Privacy policy

Privacy Policy

Last updated: July 30, 2026

This Privacy Policy describes how we collect, use, and disclose your personal data when you visit, use, or make a purchase on Axis Mundi Store (the "Site" or the "Services").

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing, and disclosure of your personal data.

1. Data Controller

Pursuant to the EU General Data Protection Regulation (GDPR 2016/679), the Data Controller of your personal data is:

  • Data Controller: Axis Mundi Games di Francesco Simioni

  • Registered Office: Via Toni Piccolotto 21, 32032 Feltre (BL), Italy

  • VAT Number: 01282670254

  • Contact Email: info@axismundigames.com

  • PEC (Certified Email): axismundigames@pec.it

  • Phone: +39 34 5327 8221

2. Personal Data We Collect

We collect and process the following categories of personal data, depending on how you interact with our Services:

Contact and Shipping Data: First name, last name, billing address, shipping address, telephone number, and email address.

Payment Data: Complete card or payment account details are collected and processed directly by the payment service provider selected by the customer, such as Shopify Payments or PayPal. Axis Mundi Games receives only the information necessary to confirm and manage the transaction, such as the amount, payment status, payment method, and transaction identifier. We do not store complete payment card details.

Account Data: Email address, account identifier, account preferences, and technical information required for authentication. Login credentials are managed by the Shopify platform; Axis Mundi Games does not have access to passwords in plain text.

Order Data: Products purchased, order number and date, amounts paid, payment status, shipping and delivery information, returns, and refunds.

Store Interaction Data: Products viewed, added to the shopping cart or wishlist, and information about your interaction with the Site. Where this information is collected through non-essential cookies or tracking technologies, it is processed only after you have provided your consent.

Communication Data: Information contained in messages you send us, including customer support requests.

Technical and Browsing Data: IP address, device information, browser type, network connection, security logs, and information about your interaction with the Site through cookies and similar technologies.

Personal data may be collected directly from you, automatically when you use the Site, or received from services you choose to use, such as Shopify, Shop/Shop Pay, and payment service providers.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

  • Managing orders, payments, shipping, returns, and refunds: Performance of a contract or steps taken at your request before entering into a contract, pursuant to Article 6(1)(b) GDPR.
  • Creating and managing customer accounts: Performance of the service requested by the customer, pursuant to Article 6(1)(b) GDPR.
  • Invoicing, accounting, and compliance with tax obligations: Compliance with a legal obligation, pursuant to Article 6(1)(c) GDPR.
  • Providing assistance relating to an order or a potential purchase: Performance of a contract or pre-contractual steps, pursuant to Article 6(1)(b) GDPR.
  • Responding to general enquiries and managing customer relationships: Our legitimate interest in responding to communications and properly managing our business, pursuant to Article 6(1)(f) GDPR.
  • Protecting the Site, preventing fraud, and establishing, exercising, or defending legal claims: Our legitimate interest in protecting the Site, our customers, and our business, pursuant to Article 6(1)(f) GDPR.
  • Sending newsletters and promotional communications: Your consent, pursuant to Article 6(1)(a) GDPR and Article 130 of the Italian Privacy Code.
  • Using analytics cookies that cannot be treated as strictly necessary cookies, advertising cookies, profiling cookies, or other non-essential tracking technologies: Your consent, pursuant to Article 6(1)(a) GDPR and Article 122 of the Italian Privacy Code.

Before relying on legitimate interests, we assess whether the processing is necessary and whether our interests are overridden by your rights and fundamental freedoms.

Required and Optional Data

Personal data marked as required during checkout is necessary to enter into and perform the purchase contract. If you do not provide this information, we will be unable to process your payment, ship your order, or provide the requested service.

Creating an account and providing consent for marketing communications or non-essential cookies is optional. Refusing or withdrawing such consent will not prevent you from making a purchase, although certain non-essential or personalised features may be unavailable.

Email Tracking

We use Shopify Messaging, provided by Shopify International Ltd., to send promotional emails. Depending on your choices, Shopify Messaging may process your email address, message and subscriber identifiers, IP address, device or browser information, email opens, link clicks, and visits or purchases attributed to a specific campaign. We use this information to measure campaign performance, understand subscriber engagement, and improve future communications. Individual email-open tracking is activated only after you select “Opt in to email open tracking” in the footer of our emails. We retain identifiable email-engagement data only for as long as necessary to evaluate the relevant campaign and periodically review it for deletion or anonymisation.

