Privacy policy

Last updated: September 9, 2026

Les Éditions Goblin's WAY takes the protection of your personal data and your privacy seriously.

This Privacy Policy explains what personal data may be collected when you use our online store, create an account, place an order, subscribe to our newsletter or contact us, as well as how this data is used, stored and, where necessary, shared with our service providers.

It also explains the rights available to you under the General Data Protection Regulation (GDPR) and applicable French data protection legislation.

Data Controller

The data controller responsible for the processing of personal data collected through our online store is:

Les Éditions Goblin's WAY

French limited liability company (SARL) with a share capital of €10,000

Registered with the Strasbourg Trade and Companies Register under SIREN number 909 166 647

45 rue Principale

67160 Drachenbronn-Birlenbach

France

For any questions concerning your personal data or to exercise your rights, you can contact us at:

editionsgoblinsway@gmail.com

Personal Data We Collect

When you use our online store, we may collect personal data that you provide directly to us, as well as certain data generated through your use of the website.

Depending on the services you use, this data may include:

  • Identification and contact information: title, first name, last name, postal address, email address and telephone number.
  • Customer account data: information required to create and manage your account, as well as your date of birth if you choose to provide it.
  • Order data: products ordered, amounts, billing and delivery addresses, delivery method, tracking information and order history.
  • Payment data: information relating to transactions and their status. Data required to process payments is handled by the relevant payment service providers, including Stripe and PayPal, depending on the payment method selected.
  • Communication data: messages you send us through our contact form or as part of your communications with us.
  • Newsletter data: your email address and information relating to your subscription or unsubscribe status.
  • Technical and browsing data: certain information relating to your use of the online store, including information collected through cookies or other trackers, under the conditions described later in this Privacy Policy.

Why Do We Use Your Data?

We use your personal data only when necessary for our business activities and for specific purposes.

Depending on the situation, your data may be used to:

  • Manage your customer account and orders, including their registration, preparation, invoicing and tracking. This processing is necessary for the performance of the contract concluded with you.
  • Organize the shipping and delivery of your orders, including transmitting the information necessary for delivery to the relevant service providers. This processing is necessary for the performance of the contract.
  • Process and secure payments through the payment service providers available on our online store. This processing is necessary for the performance of the contract and, where applicable, to comply with our legal obligations.
  • Respond to your requests and provide customer service, particularly when you contact us about a product, an order or our services. Depending on the nature of your request, this processing is based on the performance of the contract, on steps taken at your request prior to entering into a contract, or on our legitimate interest in responding to enquiries addressed to us.
  • Send you our newsletter when you have chosen to subscribe. This processing is based on your consent, which you may withdraw at any time.
  • Comply with our legal, tax and accounting obligations, including those relating to the retention of documents concerning orders and transactions.
  • Ensure the security and proper functioning of the online store, prevent abuse and protect our systems and business activities. This processing is based on our legitimate interest in ensuring the security of our website and our business.
  • Measure our audience and understand how the online store is used, where the legal requirements applicable to cookies and other trackers are met.

How Is Your Data Collected?

Your personal data may be collected when you:

  • create a customer account or provide your information while placing an order;
  • place an order and select a payment and delivery method;
  • send us a message through our contact form or otherwise communicate with us;
  • voluntarily subscribe to our newsletter;
  • request to be notified when a product becomes available, where this feature is offered;
  • browse our online store, during which certain technical data may be collected through cookies or other trackers.

Certain information is required in order for us to process an order, arrange its delivery or respond to a request. Where information is optional, it is not required in order to use the relevant service.

Who Receives Your Data?

The personal data we collect is primarily used by Les Éditions Goblin's WAY to operate the online store, manage customer accounts, process orders and maintain our customer relationships.

Where necessary, certain data may also be shared with or made accessible to the service providers we use to provide our services, including:

  • Infomaniak Network SA, for hosting the online store and its data;
  • Stripe and PayPal, for processing and securing payments made through their services;
  • Brevo, for managing our newsletter and synchronizing certain data relating to customers, contacts and e-commerce activities;
  • La Poste and its Colissimo and Delivengo services, for shipping and tracking the relevant orders;
  • Boxtal and Chronopost, when these services are used to arrange delivery to a pickup point;
  • our authorized technical service providers, where their work on the online store requires access to data strictly necessary for their assignment.

These service providers have access only to the data necessary to provide the services for which we use them, in accordance with their contractual obligations and applicable data protection rules.

How Long Do We Keep Your Data?

We retain personal data only for as long as necessary for the purposes for which it was collected, subject to legal obligations that may require a longer retention period.

Retention periods vary depending on the nature of the data and how it is used:

  • Order and invoicing data: retained for as long as necessary to manage the commercial relationship and subsequently archived where required by tax, accounting or commercial legislation. Accounting documents and supporting records are notably retained for 10 years in accordance with applicable legal requirements.
  • Customer account data: retained for the duration of the commercial relationship and while the account remains in use. Inactive accounts are not intended to be retained indefinitely. An appropriate retention period based on account inactivity is applied, subject to any data that must be retained for longer in order to comply with our legal obligations or defend our rights.
  • Requests submitted through the contact form or by email: retained for as long as necessary to process and follow up on the request, and then deleted when no longer required, subject to any legal retention obligation.
  • Newsletter data: retained for as long as you remain subscribed to our newsletter. You may unsubscribe at any time.
  • Data relating to cookies and other trackers: retention periods depend on their nature and purpose and are specified in the section concerning cookies and audience measurement.

