Prusa Connect Privacy Policy

1. Introduction

1.1. Despite the fact that we basically never stop inventing, improving and testing new things for you, we never forget to think about your safety. That is why we protect your privacy with the most advanced practices and technologies. We aim to ensure that, within all the services we provide, your personal data are always processed only to the extent necessary and only for the necessary purposes in accordance with applicable legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the “GDPR”).

1.2. This PRUSA CONNECT Privacy Policy (hereinafter the “Policy”) applies exclusively to the processing of personal data of users using the PRUSA CONNECT service (hereinafter the “Service”) provided on the basis of the PRUSA CONNECT Terms and Conditions (hereinafter the “Terms and Conditions”). Unless this Policy stipulates otherwise, the capitalised terms have the meaning defined in the Terms and Conditions.

1.3. This Policy aims to inform you of your rights and obligations in relation to personal data processing and of the manner and extent of their processing in connection with the provision and use of the Service.

1.4. Please note that if you visit or use our PRUSA CONNECT website as an unregistered visitor, the processing of your personal data obtained in connection with your visit to the website will be governed by the general principles of processing available here [***].

1.5. The controller of personal data processed in connection with the provision of the Service (https://connect.prusa3D.com) is Prusa Research a.s., Id. No: 066 49 114, with its registered office at Partyzánská 188/7a, Holešovice, 170 00, Prague 7, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section B, File 23056 (hereinafter “we” in all its forms, or the “Controller”, or the “Operator”).

1.6. If you are unclear about how personal data are processed under this Policy, please contact us at any time.

Contact details of the Controller:

Prusa Research a.s.
Partyzánská 188/7a
170 00 Prague 7 - Holešovice
Czech Republic

E-mail address: [email protected]
Phone: +420 222 263 718

2. Sources and categories of the personal data processed

2.1. The Controller processes personal data obtained directly from you as a user when opening a PRUSA CONNECT account, as well as data obtained in connection with your use of the Service, i.e. either data directly provided by you or data transferred to the Service based on communication between your printer or end device and the Service.

2.2. The Controller processes, in particular, your identification and contact data, voluntarily provided descriptive data, operational and technical data related to the printing, course and administration of print tasks and printers, data on your active use of the Service, user content provided voluntarily by you, data on membership in the PRUSA CONNECT Groups, and a record of your logins to the Service. More details can be found in this Policy.

3. Purpose, legal basis and duration of personal data processing

A. Keeping the PRUSA CONNECT account

3.1. For the purpose of keeping your PRUSA CONNECT user account, we process identification data necessary for keeping your user account, such as your name, e-mail, identification details of your device/printer, list of PRUSA CONNECT groups of which you are a member, etc.

3.2. The legal basis for personal data processing is the exercise of the Operator’s contractual rights and obligations following from the Terms and Conditions.

3.3. We process personal data for this purpose for a period of 3 years from the last login to the Service.

B. Technical and operational data necessary for the provision of PRUSA CONNECT

3.4. For the purpose of operating and providing the functions of the Service, we process other operational and technical information that may have the nature of personal data either separately or in a set and that relates to your device, print tasks or activities within the Service.

3.5. In this context, we process:

Type of data and their source	Selection of data	Duration of processing
Data that you provide to us by entering them in the Service	names of print files, previews of images, names of printers and their locations, etc.	For as long as you use this data within the Service and 30 days after you erase them.
Operational and technical data we obtain on the basis of communication between your end device and the Service	type and serial number of the printer, IP and MAC address and network settings of the printer, firmware version and status of any appendix, date of addition of the printer to the Service, API key for local use from other applications used, local username and password in encrypted form, current status of your end device, current operating values of your printer, status of consumables, technical parameters and user settings of your printer, etc.	3 months from their last saving
Log of print tasks	metadata of the print file, progress of the print task, state of measurement of the pad before printing, events during printing	3 months back
Visual recordings of print tasks	Images recording the course of the print task, name of the video camera/camera, date of taking the picture, connection with the print task	3 months back

3.6. The legal basis for this personal data processing is the exercise of the Operator’s contractual rights and obligations following from the Terms and Conditions for the purpose of providing the Service offered.

4. Common provisions on the retention and processing of personal data.

4.1. The Controller shall erase the personal data upon expiry of the retention period.

4.2. The Controller does not perform automated individual decision-making or profiling of users within the meaning of Article 22 of the GDPR.

5. Your rights in relation to personal data processing

5.1. Under the terms of the GDPR, you have the following rights as a data subject:

• the right of access to your personal data under Article 15 of the GDPR;
• the right to rectification of personal data under Article 16 of the GDPR, or restriction of processing under Article 18 of the GDPR;
• the right to erasure of personal data under Article 17 of the GDPR. However, the Controller declares that, following the exercise of your right to erasure of your personal data, the processing of those personal data necessary for the fulfilment of financial, tax and other legal obligations to which the Controller is subject, as well as for the establishment, exercise or defence of legal claims, continues after the Controller has exercised your request;
• the right to object, under Article 21 of the GDPR, to the processing on the legal basis of legitimate interests or for the purpose of direct marketing;
• the right to data portability under Article 20 of the GDPR;
• to revoke the consent you granted to personal data processing at any time;
• the right to unsubscribe from receiving commercial communications, i.e. to revoke consent with the related personal data processing through the link included in the communications;
• the right to obtain a copy of the standard contractual clauses concluded by the Controller under Article 46 of the GDPR.

