Cookies policy

Below is the complete English translation, maintaining the same structure and content as the Italian version.

Cookie Policy and Other Tracking Technologies

Last updated: 31 July 2026

This Cookie Policy describes the use of cookies and similar technologies on the website www.prologo.it.

This Cookie Policy supplements the Privacy Policy published on the website, which should be consulted for information concerning:

  • the identity and contact details of the Data Controllers;

  • the categories of personal data processed;

  • the purposes and legal bases of processing;

  • recipients of personal data;

  • international transfers;

  • retention periods;

  • data subjects’ rights;

  • how to exercise those rights.

1. Data Controllers

The role of each Data Controller depends on the service used and the purpose of the processing.

1.1 Lunar Sport S.r.l.

LUNAR SPORT S.R.L.
Registered office: Via Gianfranco Miglio 2, 21045 Gazzada Schianno (VA), Italy
VAT number and Tax Code: 03030530129
Economic and Administrative Register No.: VA-315003
Telephone: +39 0332 816961
E-mail: ecommerce@prologotouch.com
Certified e-mail address, PEC: lunarsport@pec.lunarsport.com

Lunar Sport S.r.l. acts as Data Controller for activities connected with:

  • the technical and operational management of the e-commerce platform;

  • website browsing;

  • security;

  • customer accounts;

  • the shopping cart and checkout;

  • orders and payments;

  • dispatch and delivery;

  • returns and after-sales assistance;

  • measurement and promotional activities carried out by Lunar Sport, where permitted by law or authorised by the user.

1.2 VELO EUROPE S.r.l.

VELO EUROPE S.R.L.
Registered office: Via Francesco Petrarca 4, 20123 Milan, Italy
Operating office: Via Piemonte 1/C, 20874 Busnago (MB), Italy
VAT number and Tax Code: 04955290962
Economic and Administrative Register No.: MI-2090481
E-mail: info@prologotouch.com
Telephone: +39 039 682 3507

VELO EUROPE S.r.l. acts as an independent Data Controller for processing relating to:

  • Prologo brand initiatives;

  • technical enquiries;

  • product registration;

  • commercial warranties;

  • newsletters and promotional communications concerning the brand, where the relevant form or consent identifies VELO EUROPE as the Data Controller.

2. What cookies are

Cookies are small text files that a website may store on the user’s device while they browse.

They may be used, for example, to:

  • keep a session active;

  • remember the contents of the shopping cart;

  • enable checkout;

  • store language, country and currency preferences;

  • allow access to the account;

  • protect the website and transactions;

  • remember privacy preferences;

  • collect statistics;

  • measure promotional campaigns;

  • personalise content and advertising, subject to consent.

Cookies may be:

  • session cookies, when they are deleted at the end of the session or when the browser is closed;

  • persistent cookies, when they remain on the device for a predetermined period;

  • first-party cookies, when they are set by the www.prologo.it domain;

  • third-party cookies, when they are set or read by external parties.

3. Other tracking technologies

In addition to cookies, the website may use similar technologies, including:

  • local storage;

  • session storage;

  • pixels;

  • tags;

  • scripts;

  • online identifiers;

  • anti-fraud technologies;

  • anti-bot tools;

  • Shopify app pixels;

  • customer event collection systems;

  • server-side measurement tools.

In this Policy, the term “tracking technologies” also includes these technologies where they are used for purposes similar to those of cookies.

4. Categories of cookies and tracking technologies

4.1 Strictly necessary technologies

These technologies are essential for the operation of the website and do not require the user’s prior consent.

They are used, for example, to:

  • display pages correctly;

  • maintain the session;

  • manage the shopping cart;

  • enable checkout;

  • allow login;

  • protect accounts and transactions;

  • prevent fraud and abusive use;

  • store cookie preferences;

  • manage language, country and currency;

  • ensure continuity and security of the service.

The legal basis is the need to provide the service requested by the user, perform pre-contractual or contractual measures and pursue the legitimate interest in the security and proper operation of the website.

The Italian Data Protection Authority distinguishes necessary technical tools, which do not require consent, from analytics tools that cannot be treated as technical tools and profiling tools, for which prior consent is required.

4.2 Preference and functionality technologies

These technologies make it possible to remember user settings and choices, such as:

  • language;

  • country;

  • currency;

  • display preferences;

  • personalised settings;

  • additional functions.

Where they are not strictly necessary for the requested service, they are used subject to consent.

Refusal may limit certain functions but does not normally prevent browsing or purchasing.

4.3 Analytics and measurement technologies

These technologies may be used to:

  • measure the number of visits;

  • understand how the website is used;

  • analyse pages and products viewed;

  • measure interactions with the shopping cart and checkout;

  • identify errors;

  • assess performance;

  • improve content and usability;

  • measure conversions.

Where they cannot be treated as technical tools, they are used only after the user has given consent.

