Privacy
Updated: 18 October 2026
Controller responsible for processing
Andreas Weinzierl, Riederting 49, 83278 Traunstein, Germany
info@3d-holzdesign.de
Phone: +49 (0) 861 166 303 72
Contact and use of this website
General project enquiries offer three options: direct form submission, copying the text, or opening your email application. Direct submission transfers your contact and project details to our protected Host Europe inbox and company email inbox. These include the selected service, name, email, optional company and address details, material, quantity, preferred date and project description, plus a reference and receipt and sending status. An automatic acknowledgement is sent; it does not confirm an order. An essential session cookie or security token protects submission, and a pseudonymous IP hash limits abuse. The purpose and legal basis are handling your enquiry and, where applicable, preparing a contract as described below. Copying initially keeps the text on your device. Opening your email application prepares a message for you to send yourself. You must attach files yourself. These two options do not trigger an automatic form acknowledgement.
The ORNI mascot uses browser session storage to remember your chosen position and whether its speech bubble has already appeared automatically. ORNI’s short sound effects are generated locally in your browser. The sound on/off preference is stored on your device. A connection to Fonio (widget.fonio.ai) is established and the chat loaded only when you click ORNI or his speech bubble. Fonio then receives technical connection data such as your IP address and website address. Messages you send in the chat are processed by Fonio to respond to your request. The Fonio widget also stores its open state in browser session storage. The short opening sequence uses session storage to remember whether it has already played during your visit and can be replayed with “Watch intro”. Optional intro music is delivered by this website; its sound preference is stored locally on your device. Clicking “Send non-binding enquiry” transmits shop enquiries directly to this website’s server and stores them in the protected enquiry inbox. This includes your name, email, product selection, quantity, the selected shipping and billing details and any additional message, together with the price summary, reference number, receipt time and processing status. The owner can access these details to respond personally; they are not displayed publicly. To limit abusive submissions, a server-keyed hash is derived from the IP address. The raw IP is not stored in the enquiry inbox. Hashes older than 48 hours are cleared on a subsequent successful submission. Enquiry details remain stored for processing. Other images and the site styling are served with the website.
Hosting with Host Europe
This website is hosted by Host Europe GmbH, c/o Spaces, Gertrudenstraße 30–36, 50667 Cologne, Germany. Requests involve technically necessary connection data, including IP address, time, requested address, and browser and device information. The provider also supplies storage for the protected enquiry inboxes and uploaded files. Access and error logs support secure operation and troubleshooting; retention depends on the period required for those purposes and the hosting package settings. The legal basis is Article 6(1)(f) GDPR (secure provision of the website).
Further information: Host Europe – Datenschutz.
Handrail enquiries and file uploads
Submitting the handrail form sends us your name, email address, street, house number, postcode, city and country, together with project details covering length, curved components, timber, profile, special requirements, material supply, survey and preferred date. Company name and phone number are optional. We also store a reference number, receipt time, language and processing status.
You may attach a profile cross-section of up to 1 MB. A room survey of up to 10 MB can be uploaded only when you choose to provide your own digital survey. Files are transferred only when the enquiry is submitted. We also store the filename, size, file type and a checksum to verify complete transmission. Please provide only project-related documents and remove unnecessary personal details, such as information about occupants.
The information and files are used for technical assessment, costing and our personal response, and, where applicable, subsequent fulfilment of an order. They are stored in the protected enquiry inbox and a file store that is not publicly accessible. The owner can view them after signing in. Choosing a survey by our service partner does not automatically forward your information to that partner; any necessary sharing to perform the survey will be agreed with you. The form does not automatically send uploaded files to ORNI/Fonio or other AI services.
Processing to prepare a contract requested by you is based on Article 6(1)(b) GDPR. If you act as a company contact, processing your contact details is based on our legitimate interest in conducting business under Article 6(1)(f) GDPR. Required fields are needed to process the enquiry; the form cannot be submitted without them. You may contact us by email instead.
To prevent abusive submissions, the application uses a hash of the IP address generated with a secret server key. The raw IP address is not stored in the handrail enquiry inbox. This is separate from technical connection data processed by the hosting provider. Abuse prevention is based on Article 6(1)(f) GDPR.
Retention depends on processing the enquiry, any subsequent order, statutory retention duties and the necessary preservation of legal claims. Personal details and files that are no longer required must be deleted once those grounds cease to apply. Marking an enquiry as “reviewed” does not automatically delete it. For access, correction or deletion, contact info@3d-holzdesign.de. Submitting the form does not place an order; quotations and acceptance are handled personally.
