PRIVACY POLICY & GDPR COMPLIANCE

Last Updated: September 2026

At Elitman (accessible via elitman.com, “Elitman Labs”, “we”, “us”, or “our”), we respect your privacy and are committed to protecting your personal data in strict compliance with the European Union General Data Protection Regulation (GDPR – Regulation EU 2016/679).

This Privacy Policy explains how we collect, process, and safeguard your personal information when you access our theoretical concepts, unlock the 3D Vault, subscribe to documentation updates, or order developer materials from our e-shop.

1. DATA CONTROLLER IDENTIFICATION

  • Entity: Elitman (Operator of elitman.com)
  • Location: Slovak Republic (European Union)
  • Official Contact Email: info@elitman.com

2. DATA WE COLLECT & PURPOSES OF PROCESSING

A. 3D Vault Lead Magnet & Educational Updates (Consent – Art. 6(1)(a) GDPR)

  • Data Collected: Email address, chosen Maker segment preference (Airsoft, Workshop & Tools, EDC & Outdoor, or General & Misc).
  • Purpose: Delivering the master password and access link to our educational 3D print archive (The Vault), sending notifications regarding new open-source project releases, theoretical concepts, firmware updates, and limited hardware runs.
  • Mechanism: Collected strictly upon your voluntary submission via our opt-in forms.

B. E-Shop Order Fulfillment (Contractual Necessity – Art. 6(1)(b) GDPR)

  • Data Collected: Full name, billing address, physical shipping address, email address, telephone number, and payment transaction references.
  • Purpose: Processing and dispatching orders of Development Boards, Interface Boards, component bundles, and handcrafted goods; generating electronic invoices; and providing parcel tracking details.
  • Payment Security: We do NOT store credit card details or payment credentials on our servers. All financial transactions are encrypted and processed by authorized third-party payment gateways.

C. Technical System Logs & Session Cookies (Legitimate Interest – Art. 6(1)(f) GDPR)

  • Data Collected: IP addresses, browser user-agent, server access timestamps, and essential session identifiers.
  • Purpose: Maintaining server security, preventing automated bot abuse, and remembering basic WooCommerce shopping cart sessions during checkout.

3. THIRD-PARTY SERVICE PROVIDERS (DATA PROCESSORS)

We only share personal data with trusted infrastructure providers bound by contractual data processing agreements that adhere to GDPR standards:

  1. MailerLite: Email marketing automation platform used to store subscriber lists, manage group segmentation, and send automated Vault credentials. (Servers located within the European Union).
  2. Websupport: Secure web and email hosting infrastructure provider (located within the European Union / Slovak Republic).
  3. Shipping Couriers: Trusted postal and delivery services (e.g., Packeta, Slovak Post, or national courier networks) exclusively for physically delivering your orders.
  4. Cults3D: For transactions involving paid digital 3D models, Cults3D operates as an independent, third-party Merchant of Record under their own autonomous privacy terms.

4. DATA RETENTION & YOUR RIGHT TO WITHDRAW (UNSUBSCRIBE)

  • Marketing & Vault Access: You retain the unconditional right to withdraw your consent and unsubscribe at any moment. Every automated email sent by our system contains a direct, one-click “Unsubscribe” link in the footer. Upon unsubscribing, your email is immediately deactivated from marketing workflows.
  • Order Records: Transactional invoices and shipping data are retained for the statutory period mandated by Slovak tax and accounting legislation.

5. YOUR STATUTORY RIGHTS UNDER GDPR

Under European data protection law, you hold the following rights regarding your personal information:

  • Right of Access: Request confirmation of what personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate contact details.
  • Right to Erasure (“Right to be Forgotten”): Request permanent deletion of your email address from our subscriber databases.
  • Right to Restriction of Processing & Portability: Request limitation or transfer of your data records.
  • Right to Lodge a Complaint: You maintain the legal right to submit an inquiry or complaint to the supervisory authority: The Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR).

To exercise any of these rights, please reach out directly to our workshop desk at info@elitman.com.