Catalog3D
Privacy notice
This notice covers the publicly accessible Catalog3D website and public demos.
Controller
Daniel Atashak
Connollystraße 5
80809 München, Germany
[email protected]
Website use
Ordinary technical request data may be processed to deliver pages, keep the service secure, and diagnose errors. This can include an IP address, browser information, requested pages, and timestamps. Processing is based on our legitimate interest in providing a secure and reliable website.
Information you provide
If you contact us or voluntarily use a public demo, we process the information and files you submit only as needed to answer you or provide the requested function. Please do not submit sensitive information or material you are not entitled to use.
Infrastructure and providers
We use service providers, including Google Cloud, to host and operate the public website and demos. Where data is processed outside the European Economic Area, we rely on an applicable adequacy decision or appropriate contractual safeguards where required.
See our current subprocessor list.
Kitchen planner demo
Access and account. For the confidential kitchen planner demo we process the details from your invitation, your Firebase Authentication account (name, email address, account ID; when you sign in with Google, the profile details Google provides), the details about you and your company that you confirm (name, position, company and its address) and a record of your acceptance of the terms of use (version, confirmed wording, time, IP address, browser details, dispatch of the confirmation email). Sessions use technically necessary cookies. The legal basis is Art. 6(1)(b) GDPR where you are the contracting party yourself, and otherwise Art. 6(1)(f) GDPR: our legitimate interest in providing the demo agreed with your company. We keep the acceptance record to establish and defend legal claims (Art. 6(1)(f) GDPR).
Uploaded content and projects. We process photos, room descriptions, messages to the planning assistant, designs and visualisations only to provide the demo to you. Photos are stored without embedded metadata such as location. We do not use this content to improve our products. Please avoid uploading photos in which people can be recognised. When a room is ready, we notify you by email at your account's address. Legal basis as above.
Protection against misuse. We log access to and use of the demo, such as times, functions used, request volume and IP address. Files and visualisations delivered to you may contain invisible markings assigned to your account. This lets us detect misuse, automated access and unauthorised sharing and protect our trade secrets. The legal basis is Art. 6(1)(f) GDPR.
Supporting your demo. So that we can support you and fix problems, we record which functions you use, how long operations take, whether errors occur, and what you write to and receive from the planning assistant. These records are visible only to us and are deleted together with your projects. To evaluate them and find the causes of problems, we use Anthropic (Claude) as a processor, which also processes them in the United States. The legal basis is Art. 6(1)(f) GDPR.
Recipients. For the demo we use processors: Google (Google Cloud for hosting, storage and computing, Firebase Authentication for sign-in, the Gemini API for image analysis), OpenAI (planning assistant and image generation) and Amazon Web Services (email delivery). The subprocessor list gives details.
Transfers to third countries. The demo's servers are located in the United States, and Google and OpenAI also process data there. Transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework where the recipient is certified under it, and otherwise on the Commission's standard contractual clauses (Art. 46(2)(c) GDPR).
Retention. We delete projects, photos, messages and visualisations 30 days after your demo access ends, or earlier on request; backup copies are overwritten within a further 7 days. Data we need to investigate a specific suspicion of a breach of the terms of use or to enforce claims is kept for as long as that purpose requires. Logs are deleted after 30 days. We keep your account, invitation and acceptance record until the limitation periods for possible claims under the demo agreement have expired.
Google Analytics and cookies
Optional Google Analytics is activated only with your consent. It helps us understand public website use in general. You can withdraw or change your choice at any time through Cookie settings in the footer. Technically necessary browser storage may be used for requested functions and security.
Retention
We retain personal data only for as long as necessary for the relevant purpose or legal obligations.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your data and object to certain processing. You may also complain to a competent data protection authority.