GDPR Compliance

Last Updated: January 3, 2026

Our Commitment to GDPR

3D Model Maker is committed to protecting the privacy and personal data of all users, including those in the European Union (EU) and European Economic Area (EEA). We comply with the General Data Protection Regulation (GDPR) and have implemented appropriate measures to ensure the protection of your data.

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It gives EU/EEA residents greater control over their personal data and establishes strict rules for organizations that collect and process personal information.

Your Rights Under GDPR

As a user located in the EU/EEA, you have the following rights regarding your personal data:

Right to Access (Article 15)

You have the right to obtain confirmation about whether we process your personal data and to request a copy of the personal data we hold about you.

Right to Rectification (Article 16)

You have the right to request correction of inaccurate personal data and to have incomplete data completed.

Right to Erasure / Right to be Forgotten (Article 17)

You have the right to request deletion of your personal data in certain circumstances, including:

• When the data is no longer necessary for its original purpose
• When you withdraw consent (where consent was the legal basis)
• When you object to processing and there are no overriding legitimate grounds
• When the data has been unlawfully processed

Right to Restriction of Processing (Article 18)

You have the right to request restriction of processing in certain situations, such as when you contest the accuracy of the data or when processing is unlawful.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object (Article 21)

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing that significantly affect you, with certain exceptions.

How We Process Your Data

Legal Basis for Processing

We process your personal data based on the following legal bases:

Data We Collect

For detailed information about what data we collect, please see our Privacy Policy.

Data Transfers

Your personal data may be transferred to and processed in countries outside the EU/EEA. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers to countries with an adequacy decision
• Other legally approved transfer mechanisms

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods are outlined in our Privacy Policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Employee training on data protection
• Incident response procedures

Data Protection Officer

For questions about our GDPR compliance or to exercise your rights, you can contact our Data Protection team:

• Email: privacy@3dmodelmaker.io

How to Exercise Your Rights

To exercise any of your GDPR rights, please:

1. Email us at privacy@3dmodelmaker.io
2. Include your name and email address associated with your account
3. Specify which right(s) you wish to exercise
4. Provide any additional information that may help us process your request

We will respond to your request within 30 days. In complex cases, we may extend this period by an additional 60 days, and we will inform you of any such extension.

Supervisory Authority

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with a supervisory authority. You can contact the supervisory authority in your EU/EEA member state of residence, place of work, or where the alleged infringement occurred.