4. Recipients of Personal Data

Personal data may be disclosed, only for the purposes described in this Privacy Policy, to the following categories of recipients:

  • Shopify International Limited and the Shopify affiliates and subprocessors involved in providing the e-commerce platform;
  • payment service providers, including Shopify Payments and PayPal;
  • banks and financial institutions;
  • couriers, shipping companies, and logistics providers;
  • hosting, technical support, cybersecurity, and fraud prevention providers;
  • our newsletter and email marketing provider, [NAME];
  • analytics and advertising providers, [NAMES], where applicable and only after consent has been obtained;
  • legal, tax, administrative, and accounting advisers;
  • public, judicial, or administrative authorities where disclosure is required by law.

Depending on the services provided and the circumstances, these recipients may act as data processors under Article 28 GDPR or as independent data controllers.

We do not make personal data publicly available unless this is requested or authorised by the data subject or required by law.

International Data Transfers

Personal data relating to customers in the European Economic Area is initially processed by Shopify International Limited in Ireland.

To provide its services, Shopify may transfer personal data to affiliated companies and subprocessors located outside the European Economic Area, including in Canada, the United States, and Singapore.

Transfers between Shopify entities from the European Economic Area are carried out in accordance with Shopify’s Binding Corporate Rules approved by the competent European data protection authorities. Transfers to countries recognised by the European Commission as providing an adequate level of protection are based on the relevant adequacy decision.

Where the recipient country is not covered by an adequacy decision, Shopify uses appropriate safeguards, including the Standard Contractual Clauses approved by the European Commission and, where necessary, supplementary measures.

Further information is available in the Shopify Data Processing Addendum, the Shopify Privacy Policy, and the Shopify list of subprocessors.

Other providers, including payment, logistics, or marketing service providers, may also transfer personal data internationally in accordance with the safeguards described in their respective privacy policies.

5. Cookies and Tracking Technologies

When you first access the Site, only cookies and technologies that are strictly necessary for the operation of the store, shopping cart, checkout, security features, and consent preferences are active.

Analytics cookies that cannot be treated as strictly necessary, advertising cookies, profiling cookies, and other non-essential tracking technologies are activated only after you have provided your consent.

The cookie banner allows you to reject all non-essential cookies, accept them, or make a granular choice by category.

You may change or withdraw your choices at any time through the “Manage Cookie Preferences” control available in the footer of the Site.

6. Data Retention

We retain your personal data only for as long as strictly necessary to fulfill the purposes outlined above:

  • Purchase, billing, and accounting data: Retained for 10 years, as required by Italian civil and tax law (Art. 2220 of the Italian Civil Code).

  • Customer account data: Retained as long as your account remains active or until you request its deletion.

  • Customer support requests: Retained for a maximum of 24 months after the resolution of the inquiry.

  • Marketing and newsletter data: Retained until you withdraw your consent (via the unsubscribe link in each email or by contacting us directly).

7. Your Rights (Art. 15-22 GDPR)

Where the GDPR applies, you may exercise the following rights in relation to your personal data:

  • Request access to the personal data we hold about you.
  • Request the rectification of inaccurate data or completion of incomplete data.
  • Request the erasure of your personal data where the applicable legal requirements are met.
  • Request restriction of processing in the circumstances provided by law.
  • Receive personal data you have provided to us in a structured, commonly used, and machine-readable format, and transmit that data to another controller, where the right to data portability applies.
  • Object to processing based on legitimate interests.
  • Object at any time and free of charge to the processing of your personal data for direct marketing purposes.
  • Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
  • Where applicable, exercise your rights in relation to decisions based solely on automated processing under Article 22 GDPR.

Once you object to direct marketing, your personal data will no longer be processed for that purpose.

To exercise your rights, contact us at info@axismundigames.com or axismundigames@pec.it. We will respond without undue delay and normally within one month. This period may be extended where permitted by Article 12 GDPR.

Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority or with the supervisory authority of the EU Member State in which you habitually reside, work, or where the alleged infringement occurred.

