Privacy
This English version is a translation for your convenience. The contract is concluded in Italian: if the two versions differ, the Italian text prevails.
This notice explains how we handle your personal data when you visit https://bobo3dprint.it, order, ask for a quote or write to us. It is the information required by art. 13 of Regulation (EU) 2016/679 (GDPR).
Last updated: 21 October 2026
1. Who the data controller is
| Controller | BOBO3DPRINT |
|---|---|
| Business address | Via della Libertà 56r-58r, 16129 Genova (GE), Italy |
| VAT number | 03023170990 |
| [email protected] | |
| Phone | +39 347 119 2176 |
2. What data we collect
When you order from the shop
First and last name, email, phone number, delivery address (if you choose shipping), the products you chose (with variant and colour), the colours you prefer if you write them, the amount and outcome of the payment. You enter them in the cart form, on our site. When you press "Order and pay" we store them in our private online archive, on servers in the European Union, for 30 days, and pass them to Revolut for the payment. You enter your card details only on Revolut's payment page: they do not pass through our site, and we do not see or store them. If you buy a gift and enter another person's details, we use them only for the delivery.
When you personalise a product
For the Key Book you can write texts and upload icons for the cover. Until you order, they stay in your browser. When you press "Order and pay" we send them with the order to our private archive in the European Union, together with an image of the cover as you composed it, and we use them only to print your product. For some albums you can write a text for the cover, which arrives with the order.
We do not receive the photos you upload to prepare them for printing (in the Key Book and the albums): your browser creates the PDF to print, and the photos stay on your device.
When you ask for a quote
Name, email, phone (optional), notes, and the 3D file or the photos, measurements and description you upload. We also record your declaration that you hold the rights to the file. The form asks you to confirm that you have read this notice.
The file is analysed in your browser. It reaches us only when you press "Richiedi conferma" (ask for confirmation). If you upload photos, avoid including people or personal data that are not needed.
When you withdraw from an order
Name, email, order number or date, the products and the message you write in the withdrawal form, and the date and time of the declaration. We reply with a receipt by email.
When you write to us or call us
The data you give us (email, phone, username on WhatsApp, Telegram or Instagram) and the content of the messages.
If you ask for an invoice
Name or company name, tax code, VAT number, address, recipient code or PEC (certified email).
Technical data
IP address, browser type, date and time of requests. The services that host and protect the site (Cloudflare) process them. Your cart also stays in your browser: see the section on cookies.
3. Why we use the data and on what legal basis
| Purpose | Data | Legal basis (art. 6 GDPR) |
|---|---|---|
| Handling the order: taking payment, making, shipping, support and guarantee | Order, delivery and contact data | Performance of the contract (paragraph 1, point b) |
| Answering the quote request, assessing the file, modelling | Quote data, files, photos, notes | Pre-contractual steps taken at your request (paragraph 1, point b) |
| Meeting legal obligations: invoices, accounting, taxes | Order and billing data | Legal obligation (paragraph 1, point c) |
| Keeping the site and the form secure, preventing spam and fraud | Technical data, IP address | Our legitimate interest in protecting the service (paragraph 1, point f) |
| Defending our rights in case of complaints or disputes | Order and communication data | Our legitimate interest (paragraph 1, point f) |
| Printing your text and icons on the personalised product | Text, icons, cover image | Performance of the contract (paragraph 1, point b) |
| Receiving internal alerts about new orders and quotes | Order or quote summary | Performance of the contract and pre-contractual steps (paragraph 1, point b) |
We do not use your data for marketing or profiling. We do not send newsletters. If we ever do, we will ask for your consent first.
We need the data the form asks for to carry out the order or answer the quote. Without it we cannot go ahead. The phone number in the quote form is optional.
4. Who we share the data with
We do not sell data. We share it only with those we need to do the work: suppliers that process it on our behalf and parties entitled to it by law.
- Revolut: handles payments. It receives from us your name, email, phone, delivery address, the products and the order amount, and from you your card details. Its own privacy notice applies. TODO-CONFIRM: Revolut's role (on our behalf or as an independent controller, for example for anti-money-laundering and anti-fraud checks) and the safeguards for any transfers outside the European Economic Area, to be read in its documents.
- Cloudflare: hosts the site, runs the shop's code, keeps the order data and quote files in a private archive in the European Union, and protects the form from spam with Turnstile.
- Resend: sends the automatic emails on our behalf, that is the order confirmation and the withdrawal receipt. It receives your name, your email and the text of the message.
- Telegram: sends us a private alert when an order, a quote or a withdrawal arrives. An order alert contains the products, amounts, name, phone, email and delivery address and, if you personalised the cover, a private link to your icons and the cover image, valid for 7 days. A quote alert contains the name, email, phone (if you gave it), notes, summary and private links to the files, valid for 7 days. A withdrawal alert contains the name, email, order, products and message.
- Packlink PRO (Auctane, S.L.U., Madrid): the platform we use to create shipping labels. It processes the data on our behalf.
- The courier that delivers the parcel: it receives the name, address and phone and, if needed, the email for tracking notifications.
