Last updated: 9 June 2026
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Furnify3D GbR
(a German civil-law partnership / Gesellschaft bürgerlichen Rechts)
Full provider identification in the Legal Notice.
Given the size of our organisation, we are not required to appoint a data protection officer under § 38 BDSG. For data-protection enquiries please contact us directly via the email address above.
We process personal data only to the extent necessary to provide a functional website together with our content and services. Such processing is normally based on the user's consent or on a statutory permission (in particular Art. 6(1)(b) and (f) GDPR).
When you visit our website, our hosting provider automatically captures technical data in log files:
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable and secure operation). Retention: up to 14 days, then anonymised aggregation or deletion.
The website is hosted on servers operated by Vercel Inc. (frontend) and Hetzner Online GmbH (backend, API server, worker, and object storage). Hetzner servers are located in Falkenstein, Germany. Vercel operates a global infrastructure; individual requests may be processed in data centres in the United States or other third countries.
Legal basis: Art. 6(1)(f) GDPR (provision of services). Data processing agreements pursuant to Art. 28 GDPR are in place. Transfers to the United States are based on the EU-US Data Privacy Framework or on Standard Contractual Clauses (Art. 46 GDPR).
We use Supabase (Supabase Inc.) for sign-up and sign-in. The data is processed in a Postgres database hosted in an EU region (Frankfurt). We collect:
Session tokens are stored in your browser's local storage and are not retained on our servers.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Retention: for the duration of your usage; after account deletion, identification data are removed without undue delay. A data processing agreement pursuant to Art. 28 GDPR is in place.
To register for the free trial we collect the email address you provide. We use it solely to grant trial access and to notify you when the trial period ends.
Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract). Retention: until the end of the trial period; deletion thereafter unless a contract is concluded.
Subscriptions are processed through Stripe (Stripe Payments Europe Ltd., governed by Irish law, with offices in the United States and elsewhere). Payment data (card details, SEPA mandate data, etc.) is entered directly with Stripe and is processed exclusively by Stripe — we neither receive nor store this data. Stripe only transmits to us information about successful payments, the associated Stripe customer ID, and the chosen plan.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Transfers to the United States are based on the EU-US Data Privacy Framework or on Standard Contractual Clauses. A data processing agreement pursuant to Art. 28 GDPR is in place. Stripe's privacy policy: stripe.com/privacy.
On one of our sub-pages (the catalogue) we embed the pCon catalogue of our partner EasternGraphics GmbH via an iframe. Technically necessary connection data (in particular your IP address, user agent, and cookie data) is transmitted directly to the EasternGraphics servers. We have no influence on the scope of this data collection; details are governed by the EasternGraphics privacy policy: easterngraphics.com/en/data-protection.
Legal basis: Art. 6(1)(b) and (f) GDPR (provision of the catalogue as a core function).
To improve user experience we store the following values locally in your browser; these are not transmitted to our servers:
furn4viz_lang) — DE / EN / ESfurn4viz_fs) — preview images and configuration data for performanceYou may clear this data at any time through your browser settings.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functional web application) and § 25(2) no. 2 TDDDG (storage strictly necessary on the end device).
On our landing page we use Matomo Analytics via
Matomo Cloud (InnoCraft Ltd., hosted at
furnify3d.matomo.cloud) to understand how visitors
use the site (e.g. which sections they view, where they drop off,
whether they sign up for trial notifications). We use cookieless
tracking and do not set analytics tracking cookies. IP addresses
are anonymized in Matomo (server-side setting). No marketing
profiles are created. Campaign parameters from ad links (e.g.
Google Ads) are only used to attribute traffic sources.
You may object to this analysis by enabling “Do Not Track” in your browser or via the Matomo opt-out page. Matomo's privacy policy is available at matomo.org/privacy-policy.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring and optimizing our website). You have the right to object at any time on grounds relating to your particular situation (Art. 21(1) GDPR).
We only set strictly necessary cookies or comparable storage required to operate the website. Matomo on the landing page runs without tracking cookies. When you visit Stripe's payment pages, Stripe may set its own cookies; Stripe's privacy policy applies there.
Legal basis: § 25(2) no. 2 TDDDG (strict necessity).
Personal data is only disclosed to the following categories of recipients:
Where personal data is transferred to providers established in the United States (in particular Stripe and Vercel), such transfers are based on an adequacy decision of the European Commission (EU-US Data Privacy Framework) and/or on Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.
Personal data is deleted as soon as the purpose of processing ceases, unless statutory retention obligations apply (in particular § 257 HGB and § 147 AO: up to 10 years for accounting-relevant data).
You have the following rights under the GDPR:
To exercise your rights, please send an informal email to info@furnify3d.com.
You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent authority for us is:
Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI)We reserve the right to amend this Privacy Policy to reflect changes in the legal landscape or in the way we operate our service. The version in force at the time of your subsequent visit will then apply.