Garante per la protezione dei dati personali
Piazza Venezia 11
00187 Rome, Italy
www.garanteprivacy.it


8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, technical, or legal changes.

The updated version will be published on the Site together with a revised “Last updated” date. Where a change is material or involves a new processing purpose, we will provide appropriate notice before the change takes effect and, where required by law, obtain new consent.


Informativa sulla Privacy (Privacy Policy)

Ultimo aggiornamento: 14 luglio 2026

La presente Informativa sulla Privacy descrive come raccogliamo, utilizziamo e comunichiamo i tuoi dati personali quando visiti, utilizzi o effettui un acquisto su Axis Mundi Store (il "Sito" o i "Servizi").

In caso di conflitto tra i nostri Termini di Servizio e la presente Informativa sulla Privacy, quest'ultima prevale per quanto riguarda la raccolta, il trattamento e la comunicazione dei tuoi dati personali.

1. Titolare del Trattamento dei Dati

Ai sensi del Regolamento UE 2016/679 (GDPR), il Titolare del Trattamento dei tuoi dati personali è:

  • Titolare: Axis Mundi Games di Francesco Simioni

  • Sede Legale: Via Toni Piccolotto 21, 32032 Feltre (BL), Italia

  • Partita IVA: 01282670254

  • Email di contatto: info@axismundigames.com

  • PEC: axismundigames@pec.it

  • Telefono: +39 34 5327 8221

2. Dati Personali che Raccogliamo

Raccogliamo ed elaboriamo le seguenti categorie di dati personali a seconda di come interagisci con i nostri Servizi:

  • Dati di contatto e spedizione: Nome, cognome, indirizzo di fatturazione, indirizzo di spedizione, numero di telefono e indirizzo e-mail.

  • Dati di pagamento: i dati completi della carta o del conto di pagamento sono raccolti e trattati direttamente dai prestatori di servizi di pagamento scelti dall’utente, quali Shopify Payments e PayPal. Axis Mundi Games riceve soltanto le informazioni necessarie per confermare e gestire la transazione, quali importo, esito, metodo di pagamento e identificativo della transazione. Non conserviamo i dati completi della carta.

  • Dati dell'account: Nome utente, password (cifrata) e preferenze del profilo.

  • Dati di transazione: Dettagli sui prodotti visualizzati, aggiunti al carrello, inseriti nella wishlist o acquistati, nonché lo storico dei tuoi acquisti e dei resi.

  • Dati di comunicazione: Qualsiasi informazione inclusa nei messaggi che ci invii (es. richieste al supporto clienti).

  • Dati di navigazione e tecnici: Indirizzo IP, informazioni sul dispositivo, tipo di browser, dati di connessione e informazioni sull'utilizzo del Sito tramite cookie e tecnologie simili.

3. Finalità e basi giuridiche del trattamento

Trattiamo i dati personali per le seguenti finalità:

  • Gestione degli ordini, pagamenti, spedizioni, resi e rimborsi: esecuzione di un contratto o di misure precontrattuali richieste dall’interessato, ai sensi dell’art. 6(1)(b) GDPR.
  • Creazione e gestione dell’account cliente: esecuzione del servizio richiesto dall’utente, ai sensi dell’art. 6(1)(b) GDPR.
  • Fatturazione, contabilità e adempimenti fiscali: adempimento di obblighi legali, ai sensi dell’art. 6(1)(c) GDPR.
  • Assistenza relativa a un ordine o a un possibile acquisto: esecuzione del contratto o di misure precontrattuali, ai sensi dell’art. 6(1)(b) GDPR.
  • Risposta a richieste generali e gestione dei rapporti con i clienti: legittimo interesse del Titolare a rispondere alle comunicazioni e gestire correttamente la propria attività, ai sensi dell’art. 6(1)(f) GDPR.
  • Sicurezza del Sito, prevenzione delle frodi e tutela dei diritti del Titolare: legittimo interesse a proteggere il Sito, i clienti e l’attività aziendale, ai sensi dell’art. 6(1)(f) GDPR.
  • Invio di newsletter e comunicazioni promozionali: consenso dell’interessato, ai sensi dell’art. 6(1)(a) GDPR e dell’art. 130 del Codice Privacy.
  • Utilizzo di cookie analytics non assimilabili ai cookie tecnici, cookie pubblicitari o di profilazione: consenso dell’interessato, ai sensi dell’art. 6(1)(a) GDPR e dell’art. 122 del Codice Privacy.

