3DStep – Privacy policy
EU General Data Protection Regulation 2016/679
Updated 23 June 2026
1. Data Controller
3DStep Ltd.
Huurretie 9, 33470 Ylöjärvi, Finland
Business ID: FI27563436
2. Contact Person for Data Protection Matters
Pekka Ketola
[email protected]
+358 50 553 4783
3. Registers and Purposes of Processing
This privacy policy covers three personal data processing activities.
3.1 Marketing and Newsletter Register
3DStep Oy uses the marketing and newsletter register for customer relationship management, communications, and marketing purposes. Processing is based on the data subject’s consent or the legitimate interests of the data controller.
The following data is processed: name, email address, phone number, postal address, and the company or organisation the person represents.
Data is collected directly from the data subject when subscribing to the newsletter, registering for events, participating in campaigns, or through other contact. Data may also be collected through personal sales activities or purchased from external registers for one-time use.
3.2 Contact Form Register
Data submitted through the website contact form is stored in 3DStep Oy’s WordPress database. Processing is based on the data subject’s own contact request and the legitimate interests of the data controller in responding to enquiries.
The following data is processed: name, email address, phone number, company or organisation, and the message provided in the form.
Data is retained only for as long as required to handle the enquiry.
3.3 Website Analytics Register
3DStep Oy monitors the use of its website using Google Analytics 4. Processing is based on the data subject’s consent, which is requested through the Cookiebot consent management service.
Analytics data is processed for statistical analysis of website usage and for developing the website. Data collected includes IP address (anonymised), page views, session data, and device and browser type.
4. Disclosure of Data to Third Parties
Marketing and newsletter register data is not disclosed to external parties without the data subject’s consent, except where required by law.
Contact form data is used solely by 3DStep Oy and is not disclosed to third parties.
Analytics data is processed by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) within the European Union in accordance with Google’s privacy policy. Further information: policies.google.com/privacy.
5. Retention Periods
Marketing and newsletter register data is retained until the data subject withdraws their consent or requests deletion of their data.
Contact form data is retained for the period required to handle the enquiry.
Analytics data is retained in accordance with Google Analytics 4 default settings (maximum 14 months).
6. Data Security
Databases are technically protected so that access to data is restricted to personnel whose duties require it. The website uses SSL encryption to secure data transmission.
7. Rights of the Data Subject
The data subject has the right to withdraw their newsletter subscription or consent to cookie processing at any time.
The data subject has the right to access their personal data, request correction of inaccurate data, request deletion of their data, and request restriction of processing under Article 18 of the EU General Data Protection Regulation.
The data subject also has the right to data portability where processing is based on consent or a contract and is carried out by automated means.
Requests for access, correction, or deletion should be submitted in writing to the contact person for data protection matters.
8. Right to Lodge a Complaint
The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they consider that the processing of their personal data infringes the EU General Data Protection Regulation. Contact details for the Office of the Data Protection Ombudsman: tietosuoja.fi.
9. Updates to This Privacy Policy
The data controller reserves the right to update this privacy policy. Data subjects will be informed of any significant changes as required by the General Data Protection Regulation.