Privacy Policy

The data controller is DGS Informatique SRL (GeekCollector), Chaussée Verte 98 box 2, 4470 Saint-Georges-sur-Meuse, Belgium, company number (CBE) 0824.643.421.

For any question about your data, write to us at sales@geekcollector.be. We have not appointed a data protection officer: this address is our single point of contact.

We only collect the data needed for the services you use:

• Customer account: last name, first name, email address, password (stored encrypted) or Google identifier if you sign in with Google, phone number and saved addresses.
• Orders: products purchased, amounts, shipping and billing addresses, phone number, chosen pickup point, order history and invoices.
• Payment: processed by Mollie. We neither see nor store your card details.
• Loyalty programme, wishlist, product reviews (title, text and rating), back-in-stock alerts (email and, if you provide it, phone number) and trading card reservations.
• Gift cards: name and email of the buyer and the recipient, personal message.
• Tournaments: participant's last and first name, phone number, date of birth (for the age category), Play! Pokémon ID and payment status.
• Newsletter: email address and, if you choose them, your favourite categories.
• Contact form: the information you send us.
• Browsing: anonymous, cookie-free visitor statistics (Umami, self-hosted), and the cookies you accept (see the Cookies page).

• Processing your order or registration (delivery, invoice, after-sales service, tournaments, gift cards): performance of the contract.
• Keeping our accounts and meeting our tax obligations: legal obligation.
• Sending you the newsletter, measuring the effectiveness of our ads and using non-essential cookies: your consent, which you can withdraw at any time.
• Securing the website, preventing fraud and producing anonymous statistics to improve the shop: our legitimate interest.

If you accept advertising cookies, the Meta pixel (Facebook, Instagram) is enabled and, when you make a purchase, we send Meta the order details together with encrypted identification data (email, phone number, name, city, postcode) to measure the effectiveness of our campaigns.

If you refuse them, Meta receives no personal data: only the amount, the products purchased and the country are sent, without making it possible to identify you. Google Tag Manager, which manages these tools on the website, also respects your choices.

We never sell your data. It is only shared with the service providers that run the shop, and only as far as necessary:

• Website and server hosting: Vercel (Paris region) and Railway (Netherlands region).
• Payment: Mollie (Netherlands).
• Delivery: Sendcloud (Netherlands) and the chosen carrier (bpost, Mondial Relay, UPS).
• Sales management, stock and invoicing: Odoo (Belgium).
• Order emails and newsletter: Resend.
• Sign-in with Google and address autocompletion: Google.
• Advertising measurement, with your consent: Meta.

We also disclose data to the authorities where required by law, for example in the event of payment fraud.

The website and our databases are hosted in the European Union (Paris and the Netherlands).

Some providers (Vercel, Railway, Resend, Google, Meta) are established in the United States or have a parent company there that may access the data. These transfers are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.

• Orders and invoices: 10 years, as required by Belgian tax law.
• Customer account: for as long as your account exists. You can ask for it to be deleted at any time (orders are kept for the legal period).
• Newsletter: until you unsubscribe.
• Tournament registrations: up to 1 year after the event.
• Back-in-stock alerts: until the alert is sent, then 1 year at most.
• Product reviews: for as long as they are published.
• Your cookie choices: stored in your browser until you change them on the Cookies page.

At any time, you can:

• access your data and obtain a copy;
• have it corrected or completed;
• request its erasure;
• request restriction of its processing or object to it, in particular for direct marketing;
• receive the data you provided to us in a readable format (portability);
• withdraw your consent (newsletter, cookies), without affecting processing already carried out.

To exercise these rights, write to sales@geekcollector.be from the address linked to your account or order. We reply within one month. Every newsletter also contains an unsubscribe link.

You can also lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels (www.dataprotectionauthority.be).

The shop is aimed at adults: a minor must place orders with the consent of a parent or legal guardian.

Minor tournament participants are registered by a parent or legal guardian, who provides their data. The date of birth is only used to determine the participant's age category.

The website is fully encrypted (HTTPS), passwords are stored encrypted and access to data is restricted to the people who need it to process your orders.

We may update this policy to reflect changes to our services or to the law. The date of the last update is shown at the top of this page.