POKIVENTCG · Créteil

Privacy policy

Last updated: Nov 1, 2026

POKIVEN TCG takes the protection of your personal data seriously. This policy explains what data we collect when you use our site, why, how long we keep it and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the French Data Protection Act.

1. Data controller

POKIVEN TCG (trading as POKIVEN TCG) — SAS à associé unique (SASU), SIREN 984 891 556, 1 rue Charpy, 94000 Créteil, France. Contact for any question about personal data: the Contact page.

2. Data we collect

  • Orders and delivery: first and last name, e-mail, phone, delivery address, order content and amount, chosen means of payment. We never receive or store your card numbers.
  • Customer account (optional): identity, e-mail, password (stored only in irreversibly encrypted form), saved addresses, language, favourites, stock and price alerts, auctions followed or bid on, the card collection you enter, e-mail preferences.
  • Auctions: contact details and delivery address entered to bid, bid amounts.
  • Buy-back requests: contact details, description of your cards, message and the photographs you attach.
  • Messages: content of exchanges through the site's chat and e-mails you send us.
  • Technical data: IP address, device and browser type, pages viewed, security logs. Internal anonymous audience measurement does not follow a person from one visit to the next.
  • Measurement and advertising: only if you accept them (see section 7).

3. Why we use your data, and the legal basis

  • Process, pay, ship and follow your orders and auctions, issue invoices, handle returns and guarantees: performance of the contract.
  • Manage your account, favourites, alerts and collection, answer your messages and buy-back requests: performance of the contract or pre-contractual steps, or your consent for alerts.
  • Write to you about your orders (confirmations, payment, shipping): performance of the contract.
  • Send you news and new arrivals: your consent, off by default and withdrawable at any time from your account (Settings → E-mail preferences) or via the unsubscribe link.
  • Meet our accounting, tax and anti-fraud obligations and keep the register of second-hand goods acquired: legal obligation.
  • Secure the site, prevent fraud and abuse, and improve our services with anonymous statistics: legitimate interest.
  • Measure audience and advertising effectiveness with third-party tools: your consent (cookie banner).

We make no fully automated decision that has legal effects on you.

4. How long we keep your data

  • Orders, invoices and payments: 10 years from the end of the financial year (accounting obligations).
  • Customer account: until you delete it; an account inactive for 3 years may be deleted after notice.
  • Messages, contact and buy-back requests: 3 years from the last exchange. Photographs attached to a declined buy-back request are deleted by then.
  • Register of second-hand goods acquired: at least 5 years, as required by law.
  • Technical and security logs: 12 months at most.
  • Your cookie choice: 6 months, then asked again.

5. Who receives your data

Your data is never sold. It is shared only with those who need it, within their mission:

  • authorised members of the POKIVEN TCG team;
  • our hosting provider and technical providers (e-mail sending, backups) — host: o2switch — SAS au capital de 100 000 €, RCS Clermont-Ferrand 510 909 805, 222-224 boulevard Gustave Flaubert, 63000 Clermont-Ferrand, France — +33 4 44 44 60 40;
  • payment providers (PayMeGate, Paylio, Rivoner, PaymentWings) to process the online payment you choose: they receive the amount, the order reference and, in some cases, your e-mail;
  • carriers and postal services for delivery (name, address, phone);
  • our accountant and, where the law requires, the competent authorities;

6. Transfers outside the European Union

Some providers (payment, audience measurement, advertising) may process data outside the European Union, notably in the United States. Such transfers rely on the safeguards provided by the GDPR: a European Commission adequacy decision or standard contractual clauses.

7. Cookies and trackers

The site uses cookies and storage strictly necessary for its operation (basket, session, language) without asking for your consent, and measurement and advertising trackers only with your consent. Details are in our cookie policy.

8. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, the right to withdraw your consent at any time, and the right to give instructions on what happens to your data after your death.

If you have an account you can export your data and delete your account yourself from Settings. You can also write to the Contact page; we reply within one month. Proof of identity may be requested if there is reasonable doubt.

If you believe your rights are not respected you may lodge a complaint with the CNIL (French data protection authority), 3 place de Fontenoy, 75007 Paris, www.cnil.fr, or with the authority of your country of residence.

9. Security

We protect your data with appropriate technical and organisational measures: encrypted connection (HTTPS), irreversibly encrypted passwords, an administration area that is protected and limited by role, login attempt limits, backups. As no measure is infallible, we will inform you and the CNIL of any data breach likely to harm you.

10. Minors

The site is not aimed at children under 15, who must not send us personal data without their parents' consent.

11. Changes

This policy may change; the date of the last update is shown at the top of the page. Any question: the Contact page.