Pixmania just replied to my complaint letter

they amusingly suggested

"we invite you to contact the sender to unsubscribe from the mailing list"

does that sounds like best cybersecurity practise to suggest that I email a major spam/trojan/crim bunch and ask to be removed from their dist list?

I've written back to Px mentioning ICO & CNIL & similar worrying acronyms - if Pixfalia have any idea who they are.. Pimania seem to have their warehouses in France so should be happy to read about CNIL ...Commission Nationale de l' Informatique et des Libertés

"Article 45 of the French 2004 law (Protection of Data Subjects as Regards the Processing of Personal Data) sets out the sanctions for breaches of the law. These include fines, imprisonment, publishing the information of the case in newspapers or other publications (for which the sanctioned person must pay), ceasing processing operations and removing the controller's authorisation to process"