Effective date: 1st July 2026<\/p>\n
This Privacy Policy describes how AbstractGroup collects, uses, and protects your Personal Data when you use our Services. It provides the disclosures required by the General Data Protection Regulation (GDPR) and other applicable data protection laws.<\/p>\n
The terminology used in this Privacy Policy follows the definitions in our Terms of Service<\/a>. In addition:<\/p>\n “Personal Data” means any information relating to an identified or identifiable natural person, as defined in Art. 4(1) GDPR.<\/p>\n “Customer Content” has the meaning given in the Terms of Service<\/a> (Content uploaded, created, or stored under a Customer’s account). This Privacy Policy describes processing of Personal Data of the data subject reading it. Where Customer Content contains Personal Data of persons other than the Customer, that processing is governed by the Data Processing Addendum<\/a>, where the Customer is the Controller and the operating subsidiary is the Processor; the Data Processing Addendum<\/a> defines this category as “Customer Personal Data”.<\/p>\n The controller for the processing of your Personal Data depends on the AbstractGroup function or Service involved.<\/p>\n Identity Service.<\/strong> The Abstract Identity service at id.abstract3d.com (the “Identity Service”) provides authentication and account management across AbstractGroup Services, and is operated as a standalone service by:<\/p>\n Abstract Group GmbH & Co. KG Abstract Group GmbH & Co. KG is the controller for Personal Data processed in connection with the Identity Service. AbstractGroup operating subsidiaries consume the Identity Service to authenticate Users, in the same manner as any third-party application would consume an authentication provider.<\/p>\n Service-level processing.<\/strong> Each AbstractGroup Service is operated by a subsidiary of Abstract Group GmbH & Co. KG. The operating subsidiary for a Service, as identified on the Service’s website or imprint, is the controller for Personal Data processed in connection with that Service, including billing data, support data, usage data tied to that Service, and Customer Content uploaded to that Service. The basis on which Personal Data flows between AbstractGroup entities is set out in the Recipients of Your Personal Data section.<\/p>\n Identity flow on Service signup.<\/strong> When Customer registers an account through the Identity Service and subsequently signs up for or uses a Service, Abstract Group GmbH & Co. KG shares the Customer’s authentication and core identification data with the relevant operating subsidiary as necessary to (i) authenticate Customer in that Service, (ii) maintain the contractual relationship between Customer and the operating subsidiary, and (iii) operate the Service Customer has chosen to use. This intra-group data sharing is necessary for performance of the contract between Customer and the operating subsidiary (Art. 6(1)(b) GDPR) and for AbstractGroup’s legitimate interest in operating an integrated identity service across its products (Art. 6(1)(f) GDPR and Recital 48 GDPR). The operating subsidiary becomes the controller for the data shared with it.<\/p>\n References in this Privacy Policy to “AbstractGroup”, “we”, “us”, or “our” refer to the controller responsible for the relevant processing as set out above.<\/p>\n Email: privacy@abstract3d.com We collect and process the following categories of Personal Data, each for the purposes set out below.<\/p>\n When you create an account through id.abstract3d.com, Abstract Group GmbH & Co. KG collects your name, email address, password (stored as a hash), and any other information you provide. Where you provide organization name, billing address, or tax identification in connection with a paid Subscription to a specific Service, that information is collected by the operating subsidiary for that Service.<\/p>\n We process Account Data to:<\/p>\n We retain Account Data for the duration of your account, plus the period required to meet legal retention obligations. Tax-relevant records are retained for ten years under \u00a7 147 AO; commercial correspondence for six years under \u00a7 257 HGB.<\/p>\n When you upload Content to a Service, the operating subsidiary for that Service hosts and processes it on your behalf. Where Customer Content contains Personal Data of people other than yourself (for example, photogrammetry of identifiable individuals), the operating subsidiary processes it as a processor on your behalf, on your instruction, under the Data Processing Addendum<\/a>. You are the controller for that data.<\/p>\n We retain Customer Content for the duration of Customer’s account, or for such other period as we determine is necessary to provide the Services or as may be required or permitted by law. After account termination, Customer has thirty (30) days to retrieve Customer’s Content using the export functionality of the Services, after which we delete or de-identify Customer Content in accordance with our standard data retention practices, except where law requires longer retention, where deletion is not technically feasible without disproportionate effort, or where retention is necessary for security, fraud prevention, defense of claims, or compliance with legal process. Specific retention timelines for business Customers are set out in the Data Processing Addendum<\/a>.