Data Processing Agreement (DPA)
The legally binding version is the German one available at AV-Vertrag.
This agreement governs the processing of personal and technical data within the professional cooperation between Choanaevo GmbH and its business clients (B2B). Here are the key points summarized:
- Purpose: Ensuring the protection of your technical specifications and personal information during 3D printing and prototyping.
- Security: We employ modern technical measures to protect your designs and data from unauthorized access.
- Sub-processors: We only engage essential service providers, such as our hosting partner World4You.
- Deletion: Client data is deleted after project completion in accordance with our defined retention periods.
1. Subject Matter and Roles
This agreement is concluded between the Client (Controller) and Choanaevo GmbH (Processor), Mariahilfer Straße 142, 1070 Wien. It serves to implement the requirements of the General Data Protection Regulation (GDPR/DSGVO) and the Austrian Data Protection Act (DSG).
Choanaevo GmbH undertakes to process personal data only on behalf of the Client and in accordance with the instructions of the Controller, provided these do not violate applicable law. Supplementary conditions regarding our cooperation can be found in our Terms and Conditions.
2. Nature and Scope of Data
Processing includes data necessary for the provision of 3D printing and modeling services:
- Categories of Data: Contact details, billing addresses, technical specifications, CAD files, and 3D models.
- Data Subjects: Employees of the Client, designated contact persons, and potentially end-users of the manufactured prototypes.
3. Obligations of the Processor
Choanaevo GmbH guarantees that all persons authorized to process the data are bound by confidentiality. We process data exclusively to fulfill the contractually agreed services (e.g., FDM or SLA printing). Any transfer of data to third countries is carried out only in compliance with the legal requirements of the GDPR.
4. Sub-processors
To provide the necessary digital infrastructure, Choanaevo GmbH utilizes the following sub-processors:
- World4You Internet Services GmbH (Wolfgang-Pauli-Straße 2, BT3, 4020 Linz) for website hosting and email communication.
- FormSubmit (USA) for the transmission of contact inquiries.
These providers are selected based on strict criteria to ensure an appropriate level of data protection. Further details on data transfers are available in our Privacy Policy.
5. Data Security and Notifications
We implement appropriate technical and organizational measures (TOM) to maintain the confidentiality and integrity of the data. In the event of a personal data breach, the Client will be notified immediately upon discovery to enable a report to the Österreichische Datenschutzbehörde (DSB, Barichgasse 40-42, 1030 Wien, https://www.dsb.gv.at).
6. Deletion and Return of Data
Upon termination of the order or expiration of statutory retention periods, all data will be deleted or returned to the Client. In accordance with our business rules, we store digital models of the client for a period of 6 months to facilitate re-orders, unless contrary instructions are provided.
7. Audit Rights and Final Provisions
The Client has the right to verify the compliance of the data protection obligations by Choanaevo GmbH within a reasonable scope. This agreement is subject to Austrian law. The place of jurisdiction is Wien.
Updated on 15 October 2026. Managing Director: Barbara Huber. Share Capital: 20.000 €.