English translation for convenience only. The German version is authoritative.

Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Nilav
Owner: Aswathi Sasidharan Nair
Kurfürstenstraße 1
80801 Munich
Germany

Email: 3dservice@nilav.de
Phone: +49 15221944454

We are not required to appoint a data protection officer (Article 37 GDPR, Section 38 BDSG).

2. Contact by email

For quote requests based on a price estimate, a form is available; the data processed for that purpose is described in Section 4. If you contact us by email for any other reason, we process the information you provide—your email address, name and message—solely to handle your enquiry and any follow-up questions. The legal basis is Article 6(1)(b) GDPR or our legitimate interest in responding to your enquiry (Article 6(1)(f) GDPR). Your emails are stored by our email provider and deleted when no longer needed, unless statutory retention periods apply.

3. Price calculator and file upload

If you upload a file or enter dimensions in the calculator, we process the following data to prepare an indicative price:

  • Your 3D file (STL, OBJ, 3MF, STEP) and calculated information such as dimensions, volume and support areas
  • Your order details: material, infill and quantity
  • The calculation result: print time, material use and indicative price

The calculation is automated. Your file is transferred to a computer in our workshop, analysed with slicing software and then deleted. The legal basis is Article 6(1)(b) GDPR (pre-contractual steps taken at your request).

4. Quote request

If you request a non-binding quote, we also store the email address you provide, and optionally your phone number and message. We first send a six-digit code, valid for 3 minutes, to verify your email address. We store only a non-reversible verification value (hash), which is deleted after use. We use this data only to respond to your enquiry. You receive a confirmation by email and a copy is sent to us. The legal basis is Article 6(1)(b) GDPR.

We do not share your information with third parties for advertising purposes.

5. Retention and automatic deletion

Uploaded files, calculation results and related contact details are automatically deleted after 7 days. A recurring technical process removes the files and records completely; no action by you or us is required.

If an order is placed, we retain the data required to fulfil the contract for as long as necessary and thereafter for the statutory retention periods (in particular Section 147 AO and Section 257 HGB).

You may request earlier deletion at any time. Please provide the reference number from your confirmation email.

6. Processors and hosting

We use the following service providers to operate the website and price calculator:

  • Cloudflare (hosting, website delivery and Web Analytics)
  • Google Cloud, Frankfurt region (processing enquiries)
  • Supabase (storage of files and order data)
  • Zoho Mail (sending confirmation emails)

7. Server log files and analytics

When you visit this website, our hosting provider automatically records information sent by your browser in server log files: IP address, date and time of the request, page accessed, referrer URL, and browser and operating system details. We cannot associate this data with specific individuals, and it is not combined with other data sources. Processing is based on Article 6(1)(f) GDPR for the secure and stable operation of the website.

We use Cloudflare Web Analytics to evaluate aggregated usage and performance statistics. A JavaScript beacon is loaded from Cloudflare; with automatic integration, measurement data is sent to the same-origin /cdn-cgi/rum endpoint. According to Cloudflare, Web Analytics does not use cookies. See Cloudflare’s privacy policy. Processing is based on our legitimate interest in improving and securely operating our online service (Article 6(1)(f) GDPR).

8. Transfers to third countries

Some of the service providers listed above are based in the United States. According to our configuration, enquiries are processed in data centres within the EU (Google Cloud, Frankfurt region). If data is nevertheless transferred to third countries, this is based on the European Commission’s Standard Contractual Clauses or an adequacy decision (EU–US Data Privacy Framework).

9. Your rights

You have the right to access, rectify and erase your personal data, restrict processing, data portability, and object to processing. Please contact us at the address above.

10. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent authority for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach, Germany.