Privacy Policy
Last updated: 3 July 2026
This policy explains how MERL Kft. ("we", the "Controller") processes personal data within the FORGE 3D printing service and this website, in accordance with the European Union's General Data Protection Regulation (GDPR) and Hungarian law.
1. The controller
MERL Kft., registered seat: 6722 Szeged, Mérey utca 16. L. ép. Fsz. 2. ajtó, Hungary. Tax number: 13768393-2-06. Contact: 3po@3po3d.com. Details in the Legal Notice.
2. What data we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, email, phone number, shipping/billing address | Processing and fulfilling the order; keeping in touch | Performance of a contract (Art. 6(1)(b)) | Until the order is fulfilled + the statutory periods below |
| Uploaded files (3D models, foot scans, images) | Producing the custom print / insole | Performance of a contract (Art. 6(1)(b)) | Deleted 90 days after the order is fulfilled, unless you ask us to keep them |
| Order and invoice data | Issuing invoices and reporting them to the tax authority (NAV) | Legal obligation (Art. 6(1)(c)) | 8 years (Section 169 of Act C of 2000 on Accounting) |
| Payment data (card details) | Carrying out the payment | Contract / legal obligation | Handled by Stripe — we neither see nor store the full card number |
| Messages you send us | Answering your questions | Legitimate interest (Art. 6(1)(f)) | Until answered + 1 year |
3. Who we share data with (processors)
We use the following providers, who process data solely on our instructions:
- Stripe (Stripe Payments Europe, Ltd., Ireland) — payment processing.
- Számlázz.hu (KBOSS.hu Kft.) — invoicing and the mandatory NAV Online Invoice data reporting.
- Make — transferring order data between our systems.
- Google (Google Ireland Ltd.) — sending the confirmation emails (Gmail) and the website's fonts (Google Fonts, which receives your IP address when it loads).
- GitHub, Inc. — website hosting (GitHub Pages).
- Dropbox — storage of order files.
Some providers operate outside the EU (e.g. the USA); such transfers are based on the providers' standard contractual clauses (SCCs) or an adequacy decision. We do not sell your data and do not use it for automated decision-making.
4. Your rights
You may request access to your data, its rectification, erasure, restriction of processing, and data portability, and you may object to processing based on legitimate interest. To exercise these rights, write to 3po@3po3d.com. We respond within one month.
5. Complaints
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9–11.; ugyfelszolgalat@naih.hu; naih.hu. You may also turn to a court.
6. Data security
We use reputable providers and an encrypted connection (HTTPS), and we limit access to order data to those who need it for fulfilment.
7. Children
The service is intended for adults. We do not knowingly collect data from persons under the age of 16.
8. Cookies
The website uses only strictly necessary cookies — placed by the website and by Stripe to carry out and secure the payment. These do not require consent and cannot be switched off, because the website would not work without them. We do not use analytics or advertising cookies. You can block or delete cookies in your browser settings, but then payment will not work.