Privacy Policy

Privacy Policy of store.proxel.com

This Privacy Policy describes the methods of collecting, using, storing, and protecting the Personal Data of Users who consult and make purchases on the e-commerce website store.proxel.com, in accordance with the European General Data Protection Regulation (GDPR EU 2016/679) and applicable legislation.

1. Data Controller

Proxel S.r.l.
Registered Office: Via Pirandello 1 – 17100 Savona (SV) – Italy
Operating Headquarters: Via Val Della Torre 39 – 10149 Turin (TO) – Italy
VAT / Tax ID: IT 01067040095
PEC: This email address is being protected from spambots. You need JavaScript enabled to view it.
Controller Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

2. Types of Personal Data Collected

Among the Personal Data collected independently or through third parties by this website are:

• Identification and contact data: First name, last name, company name, tax code, VAT number / Tax ID, billing address, shipping address, city, postal code, country, phone number, and email address.
• Navigation and technical data: IP addresses, system logs, browser type, operating system, access times, pages viewed, and usage data.
• Payment data: Information on transactions and the chosen payment method (credit/debit card data is processed directly by external payment providers in encrypted form).
• Cookies and tracking tools: Technical, analytical, and functional cookies (for full details, please refer to the Cookie Policy).

3. Legal Bases of Processing

The Controller processes User Personal Data when at least one of the following conditions applies:

• Performance of a contract or pre-contractual measures: Processing is necessary to manage purchase orders, ship products, and provide customer support or warranty verification.
• Compliance with a legal obligation: Processing is necessary to comply with fiscal, accounting, and regulatory obligations established by Italian and European authorities.
• Legitimate interest of the Controller: Processing is necessary to ensure website security, prevent cyber fraud, or exercise the right of defense in legal proceedings.
• User consent: Processing is based on the express and optional consent provided by the User for specific purposes (e.g., subscription to the commercial newsletter).

4. Data Recipients and Transfer to Third Parties

The Personal Data collected may be shared with third parties necessary for the delivery of services, designated where required as Data Processors:

• Couriers and Shipping Carriers: National and international shipping companies for the delivery of purchased products (communication of name, address, and telephone number for tracking notifications).
• Payment Service Providers: Banking platforms and payment gateways (PayPal, Stripe, Apple Pay, Google Pay, Amazon Pay, banking circuits) for secure order processing.
• Consultants and System Administrators: Tax and legal advisors, hosting providers, IT technicians, and e-commerce platform providers.

5. International Data Transfers

Data is processed at the Controller's operating headquarters and in any other places where the parties involved in the processing are located. If Data is transferred outside the European Union (e.g., providers in the USA), such transfers take place exclusively in compliance with Chapter V of the GDPR, particularly based on European Commission adequacy decisions, adherence to the EU-U.S. Data Privacy Framework (DPF), or the adoption of Standard Contractual Clauses (SCC).

6. Data Retention Period

Personal Data is processed and stored for the time strictly necessary to fulfill the purposes for which it was collected:

• Contractual, accounting, and tax data: Stored for the statutory period of 10 years required by applicable law.
• Marketing / Newsletter data: Stored until consent is withdrawn or a unsubscribe request is submitted by the User.
• System logs and navigation data: Stored for the duration necessary to ensure website security and technical maintenance.

7. Processing Details and Third-Party Services

a) Order Processing and Account Management

By filling out the order form or registering, the User provides their Personal Data necessary for purchase processing, product shipment, and invoice/tax receipt issuance.

b) Statistics and Web Analytics Services

Google Analytics 4 (Google Ireland Limited / Google LLC): Web analytics service used to monitor and analyze traffic on the site. IP addresses are anonymized by default. Data transfer based on the EU-U.S. Data Privacy Framework.

c) Social Widgets and External Platforms

Interactions with social networks (Meta/Facebook, X/Twitter, YouTube) and display of content from external platforms (Google Fonts, Google Maps). Data processing is governed by the privacy policies of the respective platforms.

8. Rights of the User (Data Subject)

Pursuant to Articles 15-22 of Regulation (EU) 2016/679, the User has the right to:

• Access their Data and obtain a copy;
• Request the rectification or updating of inaccurate Data;
• Obtain the erasure (right to be forgotten) of Data when legal prerequisites are met;
• Request the restriction of processing;
• Request the portability of Data in a structured, commonly used, and machine-readable format;
• Object at any time to the processing of Data carried out for direct marketing purposes or based on legitimate interest;
• Lodge a complaint with the competent Supervisory Authority (in Italy: Garante per la Protezione dei Dati Personali; in the UK: ICO).

9. How to Exercise Rights

To exercise their rights, the User may address a written request to the Data Controller at the email address: This email address is being protected from spambots. You need JavaScript enabled to view it.. Requests are processed free of charge as quickly as possible and in any case within 30 days of receipt.

Last updated: October 2026