Privacy policy

1. Who is responsible for your data

AUDIO VISUAL SERVICES SRL, operating the 3DLP brand and 3dlp.ro, is the controller where it determines why and how personal data is processed. References to “3DLP”, “we”, “us” and “our” mean AUDIO VISUAL SERVICES SRL.

• Registered office: București, Sector 2, Str. Barbu Văcărescu nr. 17, Etaj P, Romania
• Unique registration code (CUI): 16962583
• Email: 3dlp@3dlp.ro
• Telephone: +40 744 330 763

This policy applies to website visitors, people who contact us, authorised users of our private editorial tools, and people whose public professional or event information appears in content managed by 3DLP. A connected platform may also act as a separate controller under its own privacy policy.

2. Personal data we process

Website visits and enquiries

• Technical and security information such as IP address, browser and device type, requested page, referrer, time, response status, approximate region and diagnostic or security events.
• Privacy-focused, aggregate website statistics such as page views, referrer, approximate location and device category. Our current analytics does not set advertising or analytics cookies and does not give us a profile that directly identifies a visitor.
• Information submitted in a quote request: name, company, telephone number, email address, event date, city, venue and project description, together with the page and browser language needed to handle the enquiry appropriately.
• If you load the embedded map, Google may receive technical request information and use cookies or similar technologies under its own policy.

Private editorial tools and ChatGPT

• Account identity, authentication and permission information needed to restrict access to authorised users.
• Instructions, selected content, review decisions and confirmations provided when an authorised user asks the system to inspect, prepare or change content.
• The relevant tool request and result when the integration is invoked through ChatGPT. 3DLP does not request or reconstruct the complete ChatGPT conversation. OpenAI separately processes information available to it under OpenAI’s Privacy Policy.

Gallery, media and editorial information

• Project and event titles, descriptions, dates, public credits, organisation and venue names, photographs, captions, alternative text, tags, websites and public social-profile references selected for editorial use.
• Media and collection identifiers, image metadata, versions, source references and synchronisation status needed to organise and maintain authorised photo collections.
• Draft and approved copy, selected media, platform variants, planned publication times, revisions, approvals and publication outcomes.

Facebook, Instagram and LinkedIn publishing

• Identifiers and public information for the organisation, Facebook Page, Instagram professional account or LinkedIn organisation Page that 3DLP is authorised to manage.
• The identifier and administrative authority of the account that authorises the connection, the permissions granted, and credential status or expiry information.
• Approved captions, photographs, alternative text, tags, mentions, location references and planned publication times.
• Upload, media and post identifiers, public post URLs, processing or publication status, provider responses and errors needed to complete a request, diagnose a problem and avoid duplicate publication.

The publishing service is not designed to access contact lists, friends or connections, private messages, private profiles, advertising profiles, passwords, payment details, government identifiers, health information or other sensitive data. Please do not provide those categories through an enquiry, editorial instruction or social post.

3. Why we process data and our legal bases

• Contract and steps requested before a contract — to answer a quote request, discuss a project and provide an agreed service.
• Legitimate interests — to operate and secure the website, manage our editorial workflow, communicate 3DLP’s work through its organisation accounts, maintain appropriate records, investigate problems and prevent unauthorised or duplicate publication. We balance these interests against the rights of the people concerned.
• Consent — where optional account access, a non-essential technology or applicable law requires it. Consent may be withdrawn at any time without affecting earlier lawful processing.
• Legal obligation — where Romanian or EU law, a competent authority or a valid rights request requires us to retain information or take action.

4. Where the data comes from

We receive personal data directly from website visitors, people who contact us and authorised users; from connected services when access has been authorised; from our own project and editorial records; and from public professional, organisation, venue or event sources used to verify content before publication.

5. Who receives personal data

We disclose only the information reasonably needed for the relevant purpose. Recipients may include:

• service providers supporting hosting and delivery, content and media storage, authentication, transactional email, privacy-focused analytics, deployment, security and incident response, acting under applicable contracts and instructions;
• OpenAI when an authorised user invokes the private integration through ChatGPT;
• Meta when Facebook or Instagram account information is verified or approved content is published;
• LinkedIn when organisation access is verified or approved content is published;
• authorised photo and media services used to manage project imagery;
• Google if a visitor chooses to load the embedded map; and
• professional advisers, regulators, courts or competent authorities where disclosure is reasonably necessary or legally required.

