Privacy Policy

1. Responsible

Represented by the managing director Frank Lemm
Phone: + 49 8806 92890 50
Email: dsgvo@3dscan-solutions.de

A data protection officer has not been appointed at this time. Please direct any data protection inquiries to the address above.

2. Processing purposes and legal bases

Depending on how you use the website, we process data on the following grounds:

• Article 6 paragraph 1 letter b GDPR: Processing of project and contact requests as well as pre-contractual measures.
• Article 6 paragraph 1 letter c GDPR: Fulfillment of legal obligations, in particular commercial and tax law retention obligations.
• Article 6 paragraph 1 letter f GDPR: Secure, stable and economical operation of the website, prevention of misuse and maintenance of business contacts.
• Article 6 paragraph 1 letter a GDPR and Section 25 paragraph 1 TDDDG: Cookies requiring consent, statistics, marketing and external media services.
• Section 25 Paragraph 2 TDDDG: technically necessary storage or access to information on the end device.

3. Hosting, server protocols and security

When you access the website, the hosting provider processes technically necessary connection data. This may include IP address, date and time, requested address, amount of data transferred, referrer, browser, operating system, and status code. This processing serves to deliver the website, ensure its stability, and detect and prevent attacks.

To protect our website, we use security features including Wordfence. This may involve processing security-relevant access and log data. The legal basis for this processing is Article 6(1)(f) GDPR. Log data is deleted or anonymized as soon as it is no longer needed for security and auditing purposes and no legal obligations prevent its retention.

4. Cookies and consent management

We use real cookie banners to obtain, document, and allow the revocation of consent. Your selection, a consent identifier, the time, language, and technically necessary information are stored. This is necessary to fulfill our documentation obligations and to operate the consent management system.

The current list of services, cookies, storage durations, and providers used is displayed directly in the privacy settings. Non-essential services are only activated after you give your consent.

5. Reach measurement and marketing

Burst Statistics can be used for privacy-friendly audience measurement. Depending on the configuration, the analysis is carried out without personal profiles or – where consent is required – only after your approval.

With your consent, marketing and conversion services, such as those from Google or Meta, can be activated. This may involve processing usage, device, interaction, and campaign data and linking it to existing accounts with these providers. This processing is based solely on your consent, which you can withdraw at any time for the future.

6. External media, reviews and translation

Some pages may include content or features from external providers, such as YouTube videos, Matterport tours, Google reviews, or translation functions from GTranslate/Google. Activating such content may establish a connection to the respective provider. This may involve the transmission of your IP address, browser information, and the page you are visiting.

Unless a service is technically necessary, it will only be activated after you have given your consent. Information about the provider, purpose, legal basis, and possible transfer of data to third countries can be found in the respective service description and privacy settings.

7. Contact and project inquiries

When you use our form, we process your name, company, business email address, optionally your phone number, project description, timeframe, project location, and the referring page of the request. We also store the time of submission, the delivery status, and your confirmation of the privacy policy.

The data is processed for the purpose of reviewing, processing, and responding to your inquiry, as well as for initiating a potential order. The legal basis for this processing is Article 6(1)(b) GDPR and – in the case of general business inquiries – Article 6(1)(f) GDPR. Inquiries are stored in a non-public WordPress backend and forwarded to sales@3dscan-solutions.de.

An optional automated response will only be sent if this feature is enabled. To prevent spam, we use a hidden validation field, time-limited security tokens, origin verification, and access limits. Cloudflare Turnstile is only used if it is enabled in the form settings and authorized via consent management.

Inquiry data will be deleted as soon as processing is complete and no pre-contractual, contractual, or legal retention requirements remain. If an order is placed, the statutory commercial and tax law retention periods apply.

8. Communication via email and telephone

When you contact us by email or telephone, we process the contact details and content you provide to handle your request. Recipients may include internal staff responsible for your inquiry as well as technical service providers for hosting and email delivery, who act according to our instructions.

9. Recipients and transfers to third countries

We only share data if this is necessary to fulfill the respective purpose, if there is a legal obligation, or if you have given your consent. Categories of recipients include, in particular, hosting, IT, security, email, analytics, marketing, and media service providers.

For providers outside the European Union or the European Economic Area, data may be transferred to third countries. Where no adequacy decision exists, we use appropriate safeguards, in particular EU standard contractual clauses, and examine additional protective measures. Details can be found in the service description in the privacy settings.

10. Storage period

We only store personal data for as long as it is necessary for the respective purpose. Key factors include processing time, contractual relationship, limitation periods, security interests, and statutory retention obligations. Consent data is retained for as long as necessary to prove consent. Once the purpose for processing no longer applies, data is deleted or blocked.

11. Your rights

In accordance with the GDPR, you have the right to information, rectification, erasure, restriction of processing, and data portability. You can object to processing on grounds relating to your particular situation if it is based on Article 6(1)(e) or (f) GDPR. You can withdraw any consent you have given at any time with effect for the future.

To exercise your rights, please contact dsgvo@3dscan-solutions.de . You also have the right to lodge a complaint with a data protection supervisory authority. For non-public companies based in Bavaria, the Bavarian State Office for Data Protection Supervision is generally the responsible authority.

12. Obligation to provide data and automated decisions

Providing personal data is generally voluntary. Required fields in the project form are necessary so that we can properly process and respond to your request. Without this information, processing is not possible. No purely automated decision-making, including profiling as defined in Article 22 of the GDPR, takes place.

13th update to this statement

We will update this privacy policy if the legal situation, services used, or processing procedures change. The current version can be accessed at this URL.

Version of 11.08.2026