<\/p>\n We collect technical information about how you use the Services, including IP address, device and browser type, pages and features accessed, timestamps, and error logs.<\/p>\n We process Usage Data to:<\/p>\n We retain Usage Data for up to twenty-four (24) months for security and product purposes, except where we determine that longer retention is necessary for security, fraud prevention, defense of claims, or compliance with law. We may retain Usage Data indefinitely in aggregated or de-identified form that no longer reasonably identifies you.<\/p>\n When you subscribe to a paid plan for a Service, the operating subsidiary for that Service is the controller for Billing Data. Where billing or invoicing is handled centrally by an AbstractGroup entity on its own behalf, that entity is a separate controller for the relevant processing on the basis described in the Recipients of Your Personal Data section. Our payment processor, identified on our subprocessor page at abstract3d.com\/subprocessors, collects payment information on the relevant controller’s behalf. We do not store full payment card numbers on our systems. The relevant controller retains billing records (invoices, transaction records) for ten years to meet German tax law (\u00a7 147 AO).<\/p>\n We process Billing Data on the basis of contract performance (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)).<\/p>\n If you sign up for our newsletter, register for an event, or request marketing materials, we collect your email address and any preferences you provide. We send you marketing communications based on your consent (Art. 6(1)(a)). You may withdraw consent at any time by clicking “unsubscribe” in any email or by contacting privacy@abstract3d.com. Withdrawal does not affect processing carried out before withdrawal.<\/p>\n For existing customers, we may send communications about products related to those you have purchased on the basis of legitimate interest (Art. 6(1)(f) and \u00a7 7 Abs. 3 UWG). You may object at any time.<\/p>\n When you contact our support team, we collect the information you provide and the content of the support communication. We process this on the basis of contract performance (Art. 6(1)(b) GDPR) for support tickets necessary to operate the contract, and on the basis of our legitimate interest in improving the Services (Art. 6(1)(f) GDPR) for general support analysis. We retain support communications typically for up to three (3) years, and longer where retention is necessary for the establishment, exercise, or defense of legal claims, for security incident records, or for compliance with law.<\/p>\n We may use cookies and similar technologies to operate the Services and provide essential functionality such as user-to-service authentication data or storing application-specific user-preference. Services that use nonessential cookies for marketing and analytics display a cookie consent banner.<\/p>\n We process cookie data on the basis of consent for nonessential cookies (Art. 6(1)(a) GDPR and \u00a7 25 TDDDG), and on the basis of legitimate interest or contract performance for strictly necessary cookies.<\/p>\n AbstractGroup operates as a corporate group. Personal Data flows between AbstractGroup entities for the operation of the group’s shared functions, including identity infrastructure, financial operations, billing, invoicing, controlling, accounting, customer relationship management, IT operations, and security operations. These flows are governed by an internal cooperation agreement between AbstractGroup entities and apply differently depending on the role of the receiving entity:<\/p>\n Where any such transfer involves an AbstractGroup entity outside the European Economic Area, we apply the transfer mechanisms set out in the International Transfers section.<\/p>\n We may also share Personal Data with the following categories of recipient outside the AbstractGroup:<\/p>\n Where Personal Data is transferred outside the European Economic Area, we use one of the following transfer mechanisms:<\/p>\n The current transfer mechanism for each subprocessor is shown on our subprocessor page.<\/p>\n Where Personal Data is transferred between AbstractGroup entities located in different jurisdictions, we apply the same transfer mechanisms as for transfers to third parties \u2014 adequacy decisions where applicable, intra-group SCCs (Module 1 Controller-to-Controller or Module 2 Controller-to-Processor as appropriate), or other safeguards required by Data Protection Law.<\/p>\n We maintain administrative, physical, and technical measures designed to protect your Personal Data, including encryption in transit and at rest using industry-standard cryptographic mechanisms, access controls, audit logging, and regular security testing. The detailed technical and organizational measures are set out in our Security Standards and in Annex II of the Data Processing Addendum<\/a>.