Privacy Policy

Data Controller

The Controller for the personal data processed through this site and the customer area is:

We have not appointed a Data Protection Officer (DPO), as it is not required for our activity. For any privacy matter write to the contacts above.

What Data We Process

• Request forms (service pages, installers network, promo): name or company name, email, phone (optional), message content.
• Customer area (only for customers): company name, contact person, email, phone, VAT number, tax code, address, PEC, SDI recipient code; the services, amounts, payment plans, payments and documents (such as invoices) linked to you; messages and tickets you send us; the invoice details you enter when you tick "I want to receive the invoice"; login data (your email, a password stored only in encrypted form, date of last access).
• Payments: card, IBAN and other payment details are entered by you directly on the secure pages of our payment providers (see below). We never see or store your full card number or IBAN: we keep only technical identifiers, the last digits (to show you which account is used), and the outcome of each payment.
• Technical data: IP address, date and time and technical information of the requests, kept in the server logs for security and anti-spam purposes.

We do not use profiling cookies or advertising tracking tools — see the Cookie Policy.

Why We Process Your Data and on What Legal Basis

• To answer your requests and take pre-contractual steps (quotes): Art. 6(1)(b) GDPR.
• To provide the services you purchased (hosting, maintenance, domains, websites), manage the customer area, payment plans, instalments, automatic debits you authorise, renewals and the related notices: Art. 6(1)(b) GDPR.
• For accounting and tax obligations (invoicing, bookkeeping): Art. 6(1)(c) GDPR.
• For security, fraud and spam prevention and to recover amounts due (payment reminders): our legitimate interest, Art. 6(1)(f) GDPR.

Providing the data marked as required is necessary to answer you or to perform the contract: without it we cannot provide the service. We do not use your data for direct marketing without your separate and specific consent, and we do not carry out automated decision-making or profiling.

How Long We Keep Your Data

• Requests and tickets: as long as needed to handle them and in any case no more than 24 months from the last contact, unless a contract follows.
• Contract, payment and customer-area data: for the duration of the relationship and afterwards as required by law.
• Invoices and accounting documents: 10 years, as required by tax and civil law.
• Technical logs: for the time strictly necessary for security, normally no more than 12 months.

Who We Share Your Data With

Your data is never sold. It is processed by authorised staff of M 3.5 S.R.L. and, as data processors or independent controllers within their own roles, by:

• Payment providers: Stripe Payments Europe, Ltd. (cards, SEPA direct debit, Klarna, Scalapay, and PayPal through Stripe) and PayPal (Europe) S.à r.l. et Cie, S.C.A. (PayPal payments);
• hosting, infrastructure and email providers of the site;
• the electronic invoicing service of the Chambers of Commerce (InfoCamere) and the Italian Revenue Agency's Exchange System (SdI);
• our accountant and professional advisers, for accounting and tax purposes;
• public authorities, where required by law.

Some providers (such as Stripe or PayPal) may transfer data outside the European Economic Area; this takes place under the safeguards required by the GDPR, such as the European Commission's standard contractual clauses.

Your Rights

As a data subject, you can exercise at any time the rights set out in Articles 15-22 of the GDPR, including:

• Access your personal data and obtain a copy.
• Request rectification of inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten"), where no legal retention obligation applies.
• Request restriction of processing, or object to it.
• Request data portability.

To exercise these rights, write to info@inm35.net or via PEC to m3.5@pec.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Changes to This Notice

This notice may be updated over time, for example if the site introduces new tools that process personal data. Last updated: 12/10/2026. See also our Terms and Conditions and the Cookie Policy.