Our policy for the protection of your personal data allows us to establish a relationship of trust between you and our services, in order to offer you a positive experience, in a totally transparent manner.

Thanks to this policy, we will be able to take into account your requirements and comply with your expectations.

In order to respect your trust, Paul Gosselin, we guarantee in the first place the respect of your personal data, as well as the confidentiality of our customers (hereinafter “Your data”).

For complete transparency towards you, in order to guarantee you a secure use of our website in all its available versions and related applications (hereinafter the “ Site”), we make available the way we process your data, so that our services are always in accordance with the respect of your rights. In this way, we ensure the security as well as the confidentiality and non-alteration of your privacy and data, across all our platforms.

We and our policy guarantee that all necessary precautions are taken to protect all your data and against disclosure, loss or alteration. That is why we provide you with all the information you need to easily understand how we process your data. This data will only be kept for the time necessary for the determined management and processing. You will of course be able to access and modify your data at any time, since it will be available on your personal areas of the website.

To this end, we strive to take all necessary measures to comply with applicable data protection law.

Thus, Paul Gosselin hereby undertakes, through this policy for the protection of your personal data, to respect the essential principles of the general European regulation and French law on the protection of personal data, by making available to you information concerning the existence and methods of data processing applied here (paragraph 3), the rights you have in respect of your data, and by applying these rights ourselves (paragraphs 6 and 10). Any information relating to possible transfers to a third country or recipients shall also be made available, as well as the storage period for the data collected (paragraph 5) and the security measures (paragraph 9).


When we refer to “you” in this Privacy Policy, it is simply because it is directly related to you and concerns you as a customer of Paul Gosselin, if you have placed an order on the site, a customer of Paul Gosselin if you have created a customer account but have not ordered products or services, or if you have navigated as a visitor on the site without having created a customer account or placed an order.


Paul Gosselin publishes the Website and, as such, implements various processing operations on your Data as data controller.


3.1 When do we collect your personal data?

Your personal data may be collected if you visit the website using cookies, create a customer account on the website, order one of our products or services or agree to be a member of our newsletters (SMS, e-mails).

Your personal data is used by us to make your browsing on easier, as well as to offer you a more personalized experience. This allows us to process your orders as efficiently as possible, make payment available in several instalments, avoid fraud, make the necessary refunds, and manage your customer reviews.

3.2. Your navigation on the website

In order to allow you to browse the website, we process your data with your consent as the legal basis.

3.3. The processing of your orders

In order to be able to take care of your orders and process them, we use your data.

The use we make of it is used to manage mediation, customer relations (and those through social networks), our after-sales and distance selling services, our actions related to the management of marketing and commercial prospecting for the site, as well as for the management, delivery and transport of orders.
The execution of the contract between the two parties (you and us) is the legal basis for the processing of this data.

Paul Gosselin’s legal obligation is the legal basis for the processing operation, as far as the management of the product recall is concerned. Your consent or our legitimate interest is, as the case may be, the legal basis for the processing of marketing and commercial prospecting actions. Your consent is required for the implementation of the “flash” payment.

3.4. Payment in instalments

For orders concerned by payment in several instalments and for some customers, your data are processed in order to be able to offer you this type of payment. The application of the contract between the two parties is the legal basis for the processing of the data. However, your consent remains the basis for the processing of your banking data.

3.5. Customer reviews

In order to be able to share your opinions with our customers and visitors as well as to allow you to leave your opinion on the website, we use your data on the legal basis of your consent or legitimate interest.

3.6. Recovery of payments and fight against fraud

In order to enable the recovery of payments and the fight against fraud, we use your data.

Thanks to this, we can also guarantee the security of payments.

The application of this contract between the two parties and Paul Gosselin’s legitimate interest as controller are the legal basis for this processing operation.

3.7. Management operations of Paul Gosselin’s advertising network

Paul Gosselin’s advertising network operations are managed through the use of your data.

This will make it possible to increase our customer and prospect data, manage the maintenance and technical activities of prospects, sales statistics and studies of advertising campaigns, update the prospecting files of the organisation in charge of managing telephone solicitation oppositions, solicitations, the setting up of our contests and lotteries or any other promotional operation except online gambling.

The legal basis for the above-mentioned statements is the user’s consent or the legitimate interest of Paul Gosselin.


Your data is transmitted to several internal departments of
They are not sent to third parties, except in the situations specified below:

In order to be able to process your orders, your personal data may be transmitted to several service providers whose specialisations are banking, customer relations, after-sales service, delivery, IT development, site management or the provision of guarantees or insurance.

For the implementation of x-time payment, your data can be shared with service providers such as payment and transaction centres (banks…), call centres for business process management or customer experience management, or, for customer reviews, with a customer review and processing manager.
The advertising network is managed, thanks to your data, by the network’s customers and advertisers.


The data that collects is kept only for the time and assistance necessary to set up and perform the operations mentioned in paragraph 3 of our personal data policy.