The destination platforms explain their separate processing in the Meta Privacy Policy, LinkedIn Privacy Policy and Google Privacy Policy.

We do not sell or rent personal data and do not share it for cross-context behavioural advertising.

6. Public website and social content

Photographs, captions, credits, tags and organisation or venue references approved for publication become public on 3dlp.ro or the selected social platform. Other people, platforms and search engines may copy, reshare, index or cache public material. Deleting our internal copy does not automatically remove copies controlled by others; the destination platform’s rules also apply to its copy of a post.

7. How long we keep data

We keep personal data only for as long as reasonably necessary for the purpose described, taking account of the status of the enquiry or project, whether content remains live, security and continuity needs, platform requirements, and applicable accounting, tax, limitation and legal-obligation periods.

• Enquiries remain while needed to answer and follow up. If an enquiry becomes a customer relationship, relevant business records may be retained for the applicable contractual, accounting, tax and legal-claims periods.
• Technical, security and diagnostic records remain for the limited operational period configured for the relevant service, or longer where an incident, dispute or legal duty requires it.
• Editorial material and publication records remain while needed for the website or live post, editorial accountability and prevention of accidental duplicate publication, then are deleted or de-identified when those purposes end.
• Connection credentials remain only while the connection is authorised and operational. Expired, replaced or revoked credentials are removed or superseded as soon as reasonably practicable.
• Identifiable data received from a connected platform is deleted when it is no longer required for the authorised purpose, following a verified request, or when the platform validly requires deletion, unless a limited record must be retained by law.

8. Data deletion instructions

These instructions apply to data held by 3DLP through 3dlp.ro and its integrations with ChatGPT, Facebook, Instagram and LinkedIn.

1. Email 3dlp@3dlp.ro with the subject “Data deletion request”.
2. Name the relevant service and describe the information, account connection or public post you want us to address.
3. Provide the minimum information needed to find the record, such as the enquiry email address, username, organisation or Page URL, or public post URL.
4. We may ask for proportionate evidence that you are the person concerned or are authorised to act for the relevant organisation or Page. We use that evidence only to prevent unauthorised deletion.

Never send us a password, access token or API key.

We will respond to a valid request without undue delay and normally within one month. We will delete or de-identify the relevant data in systems we control, revoke the connection if requested, and notify applicable service providers where required. If the law requires us to retain a limited record, we will explain what must remain and why.

You can also remove the 3DLP connection through the app and website settings provided by Meta or the relevant platform. Revoking a connection stops future authorised access but may not identify every public post you want removed, so include the relevant post URLs in your request.

9. Your privacy rights

Depending on the circumstances, you may have the right to access, correct, erase, restrict or object to processing, receive portable data, and withdraw consent. Withdrawal does not affect processing that was lawful before withdrawal.

Right to object: where we rely on legitimate interests, you may object for reasons relating to your particular situation. We will stop unless we demonstrate compelling legitimate grounds or the processing is needed for legal claims.

To exercise a right, contact us using the details above. We may request only the information reasonably needed to verify identity and protect other people’s data. You may also complain to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) through dataprotection.ro or to the competent supervisory authority where you live or work.

10. International transfers

Some recipients may process personal data outside Romania or the European Economic Area. Where applicable law requires a transfer safeguard, we rely on the mechanism available for that service and transfer, such as an adequacy decision or approved standard contractual clauses, together with supplementary measures where appropriate. Contact us for information about the safeguard relevant to your data.

11. How we protect data

We use measures appropriate to the data and publishing risk, including restricted access, strong authentication, least-privilege permissions, encrypted connections, protected credential storage, review before public publication, appropriate logging and monitoring, updates and provider safeguards. No internet service is completely secure, but we investigate suspected incidents and make legally required notifications.

12. Children, marketing and automated decisions

The website and private editorial tools are intended for professional use and are not directed to children under 16. We do not knowingly collect children’s data through the editorial integration. We do not use data covered by this policy for direct marketing profiles or decisions producing legal or similarly significant effects based solely on automated processing. Scheduling approved content is an operational action, not such a decision.

13. Changes and contact

We update this policy when our processing, publishing destinations or legal obligations materially change. The effective date identifies the current version. We will not use platform data for a materially different purpose without first updating the relevant notice and obtaining any permission or platform review required.

For a privacy question, rights request or complaint, email 3dlp@3dlp.ro or call +40 744 330 763. Please do not include credentials or unnecessary sensitive information.