Privacy Policy

1. Data Controller

This Privacy Policy explains how Dimension3 GmbH processes personal data in connection with the 16K Native website (16knative.com) and the professional panorama processing services offered through it.

2. Scope of This Policy

This policy applies to all visitors of 16knative.com and to customers who order services through this website. Service delivery and payment processing are handled via Stripe, Inc. and our invoicing system. This policy covers data processing by Dimension3 GmbH only.

3. Data We Process

Depending on how you interact with our website and services, we may process:

• Contact information (name, email address, company name)
• Billing and payment information (processed by Stripe — we do not store card data)
• Order and transaction data
• Matterport project data submitted for processing
• Technical access data (server logs — see Section 4)

We do not process personal data beyond what is necessary for the stated purposes.

4. Server Log Data

When you visit this website, our hosting server automatically records technical access data. This includes:

• IP address (anonymized — last octet removed within 24 hours)
• Browser type and version
• Date and time of access
• Pages visited and files requested
• Referring URL (if applicable)

This data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in website security and technical operation) and is deleted after 30 days. This data is not used to identify individual visitors and is not shared with third parties.

This website does not use cookies, tracking scripts, or analytics tools. No personal data is transferred to third parties for advertising or analytical purposes.

5. Contact Inquiries

If you contact us by email, the data you provide (name, email address, message content) is stored and processed solely for the purpose of responding to your inquiry, on the basis of Art. 6(1)(b) GDPR (pre-contractual or contractual communication). This data is deleted after the inquiry is fully resolved, unless legal retention periods require longer storage.

6. Order Processing and Payment

Orders are processed via Stripe, Inc. (354 Oyster Point Blvd, South San Francisco, CA 94080, USA). When you place an order, you are directed to Stripe's secure checkout environment. Stripe processes your payment data under their own privacy policy, available at stripe.com/privacy.

We receive order confirmation and transaction data from Stripe for the purpose of fulfilling your order and issuing invoices. We do not store full payment card details on our systems.

Invoices are generated and stored in our accounting system (SevDesk) in accordance with German commercial and tax law retention requirements (10 years pursuant to § 147 AO).

7. Matterport Project Data

If you use our panorama processing service, you will transfer a duplicate of your Matterport project to our processing account. This project data is:

• Used exclusively for generating your ordered panorama files
• Not reused, analyzed, shared, or sold for any other purpose
• Permanently deleted from our systems immediately after delivery of your ordered files
• Never accessed from your original live project — only from the duplicate you create and transfer

Processing of project data is carried out on the basis of Art. 6(1)(b) GDPR (performance of a contract).

8. Data Transfers to Third Countries

Payment processing via Stripe involves data transfer to the United States. Stripe, Inc. participates in the EU-U.S. Data Privacy Framework and maintains Standard Contractual Clauses as a transfer mechanism in accordance with Art. 46 GDPR.

Customers may be located outside the European Union. Where we communicate with customers in third countries, we apply appropriate safeguards in accordance with applicable data protection law.

9. Data Retention

Personal data is retained only for as long as necessary to fulfill contractual obligations and comply with legal requirements:

• Project data: deleted immediately after delivery
• Contact inquiry data: deleted after resolution of inquiry
• Invoice and transaction data: retained for 10 years pursuant to § 147 AO (German Fiscal Code)
• Server log data: deleted after 30 days

10. Your Rights

Under applicable data protection law, you have the right to:

• Access your personal data (Art. 15 GDPR)
• Request correction of inaccurate data (Art. 16 GDPR)
• Request deletion of your data (Art. 17 GDPR)
• Restrict processing (Art. 18 GDPR)
• Object to processing (Art. 21 GDPR)
• Request data portability (Art. 20 GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

The competent supervisory authority for Dimension3 GmbH is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

To exercise your rights, please contact us at info@16knative.com.

11. Changes to This Policy

We reserve the right to update this Privacy Policy when necessary to reflect legal, technical, or operational changes. The current version will always be available at 16knative.com/privacy-policy.html.