4.4 Marketing and advertising technologies

These technologies may be used to:

  • measure campaigns;

  • attribute visits, orders and conversions;

  • create audience segments;

  • carry out remarketing activities;

  • display more relevant advertisements;

  • limit the frequency of advertisements;

  • measure advertising effectiveness;

  • connect activity on the website with external advertising platforms.

Marketing and advertising technologies are used only after consent has been obtained in the territories where this is required.

Refusal to consent does not prevent use of the website or completion of a purchase.

4.5 Profiling and personalisation technologies

With the user’s consent, data relating to:

  • pages visited;

  • products viewed;

  • searches carried out;

  • interactions;

  • shopping cart;

  • checkout;

  • purchases;

  • source of the visit;

may be analysed to understand interests and habits, personalise content, create segments and display more relevant promotional communications.

5. Shopify platform

The website uses Shopify as its e-commerce platform.

Shopify may use cookies and other technical tools to provide:

  • hosting and infrastructure;

  • browsing;

  • session management;

  • shopping cart;

  • checkout;

  • customer account;

  • authentication;

  • security;

  • fraud prevention;

  • privacy preference management;

  • order processing;

  • technical services connected with the platform.

Shopify also allows app pixels and custom pixels to be managed through the “Customer Events” section of the store administration area. Events may include actions performed in the browser, such as viewing a page, clicking a link or adding a product to the shopping cart.

Depending on the active features and settings, Shopify tools may include cookies intended for:

  • shopping-cart management;

  • checkout;

  • authentication;

  • security;

  • storage of privacy preferences;

  • selection of country and currency;

  • fraud prevention.

The actual presence, name and duration of the tools may vary according to:

  • store configuration;

  • the user’s geographical location;

  • customer-account mode;

  • payment method;

  • Shopify updates;

  • installed applications.

The updated list of detected tools must be available in the “Cookie Settings” panel.

6. Application pixels and Shopify Customer Events

The website uses Shopify Customer Events to manage certain pixels provided by installed applications.

Depending on the service and the consent given, the events collected may include:

  • page views;

  • product views;

  • searches;

  • adding products to or removing them from the shopping cart;

  • starting checkout;

  • progressing through checkout;

  • completing a purchase;

  • order value and currency;

  • interactions with popups and forms;

  • source of the visit;

  • online identifiers;

  • technical device data.

Shopify allows the privacy permissions assigned to app pixels to be checked in the administration area.

The pixels currently configured are described in the following sections.

7. Facebook & Instagram by Meta

The website uses the Facebook & Instagram by Meta app pixel.

According to the privacy configuration currently displayed by Shopify, the pixel requires permission for the following categories:

  • marketing;

  • analytics.

The pixel may be used to:

  • measure visits and events;

  • measure orders and conversions;

  • attribute conversions to campaigns;

  • create audience segments;

  • carry out remarketing;

  • personalise advertisements;

  • improve the measurement of Facebook and Instagram campaigns.

Depending on the data-sharing level configured in the Meta channel, the technologies used may include:

  • Meta Pixel;

  • Facebook Conversions API;

  • advanced matching tools;

  • browser-side or server-side event transmission.

Shopify confirms that the data-sharing settings for Facebook & Instagram by Meta make it possible to determine how customer data and browsing behaviour are collected and shared with Meta. The available levels may affect use of the pixel and Conversions API.

Depending on the configuration and consent, the data transmitted may include:

  • pages and products viewed;

  • searches;

  • shopping-cart events;

  • checkout events;

  • purchases;

  • order value and currency;

  • online identifiers;

  • IP address;

  • browser and device;

  • source of the visit;

  • hashed contact details, where provided for by the active settings.

The pixel is used for marketing and analytics purposes only after the required consent has been obtained.

Meta may process certain data as an independent Data Controller in accordance with its own Privacy Policy and the terms applicable to its services.

Sale or sharing of data under certain non-European laws

Shopify states that data collected through this pixel may qualify as “sale” or “sharing” under certain non-European laws.

These terms do not necessarily mean sale in exchange for money. Under some laws, particularly US laws, they may include the disclosure of data to advertising platforms for:

  • behavioural advertising;

  • targeting;

  • remarketing;

  • attribution;

  • campaign measurement.

Users to whom such laws apply may exercise the available opt-out rights through the website’s privacy tools.

8. CWILL (SendWILL) Popup Email

The website uses the CWILL (SendWILL) Popup Email app pixel.

According to the privacy configuration currently displayed by Shopify, the pixel requires permission for:

  • marketing;

  • analytics.

The service is used to:

  • display and manage subscription popups;

  • collect newsletter subscription requests;

  • record interaction with the popup;

  • measure views, closures and form conversions;

  • improve contact-acquisition campaigns.

The data processed may include:

  • the e-mail address voluntarily entered;

  • consent given;

  • date and time of the interaction;

  • page viewed;

  • opening or closing of the popup;

  • technical identifiers;

  • device and browser;

  • source of the visit.

The pixel is used for marketing and analytics purposes only after the required consent has been obtained.