Form email notifications
Direct submission of a shop enquiry, handrail enquiry or event registration triggers a receipt acknowledgement to the email address provided and an internal message with the details to our company inbox. Messages are sent through the hosting provider’s mail service. Uploaded files remain in the protected inbox and are not attached to emails. We retain handoff status and sending attempts to identify errors and avoid duplicate messages. A receipt acknowledgement does not accept an order or confirm participation. General project enquiries can also be submitted directly. Sending through your own email application does not trigger an automatic form acknowledgement.
Supporting data services
Visitor and country statistics and the counter of successful ORNI chat openings use our data service at holzdesign-studio.info554001.chatgpt.site. These statistics functions do not transmit form entries or chat messages. Separately, the protected event synchronisation processes the registration details described below. Google rating information and the sanitised opening-hours status are instead retrieved from that service by our Host Europe server; the application does not forward visitor IP addresses, browser identifiers or cookies for these requests. Only opening hours and attendance forecasts intended for the website are taken from the work schedule, excluding private calendar reasons or contact details.
Purposes, legal bases and retention
We process general contact enquiries, shop enquiries and event registrations to respond to you and prepare or provide the requested service (Article 6(1)(b) GDPR). For company contacts, processing is based on our legitimate interest in business communication (Article 6(1)(f) GDPR). Provision and security of the website, abuse prevention, mail delivery checks and the limited usage statistics described here serve our legitimate interests in secure operation and assessing our information service (Article 6(1)(f) GDPR). Google rating information is displayed to inform visitors about our business on the same basis.
Enquiry and registration records, email correspondence and sending logs are retained as long as needed for handling the request, organising the event, fulfilling orders or legal duties, or protecting legitimate legal claims. They must then be deleted. Separate statistical retention periods are stated below. A processing status does not itself trigger deletion. When erasing data, we also take account of existing copies in our private Google spreadsheets. Required fields are necessary for the relevant form; email contact is available as an alternative. Decisions on accepting orders or confirming participation are not automated.
External services and recipients
Recipients are the hosting, communication and platform providers used for each function: Host Europe for the company website, OpenAI/ChatGPT Sites for the continuing data service and protected background synchronisation, Google for the private Sheets overview, and Fonio for the ORNI chat you open. YouTube/Google, Elfsight and, where applicable, Instagram/Meta receive the data described for their integrations. We process ORNI chat enquiries to respond and, where relevant, prepare a contract; please provide only information needed for that purpose. Chat responses do not replace binding personal acceptance.
International platform providers may process data outside the European Economic Area, particularly in the United States. The services used and their respective privacy and transfer terms apply. Details and contact information are available from OpenAI, Google, Fonio and Elfsight. You may contact us for information about safeguards applicable to our use.
Saving event dates to your calendar
Published events offer a Google Calendar link and an ICS file for Apple Calendar and other calendars. These options are shown again after successful registration. Where email notifications are active, the receipt also includes the Google link and a calendar attachment. Calendar data contain only the event title, start, end, location and a general note, without company names, contact details or attendee lists. The Google link sends those event details to Google only when you click it. An ICS file is initially downloaded from our website or opened from the email; subsequent processing depends on your chosen calendar. You confirm saving yourself. We do not gain access to your calendar. The entry does not confirm participation and does not update automatically if the event changes.
Enquiries about your own AI assistant
“Like this assistant?” opens a separate enquiry to david@fonio.ai. Only after you consent and submit do we email your name, email address, message, selected interests and optional company and phone details to that recipient. Your chat history is not included. 3D-HolzDesign stores the enquiry, consent and receipt and sending times in its protected Host Europe inbox. We use a private Google spreadsheet for internal records. It contains the submitted contact details, message, selected interests, reference, receipt and sending times and sending status. When the connection is configured, synchronisation transfers only enquiries successfully handed to the mail server. The spreadsheet is accessible only to the owner. The protected data service at ChatGPT Sites supports this transfer. The records support your requested introduction and its documentation and are deleted once no longer needed, subject to applicable retention obligations. Forwarding is based on your consent under Article 6(1)(a) GDPR, which you may withdraw for the future using our contact address. Submission is protected by a time-limited security token; the Host Europe website uses an essential session cookie for this purpose. A hash derived from the IP address limits abuse; the raw IP is not stored in the enquiry list.
