ALPHA3D PRIVACY NOTICE
This is a description of how your personal data is collected and used while you visit our websites https://alphaar.io/, https://app.alpha3d.io/ and use our 3D modelling services.
The controller of your personal data is Alpha AR OÜ, registry code 14586044, address Narva mnt 7b, Tallinn, Estonia (“Alpha3D”, “we”, “us”).
How we get the personal information?
The personal information we process is provided to us directly by you when you contact us as potential client as client representative, create account, use our services and contact us for service-related requests or support.
In addition, we may also collect your personal data indirectly. When visiting our website, we and our service providers, may collect certain data using tracking technologies like cookies, web beacons and similar technologies.
Indirectly collected data may fall under the terms of third-party privacy policies while they act as an independent data controllers. Please read those separately.
ALPHA3D 3D modelling is not intended to process pictures of human faces and does not generate 3D result from pictures of human face. We also do not use any facial recognition technologies in our product. Nevertheless, do not upload any pictures of human face to our platform and please keep in mind that pictures with human face are personal data.
What kind of data is processed by us and why?
|Processing activity||Data categories||Purpose||Legal basis|
|Account||E-mail, Password, Projects related information, billing method through Stripe||Providing the service||Contract|
|Generating 3D models from 2D images||Images uploaded by client to platform. PLEASE NOTE THAT ALPHA3D PLATFORM AND ITS SERVICES ARE NOT INTENDED FOR HUMAN FACE MODELLING. DO NOT UPLOAD PICTURES WITH HUMAN FACE AS ALPHA3D PLATFORM DOES NOT GENERATE 3D MODELS FROM HUMAN FACE.||Providing the service||Contract|
|Website maintenance and quality assurance||IP address of the device, Device screen size, Device type (unique device identifiers), Browser information, Geographic location (country only)||Providing the website and functionalities||Legitimate interest|
|Registering potential clients and interest||Data gathered through e-mail communication initiated by potential client||Client onboarding||Contract|
|Direct communication related to service||E-mail and chat message content||Support and requests||Contract|
|Payment information and billing||Client identification data, billing details||Providing the service||Contract|
|Marketing activities related to our product||Marketing||Consent|
Sharing your personal data
Any data you provide will not be publicly displayed or shared to others. ALPHA3D employees and business partners have access to personal data to the extent necessary for the performance of their work duties and is covered with confidentiality obligations.
We use third party processors to help provide our service.
Why and with whom we share your personal data?
|Categories of Recipients||Reason for sharing|
|Service providers||We work with service providers that work on our behalf which may need access to certain personal data to provide their services to us. These companies include those we have hired to operate the technical infrastructure that we need to provide service and assist in protecting and securing our systems and services as well as for business management. To receive more information about our service providers and business partners, please contact us firstname.lastname@example.org|
We may use service providers that process your data outside the European Union. While doing this we make sure that the transfer of your personal data is carried out in accordance with applicable privacy law and, in particular, that appropriate contractual, technical, and organisational measures are in place (e.g. additional safeguards through Standard Contractual Clauses).
Ensuring the security of personal data
We have taken necessary technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss or alteration and against the unauthorized disclosure, abuse or other processing in violation of applicable law.
Retention and deletion of personal data
The storage period of personal data depends on the purpose we process the data.
|Data Type||Purpose||Retention Time|
|Account related data||Account management||Until account deletion|
|Images uploaded by client to platform||Providing the service||Discovered personal data among the uploaded data will be deleted immidiately. Non-personal data is kept as long as the 3D modelling is provided to the client and may also be kept for AI training purposes as long as the purpose is fulfilled.|
|IP address of the device, Device screen size, Device type (unique device identifiers), Browser information, Geographic location (country only)||Providing the website and functionalities||Depending on the cookie retention time and website technical settings. Retention times may vary from one session or 1 day up to 2 or 3 years if not deleted manually earlier.|
|Data gathered through e-mail communication initiated by potential client||Client onboarding||Successful onboarding will keep the data as for the business relationship until the end of contract.|
|E-mail and message content||Support and requests related to service||We will keep the data as long as it is needed to fulfill the purpose derived from the communication.|
|Payment and billing information||Fulfilling the legal obligation and Contract||7 years + current fiscal year after the transaction|
|Marketing related data||Marketing||Until withdrawal of consent|
Your rights and preferences
Under data protection law, you have rights including:
1) Right to be informed and to access. You may get information regarding your personal data processed by us.
2) Right to data portability. You have the right to receive your personal data from us in a structured, commonly used and machine-readable format and to independently transmit those data to a third party.
3) Right to erasure. You have the right to have personal data we process about you erased from our systems if the personal data are no longer necessary for the related purposes.
4) Right to object and restrict. You have the right to object to the processing of your personal data and restrict it in certain cases.
5) Right to rectification. You have the right to make corrections to your personal data.
6) Right to withdraw consent. When you have given us consent to process your personal data, you may withdraw said consent at any time.
To exercise any of the abovementioned rights, please contact email@example.com. We will respond to your requests within 30 days.
If you have questions or concerns about our use of your personal information, please feel free to contact us at firstname.lastname@example.org. You may also lodge a complaint to the supervisory authority, the Estonian Data Protection Inspectorate, email@example.com