Voluntary submission of the newsletter form also involves processing the data necessary to:

  • register the request;

  • document consent;

  • send the requested communications;

  • manage unsubscribe requests.

According to the information shown in the Shopify administration area, the app provider does not currently classify the collection carried out through its pixel as a sale of data for the purposes of Shopify’s settings.

The provider may process data on behalf of the Data Controller, within the limits of the applicable agreement, or as an independent Data Controller for any services of its own described in its Privacy Policy.

9. Google & YouTube

The Google & YouTube app is installed in the Shopify store but is not currently connected to any Google account.

The following services are therefore not currently configured through the app:

  • Google Analytics 4;

  • Google Ads;

  • Google Merchant Center;

  • Google Ads conversion tracking;

  • Google remarketing;

  • enhanced conversions;

  • YouTube Shopping.

The app is therefore not currently used by the Data Controller for:

  • Google analytics;

  • personalised advertising;

  • remarketing;

  • attribution of Google campaigns;

  • catalogue synchronisation with Merchant Center;

  • measurement of Google Ads conversions.

Shopify requires a Google account to be connected in order to configure the channel and subsequently allows Merchant Center, Google Ads or a Google Analytics 4 property to be connected.

The technical presence of the app or its pixel in the “Customer Events” list does not, by itself, mean that the Google services listed above are operational or that data is sent to a Google account configured by the Data Controller.

If a Google account is connected in the future, or if Google Analytics, Google Ads, Merchant Center, conversion tracking or other Google services are activated:

  • this Cookie Policy will be updated;

  • the preferences panel will be updated;

  • analytics or advertising technologies will be configured consistently with the required consent;

  • the possible application of Google Consent Mode will be verified;

  • the categories of data actually transmitted will be described.

10. hCaptcha

The website uses hCaptcha to protect forms and functions from:

  • spam;

  • bots;

  • fraud;

  • attacks;

  • abusive automated use.

hCaptcha may process information including:

  • IP address;

  • browser;

  • device;

  • operating system;

  • duration of the visit;

  • movements and interactions with the page;

  • technical data;

  • risk indicators;

  • result of the verification.

The purpose is to verify that certain operations are performed by a person and to protect the security of the website.

The legal basis is the legitimate interest in security, prevention of abuse and protection of forms and, where the verification is necessary to provide a requested service, the performance of pre-contractual or contractual measures.

hCaptcha may use cookies or other technologies necessary to perform the verification.

Its use is treated as strictly necessary only to the extent that the data and operations concerned are genuinely necessary for security and prevention of abuse.

The provider may process data in the United States and other countries in accordance with the safeguards applicable to international transfers.

11. Newsletters and e-mails

Newsletter subscription does not occur automatically through cookies.

When the user submits a subscription form, the e-mail address and related information are processed in accordance with the Privacy Policy.

Communications may contain technical tools that make it possible to detect:

  • delivery of the message;

  • opening;

  • clicks;

  • interaction with content;

  • effectiveness of the communication.

Where such tools involve tracking that is not strictly necessary, they are used in accordance with the consent and preferences expressed by the user.

The user may withdraw consent or unsubscribe at any time by using the link contained in the communications.

12. Social links and third-party content

The website may contain links to:

  • Facebook;

  • Instagram;

  • YouTube;

  • other social networks;

  • partner websites;

  • external services.

A simple text or graphic link to an external website does not necessarily result in cookies being installed by the relevant provider.

Where videos, feeds, maps, widgets or external content are embedded, the provider may use cookies or other tracking technologies.

Third-party content that is not strictly necessary is loaded, where required, only after the user has given consent.

When the user opens an external website or service directly, the terms and Privacy Policies of the relevant provider also apply.

13. Legal basis

Strictly necessary technologies are used to:

  • provide a requested service;

  • enable browsing;

  • manage the shopping cart and checkout;

  • perform pre-contractual or contractual measures;

  • ensure security and integrity;

  • prevent fraud and abuse;

  • store privacy preferences.

For technologies that are:

  • non-essential functional technologies;

  • analytics technologies that cannot be treated as technical tools;

  • marketing technologies;

  • advertising technologies;

  • profiling technologies;

the legal basis is consent.

Consent:

  • is optional;

  • is requested before non-essential technologies are activated;

  • may be given separately by category;

  • may be withdrawn at any time;

  • does not affect the ability to browse or make a purchase.

14. Banner and consent management

On the first visit, in the territories where required, a banner is displayed allowing users to:

  • accept all optional technologies;

  • reject all optional technologies;

  • choose individual categories;

  • read the Cookie Policy.

Before the user makes a choice, only strictly necessary technologies must remain active.

Silence, inactivity, scrolling the page or merely continuing to browse do not constitute consent.

Optional categories are not preselected.

Closing the banner without accepting does not authorise analytics, marketing, advertising or profiling technologies.

