1. Who we are
The controller of your personal data is Patech Labs SRL, a company registered in Romania that provides industrial 3D printing services.
- Company registration number (CUI): RO48785390
- Trade Register number: J31/500/2023
- Registered office: Str. Andrei Șaguna nr. 23, office 1, Zalău, Sălaj County, Romania
- Email: office@patech-labs.tech
- Phone: +40 752 197 467
Patech Labs SRL is not legally required to appoint a Data Protection Officer (DPO). For any question about your data, email us at the address above with the subject “Data protection”.
2. What data we collect
Data you give us directly
- Identification and contact data: full name, company, email address, phone number.
- Project data: part description, quantities, technical requirements, deadlines and any other information included in your quote request.
- Technical files: CAD models (for example STEP), technical drawings and attached documents.
- Billing and delivery data, if you become a client: company billing details, contact person, delivery address.
- Correspondence: the content of messages you send us by email, phone or form.
Data collected automatically
- Technical data: IP address, browser and device type, pages visited and access date, collected through server logs and, only with your consent, through analytics cookies. On the homepage, your IP address is used on the fly to determine the country you are visiting from, so we can show you the right language; the country is not stored.
We do not collect special categories of data (for example health data) and ask you not to send them to us.
3. Purposes and legal bases
We process your data only for clear purposes and only when we have a legal basis under Article 6 GDPR:
| Purpose | Legal basis (GDPR) |
|---|---|
| Reviewing your request and issuing the technical quote | Pre-contractual steps at your request — Art. 6(1)(b) |
| Production, delivery and communication during the order | Performance of a contract — Art. 6(1)(b) |
| Invoicing, accounting and tax records | Legal obligation — Art. 6(1)(c) |
| Answering general questions sent by email or phone | Legitimate interest in communicating with people who contact us — Art. 6(1)(f) |
| Website security and abuse prevention | Legitimate interest — Art. 6(1)(f) |
| Showing the website in the right language (country from IP address and browser language) | Legitimate interest — Art. 6(1)(f) |
| Defending our rights in case of a dispute | Legitimate interest — Art. 6(1)(f) |
| Visitor statistics (analytics cookies) and marketing communications | Consent, which you can withdraw at any time — Art. 6(1)(a) |
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you.
4. CAD files and project confidentiality
We know technical files are valuable intellectual property. That is why:
- we use the files we receive solely for analysis, quoting and production of the ordered part;
- we do not publish, sell or share them with third parties, except for providers strictly necessary for processing (for example file hosting), who are bound by confidentiality;
- access to files is limited to the staff actually working on your project.
Intellectual property rights in the models and drawings remain yours or their owner's.
5. How long we keep data
- Quote requests that do not become orders: 24 months after the last communication, after which we delete them.
- CAD files for requests without an order: 12 months, or earlier at your request.
- Data and files related to orders: for the duration of the contractual relationship and then for the general limitation period, for possible claims, warranties or repeat orders.
- Financial and accounting documents (invoices and supporting documents): for the period required by Romanian Accounting Law no. 82/1991 and tax legislation.
- Server logs: 90 days.
- Data processed on the basis of consent: until consent is withdrawn.
When these periods expire, the data is deleted or anonymised.
6. Who we share data with
We do not sell your data. We may share it, strictly as needed, with:
- web hosting, email and file storage providers;
- courier companies, to deliver parts;
- our accountant or accounting firm and, where applicable, legal advisers;
- banks and payment processors, to collect payments;
- public authorities, when required by law.
Providers that process data on our behalf act as processors under a contract compliant with Article 28 GDPR.
7. Transfers outside the European Economic Area
We prefer providers that store data in the European Union. If a provider transfers data outside the EEA, we ensure the transfer only takes place under the conditions of Chapter V GDPR: a European Commission adequacy decision or standard contractual clauses approved by the Commission.
8. Your rights
Regarding your personal data, you have the following rights:
- the right of access — to find out what data we process about you and receive a copy;
- the right to rectification — to have inaccurate or incomplete data corrected;
- the right to erasure (“the right to be forgotten”), under Article 17 GDPR;
- the right to restriction of processing;
- the right to data portability — to receive your data in a structured, commonly used format;
- the right to object to processing based on our legitimate interest;
- the right to withdraw consent at any time, without affecting the lawfulness of earlier processing;
- the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, www.dataprotection.ro.
To exercise your rights, email us at office@patech-labs.tech. We will reply without undue delay and within one month of receiving your request. This period may be extended by two further months for complex requests, in which case we will let you know. Exercising your rights is free of charge. To protect your data, we may ask for additional information to confirm your identity.
9. Data security
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure, including:
- encrypted connections (HTTPS) for the website and forms;
- access to data and files limited to staff who need it;
- strong passwords and additional authentication for the accounts we use;
- backups and regular system updates.
We work under an ISO 9001-certified quality management system. In the event of a personal data breach that poses a risk to you, we notify ANSPDCP and, where applicable, the data subjects, within the deadlines set by the GDPR.
11. Minors
Our services are aimed at businesses and adults. We do not knowingly collect data about people under 16. If you become aware that a minor has sent us data, contact us and we will delete it.
12. Changes to this policy
We may update this policy when our services or the law change. The version in force is always the one published on this page, with the date of the last update shown at the top. If the changes are significant and we have a contractual relationship with you, we will also inform you by email.
13. Data protection contact
For any question about this policy or your data:
Patech Labs SRL · VAT ID RO48785390 · Trade Register J31/500/2023