Privacy notice
Premium Partnership Portal · last updated 23 September 2026
Who we are
The Premium Partnership Portal is run by 3DWD (“we”), based in the Netherlands. 3DWD decides what personal data the portal processes and why, and is the controller for it under the General Data Protection Regulation (GDPR).
Questions about this notice or your data: info@3dwd.eu.
What the portal is for
Property managers at companies that work with 3DWD use the portal to request quotes for window graphics. Each company has its own portal. People sign in either with their company’s shared portal password or with their Microsoft or Google work account.
What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| Work-account sign-in: your name, work email address, the email domain, which provider you used (Microsoft or Google), the account identifiers that provider gives us, when you first signed in and when you were last active, and whether your access is active | To let you into your company's portal, to show 3DWD who has access, and to let 3DWD withdraw one person's access | Legitimate interest of 3DWD and your employer in running the portal securely (art. 6(1)(f)) |
| Quote requests: contact name, email address, phone number, role or company, the property and storefront details, notes, preferred installation date, and any photos you upload | To prepare and send the proposal, and to know who at your company asked for it | Taking steps towards, and performing, the agreement with your employer (art. 6(1)(b) where it concerns your employer; otherwise art. 6(1)(f)) |
| Refused sign-ins: the day, the provider, the email domain (the part after the @) and the reason, counted per day. No name or full email address | To see when someone who should have access cannot get in, and to notice misuse | Legitimate interest (art. 6(1)(f)) |
| Technical data: your IP address and browser details in our hosting provider's request logs, and a short-lived count of failed password attempts per IP address | To keep the portal running and to stop password guessing | Legitimate interest (art. 6(1)(f)) |
We do not use analytics or advertising trackers, and we do not sell or share your data for marketing.
Cookies and browser storage
The portal only uses what it needs to work. None of these track you across other sites.
| Name | Purpose | Kept for |
|---|---|---|
| portal_auth_<company> | Keeps you signed in to your company's portal | 30 days, or until you sign out |
| portal_sso_nonce | Ties a work-account sign-in to the browser that started it | 10 minutes |
| authjs.* (several) | Carries a work-account sign-in from Microsoft or Google back to the portal | Up to 15 minutes; removed when the sign-in completes |
| portal_admin_auth | 3DWD staff only: keeps the admin signed in | 7 days |
| wizard-draft:<company> (browser storage, not a cookie) | Saves a half-finished request on your own device so you can continue later | Until you submit, sign out, or clear your browser data |
Who processes your data for us
| Service | What it does | Where |
|---|---|---|
| Bakery Labs | Builds and maintains the portal for 3DWD | Netherlands |
| Supabase | Database and file storage | European Union (Ireland) |
| Vercel | Hosting: runs the portal and keeps request logs | United States |
| Resend | Sends email notifications about new requests and a daily sign-in summary to 3DWD | United States |
| Microsoft, Google | Verify your identity when you sign in with a work account. They act under their own privacy terms and your employer's agreement with them | Per their own terms |
Where data goes to the United States, the transfer is covered by the data processing agreement with each provider, which includes the European Commission’s standard contractual clauses.
How long we keep it
| Data | Kept for |
|---|---|
| Refused sign-ins | 30 days, then deleted automatically |
| Work-account membership | While your company uses the portal. When 3DWD withdraws your access, the record is kept to show that you no longer have it, and it is deleted when your company stops using the portal or when you ask us to |
| Quote requests and photos | As long as needed to prepare the quote and carry out any resulting work, and as long as the law requires us to keep business records |
| Hosting request logs | A short period, under our hosting provider's standard log retention |
Your rights
You can ask us for access to your personal data, to correct or delete it, to restrict or object to its use, and to receive it in a portable format. Email info@3dwd.eu. We will answer within one month.
If you are unhappy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in the country where you live or work.
Changes
We update this notice when the portal starts using data differently. The date at the top shows when it last changed.