The Italian Data Protection Authority requires active consent and does not consider preselected boxes or merely passive user behaviour to be valid consent.

15. Changing and withdrawing preferences

Users may change or withdraw their choices at any time using the link:

Cookie Settings

The link must remain permanently accessible, for example in the website footer.

Users may:

  • accept categories previously rejected;

  • withdraw categories previously accepted;

  • keep only necessary technologies active;

  • consult the updated list of technologies.

Withdrawal takes effect for the future and does not affect the lawfulness of processing carried out before withdrawal.

After withdrawal, the pixels and optional technologies concerned must not collect further data on the basis of the withdrawn consent.

16. Duration of the choice and redisplay of the banner

The preference expressed by the user is stored through a dedicated technical tool for the period configured in the consent-management system.

The banner may be displayed again when:

  • the purposes change significantly;

  • new providers are introduced;

  • new categories of processing are added;

  • it is no longer possible to determine the previous choice;

  • the user has deleted cookies or local data;

  • new consent must be obtained;

  • redisplay is required by applicable law.

Following a refusal, the banner must not be displayed insistently on every visit.

17. Updated list of technologies

The actual list of cookies and other technologies may change over time as a result of:

  • Shopify updates;

  • theme changes;

  • addition or removal of apps;

  • provider updates;

  • changes to Meta configurations;

  • future activation of Google services;

  • changes to payment methods;

  • differences between markets and geographical areas.

Where available, the updated list must indicate:

  • name;

  • provider;

  • domain;

  • category;

  • purpose;

  • duration;

  • whether it is first-party or third-party.

This information is available in the Cookie Settings panel.

If there is any discrepancy between a static table in this Policy and the dynamic list detected and maintained by the consent-management system, both sources must be updated so that they reflect the technologies actually in use.

18. Summary of currently configured services

Service Current status Category Consent
Shopify and essential technologies Active Necessary Not required
hCaptcha Active Security/necessary Normally not required
Facebook & Instagram by Meta Active Marketing and analytics Required
CWILL (SendWILL) Popup Email Active Marketing and analytics Required
Google & YouTube Installed but not connected to an account Not active for Google analytics or marketing Not applicable until configured

The summary must be updated whenever:

  • a new account is connected;

  • a new app is activated;

  • a pixel is modified;

  • a custom pixel is added;

  • server-side transmission is activated.

19. International transfers

Certain providers may process data outside the European Economic Area.

Depending on the circumstances, transfers are carried out on the basis of:

  • adequacy decisions adopted by the European Commission;

  • Standard Contractual Clauses;

  • the Data Privacy Framework, where applicable;

  • Binding Corporate Rules;

  • other safeguards provided for under Articles 44 et seq. GDPR;

  • derogations permitted by law in specific cases.

Users may request information concerning the safeguards applied by contacting the relevant Data Controller.

20. Browser settings

Users may also manage cookies through their browser.

Browser settings normally allow users to:

  • view the cookies stored;

  • delete cookies;

  • block all or some cookies;

  • block third-party cookies;

  • delete data when the browser is closed;

  • use private browsing mode.

Disabling strictly necessary technologies may prevent the operation of:

  • the shopping cart;

  • checkout;

  • the account;

  • authentication;

  • preferences;

  • other essential functions.

Browser management is an additional tool and does not replace the website’s consent panel.

21. Rights of the data subject

In relation to personal data collected through cookies and tracking technologies, the data subject may, where applicable:

  • request access to their personal data;

  • obtain rectification;

  • request erasure;

  • obtain restriction of processing;

  • object to processing based on legitimate interests;

  • withdraw consent;

  • request data portability;

  • lodge a complaint with a supervisory authority.

For processing relating to the e-commerce platform, operation of the website and activities carried out by Lunar Sport:

LUNAR SPORT S.R.L.
E-mail: ecommerce@prologotouch.com
Certified e-mail address, PEC: lunarsport@pec.lunarsport.com
Address: Via Gianfranco Miglio 2, 21045 Gazzada Schianno (VA), Italy

For processing relating to Prologo brand initiatives:

VELO EUROPE S.R.L.
E-mail: info@prologotouch.com
Address: Via Francesco Petrarca 4, 20123 Milan, Italy

22. Complaint to a supervisory authority

The data subject has the right to lodge a complaint with:

The Italian Data Protection Authority — Garante per la protezione dei dati personali

or with the competent supervisory authority in the European country in which the data subject resides or works, or where the alleged infringement took place.

The right to bring proceedings before the competent courts remains unaffected.

23. Amendments to this Cookie Policy

This Cookie Policy may be updated as a result of:

  • changes in applicable law;

  • website updates;

  • changes to Shopify services;

  • introduction or removal of applications;

  • activation of new pixels;

  • changes to privacy permissions;

  • future connection of the Google & YouTube app;

  • changes to purposes or providers.

The updated version will be published on the website together with the date of the latest update.

Where substantial changes concern processing based on consent, the banner may be displayed again in order to obtain a new choice.

