Privacy Policy
Last updated: 25 July 2026
1. Introduction
KYROZZ GmbH ("we", "our", "us") respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.
This Privacy Policy explains how we collect, process, use and protect your personal data when you visit our website, request quotations, place orders or otherwise communicate with us.
2. Controller
The controller responsible for data processing is:
3. What Personal Data We Collect
Depending on your interaction with us, we may collect the following information:
Contact Information
- Name
- Company name
- Email address
- Telephone number
- Billing and shipping address
Project Information
- CAD files (STL, STEP, STP, 3MF, OBJ, DXF, SVG and similar formats)
- Technical drawings
- Manufacturing specifications
- Material preferences
- Quantity requirements
- Delivery instructions
Order Information
- Quotations
- Purchase orders
- Invoices
- Shipping information
- Payment status
Technical Information
When you visit our website, our hosting provider may automatically process technical information such as:
- Browser type
- Operating system
- Date and time of access
- Requested pages
- Referrer URL (if applicable)
- IP address (only where technically necessary for security and operation)
We do not use this information for advertising, profiling or marketing purposes.
4. Purpose of Processing
We process personal data solely for legitimate business purposes, including:
- Responding to enquiries
- Preparing quotations
- Reviewing uploaded CAD files
- Manufacturing requested products
- Quality assurance
- Processing orders
- Shipping products
- Customer support
- Accounting and invoicing
- Compliance with legal obligations
- Protection against fraud and misuse
5. Legal Basis for Processing
We process your personal data based on Article 6 GDPR:
- Art. 6(1)(a) GDPR – Consent
- Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures
- Art. 6(1)(c) GDPR – Compliance with legal obligations
- Art. 6(1)(f) GDPR – Legitimate business interests
6. CAD Files and Confidential Information
We understand that many uploaded CAD files and technical drawings are confidential.
Uploaded project files are processed exclusively for:
- quotation preparation
- manufacturing
- quality control
- technical consultation
We do not sell, publish or use customer designs for our own commercial purposes.
Only employees and trusted production partners who require access to fulfil your order may access these files.
7. Manufacturing Partners
Where necessary, we may share technical project information with carefully selected manufacturing partners for:
- CNC machining
- 3D printing
- injection moulding
- sourcing
- finishing processes
Only the information necessary to complete your project will be shared.
All partners are expected to maintain appropriate confidentiality and data protection standards.
8. Import and Export
As part of our international sourcing and manufacturing services, personal and project-related information may be shared with:
- logistics companies
- customs authorities
- freight forwarders
- shipping providers
- manufacturing partners
Such sharing occurs only where necessary for fulfilling contractual obligations or complying with applicable legal requirements.
Where personal data is transferred outside the European Economic Area (EEA), we implement appropriate safeguards in accordance with the GDPR.
9. Online Marketplace Sales
Our products may also be sold through third-party marketplaces including:
- Etsy
- Amazon
- eBay
Orders placed through these marketplaces are additionally subject to the respective privacy policies of those platforms.
We process only the customer information necessary to fulfil marketplace orders.
10. Contact Forms and Email
When you contact us via:
- contact form
- quotation request
- file upload
we process your information solely to respond to your enquiry and, where applicable, prepare a quotation or fulfil your order.
Providing this information is voluntary. However, certain information is required to prepare quotations and process orders.
11. Cookies
Our website uses only technically necessary cookies required for:
- website functionality
- security
- contact forms
- quotation requests
We do not use advertising cookies or tracking cookies unless expressly stated and consented to where required by law.
12. Hosting
Our website is hosted by a professional hosting provider.
For technical and security reasons, the hosting provider may process technical server data required for reliable website operation.
13. SSL/TLS Encryption
Our website uses SSL/TLS encryption to protect the transmission of confidential information submitted through our website.
14. Data Retention
We retain personal data only as long as necessary to:
- provide quotations
- fulfil contracts
- comply with statutory retention obligations
- resolve disputes
- exercise legal claims
After expiration of the applicable retention periods, personal data will be securely deleted or anonymised unless legal obligations require longer storage.
15. Data Security
We implement appropriate technical and organisational measures to protect your personal data against:
- unauthorised access
- accidental loss
- misuse
- destruction
- alteration
- disclosure
However, no internet transmission can be guaranteed to be completely secure.
16. Sharing of Personal Data
We do not sell personal data.
We may share information only with:
- shipping providers
- logistics companies
- payment service providers (where applicable)
- manufacturing partners
- tax advisors
- legal authorities where required by law
17. Automated Decision-Making
We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.
18. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase personal data
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with a competent supervisory authority
To exercise your rights, please contact:
19. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy where necessary to reflect legal, technical or operational changes.
The latest version will always be published on this website.
20. Contact
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact: