NewNot sure which service you need? Answer four quick questions. Try the Service Finder

Legal

Privacy Policy

Last updated: 20 October 2026

This English version is provided for convenience. The Italian version ("Informativa sulla privacy") is the legally binding text.

This policy explains how IMECA3D collects and uses personal data when you visit www.imeca3d.com, request a quotation, or work with us. It is written in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended (Privacy Code).

1. Who is responsible for your data (Data Controller)

Madavita Vithanage Chamindu Jayathra Perera, sole trader operating under the name IMECA3D Via Roma 343/3, 30038 Spinea (VE), Italy VAT number (P.IVA): 04814140275 Email: imeca3d@gmail.com

IMECA3D currently operates remotely. We have not appointed a Data Protection Officer, as one is not required for an activity of this size and type.

2. What data we collect

Data you give us

  • Through the quote/contact form, email or WhatsApp: name, email address, phone number (optional), company or university name (optional), and the content of your message.

  • Files you send us: CAD models, drawings, photos and technical specifications. These files are mainly technical, but they may contain personal data (for example, a name in a drawing title block).

  • If you place an order: billing details (name or company name, address, VAT number or tax code, SDI code or PEC address for electronic invoicing) and, if needed, a shipping address.

Data collected automatically

  • When you visit the site, our hosting provider records technical data such as IP address, browser type, the page requested and the date and time of the request (server logs). This is needed to deliver the site and keep it secure.

  • Only if you accept statistics cookies: usage data collected by Google Analytics, such as pages visited, approximate location (country or city), device and browser type, and how you arrived at the site. IP addresses are not stored. We do not use advertising or profiling cookies. See our Cookie Policy.

We do not ask for special categories of data (for example, health data). Please do not include them in your messages or files.

3. Why we use your data and on what legal basis

Purpose Legal basis (GDPR art. 6)
Answering your request and preparing a quotation Steps taken at your request before a contract – art. 6(1)(b)
Carrying out an order: design, printing, delivery, support Performance of a contract – art. 6(1)(b)
Invoicing, accounting and tax obligations Legal obligation – art. 6(1)(c)
Keeping the website running and secure (server logs) Legitimate interest – art. 6(1)(f)
Visit statistics to improve the website (Google Analytics) Your consent – art. 6(1)(a), which you can withdraw at any time
Establishing or defending legal claims Legitimate interest – art. 6(1)(f)

We do not send newsletters or marketing messages. We do not sell your data. We do not use automated decision-making or profiling.

4. Who receives your data

Your data is handled by the Data Controller. It is shared only with the following, and only as far as needed:

  • Netlify, Inc. (USA): website hosting and form handling, including files uploaded through the quote form.

  • Google: email service (Gmail) and, only if you accept statistics cookies, Google Analytics (Google Ireland Limited).

  • WhatsApp Ireland Ltd (Meta group): only if you choose to contact us on WhatsApp.

  • Stripe Payments Europe Ltd (Ireland): only if you pay by card through a Stripe payment link. We never see or store your full card details.

  • Banks for bank transfer payments.

  • Accountant / tax advisor, for invoicing and tax compliance.

  • Freelance collaborators: trusted independent professionals who may work on your project, including outside the European Union. They receive only the files and information needed for their task, under a written agreement with confidentiality and data protection obligations.

  • Couriers, only your name, address and phone number, to deliver parts.

  • Public authorities, when required by law.

These providers act as data processors on our behalf, or as independent controllers for their own services (for example, banks and couriers).

5. Transfers outside the European Union

Some providers (for example, Netlify and Google) may process data in the United States. These transfers take place on the basis of the EU–US Data Privacy Framework, where the provider is certified, or of the European Commission's Standard Contractual Clauses (GDPR art. 45–46).

Freelance collaborators may work from countries outside the EU that have no EU adequacy decision. In that case the transfer is covered by the European Commission's Standard Contractual Clauses signed with each collaborator, and we remove personal data from files before sharing them whenever possible. You can ask us for more information about these safeguards, or ask us not to involve collaborators outside the EU in your project.

6. How long we keep your data

Data Retention period
Quote requests and files that do not lead to an order 12 months from the last contact
Project files for completed orders (CAD, drawings) 24 months from delivery, so repeat orders and reprints are possible. Deleted earlier if you ask.
Invoices and accounting records 10 years, as required by Italian law (art. 2220 Civil Code)
Server logs According to the hosting provider's retention policy
Visit statistics (Google Analytics) 14 months

Files covered by a non-disclosure agreement (NDA) are kept and deleted as the NDA states. After these periods, data is deleted or anonymised.

7. Your rights

You have the right to:

  • access your data and get a copy of it (art. 15);
  • have inaccurate data corrected (art. 16);
  • have your data deleted (art. 17);
  • restrict how we use it (art. 18);
  • receive your data in a common, machine-readable format (art. 20);
  • object to processing based on legitimate interest (art. 21);
  • withdraw your consent at any time, without affecting processing carried out before the withdrawal (art. 7(3)). For statistics cookies, use the "Cookie settings" link at the bottom of every page.

To exercise these rights, write to imeca3d@gmail.com. We will reply within one month. Some data cannot be deleted while we are legally required to keep it (for example, invoices).

If you think your data has been handled unlawfully, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of the EU country where you live or work.

8. Is providing data required?

Providing your name, email and project details is needed to answer your request. Without them we cannot prepare a quotation. Billing data is required by law if you place an order. All other information is optional.

9. Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) and access limited to the Data Controller. No online transmission is completely secure, so please do not send highly confidential information before an NDA is in place, if you need one.

10. Minors

Our services are intended for adults, businesses and institutions. We do not knowingly collect data from people under 18.

11. Changes to this policy

We may update this policy, for example when we add new services or tools. The date at the top shows the latest version.

Chat on WhatsApp