Below is the complete English translation, maintaining the same structure and content as the Italian version.

Cookie Policy and Other Tracking Technologies

Last updated: 31 July 2026

This Cookie Policy describes the use of cookies and similar technologies on the website www.prologo.it.

This Cookie Policy supplements the Privacy Policy published on the website, which should be consulted for information concerning:

  • the identity and contact details of the Data Controllers;

  • the categories of personal data processed;

  • the purposes and legal bases of processing;

  • recipients of personal data;

  • international transfers;

  • retention periods;

  • data subjects’ rights;

  • how to exercise those rights.

1. Data Controllers

The role of each Data Controller depends on the service used and the purpose of the processing.

1.1 Lunar Sport S.r.l.

LUNAR SPORT S.R.L.
Registered office: Via Gianfranco Miglio 2, 21045 Gazzada Schianno (VA), Italy
VAT number and Tax Code: 03030530129
Economic and Administrative Register No.: VA-315003
Telephone: +39 0332 816961
E-mail: ecommerce@prologotouch.com
Certified e-mail address, PEC: lunarsport@pec.lunarsport.com

Lunar Sport S.r.l. acts as Data Controller for activities connected with:

  • the technical and operational management of the e-commerce platform;

  • website browsing;

  • security;

  • customer accounts;

  • the shopping cart and checkout;

  • orders and payments;

  • dispatch and delivery;

  • returns and after-sales assistance;

  • measurement and promotional activities carried out by Lunar Sport, where permitted by law or authorised by the user.

1.2 VELO EUROPE S.r.l.

VELO EUROPE S.R.L.
Registered office: Via Francesco Petrarca 4, 20123 Milan, Italy
Operating office: Via Piemonte 1/C, 20874 Busnago (MB), Italy
VAT number and Tax Code: 04955290962
Economic and Administrative Register No.: MI-2090481
E-mail: info@prologotouch.com
Telephone: +39 039 682 3507

VELO EUROPE S.r.l. acts as an independent Data Controller for processing relating to:

  • Prologo brand initiatives;

  • technical enquiries;

  • product registration;

  • commercial warranties;

  • newsletters and promotional communications concerning the brand, where the relevant form or consent identifies VELO EUROPE as the Data Controller.

2. What cookies are

Cookies are small text files that a website may store on the user’s device while they browse.

They may be used, for example, to:

  • keep a session active;

  • remember the contents of the shopping cart;

  • enable checkout;

  • store language, country and currency preferences;

  • allow access to the account;

  • protect the website and transactions;

  • remember privacy preferences;

  • collect statistics;

  • measure promotional campaigns;

  • personalise content and advertising, subject to consent.

Cookies may be:

  • session cookies, when they are deleted at the end of the session or when the browser is closed;

  • persistent cookies, when they remain on the device for a predetermined period;

  • first-party cookies, when they are set by the www.prologo.it domain;

  • third-party cookies, when they are set or read by external parties.

3. Other tracking technologies

In addition to cookies, the website may use similar technologies, including:

  • local storage;

  • session storage;

  • pixels;

  • tags;

  • scripts;

  • online identifiers;

  • anti-fraud technologies;

  • anti-bot tools;

  • Shopify app pixels;

  • customer event collection systems;

  • server-side measurement tools.

In this Policy, the term “tracking technologies” also includes these technologies where they are used for purposes similar to those of cookies.

4. Categories of cookies and tracking technologies

4.1 Strictly necessary technologies

These technologies are essential for the operation of the website and do not require the user’s prior consent.

They are used, for example, to:

  • display pages correctly;

  • maintain the session;

  • manage the shopping cart;

  • enable checkout;

  • allow login;

  • protect accounts and transactions;

  • prevent fraud and abusive use;

  • store cookie preferences;

  • manage language, country and currency;

  • ensure continuity and security of the service.

The legal basis is the need to provide the service requested by the user, perform pre-contractual or contractual measures and pursue the legitimate interest in the security and proper operation of the website.

The Italian Data Protection Authority distinguishes necessary technical tools, which do not require consent, from analytics tools that cannot be treated as technical tools and profiling tools, for which prior consent is required.

4.2 Preference and functionality technologies

These technologies make it possible to remember user settings and choices, such as:

  • language;

  • country;

  • currency;

  • display preferences;

  • personalised settings;

  • additional functions.

Where they are not strictly necessary for the requested service, they are used subject to consent.

Refusal may limit certain functions but does not normally prevent browsing or purchasing.

4.3 Analytics and measurement technologies

These technologies may be used to:

  • measure the number of visits;

  • understand how the website is used;

  • analyse pages and products viewed;

  • measure interactions with the shopping cart and checkout;

  • identify errors;

  • assess performance;

  • improve content and usability;

  • measure conversions.

Where they cannot be treated as technical tools, they are used only after the user has given consent.

4.4 Marketing and advertising technologies

These technologies may be used to:

  • measure campaigns;

  • attribute visits, orders and conversions;

  • create audience segments;

  • carry out remarketing activities;

  • display more relevant advertisements;

  • limit the frequency of advertisements;

  • measure advertising effectiveness;

  • connect activity on the website with external advertising platforms.

Marketing and advertising technologies are used only after consent has been obtained in the territories where this is required.

Refusal to consent does not prevent use of the website or completion of a purchase.

4.5 Profiling and personalisation technologies

With the user’s consent, data relating to:

  • pages visited;

  • products viewed;

  • searches carried out;

  • interactions;

  • shopping cart;

  • checkout;

  • purchases;

  • source of the visit;

may be analysed to understand interests and habits, personalise content, create segments and display more relevant promotional communications.

5. Shopify platform

The website uses Shopify as its e-commerce platform.

Shopify may use cookies and other technical tools to provide:

  • hosting and infrastructure;

  • browsing;

  • session management;

  • shopping cart;

  • checkout;

  • customer account;

  • authentication;

  • security;

  • fraud prevention;

  • privacy preference management;

  • order processing;

  • technical services connected with the platform.

Shopify also allows app pixels and custom pixels to be managed through the “Customer Events” section of the store administration area. Events may include actions performed in the browser, such as viewing a page, clicking a link or adding a product to the shopping cart.

Depending on the active features and settings, Shopify tools may include cookies intended for:

  • shopping-cart management;

  • checkout;

  • authentication;

  • security;

  • storage of privacy preferences;

  • selection of country and currency;

  • fraud prevention.

The actual presence, name and duration of the tools may vary according to:

  • store configuration;

  • the user’s geographical location;

  • customer-account mode;

  • payment method;

  • Shopify updates;

  • installed applications.

The updated list of detected tools must be available in the “Cookie Settings” panel.

6. Application pixels and Shopify Customer Events

The website uses Shopify Customer Events to manage certain pixels provided by installed applications.

Depending on the service and the consent given, the events collected may include:

  • page views;

  • product views;

  • searches;

  • adding products to or removing them from the shopping cart;

  • starting checkout;

  • progressing through checkout;

  • completing a purchase;

  • order value and currency;

  • interactions with popups and forms;

  • source of the visit;

  • online identifiers;

  • technical device data.

Shopify allows the privacy permissions assigned to app pixels to be checked in the administration area.

The pixels currently configured are described in the following sections.

7. Facebook & Instagram by Meta

The website uses the Facebook & Instagram by Meta app pixel.

According to the privacy configuration currently displayed by Shopify, the pixel requires permission for the following categories:

  • marketing;

  • analytics.

The pixel may be used to:

  • measure visits and events;

  • measure orders and conversions;

  • attribute conversions to campaigns;

  • create audience segments;

  • carry out remarketing;

  • personalise advertisements;

  • improve the measurement of Facebook and Instagram campaigns.

Depending on the data-sharing level configured in the Meta channel, the technologies used may include:

  • Meta Pixel;

  • Facebook Conversions API;

  • advanced matching tools;

  • browser-side or server-side event transmission.

Shopify confirms that the data-sharing settings for Facebook & Instagram by Meta make it possible to determine how customer data and browsing behaviour are collected and shared with Meta. The available levels may affect use of the pixel and Conversions API.

Depending on the configuration and consent, the data transmitted may include:

  • pages and products viewed;

  • searches;

  • shopping-cart events;

  • checkout events;

  • purchases;

  • order value and currency;

  • online identifiers;

  • IP address;

  • browser and device;

  • source of the visit;

  • hashed contact details, where provided for by the active settings.

The pixel is used for marketing and analytics purposes only after the required consent has been obtained.

Meta may process certain data as an independent Data Controller in accordance with its own Privacy Policy and the terms applicable to its services.

Sale or sharing of data under certain non-European laws

Shopify states that data collected through this pixel may qualify as “sale” or “sharing” under certain non-European laws.

These terms do not necessarily mean sale in exchange for money. Under some laws, particularly US laws, they may include the disclosure of data to advertising platforms for:

  • behavioural advertising;

  • targeting;

  • remarketing;

  • attribution;

  • campaign measurement.

Users to whom such laws apply may exercise the available opt-out rights through the website’s privacy tools.

8. CWILL (SendWILL) Popup Email

The website uses the CWILL (SendWILL) Popup Email app pixel.

According to the privacy configuration currently displayed by Shopify, the pixel requires permission for:

  • marketing;

  • analytics.

The service is used to:

  • display and manage subscription popups;

  • collect newsletter subscription requests;

  • record interaction with the popup;

  • measure views, closures and form conversions;

  • improve contact-acquisition campaigns.

The data processed may include:

  • the e-mail address voluntarily entered;

  • consent given;

  • date and time of the interaction;

  • page viewed;

  • opening or closing of the popup;

  • technical identifiers;

  • device and browser;

  • source of the visit.

The pixel is used for marketing and analytics purposes only after the required consent has been obtained.

