user logs out, login-related cookies are deleted or expire.

The Website may also use temporary cookies to determine whether the user’s browser accepts cookies.

9. Comments

If commenting functionality is available and a user submits a comment, we may collect the information shown in the comment form, the user’s IP address and browser information in order to prevent spam and abuse.

An anonymised string generated from the user’s email address may be provided to the Gravatar service if this feature is enabled.

After a comment is approved, the user’s profile image may be publicly visible alongside the comment.

10. Media and Uploaded Files

If users upload images or other files containing metadata, they should be aware that such files may contain additional information, including location data.

We recommend removing unnecessary metadata from files before uploading them to the Website where such information is not required for the provision of the service.

11. Embedded Content from Other Websites

The Website may contain embedded content from other websites, including videos, maps, images, social media elements and other external content.

Embedded content may behave in the same way as if the user directly visited the external website.

Third-party providers may use their own cookies and similar technologies and may collect information about user activity in accordance with their own privacy policies.

Where required by law, content involving non-essential cookies or similar technologies will only be activated after the user has provided consent.

12. Who We May Share Personal Data With

Personal data may be disclosed to entities supporting the Controller in operating the Website and providing services, including:

hosting and IT infrastructure providers,
email service providers,
software and IT system providers,
cybersecurity providers,
payment service providers,
courier and logistics companies,
accounting service providers,
legal advisers,
production subcontractors and partners involved in printing or post-processing,
analytics or marketing technology providers, where the user has given the required consent.

Recipients receive only the personal data necessary for the performance of the relevant service.

We do not sell users’ personal data.

13. Transfers Outside the European Economic Area

Some technology service providers may process personal data outside the European Economic Area.

Where such transfers take place, we use legally required safeguards, which may include:

a European Commission adequacy decision,
Standard Contractual Clauses,
other mechanisms permitted under applicable data protection law.

14. How Long We Retain Personal Data

The retention period depends on the purpose for which personal data is processed.

Data relating to enquiries and quotations is retained for the period necessary to handle the enquiry and afterwards for a period justified by potential future contact or the need to protect against legal claims.

3D files uploaded solely for quotation purposes may be stored for up to 12 months from the last contact, unless they are deleted earlier at the user’s request or another legal basis exists for their continued retention.

Data relating to completed orders is retained for the duration necessary to fulfil the contract, process warranty or complaint claims, and comply with tax, accounting and statutory limitation requirements.

Data processed on the basis of consent is retained until consent is withdrawn or until the data is no longer required for the purpose for which consent was given.

Data processed on the basis of legitimate interests is retained until such interest ceases to exist or an effective objection is raised, unless overriding legal grounds justify further processing.

15. Your Rights

Under the GDPR and subject to the conditions set out by applicable law, users may have the right to:

access their personal data,
obtain a copy of their personal data,
rectify inaccurate data,
complete incomplete data,
request deletion of personal data,
restrict processing,
receive and transfer personal data,
object to processing,
withdraw previously given consent,
lodge a complaint with a supervisory authority.

Where personal data is processed for direct marketing purposes, the user has the right to object to such processing at any time.

Once such an objection is received, we will stop processing personal data for direct marketing purposes.

16. Right to Lodge a Complaint

If a user believes that their personal data is being processed unlawfully, they may lodge a complaint with the competent data protection supervisory authority.

For the Controller established in Poland, the relevant authority is:

President of the Personal Data Protection Office (UODO)
Poland

Users may also have the right to contact another competent supervisory authority within the European Union depending on their place of residence.

17. Automated Quotation and Profiling

The Website may automatically analyse an uploaded 3D model and its technical parameters in order to determine production feasibility and calculate an estimated or final quotation.

Such analysis may include:

model dimensions,
volume,
surface area,
selected material,
quantity,
printing parameters,
estimated production time.

This automated price calculation is not used to profile individual users and generally does not constitute automated decision-making producing legal effects or similarly significantly affecting the user within the meaning of Article 22 GDPR.

18. Data Security

We implement appropriate technical and organisational measures intended to protect personal data against:

loss,
unauthorised access,
unauthorised disclosure,
alteration,
destruction.

Access to personal data and uploaded projects is limited to persons and entities for whom such access is necessary to perform their duties or fulfil an order.

Despite the security measures applied, no transmission of data over the Internet or information system can guarantee the complete elimination of risk.

19. Children’s Data

3Dfabriq services are primarily intended for businesses, professionals, creators and persons capable of entering into legally binding agreements.

We do not knowingly collect children’s personal data for marketing purposes.

If we become aware that a child’s data has been provided without an appropriate legal basis or required parental or guardian consent, we will take appropriate measures to delete it.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, particularly in the event of:

changes in applicable law,
development of 3Dfabriq functionality,
introduction of new payment or delivery methods,
implementation of new analytics or marketing tools,
changes to our IT service providers.

The current version of the Privacy Policy will always be available on the Website together with the date of its latest update.

21. Contact

The controller of personal data is: