Privacy Policy

The Role Play Goblin
Westeinde 24a, 2512HD, Den Haag
KvK: 60672412 | BTW: NL854009528B01
Email: info@theroleplaygoblin.nl

This privacy policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR/AVG) and Dutch privacy law.

1. Data We Collect

When you place an order or create an account, we collect:

  • Name and address
  • Email address
  • Phone number (optional)
  • Payment information (processed securely by Mollie/PayPal)
  • Order history

2. Why We Collect Your Data

We use your data to:

  • Process and deliver your orders
  • Send order confirmations and shipping updates
  • Handle returns and customer service inquiries
  • Comply with legal obligations (tax records, 7-year retention)
  • Send newsletters (only with your explicit consent)

3. Legal Basis

We process your data based on:

  • Contract: To fulfill your order
  • Legal obligation: Tax and accounting requirements
  • Consent: For marketing communications
  • Legitimate interest: Fraud prevention and website security

4. Data Sharing

We share your data only with:

  • Shipping carriers: PostNL, DHL (name and address for delivery)
  • Payment providers: Mollie, PayPal (payment processing)
  • Hosting provider: For website operation

We do not sell your data to third parties.

5. Data Retention

  • Order data: 7 years (Dutch tax law requirement)
  • Account data: Until you request deletion
  • Marketing preferences: Until you unsubscribe

6. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (where legally permitted)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise these rights, email us at info@theroleplaygoblin.nl

7. Cookies

Our website uses:

  • Essential cookies: Required for shopping cart and checkout
  • Analytics cookies: To understand website usage (anonymized)

You can manage cookie preferences in your browser settings.

8. Security

We protect your data using SSL encryption, secure payment processing, and access controls. Only authorized personnel can access personal data.

9. Complaints

If you have concerns about how we handle your data, contact us first. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at www.autoriteitpersoonsgegevens.nl

10. Changes

We may update this policy. Significant changes will be communicated via email or website notice.

Last updated: December 2025