Privacy policy

Last updated: August 28, 2026

Who we are

This website and store at scant3d.com (the "Services") are operated by

scAnt UG (haftungsbeschränkt) (trading as "scAnt3d" / "scAnt pro")
Kölner Straße 34, 50226 Frechen, Germany
Amtsgericht Köln, HRB 125922 · VAT ID DE459354154
Managing Director: Dr. Fabian Plum
E-mail: hello@scAnt3D.com

("scAnt UG", "we", "us"). For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR and other applicable data protection laws, scAnt UG is the data controller for the personal information described in this Privacy Policy, except where this policy states that Shopify acts as an independent controller.

The Services are hosted and powered by Shopify (Shopify International Ltd., Dublin, Ireland, and its affiliates). This Privacy Policy describes how we collect, use and disclose your personal information when you visit or use the Services, request a quotation, place an order, use our software, or otherwise communicate with us.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described here.

Personal information we collect or process

When we use the term "personal information", we mean information that identifies or can reasonably be linked to you or another person. It does not include information that is collected anonymously or that has been de-identified so that it cannot reasonably be linked to you. Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information:

  • Contact details including your name, organisation, job title, address, billing address, shipping address, phone number and e-mail address.
  • Quotation and order information including the products and configurations you request a quotation for or order, delivery details, serial numbers of scanners supplied to you, invoices and payment status.
  • Financial information including bank account details shown on bank transfers, PayPal transaction details, form of payment and payment confirmation (payment card details, where you pay by card via PayPal, are processed by PayPal and are not stored by us).
  • Account information including your username, password, security questions, preferences and settings, if you create a store account.
  • Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel, and your past transactions.
  • Communications with us including the content of e-mails, support requests, warranty claims and other correspondence.
  • Device information including information about your device, browser or network connection, your IP address and other unique identifiers.
  • Usage information including information about your interaction with the Services, including how and when you navigate the Services.

Where we obtain personal information

  • Directly from you, including when you request a quotation, place an order, create an account, subscribe to our newsletter, communicate with us or otherwise provide us with your personal information.
  • Automatically through the Services, including from your device when you visit our website, through cookies and similar technologies (see "Cookies" below).
  • From our service providers, including when we engage them to enable certain technology and when they collect or process your personal information on our behalf.
  • From our partners or other third parties, for example distributors or research institutions that place an order on your behalf.

How we use your personal information and on what legal basis

Under the GDPR we must have a legal basis for each purpose for which we process your personal information. We use personal information for the following purposes:

  • Providing, tailoring and improving the Services — to operate the website and store, remember your preferences, maintain your account, and improve the Services. Legal basis: performance of a contract or steps prior to entering into one (Art. 6(1)(b) GDPR); our legitimate interest in operating and improving the Services (Art. 6(1)(f) GDPR).
  • Quotations, orders, delivery and licensing — to prepare quotations, conclude and perform contracts for the supply of scAnt pro scanners and the licensing of our software, process payments, arrange shipping and insurance, issue invoices, and provide software updates and firmware to the licensed scanner. Legal basis: Art. 6(1)(b) GDPR.
  • Support and warranty — to respond to your questions, provide technical support and process warranty and service requests. Legal basis: Art. 6(1)(b) GDPR; legitimate interest in providing effective customer service (Art. 6(1)(f) GDPR).
  • Newsletter and marketing communications — to send you launch updates, product news and offers by e-mail, if you have subscribed. You can withdraw your consent at any time using the unsubscribe link in every e-mail or by contacting us. Legal basis: your consent (Art. 6(1)(a) GDPR). For existing customers we may send information about similar products by e-mail on the basis of § 7(3) UWG; you may object at any time.
  • Security and fraud prevention — to authenticate accounts, provide a secure payment experience, and detect, investigate or take action regarding possible fraudulent, illegal, unsafe or malicious activity. Legal basis: legitimate interest (Art. 6(1)(f) GDPR); legal obligation (Art. 6(1)(c) GDPR).
  • Legal compliance — to comply with applicable law, including tax and commercial record-keeping obligations, to respond to valid legal process, and to establish, exercise or defend legal claims. Legal basis: legal obligation (Art. 6(1)(c) GDPR); legitimate interest (Art. 6(1)(f) GDPR).

We do not use your personal information for automated decision-making that produces legal or similarly significant effects on you.

Our software does not collect data

The scAnt pro software supplied with our scanners does not transmit usage data, telemetry, licence information or scan results to us. Images, 3D models and other output remain exclusively on your systems. The installer and update function download software components from servers operated by us or by the publishers of third-party components (for example GitHub or Teledyne FLIR); those servers may log your IP address in accordance with their own privacy policies.

How we disclose personal information

We may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy, including:

  • With Shopify and other service providers who perform services on our behalf, such as website hosting, payment processing, e-mail delivery, IT management, data analytics, customer support and cloud storage. These providers process personal information on our instructions under data processing agreements (Art. 28 GDPR).
  • With our carrier, DHL, to deliver and insure your order; we share the name, delivery address, phone number and e-mail address needed for delivery and customs clearance.
  • With payment providers — PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg) if you pay via PayPal, and our bank if you pay by bank transfer.
  • When you direct or ask us to, or otherwise consent to our disclosure of certain information to third parties, such as through your use of social media widgets.
  • With professional advisers (accountants, tax advisers, lawyers) bound by professional confidentiality, to the extent required.
  • In connection with a business transaction such as a merger or acquisition, to comply with legal obligations (including responding to subpoenas, search warrants and similar requests), to enforce our terms or policies, and to protect or defend the Services, our rights and the rights of our users or others.

