Privacy Policy

PRIVACY POLICY

1. Effective Date

This Privacy Policy supplements the information in Section 8 (Personal Data Protection) of our Legal Notices. For general information about how we process your data, please consult our Legal Notices.

2. Data Controller

Mint2Play France (SIREN: 100 648 302)
DPO Email: dpo@mint2play.fr
Contact Email: contact@mint2play.fr

3. Data Collected – Full Overview

In addition to the data listed in our Legal Notices, we collect:

  • IP address and navigation data.
  • Cookies and tracking technologies (see Section 5).
  • Geolocation data (if consent is given).
  • Consignment data: card descriptions, photos, card condition.
  • Communication data: messages, product reviews, complaints.

4. Data Sharing with Third Parties

Your data is shared only with the following service providers, necessary for the operation of our services:

  • Payment: PrestaShop Checkout / PayPal.
  • Delivery: Colissimo, Mondial Relay.
  • Hosting: OVHcloud.

All service providers comply with the GDPR and sign Data Processing Agreements (DPA). Your data is never sold to commercial third parties.

5. Cookies and Tracking Technologies

5.1 Types of Cookies Used

  • Essential: authentication, shopping cart, site security.
  • Analytical: Google Analytics (user behavior tracking).
  • Advertising: retargeting and targeted ads (consent required).

5.2 Cookie Management

A consent banner appears on your first visit. You can:

  • Accept or refuse non-essential cookies.
  • Modify your preferences at any time in the Site settings.
  • Disable cookies from your browser settings.

6. Data Security

Mint2Play applies the following security measures:

  • SSL/TLS encryption for all transmissions.
  • Hashed and salted passwords.
  • Restricted access to personal data.
  • PCI-DSS compliance for payment data.
  • Regular backups and security monitoring.

Limitation: No security is 100% guaranteed on the Internet. We cannot ensure absolute protection against all risks.

7. Your GDPR Rights

You have the following rights (full details in our Legal Notices, Section 8):

  • Right of access: receive a copy of your data.
  • Right to rectification: correct inaccurate data.
  • Right to erasure: request deletion of your data.
  • Right to data portability: receive your data in a standard format.
  • Right to object: oppose commercial use of your data.

To exercise these rights, contact: dpo@mint2play.fr

Response time: 30 days (extendable by 60 days for complex requests).

8. Data Retention – Summary

  • User account: duration of account + 3 years after inactivity.
  • Orders: 5 years (legal obligation).
  • Payment data: deleted after processing (PCI-DSS standards).
  • Consignment: duration of sale + 5 years.
  • Analytical cookies: maximum 24 months.

9. Data Transfers Outside the EU

Your data is processed and stored in France (EU). In the rare event of a transfer outside the EU, we ensure GDPR compliance through Standard Contractual Clauses or other approved legal mechanisms.

10. DPO Contact

For any questions about data management or to exercise your rights:

Data Protection Officer (DPO):
Email: dpo@mint2play.fr

You also have the right to lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr

11. Last Updated

This Privacy Policy was last updated on: 07/02/2026

Mint2Play France reserves the right to modify this policy at any time. Changes will be effective upon publication on the Site.