Privacy

Controller and contact

The controller is Francisco Javier Venceslá Simón, owner of the DEMto3D project. For privacy questions and rights requests, email info@demto3d.com.

Data, purposes and lawful bases

Contact: name, email and message to answer enquiries and provide support. Processing relies on the legitimate interest in answering communications you initiate (GDPR Art. 6(1)(f)); Art. 6(1)(b) applies when you request steps before entering a contract. The form does not subscribe you to advertising.

Comments: name, email, text, rating, language and a record of your publication request. Your consent (GDPR Art. 6(1)(a)) allows us to review feedback and, if approved, publish the name, text, rating, date and language. Email remains private. You may use a display name that does not reveal your full identity. Review is manual and submission does not guarantee publication.

Required fields are needed to handle the submission; without them the form cannot be processed. Using the form and requesting publication are voluntary. No decisions with legal effects are made solely by automated processing.

Security and providers

Sered provides hosting and email. Private comment access is restricted to administration. Moderation events and technical data protect the service, based on the legitimate interest in preventing abuse. Submission quotas use identifiers derived from the IP rather than the plain IP; windows last fifteen minutes and expired records are cleared as new requests arrive.

The forms use Cloudflare Turnstile to detect automated traffic, based on our legitimate interest in protecting the service against abuse (GDPR Art. 6(1)(f)). Cloudflare, Inc. processes technical signals such as IP address, browser characteristics and site origin. It acts as a processor to protect this website and as an independent controller when using those signals to improve bot detection, under its own notice. We do not send message contents or email addresses to the verification API.

Cloudflare uses international infrastructure and may therefore process data outside the European Economic Area. Its data processing agreement describes standard contractual clauses and, where applicable, the EU–US Data Privacy Framework. You can consult the safeguards and clauses in the linked agreement or request information at info@demto3d.com.

Sered privacy information · Turnstile privacy notice · Cloudflare processing and transfers

Retention and publication

Enquiries are retained while being handled and while their history is needed to resolve the issue or follow it up. Published feedback is kept for the duration of publication. Private email addresses and consent records are kept while needed for moderation, evidence of the publication request and related rights requests or claims. For pending or rejected feedback, retention depends on the need to complete review and resolve moderation issues. There is no single fixed period for these activities: retention depends on the status of the enquiry or feedback and any applicable obligations or claims.

Rejecting or withdrawing feedback does not automatically erase it from private records. Permanent erasure requires manual action by the administrator once the data is no longer needed. Enquiries received by email are managed in the support mailbox, separately from the feedback database.

Withdrawal hides feedback but does not itself erase private records. On an erasure request, data that no longer needs to be retained will be deleted; data needed for legal obligations or claims may be restricted. Backups follow their rotation cycle and any restoration must respect previous erasures. Public feedback may be copied by third parties outside DEMto3D’s control.

Your rights

You may request access, rectification, erasure, restriction, objection and portability where applicable, and withdraw publication consent without affecting the lawfulness of earlier processing. Email info@demto3d.com with your request and the feedback or enquiry concerned. Additional identity information will only be requested when needed to verify the request. You may complain to the Spanish Data Protection Agency.

We will respond to your request within one month of receipt. Where the complexity or number of requests requires an extension, this may be extended by up to two further months; we will notify you of the extension and reasons within the first month. Exercising your rights is free of charge, subject to the GDPR exceptions for manifestly unfounded or excessive requests.

Cookies and external links

The application includes no analytics or advertising. The moderation panel uses the demto3d_admin session cookie, restricted to /admin/comments/, to maintain administrator access; the session expires after twenty minutes of inactivity or a maximum of eight hours. This cookie is not required to submit enquiries or feedback.

Turnstile loads resources from challenges.cloudflare.com in the forms and processes the technical signals described above. Pre-clearance is disabled: the widget does not use that feature to issue the cf_clearance cookie. The provider describes its mechanisms in its notice and documentation. The current website does not load Stripe.js or embed a payment form. Links to QGIS, GitHub or other sites have their own policies when visited.