Prima di effettuare un trattamento fondato sul legittimo interesse, valutiamo che tale interesse non prevalga sui diritti e sulle libertà fondamentali dell’interessato.

Natura obbligatoria o facoltativa del conferimento

I dati contrassegnati come obbligatori durante il checkout sono necessari per concludere ed eseguire il contratto. In loro assenza non potremo elaborare il pagamento, spedire l’ordine o fornire il servizio richiesto. La creazione di un account, il consenso al marketing e il consenso ai cookie non necessari sono facoltativi e il loro rifiuto non impedisce di effettuare un acquisto.

4. Comunicazione e Trasferimento dei Dati

I tuoi dati personali possono essere condivisi con terze parti che svolgono servizi per nostro conto (Responsabili del Trattamento), tra cui:

  • Shopify: La piattaforma e-commerce che ospita il nostro negozio.

  • Fornitori di servizi di pagamento, logistica e spedizione (corrieri, gateway di pagamento).

  • Consulenti legali, amministrativi e fiscali.

Trasferimenti Internazionali

Il Sito è ospitato su Shopify. I dati personali dei clienti europei vengono trasmessi a Shopify Inc. in Canada (paese che garantisce un livello di protezione adeguato riconosciuto dalla Commissione Europea) e possono essere trasferiti negli Stati Uniti (ove Shopify si avvale del quadro giuridico del EU-U.S. Data Privacy Framework o delle Clausole Contrattuali Standard approvate dalla Commissione Europea per garantire la sicurezza del trasferimento).

5. Cookie e Tecnologie di Tracciamento

Utilizziamo i cookie per il corretto funzionamento del Sito.

  • I cookie tecnici e necessari sono sempre attivi in quanto indispensabili per il funzionamento del carrello e della sessione.

  • I cookie di profilazione, marketing e statistica vengono attivati solo se fornisci il tuo consenso esplicito tramite il banner dei cookie presente sul Sito. Puoi modificare o revocare il tuo consenso in qualsiasi momento.

6. Conservazione dei Dati

Conserviamo i tuoi dati solo per il tempo strettamente necessario alle finalità descritte:

  • Dati di acquisto, fatturazione e contabilità: Conservati per 10 anni, come richiesto dalla normativa fiscale e civile italiana (Art. 2220 del Codice Civile).

  • Dati dell'account cliente: Conservati fino a quando l'account è attivo o fino a quando non ne richiedi la cancellazione.

  • Richieste di supporto: Conservate per un periodo massimo di 24 mesi dalla risoluzione del ticket.

  • Dati di marketing e newsletter: Conservati fino alla revoca del tuo consenso (tramite il link di disiscrizione presente in ogni e-mail o contattandoci direttamente).

7. I Tuoi Diritti (Art. 15-22 GDPR)

In quanto interessato situato nello Spazio Economico Europeo (SEE), hai il diritto di:

  • Accedere ai tuoi dati personali in nostro possesso.

  • Chiedere la rettifica dei dati inesatti o l'integrazione di quelli incompleti.

  • Chiedere la cancellazione (diritto all'oblio) dei tuoi dati, se non sussistono obblighi di conservazione legale.

  • Richiedere la limitazione del trattamento in determinate circostanze.

  • Richiedere la portabilità dei tuoi dati in un formato strutturato e leggibile.

  • Opporsi al trattamento dei dati effettuato per legittimo interesse o per finalità di marketing diretto.

  • Revocare il consenso in qualsiasi momento senza pregiudicare la liceità del trattamento precedente.

Per esercitare i tuoi diritti, puoi contattarci scrivendo a info@axismundigames.com o tramite PEC a axismundigames@pec.it.

Diritto di Reclamo

Se ritieni che il trattamento dei tuoi dati violi il GDPR, hai il diritto di proporre reclamo all'Autorità di Controllo competente. In Italia, l'autorità di riferimento è:

  • Garante per la protezione dei dati personali Piazza Venezia n. 11, 00187 Roma Sito web: www.garanteprivacy.it