Privacy notice
Seller and contact details
- Proprietor
- Monique Wortelboer
- Postal address
- Via Case Sulgoni 9, 6710 Biasca, CH
- info@formacara.com
- Telephone
- +41796776080
- Swiss VAT status
- The seller does not charge Swiss VAT according to its declared tax status.
- Return address
- Via Case Sulgoni 9, 6710 Biasca, CH
Who processes the data
The controller is the seller identified on this page, trading as Formacara. Use the listed contacts for privacy requests. This notice covers the website, configurator, orders and support; external services may also have their own privacy notices. If someone else uploads a photo of you, that person is the source of the data: you may exercise your rights without an account or an order.
Data and purposes
We process uploaded photos, selected subjects, instructions, previews and 3D files to create and check personalisation. We process names, email and delivery addresses, order details, payment status and messages for purchasing, delivery, support, accounting obligations and legal claims. IP addresses, access events and technical information may be needed for security and operation.
Required fields are marked in the process: without the photo we cannot create a figurine from it; without contact and address details we cannot fulfil the order. Identity documents, medical information or other sensitive information are not needed in the photo: avoid including them.
Processing grounds and photos of others
Where the GDPR applies, processing necessary for the request and order relies on pre-contract steps and contract performance, and required compliance on legal obligations. Security, abuse prevention and legal claims rely on legitimate interests balanced against individual rights. People pictured other than the purchaser require an appropriate legal basis and information; upload authorisation is not a waiver of their rights.
Marketing and photo publication are not necessary for a purchase and require a separate choice where applicable. Reading this notice is not consent to every use. Optional consent can be withdrawn without affecting the lawfulness of earlier processing.
AI and service providers
When subject analysis is enabled, uploading a photo triggers transmission of a resized version to OpenAI to suggest subjects. Preview generation and consistency checks use OpenAI with the required reference photos, instructions and images. Foto3D names our preview workflow, not another independent recipient. Only after your approval is the preview view for the provisional model sent to fal.ai; this step does not send the original photo to fal.ai. Tripo is planned for manual preparation of the production model and is not started automatically by the configurator. Any use must be covered by provider information and applicable safeguards before transfer. We do not use this workflow to identify you or infer sensitive characteristics.
Hostinger hosts the configurator and Cloudflare delivers the website and certain technical services. Stripe handles payment: full card details are entered in its checkout, not in a Formacara form. Swiss Post and delivery or customs partners use information needed for shipping. Support emails to info@formacara.com are forwarded to the dedicated Formacara Gmail mailbox. Internal access is limited to people who need it for the service.
Transfers and retention
Draft: actual provider processing countries, contractual terms and international transfer safeguards still need verification and completion. We do not promise that data stays only in Switzerland or the EU.
Photo availability in a session is configured for 24 hours. Local temporary files are subject to periodic clean-up, with additional technical time for running jobs or service interruptions. When an order is saved, required photos, previews and files are copied to the order archive and are not covered by that temporary deletion. Session expiry does not promise simultaneous deletion from order archives, email, backups or provider systems.
Draft: saved orders and their files are currently persistent; final retention periods for production photos, support, logs and backups still need to be defined. Records subject to legal retention are not erased simply because you close the browser. Provider retention also follows the terms actually applicable to their services.
Deleting a photo and requesting review
The delete-photo control concerns the current session and may be temporarily unavailable while processing is running. It does not cancel an order or by itself erase archived copies, backups or provider-held data. For a request covering those copies, or a photo uploaded by someone else, contact info@formacara.com: we assess the request’s scope and applicable retention obligations.
Pricing uses product choices, estimated material and printing time, packaging and destination under the configured commercial rules. Subject suggestions do not set your price according to identity, income or personal characteristics. You can correct the subject choice and ask for help if the preview or calculation is wrong.
Cookies and preferences
The configurator uses a technical session cookie to privately associate photos and actions. Height and filament preferences may be stored in your browser and removed in its settings. Stripe payment and security services may use their own technical tools. Any non-essential advertising or analytics tools must be assessed and, where required, activated only after a separate choice; accepting these terms does not authorise them.
Your rights
Contact info@formacara.com to request access, correction, erasure, restriction, portability or objection where provided by law, or to withdraw optional consent. We may request only the information needed to verify your request; a full identity-document copy is not required as a matter of routine. Access under Swiss law is in principle free of charge and answered within 30 days. Where GDPR applies, we respond without undue delay and normally within one month; any permitted extension must be explained within that month. Some data may be retained for legal obligations or legitimate claims, with the reason explained if it limits a request.
You may complain to the Swiss Federal Data Protection and Information Commissioner or the competent authority in your country where GDPR applies. If an automated assessment is incorrect, contact us for human review. Statutory remedies are not conditional on accepting promotional messages.