Voluntary submission of the newsletter form also involves processing the data necessary to:

  • register the request;

  • document consent;

  • send the requested communications;

  • manage unsubscribe requests.

According to the information shown in the Shopify administration area, the app provider does not currently classify the collection carried out through its pixel as a sale of data for the purposes of Shopify’s settings.

The provider may process data on behalf of the Data Controller, within the limits of the applicable agreement, or as an independent Data Controller for any services of its own described in its Privacy Policy.

9. Google & YouTube

The Google & YouTube app is installed in the Shopify store but is not currently connected to any Google account.

The following services are therefore not currently configured through the app:

  • Google Analytics 4;

  • Google Ads;

  • Google Merchant Center;

  • Google Ads conversion tracking;

  • Google remarketing;

  • enhanced conversions;

  • YouTube Shopping.

The app is therefore not currently used by the Data Controller for:

  • Google analytics;

  • personalised advertising;

  • remarketing;

  • attribution of Google campaigns;

  • catalogue synchronisation with Merchant Center;

  • measurement of Google Ads conversions.

Shopify requires a Google account to be connected in order to configure the channel and subsequently allows Merchant Center, Google Ads or a Google Analytics 4 property to be connected.

The technical presence of the app or its pixel in the “Customer Events” list does not, by itself, mean that the Google services listed above are operational or that data is sent to a Google account configured by the Data Controller.

If a Google account is connected in the future, or if Google Analytics, Google Ads, Merchant Center, conversion tracking or other Google services are activated:

  • this Cookie Policy will be updated;

  • the preferences panel will be updated;

  • analytics or advertising technologies will be configured consistently with the required consent;

  • the possible application of Google Consent Mode will be verified;

  • the categories of data actually transmitted will be described.

10. hCaptcha

The website uses hCaptcha to protect forms and functions from:

  • spam;

  • bots;

  • fraud;

  • attacks;

  • abusive automated use.

hCaptcha may process information including:

  • IP address;

  • browser;

  • device;

  • operating system;

  • duration of the visit;

  • movements and interactions with the page;

  • technical data;

  • risk indicators;

  • result of the verification.

The purpose is to verify that certain operations are performed by a person and to protect the security of the website.

The legal basis is the legitimate interest in security, prevention of abuse and protection of forms and, where the verification is necessary to provide a requested service, the performance of pre-contractual or contractual measures.

hCaptcha may use cookies or other technologies necessary to perform the verification.

Its use is treated as strictly necessary only to the extent that the data and operations concerned are genuinely necessary for security and prevention of abuse.

The provider may process data in the United States and other countries in accordance with the safeguards applicable to international transfers.

11. Newsletters and e-mails

Newsletter subscription does not occur automatically through cookies.

When the user submits a subscription form, the e-mail address and related information are processed in accordance with the Privacy Policy.

Communications may contain technical tools that make it possible to detect:

  • delivery of the message;

  • opening;

  • clicks;

  • interaction with content;

  • effectiveness of the communication.

Where such tools involve tracking that is not strictly necessary, they are used in accordance with the consent and preferences expressed by the user.

The user may withdraw consent or unsubscribe at any time by using the link contained in the communications.

12. Social links and third-party content

The website may contain links to:

  • Facebook;

  • Instagram;

  • YouTube;

  • other social networks;

  • partner websites;

  • external services.

A simple text or graphic link to an external website does not necessarily result in cookies being installed by the relevant provider.

Where videos, feeds, maps, widgets or external content are embedded, the provider may use cookies or other tracking technologies.

Third-party content that is not strictly necessary is loaded, where required, only after the user has given consent.

When the user opens an external website or service directly, the terms and Privacy Policies of the relevant provider also apply.

13. Legal basis

Strictly necessary technologies are used to:

  • provide a requested service;

  • enable browsing;

  • manage the shopping cart and checkout;

  • perform pre-contractual or contractual measures;

  • ensure security and integrity;

  • prevent fraud and abuse;

  • store privacy preferences.

For technologies that are:

  • non-essential functional technologies;

  • analytics technologies that cannot be treated as technical tools;

  • marketing technologies;

  • advertising technologies;

  • profiling technologies;

the legal basis is consent.

Consent:

  • is optional;

  • is requested before non-essential technologies are activated;

  • may be given separately by category;

  • may be withdrawn at any time;

  • does not affect the ability to browse or make a purchase.

14. Banner and consent management

On the first visit, in the territories where required, a banner is displayed allowing users to:

  • accept all optional technologies;

  • reject all optional technologies;

  • choose individual categories;

  • read the Cookie Policy.

Before the user makes a choice, only strictly necessary technologies must remain active.

Silence, inactivity, scrolling the page or merely continuing to browse do not constitute consent.

Optional categories are not preselected.

Closing the banner without accepting does not authorise analytics, marketing, advertising or profiling technologies.

The Italian Data Protection Authority requires active consent and does not consider preselected boxes or merely passive user behaviour to be valid consent.