Event registrations
Submitting an event registration sends the company name, one contact person’s name and email address, and the number of participants to this website’s server. The other participants’ names are not requested. The event, a reference number, receipt time and processing status are also stored. The owner can access registrations in the protected administration area to organise the event and respond personally. These details are not displayed publicly or used for a newsletter. While a published registration event is active, its registration list is periodically copied via our protected ChatGPT Sites data service and a configured ChatGPT synchronisation to an owner-only, unshared Google Sheets spreadsheet for event organisation. The synchronisation processes event details, company, contact person, email, participant count, receipt time and processing status; no individual visitor names are added. Synchronisation pauses when no such event is active; the last spreadsheet copy is retained.
A server-keyed hash derived from the IP address helps limit abusive submissions. The raw IP is not stored in the registration inbox. Hashes older than 48 hours are cleared on a subsequent successful registration. The owner can delete registrations once processing is complete. You receive an automatic acknowledgement by email. Participation is confirmed personally. To ask about, amend or delete a registration, contact info@3d-holzdesign.de.
Visitor statistics on this website
The footer shows an estimate of visitors over the last 24 hours and country shares of visits over the last 365 days. Collection takes place through our continuing data service on ChatGPT Sites, without additional analytics cookies or an identifier in browser storage. The browser contacts that service directly, transmitting its IP address and browser identifier as technical connection data. To combine repeated views, a daily changing server-keyed hash (HMAC) is derived from the visitor identifier supplied by the hosting service, or from the IP address and browser identifier. The raw values are not stored in the statistics database. The hash is pseudonymous, not anonymous.
Country observations contain only the country supplied by the hosting service, the observation time and a random event ID, without a visitor hash. A new country observation is recorded per identifiable visitor no earlier than 24 hours after the previous one. VPNs can affect network locations; unidentified countries appear as “Unknown”. Known bots and browsers using Do Not Track or Global Privacy Control are excluded. Individual records are not displayed publicly.
Visitor hashes are excluded from reporting after 24 hours without a further recorded view, and country observations after 365 days. Expired records are deleted on the next recorded visit. Statistics records are held in the database of the data service on ChatGPT Sites. These figures are technical estimates, not an exact count of individual people.
ORNI’s usage counter
The counter beside ORNI shows successful chat openings recorded since its installation, not conversations or individual people. A random event ID to avoid duplicate submissions and the opening time are stored, without messages, IP addresses or visitor identifiers. No additional cookies are used. Known bots and browsers using Do Not Track or Global Privacy Control are excluded. Events are retained for the cumulative counter.
YouTube videos
The video library initially shows locally stored preview images. Clicking “Play video” loads a player from youtube-nocookie.com and sends technical data, including your IP address and browser information, to YouTube/Google. Playback may involve further data processing and browser storage. Without this click, the video library loads no YouTube player. Direct YouTube links open the external service.
Links to Google Maps and Apple Maps
The directions buttons are external links. Clicking one opens the selected map service and passes our business address as the destination. This website does not embed a map. Further processing is governed by the selected map service.
Instagram posts via Elfsight
Our homepage embeds the Instagram profile @3d_holzdesign using Elfsight. Your browser loads a script from Elfsight; posts and other media may load later. Technical connection data such as your IP address and the website address are sent to the providers involved. Content may be delivered by Elfsight, Instagram/Meta and their delivery services. Following a link to Instagram takes you to Instagram. The direct profile link remains available if the embedded feed cannot load.
Google reviews
When the automatic display is enabled, our website server retrieves our business’s average rating and review count through the Google Places API at the first visible reviews section of a visit in the current browser tab. The tab’s session storage records only whether a request has already been attempted. This flag contains no rating data or personal identifier and prevents further requests during internal navigation or reloads. If session storage is blocked, the automatic display remains disabled. Subsequent pages retain the direct Google link.
Our application does not forward the visitor’s IP address, cookies, browser identification or account details to Google. The request to Google comes from our website server. Ratings are timestamped and are not persistently stored by our application. On the server, we store only an aggregate monthly counter without visitor identifiers and our public business Place ID to limit requests.
Clicking a review link opens Google Maps in a new tab. Google’s processing is governed by its Privacy Policy. See the terms for the Google display.
Your data protection rights
Subject to the applicable legal requirements, you may request access, correction, deletion, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. Consent may be withdrawn at any time for the future. Please contact Andreas Weinzierl using the contact details above. You may also complain to a data protection supervisory authority, including the Bavarian State Office for Data Protection Supervision.
Press articles and PDF documents
Some press articles and their previews are embedded using the Yumpu document reader. When your browser loads that reader, it connects to Yumpu, transmitting in particular your IP address, browser information and the address of the page visited. This may happen on page load or when scrolling. Further processing is described in Yumpu’s privacy notice. Our own PDF files, such as terms and forms, are delivered by our website server and involve the technical processing described under Hosting.