<\/p>\n You have the following rights with respect to your Personal Data, subject to the limitations set out in applicable law:<\/p>\n To exercise any of these rights, contact privacy@abstract3d.com. We will respond within one month of receipt of a complete request, extendable by up to two further months where necessary in light of the complexity and number of the requests; in that case we will inform you of the extension and the reasons for it within one month of receipt.<\/p>\n The exercise of any right under this section operates prospectively. The lawfulness of processing carried out before the exercise of a right is not affected by that exercise, except where required otherwise by Data Protection Law.<\/p>\n If Customer uses the Services in a business capacity and Customer Content includes Personal Data of other people (such as Customer’s employees, contractors, or end customers), the operating subsidiary for the Service acts as a processor on Customer’s behalf, and Customer acts as the controller. Processing in that capacity is governed by the Data Processing Addendum<\/a>, available at abstract3d.com\/dpa or on request from privacy@abstract3d.com. The terms of acceptance and incorporation of the Data Processing Addendum<\/a> are set out in the Terms of Service<\/a>.<\/p>\n In line with the EU Digital Services Act (Regulation (EU) 2022\/2065), you can notify us of Content on the Services that you believe is unlawful by emailing trust@abstract3d.com. Notices should include your contact details, a description of the Content (with location), an explanation of why you believe it is unlawful, and a confirmation of your good faith.<\/p>\n We review notices, take appropriate action where the Content is found to be unlawful or to violate our Terms, and provide a statement of reasons to affected Users where required by law.<\/p>\n Our designated point of contact for authorities and Users under Art. 11 and Art. 12 of the Digital Services Act is trust@abstract3d.com.<\/p>\n The Services are not directed to children under the age of 16, and we do not knowingly collect Personal Data from them. If you believe we have inadvertently collected data from a child, contact privacy@abstract3d.com. We will review the report and take action consistent with our obligations under Data Protection Law, including, where appropriate, deletion of the relevant data.<\/p>\n Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. Once you leave the Services, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third party you visit.<\/p>\n We may update this Privacy Policy from time to time. Where a change materially affects Customer’s rights or obligations, we will give at least thirty (30) days’ advance notice through the Services or by email to the address associated with Customer’s account. The current version is always available at the URL where you found this document, with the effective date shown at the top.<\/p>\n Abstract Group GmbH & Co. KG, Silberburgstra\u00dfe 102, 70176 Stuttgart, Germany, on its own behalf and as the contact point for AbstractGroup operating subsidiaries. Privacy contact: privacy@abstract3d.com.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":" Effective date: 1st July 2026<\/p>\n","protected":false},"author":139290877,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_seo_schema_type":"","_wpcom_ai_launchpad_about_page":false,"_wpcom_ai_launchpad_gallery_page":false,"_wpcom_ai_launchpad_contact_page":false,"_wpcom_ai_launchpad_events_page":false,"_wpcom_ai_launchpad_video_page":false,"_wpcom_ai_launchpad_portfolio_piece":false,"footnotes":""},"class_list":["post-1539","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/abstract3d.com\/ko\/wp-json\/wp\/v2\/pages\/1539","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/abstract3d.com\/ko\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/abstract3d.com\/ko\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/abstract3d.com\/ko\/wp-json\/wp\/v2\/users\/139290877"}],"replies":[{"embeddable":true,"href":"https:\/\/abstract3d.com\/ko\/wp-json\/wp\/v2\/comments?post=1539"}],"version-history":[{"count":14,"href":"https:\/\/abstract3d.com\/ko\/wp-json\/wp\/v2\/pages\/1539\/revisions"}],"predecessor-version":[{"id":3861,"href":"https:\/\/abstract3d.com\/ko\/wp-json\/wp\/v2\/pages\/1539\/revisions\/3861"}],"wp:attachment":[{"href":"https:\/\/abstract3d.com\/ko\/wp-json\/wp\/v2\/media?parent=1539"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Controller<\/h3>\n
\nSilberburgstra\u00dfe 102
\n70176 Stuttgart
\nGermany<\/p>\nPrivacy Contact<\/h3>\n
\nPhone: +49 711 5044 3435
\nPost: Abstract Group GmbH & Co. KG, Attn: Privacy, Silberburgstra\u00dfe 102, 70176 Stuttgart, Germany (acting as central privacy contact for AbstractGroup controllers)<\/p>\nWhat Personal Data We Collect and Why<\/h3>\n
Account Data<\/h4>\n
\n
Customer Content<\/h4>\n
Usage Data<\/h4>\n
\n
Billing Data<\/h4>\n
Marketing Data<\/h4>\n
Support Data<\/h4>\n
Cookies and Similar Technologies<\/h4>\n
Recipients of Your Personal Data<\/h3>\n
\n
\n
International Transfers<\/h3>\n
\n
Security<\/h3>\n
Your Rights<\/h3>\n
\n
Data Processing for Business Customers<\/h3>\n
Notice and Action for Unlawful Content<\/h3>\n
Children<\/h3>\n
External Links<\/h3>\n
Changes to This Privacy Policy<\/h3>\n
\n