15. Changing and withdrawing preferences

Users may change or withdraw their choices at any time using the link:

Cookie Settings

The link must remain permanently accessible, for example in the website footer.

Users may:

  • accept categories previously rejected;

  • withdraw categories previously accepted;

  • keep only necessary technologies active;

  • consult the updated list of technologies.

Withdrawal takes effect for the future and does not affect the lawfulness of processing carried out before withdrawal.

After withdrawal, the pixels and optional technologies concerned must not collect further data on the basis of the withdrawn consent.

16. Duration of the choice and redisplay of the banner

The preference expressed by the user is stored through a dedicated technical tool for the period configured in the consent-management system.

The banner may be displayed again when:

  • the purposes change significantly;

  • new providers are introduced;

  • new categories of processing are added;

  • it is no longer possible to determine the previous choice;

  • the user has deleted cookies or local data;

  • new consent must be obtained;

  • redisplay is required by applicable law.

Following a refusal, the banner must not be displayed insistently on every visit.

17. Updated list of technologies

The actual list of cookies and other technologies may change over time as a result of:

  • Shopify updates;

  • theme changes;

  • addition or removal of apps;

  • provider updates;

  • changes to Meta configurations;

  • future activation of Google services;

  • changes to payment methods;

  • differences between markets and geographical areas.

Where available, the updated list must indicate:

  • name;

  • provider;

  • domain;

  • category;

  • purpose;

  • duration;

  • whether it is first-party or third-party.

This information is available in the Cookie Settings panel.

If there is any discrepancy between a static table in this Policy and the dynamic list detected and maintained by the consent-management system, both sources must be updated so that they reflect the technologies actually in use.

18. Summary of currently configured services

Service Current status Category Consent
Shopify and essential technologies Active Necessary Not required
hCaptcha Active Security/necessary Normally not required
Facebook & Instagram by Meta Active Marketing and analytics Required
CWILL (SendWILL) Popup Email Active Marketing and analytics Required
Google & YouTube Installed but not connected to an account Not active for Google analytics or marketing Not applicable until configured

The summary must be updated whenever:

  • a new account is connected;

  • a new app is activated;

  • a pixel is modified;

  • a custom pixel is added;

  • server-side transmission is activated.

19. International transfers

Certain providers may process data outside the European Economic Area.

Depending on the circumstances, transfers are carried out on the basis of:

  • adequacy decisions adopted by the European Commission;

  • Standard Contractual Clauses;

  • the Data Privacy Framework, where applicable;

  • Binding Corporate Rules;

  • other safeguards provided for under Articles 44 et seq. GDPR;

  • derogations permitted by law in specific cases.

Users may request information concerning the safeguards applied by contacting the relevant Data Controller.

20. Browser settings

Users may also manage cookies through their browser.

Browser settings normally allow users to:

  • view the cookies stored;

  • delete cookies;

  • block all or some cookies;

  • block third-party cookies;

  • delete data when the browser is closed;

  • use private browsing mode.

Disabling strictly necessary technologies may prevent the operation of:

  • the shopping cart;

  • checkout;

  • the account;

  • authentication;

  • preferences;

  • other essential functions.

Browser management is an additional tool and does not replace the website’s consent panel.

21. Rights of the data subject

In relation to personal data collected through cookies and tracking technologies, the data subject may, where applicable:

  • request access to their personal data;

  • obtain rectification;

  • request erasure;

  • obtain restriction of processing;

  • object to processing based on legitimate interests;

  • withdraw consent;

  • request data portability;

  • lodge a complaint with a supervisory authority.

For processing relating to the e-commerce platform, operation of the website and activities carried out by Lunar Sport:

LUNAR SPORT S.R.L.
E-mail: ecommerce@prologotouch.com
Certified e-mail address, PEC: lunarsport@pec.lunarsport.com
Address: Via Gianfranco Miglio 2, 21045 Gazzada Schianno (VA), Italy

For processing relating to Prologo brand initiatives:

VELO EUROPE S.R.L.
E-mail: info@prologotouch.com
Address: Via Francesco Petrarca 4, 20123 Milan, Italy

22. Complaint to a supervisory authority

The data subject has the right to lodge a complaint with:

The Italian Data Protection Authority — Garante per la protezione dei dati personali

or with the competent supervisory authority in the European country in which the data subject resides or works, or where the alleged infringement took place.

The right to bring proceedings before the competent courts remains unaffected.

23. Amendments to this Cookie Policy

This Cookie Policy may be updated as a result of:

  • changes in applicable law;

  • website updates;

  • changes to Shopify services;

  • introduction or removal of applications;

  • activation of new pixels;

  • changes to privacy permissions;

  • future connection of the Google & YouTube app;

  • changes to purposes or providers.

The updated version will be published on the website together with the date of the latest update.

Where substantial changes concern processing based on consent, the banner may be displayed again in order to obtain a new choice.