Privacy Policy

Last updated: 12 September 2026

1. Who is responsible for your data

The data controller is 3D Mobile Labs OÜ, a private limited company registered in the Estonian Business Register under registry code 14064392, with its registered office at Padriku tee 11/2-11, 11912 Tallinn, Pirita linnaosa, Harju maakond, Estonia. Our EU VAT number is EE102913189.

For anything in this policy, write to privacy@3dmobilelabsou.com or call +372 5705 1658. We have not appointed a statutory Data Protection Officer, because our processing does not meet the Article 37 thresholds; the address above reaches the person responsible for data protection in the company.

2. What we collect, and why

2.1 Enquiry and project request forms

When you submit the project request or contact form we collect your name, company name, business email address, optional phone number, the project details you choose to write, and the fact and time of your consent. We use this solely to answer your enquiry and, if it goes further, to prepare a proposal and a contract.

The lawful basis is Article 6(1)(f) GDPR, our legitimate interest in responding to a business enquiry addressed to us, and Article 6(1)(b) GDPR once we are taking steps at your request prior to entering into a contract. Providing the data is voluntary, but we cannot answer an enquiry without a way to reply.

Please do not submit special categories of personal data, credentials or customer data through these forms. If you do, we will delete it and tell you that we have.

2.2 Server logs

Our web server records the requesting IP address, timestamp, requested URL, HTTP status, referrer and user agent. These logs exist to keep the service available and to investigate abuse. The lawful basis is Article 6(1)(f) GDPR, our legitimate interest in the security and integrity of our own systems. Logs are retained for 30 days and then deleted.

2.3 Cookies and measurement

Strictly necessary cookies are set without consent, because the site cannot function without them. Analytics and advertising-measurement technologies are loaded only after you have given consent through the banner, and Microsoft Consent Mode is set to deny advertising storage by default before any tag can run. You can change or withdraw your choice at any time. The detail is in our Cookie Policy.

2.4 The architecture estimator

The estimator runs in your browser. The configuration you select is not transmitted to us and not stored unless you choose to include it in an enquiry you send. If you submit the estimator configuration through a form, it is treated exactly like the rest of that enquiry.

3. Who else sees your data

We do not sell personal data, do not share it with data brokers and do not use it for advertising profiling. Access inside the company is limited to the people handling your enquiry.

Our website and its database run on a virtual server provided by Hostinger International Limited, located in Vilnius, Lithuania, inside the European Economic Area. That provider acts as our processor under a data processing agreement. Where you have consented to advertising measurement, Microsoft Ireland Operations Limited processes measurement data as described in our Cookie Policy.

4. Transfers outside the EEA

Enquiry data submitted through this website is stored inside the European Economic Area and is not transferred to a third country. Should that ever change, we will update this policy before the change takes effect and rely on an Article 46 transfer mechanism.

5. How long we keep it

• Enquiries that do not lead to an engagement: 24 months from last contact, then deleted.
• Enquiries that lead to a contract: for the contract term and 7 years after, to meet Estonian accounting and tax record-keeping obligations.
• Server logs: 30 days.
• Your cookie choice: 12 months, stored in your own browser, after which you are asked again.

6. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected without undue delay;
• have your data erased where one of the Article 17 grounds applies;
• restrict processing while a dispute about accuracy or legitimate interest is resolved;
• receive data you gave us in a portable, machine-readable format;
• object at any time to processing based on legitimate interest, including any direct marketing, in which case we stop unless we can show compelling legitimate grounds that override your interests;
• withdraw consent at any time, without affecting processing carried out before you withdrew it.

Write to privacy@3dmobilelabsou.com. We respond within one month and will tell you if we need the Article 12(3) extension and why. There is no charge unless a request is manifestly unfounded or excessive.

If you are not satisfied with our response you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, or to the supervisory authority where you live or work.

7. Security

The site is served over TLS. Form submissions are validated and rate-limited on the server, stored in a database that is not reachable from the public internet, and backed up daily with the backups encrypted at rest. Access is restricted to named accounts using key-based authentication. If a breach ever presents a risk to your rights and freedoms, we will notify the supervisory authority within 72 hours and tell you directly where Article 34 requires it.

8. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects. The architecture estimator is a calculator, not a decision about you.

9. Children

Our services are business-to-business and are not directed at children. We do not knowingly collect personal data from anyone under 16.

10. Changes to this policy

If we change how we process personal data we will update this page and change the date at the top. Where a change materially affects you and we hold your contact details, we will tell you directly.