5.2. To exercise the above rights, you can use the contact form on the PRUSA website, the e-mail address [email protected] or you can contact us by sending a written request to Partyzánská 188/7a, Holešovice, 170 00 Prague 7, Czech Republic.

5.3. In connection with the processing of your personal data, you can also file a complaint at any time directly with the Office for Personal Data Protection with its seat at Pplk. Sochora 27, Prague 7, the Czech Republic, or with any of the supervisory authorities of the relevant Member State of the European Union (EU) or the European Economic Area (EEA). Contact details of the individual supervisory authorities can be found at: https://edpb.europa.eu/about-edpb/about-edpb/members_cs

6. Disclosure and transfer of personal data to third parties

6.1. Your personal data processed within the Service will be disclosed to other users of the Service especially with regard to your user settings made in the PRUSA CONNECT account. Once you become a member of any PRUSA CONNECT group (you confirm an invitation from another user), the following data will be automatically disclosed to other users of that group:

Your username, profile picture, print file names, images previews, names and locations of the printers, as well as other data that you choose to share with other members.

6.2. You may always disclose other data and content to the extent disclosed by you in the user settings of the Service to other persons at your discretion. This includes, in particular: print images, links to profiles at other third-party services, including usernames (e.g. Slack, Discord, etc.)

6.3. Except for the recipients and categories of recipients set out below in this Policy, the Controller does not transfer personal data to countries outside the European Economic Area (“EEA”) or to international organisations. In cases where personal data are transferred to countries outside the EEA, the Controller shall take all steps foreseen by generally applicable European data protection law to ensure adequate protection of personal data, in particular by means of standard contractual clauses on data protection adopted by the European Commission (or the supervisory authority and then the European Commission), which it shall provide for contractual arrangements with each relevant recipient of personal data.

6.4. All personal data processed by the Controller may also be transferred to recipients who are other companies from the Prusa3D group. The legal basis for the sharing of personal data by the companies of the Prusa3D Group is the legitimate interest of the Controller under Article 6(1)(f) of the GDPR; this legitimate interest of the Controller consists in the interest in the transfer of personal data within the group of companies for internal administrative tasks in accordance with this Privacy Policy. For the purposes of this Policy, the Prusa3D Group consists, in aggregate, of the following legal persons incorporated under the laws of the Czech Republic:

• Prusa Development a.s., Company Id. No.: 06662277, with its registered office at Partyzánská 188/7a, Holešovice, 170 00 Prague 7, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section B, File 23081;
• Prusa Manufacturing a.s., Company Id. No.: 06655866, with its registered office at Partyzánská 188/7a, Holešovice, 170 00 Prague 7, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section B, File 23066;
• Prusa Polymers a.s., Company Id. No.: 06593615, with its registered office at Partyzánská 188/7a, Holešovice, 170 00 Prague 7, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section B, File 22991;
• Prusa Development a.s., Company Id. No.: 06662277, with its registered office at Partyzánská 188/7a, Holešovice, 170 00 Prague 7, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section B, File 23081;
• Prusa Global a.s., Company Id. No.: 06656447, with its registered office at Partyzánská 188/7a, Holešovice, 170 00 Prague 7, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section B, File 23068;
• Prusa Circuits a.s., Company Id. No.: 14099519, with its registered office at Partyzánská 188/7a, Holešovice, 170 00 Prague 7, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section B, File 26948;
• FUTUR3D s.r.o., Company Id. No.: 28952383, with its registered office at Partyzánská 188/7a, Holešovice, 170 00 Prague 7, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, File 155408; and
• CoMoGa s.r.o., Company Id. No.: 27199738, with its registered office at Václavské náměstí 813/57, Nové Město, 110 00 Prague 1, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, File 103902.

6.5. The Service and the other PRUSA websites may also contain other links and functionalities to third-party services and social media, such as Facebook, Pinterest, Twitter, Instagram, etc., which may, if you choose to use them, process your personal data such as your IP address, the history of the pages you have visited or may store cookies or other technical means on your device, such as the Facebook pixel, etc. The processing of your personal data in this case is governed by the policies adopted by the operators of these services and social media, which are available on their websites.

6.6. The recipients specified herein shall not make the personal data available any further; a copy of the personal data processed may be obtained from them.

7. Conditions of personal data security

7.1. The Controller represents that it has implemented all the appropriate technical and organisational measures for personal data protection.

7.2. The Controller has adopted technical measures to secure the data storages and storages of personal data in hard copy form, including, in particular, a secured/encrypted access to the internet, encryption of customers’ passwords in the database, encryption of login details and API keys within the Service, regular updates of the system and regular backup of the system.

7.3. The Controller represents that only authorised persons of the Controller shall have access to the personal data.

8. Cookies

8.1. In order to improve the quality of the PRUSA SERVICES and to facilitate their use, in particular to analyse the traffic and user behaviour on the PRUSA website, to personalise advertising and to make social media functions more accessible, the PRUSA SERVICES use cookies or other technical means stored on your end device (hereinafter the “cookies”). The cookies may be saved directly by the Controller, or they may be third-party cookies (see the recipients under paragraph 5.3 hereof). These files may not directly contain personal data, however, in conjunction with other data, may gain the nature of personal data.

8.2. A list of processed cookies and their division into individual categories which include essential cookies, which must always be processed for the proper functioning of the PRUSA website, and marketing cookies, which you can consent to, can be found here: https://www.prusa3d.com/page/information-about-cookies_231459/.

9. Final Provisions

9.1. This Policy forms an integral part of the PRUSA CONNECT Terms and Conditions.

9.2. This Policy shall take effect on [***].