We do not sell your personal information, and we do not use it for targeted advertising on other websites or platforms.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify and with third parties that may be located in countries other than where you reside.

For certain purposes of its own — such as fraud prevention, securing its platform and providing the Shop app — Shopify acts as an independent controller of personal information, including for responding to your requests to exercise your rights in relation to that processing. To learn more about how Shopify uses your personal information and your rights, see the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/customers. You may also exercise certain rights via the Shopify Privacy Portal at https://privacy.shopify.com/en.

Cookies and similar technologies

We use cookies and similar technologies on the website. Strictly necessary cookies (for example for the shopping cart, login and security) are set on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR. Analytics and personalisation cookies are set only with your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR), which you can give, refuse or withdraw at any time via the cookie banner or the privacy settings link in the website footer. You can also configure your browser to refuse cookies; some parts of the Services may then not function properly.

Third-party websites and links

The Services may contain links to websites or platforms operated by third parties (for example GitHub, Sketchfab, YouTube or social media). If you follow such links, you should review those sites' privacy and security policies and terms. We are not responsible for the privacy or security practices of such sites. Information you post in public or semi-public venues, including third-party social networking platforms, may be viewable by others without limitation. Our inclusion of a link does not imply endorsement of the linked site or its operator.

Children's data

The Services are directed at businesses, research institutions and adults. We do not knowingly collect personal information from children under 16. If you are the parent or guardian of a child who has provided us with personal information, please contact us using the details below so that we can delete it.

Security and retention

We use appropriate technical and organisational measures to protect your personal information. However, no security measure is perfect, and information sent over the internet may not be secure in transit; please do not use unsecured channels to send us sensitive information.

We retain personal information only as long as necessary for the purposes described above, and in particular:

  • Quotation, order, invoice and contract data: for the duration of the business relationship and thereafter for the statutory retention periods under German commercial and tax law (6 years under § 257 HGB, 10 years under § 147 AO), and for as long as necessary to provide software updates and warranty under the applicable licence terms.
  • Support correspondence: generally 3 years after the matter is closed (limitation period, § 195 BGB), unless a longer retention is required for a contract or legal claim.
  • Newsletter data: until you withdraw your consent; proof of consent is retained for as long as required to demonstrate compliance.
  • Store account data: until you delete your account or ask us to.
  • Website usage data: as set out in the cookie settings, typically not longer than 14 months.

Your rights

Under the GDPR and UK GDPR, and subject to the conditions and exceptions provided by law, you have the following rights in relation to your personal information:

  • Access (Art. 15 GDPR) — to request confirmation of whether we process your personal information and to obtain a copy.
  • Rectification (Art. 16) — to have inaccurate personal information corrected.
  • Erasure (Art. 17) — to request deletion of your personal information.
  • Restriction of processing (Art. 18).
  • Data portability (Art. 20) — to receive the personal information you provided to us in a structured, commonly used, machine-readable format.
  • Objection (Art. 21) — to object at any time to processing based on our legitimate interests, and to object at any time to direct marketing.
  • Withdrawal of consent (Art. 7(3)) — where processing is based on consent, you may withdraw it at any time with effect for the future; this does not affect the lawfulness of processing before withdrawal.

Depending on where you live, you may have similar rights under other laws. You can exercise these rights where indicated on the Services or by contacting us using the details below. We may need to verify your identity before processing your request. You may designate an authorised agent to act on your behalf; we will require proof of authorisation. We will not discriminate against you for exercising your rights and will respond within the time required by applicable law (generally one month under the GDPR).

Managing marketing communications. You may opt out of promotional e-mails at any time using the unsubscribe link in each e-mail. We may still send you non-promotional messages about your account, orders, software updates or warranty.

Complaints

If you have a complaint about how we process your personal information, please contact us first using the details below. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or the place of the alleged infringement. The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
https://www.ldi.nrw.de

A list of EEA supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en. UK residents may contact the Information Commissioner's Office at https://ico.org.uk.

International transfers

We are established in Germany. Shopify and some of our service providers process personal information in countries outside the European Economic Area and the United Kingdom, including Canada and the United States. Where we transfer your personal information out of the EEA or the UK, we rely on an adequacy decision of the European Commission (for example for Canada, and for US organisations certified under the EU–US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses or the UK equivalent. You may request a copy of the relevant safeguards by contacting us.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal or regulatory reasons. We will post the revised policy on this website, update the "Last updated" date, and provide notice as required by applicable law.

Contact

If you have questions about this Privacy Policy or our privacy practices, or wish to exercise your rights, please contact us:

scAnt UG (haftungsbeschränkt)
Kölner Straße 34, 50226 Frechen, Germany
E-mail: hello@scAnt3D.com

For the purposes of applicable data protection laws, scAnt UG (haftungsbeschränkt) is the data controller of your personal information.