Data that no longer needs to be retained is deleted or anonymized, unless it must be kept in order to comply with a legal obligation or for the establishment, exercise or defence of legal claims.

What Are Your Rights Regarding Your Personal Data?

Under applicable data protection legislation, and depending on the processing concerned and its legal basis, you have the following rights:

  • Right of access: to obtain confirmation as to whether personal data concerning you is being processed and, where applicable, to access that data and obtain a copy.
  • Right to rectification: to request the correction or updating of inaccurate or incomplete data.
  • Right to erasure: to request, under the conditions provided by applicable legislation, the deletion of certain personal data concerning you.
  • Right to restriction of processing: to request, in certain circumstances, that the use of your personal data be temporarily restricted.
  • Right to object: to object, on grounds relating to your particular situation, to certain processing based on our legitimate interests, as well as to the use of your personal data for direct marketing purposes.
  • Right to data portability: to receive, where provided for by applicable legislation, the data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another data controller where technically feasible.
  • Right to withdraw your consent at any time where processing is based on your consent, particularly in relation to our newsletter. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

You may also provide instructions regarding the retention, deletion and disclosure of your personal data after your death, under the conditions provided by French law.

How Can You Exercise Your Rights?

You can exercise your rights by contacting us:

By email: editionsgoblinsway@gmail.com

By post: Les Éditions Goblin's WAY, 45 rue Principale, 67160 Drachenbronn-Birlenbach, France.

To protect your personal data, we may ask you to provide additional information to verify your identity where we have reasonable doubts about it. A copy of an identity document will only be requested where this is necessary and proportionate to the circumstances.

We will respond to requests as soon as possible and, in principle, within one month of receiving them. Where justified by the complexity or number of requests, this period may be extended by a further two months. In such cases, you will be informed of the extension within the initial one-month period.

Complaint to the CNIL

If, after contacting us, you believe that your rights have not been respected, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the French Data Protection Authority.

Official CNIL website

Commission Nationale de l'Informatique et des Libertés

3 Place de Fontenoy

TSA 80715

75334 Paris Cedex 07

France

How Is Your Data Protected?

We implement appropriate technical and organizational measures to protect the personal data we process against loss, unauthorized access, disclosure, alteration or destruction.

Our online store uses a secure HTTPS connection to protect information transmitted between your browser and our website.

Access to personal data is limited to individuals and service providers who require it as part of their duties or assignment. Our technical service providers also implement their own security measures as part of the services they provide to us.

If you have a customer account, you are also responsible for keeping your password confidential. We recommend that you do not disclose it to third parties and that you choose a sufficiently strong password.

As no computer system or Internet-based service can guarantee absolute security, we adapt our protective measures to the risks identified and to the reasonable means available to protect the data we process.

Cookies and Other Trackers

Our online store uses cookies and other trackers that are necessary for its operation, as well as certain tools used, in particular, to measure its audience and, depending on the features used, to analyze how the website is used.

Some cookies are strictly necessary for the operation of the online store, for example to manage sessions, shopping carts or certain essential features. These cookies do not require your consent when they are used exclusively for purposes that are necessary for the operation of the service.

Other cookies or trackers may be used for audience measurement purposes or by third-party services. Where they are subject to consent under applicable regulations, they must only be placed or read after you have expressed your choice.

Google Analytics

We use Google Analytics to measure the audience of our online store and better understand how it is used.

This tool may use cookies or other identifiers and process certain technical data relating to your browsing activity, such as information about your device, browser, pages viewed and interactions with the online store.

The use of Google Analytics and the placement of trackers requiring consent must be subject to the user's choice regarding cookies.

Brevo

We use Brevo to manage our newsletter and certain features related to our e-commerce activities.

When you subscribe to our newsletter, the information required to manage your subscription is transmitted to Brevo. Our online store also synchronizes certain information relating to customers and e-commerce activities with Brevo in order to provide the features configured through this service.

Brevo may also be involved in certain technical or tracking features integrated into the online store. Where these features use cookies or other trackers that require consent, their use must respect the choice expressed by the user.

Transfers of Data Outside the European Union

Some of the service providers we use may process personal data or make it accessible from countries located outside the European Union or the European Economic Area.

Where such transfers take place, they must be governed in accordance with applicable data protection legislation, in particular by an adequacy decision of the European Commission or, where necessary, by appropriate safeguards such as the Standard Contractual Clauses approved by the European Commission.

Certain service providers may also participate in the EU-U.S. Data Privacy Framework where they meet the applicable requirements and maintain a valid certification.

For further information about the safeguards applicable to a particular processing of your personal data, you may contact us using the contact details provided in this Privacy Policy.

Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes to our services, our tools or applicable regulations.

The date of the latest update is indicated at the top of this page.