Last updated: 12 August 2026

This Privacy Policy explains how personal data is collected and used when visiting the EXAS website, contacting EXAS or purchasing from the online shop.

​

1. Who is responsible for your data?

The data controller is:

Riccardo Tomasini – EXAS / EXASLAB
Luxembourg
Email: exaslab@gmail.com

​

2. What information is collected?

Depending on how the website is used, EXAS may collect:

• Name and contact details

• Billing and shipping address

• Order and purchase information

• Messages or enquiries

• IP address, device and browsing information

• Cookie and website usage data

Payment details are processed by the payment providers available at checkout. EXAS does not independently store full payment-card details.

​

3. Why is this information used?

Personal data may be used to:

• Process, fulfil and deliver orders

• Process payments and provide customer support

• Respond to messages and enquiries

• Operate, secure and improve the website

• Meet legal, accounting and tax obligations

• Send marketing communications where consent has been given

Depending on the purpose, processing is based on the performance of a contract, compliance with legal obligations, legitimate interests in operating and securing the website, or consent.

Information required during checkout is necessary to process and deliver an order. Without this information, the order may not be completed.

​

4. Who receives the information?

Personal data is not sold or rented.

Information may be shared where necessary with service providers used to operate the website and fulfil orders, including Wix, payment providers, postal or delivery services and professional advisers such as accountants.

Some of these providers may process data outside the European Economic Area. Where required, appropriate legal safeguards are used for international transfers.

​

5. Cookies

The website uses cookies necessary for the operation of the site and online shop.

Non-essential cookies, such as certain analytics or marketing cookies, are used only after consent where required. Cookie preferences can be accepted, rejected or changed through the cookie settings available on the website.

​

6. How long is information kept?

Personal data is kept only for as long as necessary for the purpose for which it was collected.

Order, invoice and accounting information may be retained for the period required by Luxembourg law. Other information, such as enquiries, is kept only for as long as reasonably necessary.

​

7. Your rights

Under applicable data-protection law, you may have the right to:

• Access your personal data

• Correct inaccurate information

• Request deletion or restriction of processing

• Object to certain processing

• Request data portability where applicable

• Withdraw consent at any time where processing is based on consent

Requests can be sent to exaslab@gmail.com.

You also have the right to lodge a complaint with the Commission nationale pour la protection des données (CNPD) in Luxembourg.

​

8. Changes to this policy

This Privacy Policy may be updated when the website, services or legal requirements change. The date at the top of this page indicates the latest revision.