Privacy policy | models3d.shop

This policy explains how 3D Models Shop (hereinafter "the Store" or "we") collects, uses and protects the personal data of its users in accordance with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act (PDPA).

1. What data we collect

Registration data: email address and (optionally) name.
Order and delivery data: name, phone number, delivery address, selected courier office.
Payment data: processed by a licensed payment service provider — we do not store bank card numbers.
Technical data: IP address, browser type, operating system, general behavior on the site — collected through cookies and server logs.

2. Purposes and legal grounds

Performance of a contract (art. 6(1)(b) GDPR) — order processing, delivery, provision of digital content and account maintenance.
Legal obligations (art. 6(1)(c) GDPR) — accounting and tax reporting, retention of invoices.
Legitimate interest (art. 6(1)(f) GDPR) — site security, fraud prevention, service improvement.
Consent (art. 6(1)(a) GDPR) — for marketing messages and non-essential cookies. You can withdraw your consent at any time.

3. Who we share data with

The Store does not sell personal data to third parties. Data may be shared with:

courier companies (Econt, Speedy) — for delivery purposes;
a licensed payment service provider — for payment processing;
hosting and cloud service providers supporting the operation of the site;
competent state authorities — only when explicitly required by law.

4. Retention period

Account data — as long as the account exists.
Order data and accounting documents — up to 10 years as required by tax and accounting legislation.
Technical logs — typically up to 12 months for security purposes.

5. Your rights

As a data subject you have the following rights under the GDPR:

right of access to your personal data;
right to rectification of inaccurate or incomplete data;
right to erasure ("right to be forgotten") — under the conditions of art. 17 GDPR;
right to restriction of processing;
right to data portability;
right to object to processing;
right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights you can contact us by email. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) — www.cpdp.bg.

6. Cookies

The site uses cookies in order to work correctly and to improve the user experience. We distinguish between:

Strictly necessary cookies — for account sign-in, cart and security. No consent required.
Functional and analytical cookies — for traffic measurement and site improvement. Used only with consent.

You can delete or block cookies at any time through your browser settings. Please note that this may limit the functionality of the site.

7. Security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss or disclosure — including an encrypted connection (HTTPS), access control to our systems, and regular backups.

8. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page. We will notify you of any material changes in an appropriate manner.