- Our tax adviser and, for electronic invoices, the Italian Revenue Agency (Agenzia delle Entrate) through the Exchange System (Sistema di Interscambio).
- Email, WhatsApp, Telegram and Instagram: if you contact us through these services, the message passes through their platforms, which handle it under their own privacy notices.
- Public authorities, if the law requires it.
5. Transfers outside the European Economic Area
Cloudflare, Resend and Telegram may also process data outside the European Economic Area, in particular in the United States. Cloudflare states that it participates in the EU-U.S. Data Privacy Framework, which the European Commission recognised as providing an adequate level of protection in Implementing Decision (EU) 2023/1795 of 10 July 2023, and that it uses standard contractual clauses as an alternative. Resend participates in the EU-U.S. Data Privacy Framework. Telegram sets out its safeguards in its own privacy notice.
To get a copy of the safeguards or find out where you can consult them, write to us at [email protected].
6. How long we keep the data
| Data | How long we keep them |
|---|---|
| Files and photos uploaded with a quote | 30 days, in the online archive and in the copies on our work computers. Then we delete them, unless you confirm an order. With an order we keep them to carry it out and, after delivery, for 26 months: the 2 years of the guarantee plus 2 months to report a defect (support, reprints and guarantee). |
| Icons and cover image of personalised products | 30 days in the online archive, then they are deleted automatically. We download them only to print your order and, after delivery, we delete those copies too. |
| Order data in our online archive (from the cart form) | 30 days, then it is deleted automatically. What we need afterwards stays in the order confirmation, the internal alerts and the payment data, for the periods in the row below. |
| Order, billing and withdrawal data | For the period required by tax and civil law, as a rule 10 years (art. 2220 of the Italian Civil Code). TODO-CONFIRM: to be checked by the accountant. |
| Emails and messages | As long as needed to reply to you and handle any disputes. If there is an order, the same as the order data. |
| Technical browsing data | As long as needed for security, according to Cloudflare's settings. |
| Telegram alerts | Up to 30 days after the order is delivered or the quote is closed, then we delete them. |
| Cart in the browser | It stays on your device until you empty it or clear the site data. |
When the period ends, we delete the data or make it anonymous.
7. Your rights
You can:
- find out whether we process your data and get a copy of it (access, art. 15);
- have wrong or incomplete data corrected (rectification, art. 16);
- have the data erased (art. 17);
- have the processing restricted (art. 18);
- receive the data you gave us for the contract in a readable format, or have it passed to someone else (portability, art. 20);
- object to processing based on our legitimate interest (art. 21).
You can ask us at any time to delete the files and photos you sent us before the period ends. We do so unless the law requires us to keep them.
To exercise your rights, write to [email protected]. Exercising your rights is free. We reply within one month. If the request is complex we may extend this by two months: in that case we tell you within the first month and explain why (art. 12, paragraph 3).
If you think we handle your data wrongly, you can complain to the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or go to court (arts. 77 and 79 GDPR).
We do not process data on the basis of consent, so there is no consent to withdraw.
8. No profiling and no artificial intelligence on your files
We do no profiling and take no decisions based solely on automated processing that affect you. The quote tool calculates an estimate from your file with fixed formulas. A person confirms the final price.
We do not use the files and photos you send us to train artificial intelligence systems, ours or anyone else's, and we do not give them to anyone for that purpose.
9. Cookies and browser storage
This site uses no profiling cookies and no third-party cookies for advertising or statistics. That is why it shows no cookie banner.
The cart is saved in your browser's local storage (localStorage) and remembers the products you choose. This is technical storage, needed for the service you request: so we do not need your consent, and this notice is enough (Italian Data Protection Authority, Guidelines on cookies and other tracking tools, 10 June 2021). The content of the cart reaches us only when you press "Order and pay". You can delete it at any time by clearing the site data in your browser.
If you personalise a product or prepare photos for printing, the draft, the photos and the icons stay in your browser's storage (localStorage and IndexedDB) until you remove them: that way you do not lose your work if you close the page, and at payment we can send the icons and the cover image with the order. This too is technical storage, needed for the service you request. From the cart, images that no product uses any more are deleted automatically.
Your browser also remembers the language you choose, whether you stopped the animations and whether you closed the notice at the top. These are technical preferences: they stay on your device and never reach us.
When you press "Order and pay" you leave our site and reach Revolut's payment page, which may use its own cookies and similar technologies, for example for security and fraud prevention. Revolut manages them under its own privacy notice.
In the quote and withdrawal forms we use Cloudflare Turnstile against spam. It analyses technical signals from the browser, such as the IP address and browser type, to tell people from automated programs.
10. Security
Order data, with the icons and the cover image of personalised products, is kept in a private archive in the European Union and is deleted automatically after 30 days. Quote files are kept in the same archive, in a folder with a random name. They are not public and, if the quote does not become an order, they are deleted automatically after 30 days. The site uses an encrypted connection (HTTPS).
11. Minors
The shop is for adults. We do not knowingly collect data from people under 18.
12. Changes to this notice
If we change it, we update the date at the top.
13. Contact
For questions about your data, write to [email protected] or call +39 347 119 2176.