← Back to home
DE

Privacy policy

As of September 2026 · This is a translation for convenience. Only the German version is legally binding.

1. Controller

The controller responsible for data processing on this website is PrintForm, Aachen, Germany. The owner’s full name, the address and the email address can be found in the imprint. You can also reach us via the contact form for data protection enquiries.

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Summary

3. Hosting and server log files

This website is operated by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, on a server located in Germany. A data processing agreement according to Art. 28 GDPR has been concluded with the provider.

When the website is accessed, the server automatically processes the following data: IP address, date and time, requested address and HTTP status code. This is technically necessary to deliver the website and ensure its security (e.g. to fend off attacks). The legal basis is Art. 6(1)(f) GDPR. Log data is deleted after 14 days at the latest.

4. Cookies

When you log in to your customer account, we set a cookie (“pf_session”) containing a random session identifier. It is strictly necessary for logging in (§ 25(2) no. 2 TDDDG) and is deleted when you log out or after 30 days at the latest. The legal basis for the associated processing is Art. 6(1)(b) GDPR.

If you explicitly choose a light or dark colour scheme using the switch in the top right corner, this choice is only stored locally in your browser (“pf-theme”) and is not transferred to us. We do not use any other cookies or similar technologies.

5. Customer account

When you register, we process your company, contact person, email address, password (stored only as an encrypted hash) and optionally your phone number, VAT ID and billing address. We send you a link to confirm your email address. The account is used to process and give you an overview of your orders (Art. 6(1)(b) GDPR).

You can delete your account yourself at any time under “My account”. Your profile data is then deleted; we only keep order data where statutory retention obligations apply (see section 6).

Login with an email code

If you enable login with an email code (always active for admin accounts), we send a 6-digit code to your email address every time you log in. The code is stored only in encrypted form and expires after 10 minutes. The legal basis is Art. 6(1)(b) and (f) GDPR (protection of your account).

6. Orders and 3D files

For your order we process your contact details, billing and, if applicable, delivery address, the uploaded 3D files, the selected configuration, the payment method and optionally your PO number/cost centre and a requested date. Files that are uploaded but not ordered are deleted automatically after 24 hours. A “quotation as PDF” and the model check with 3D preview are generated exclusively in your browser; in addition, uploaded files are checked automatically for printability on our server. We store the language in which you use our website in order to send you emails in that language. The processing is necessary for the performance of the contract (Art. 6(1)(b) GDPR).

3D files are transferred encrypted, used exclusively to check and produce your order and not passed on to third parties. They are deleted automatically 180 days after completion of the order (shipping, delivery or cancellation). Until then we allow you to reorder.

Order and invoice data must be retained for 6, 8 or 10 years depending on the document due to commercial and tax law obligations (§ 147 AO, § 257 HGB; Art. 6(1)(c) GDPR). It is deleted afterwards.

7. Contact form and email

If you contact us via the contact form or by email, we process your details (name, email address, optionally company and phone number, your message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR (our interest in answering enquiries). The data is deleted once your enquiry has been dealt with and no retention obligations apply.

8. Feedback function

Using the feedback window, you can rate the website and send suggestions for improvement. The information is voluntary. If you are logged in, the feedback is linked to your account; otherwise it is anonymous. The legal basis is Art. 6(1)(f) GDPR (improving our services).

9. Sending emails

Order confirmations, status updates, confirmation and password links as well as our email correspondence are handled by the email service of STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany (servers in Germany). A data processing agreement according to Art. 28 GDPR has been concluded with STRATO. The legal basis is Art. 6(1)(b) GDPR.

10. Payment via PayPal

If you choose to pay via PayPal or by credit card via PayPal, you will receive a payment link from PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. For this purpose we transfer your name, email address, the invoice amount and the invoice number to PayPal. PayPal processes the payment data under its own responsibility; PayPal’s privacy policy applies. The legal basis is Art. 6(1)(b) GDPR.

11. Shipping

For delivery, we pass your name and delivery address to the shipping company we use (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany). The legal basis is Art. 6(1)(b) GDPR.

12. Data security

Data is transferred encrypted via TLS (HTTPS). We store passwords only as salted hashes (PBKDF2). Uploaded files are not publicly accessible.

13. Your rights

You have the right at any time to:

Simply contact us by email. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

14. Obligation to provide data, automated decisions

The details marked as mandatory are required to conclude the contract; without them we cannot process your order. No automated decision-making, including profiling, takes place.