We keep for a certain time some data collected by

In current archives for prospects, for 3 years from the last contact of the customer (they are therefore available for consultation by Paul Gosselin’s services). We do not carry out any intermediate archiving of these data (for data of administrative interest for certain services, such as litigation, the storage periods are set by the applicable limitation rules).

Regarding our orders, your data will be archived in the current archives for 5 years after the end of the use of the customer’s orders, and in the intermediate archives for 5 years after the end of the conservation in the current archives. The same applies to customers.

With regard to bank data, it is archived in the current archives for the entire duration of the credit card’s validity (plus one day). There is no intermediate archiving of bank data.

Cookies and their use and timing are detailed in paragraph 7 of our policy.


6.1. You have the right to request access, modification and rectification of your Data.

6.2. You have the right to request that the processing of your Data be limited.

Important note: for this reason, you must dispute the accuracy of your personal data for as long as necessary to allow us to verify its conformity. Or, if you believe that our use of your personal data is unlawful and you request that their use be limited and not deleted. We no longer need to use your data for the purposes mentioned in paragraph 3, but your data are still useful for the establishment, exercise or defence of your legal rights, in the event that you decide to exercise your right of opposition during the time required for the verification in order to determine whether the legitimate grounds we are pursuing prevail over yours.

6.3. You have the right to request the deletion of your Data.

If you request the deletion of your personal data, Paul Gosselin will still be able to keep it in an intermediate archive format for as long as necessary to meet its legal, accounting and tax obligations.

6.4. You are entitled to claim the exercise of your right to object to processing used for commercial prospecting purposes.

In case of prospecting by e-mail, you are entitled to request the modification or unsubscription of the newsletters by clicking on the hypertext link “unsubscribe” available in all newsletters, or by browsing directly on the contact page of the website.

In case of prospecting by SMS, it is possible to unsubscribe by sending by SMS the mention “STOP SMS” to 36007, or by browsing the contact page of the site

6.5. You are entitled to transmit post-mortem prerogatives concerning the storage, deletion and communication of your personal data.

In the absence of this type of prerogative, your successors and heirs have the possibility to communicate with Paul Gosselin to be able to have access to the uses of this data and to allow an “organization and settlement of the deceased’s succession” and/or to close the account on the site and/or request that the processing of personal data not be continued.

You may also request that your data not be disclosed to a third party in the event of death.

6.6. You are entitled to claim your right to portability.

6.7. You are entitled to withdraw your consent to the processing operations based on this legal basis.

Important clarification: If you decide to withdraw your consent, this will not affect the lawfulness of the uses made before your withdrawal of consent.

6.8. You are entitled, whenever you wish, to file a complaint with the competent supervisory authority (in France, the CNIL:

In order to exercise your rights, please send your complaint (together with your e-mail address, surname, first name, copy of your identity document and postal address) to the Paul Gosselin data protection delegation by e-mail to contact@Paul

Within a maximum of one (1) month after the date of receipt of the complaint, we will send you a reply.


7.1. What is a cookie?

When you browse a website such as Paul Gosselin’s, it can then, according to your choice, insert a text file on your receiver (computer, telephone or tablet), through your browser.

This text file is called COOKIE. This cookie then allows the website such as, during the prescribed period of validity or registration of the cookie, to identify your receiver used when you make another visit.
Only the issuer of a cookie may read or modify the information contained in the cookie.

7.2. What are cookies used for on

Different types of cookies can be classified into categories. Some of them are issued directly by Paul Gosselin and its service providers, but some are sometimes from third party companies.

7.2.1. Cookies issued by and its service providers

There are several categories of cookies that can be found on your sender when you browse our website: “Essential” cookies

In order to access our website, “essential” cookies are required, for example to be able to place an order.
If they were not present, you may encounter navigation problems on the site and be unable to place an order.

Essential” cookies also allow to track its activity.
They can be inserted on your transmitter by or by its service providers. Cookies ” Analytics and Personalization ”

“Analytics and personalization” cookies are not mandatory, they will allow us to facilitate your research, optimize your experience with us, we will be able to better target your expectations as well as adapt our offers and maximize the organization of our site. Cookies “Advertising”

Advertising cookies are displayed in the advertising spaces on our site. The interest for you is that your navigation time is better and optimized through the presentation of offers and advertisements relevant to you.

To do this, “advertising” cookies will target your expectations in real time and offer you advertising content adapted to your desires and interests of the moment, through your recent browsing history on other sites.
This avoids presenting you with advertising content that is of no interest to you. At the same time, Paul Gosselin prefers to see its offers and advertisements proposed to users who will be interested by them.

The advertising content offered may contain cookies issued by or its service providers, or by third parties through the association of a cookie with an advertiser’s advertising content.

7.2.2. Cookies issued by third party companies

Third parties using cookies on our site use their own privacy policies to do so. These cookies are not necessary for the use of our site.

7.2.3. Cookies issued by third party applications integrated into our site

When you browse our site, we may include computer applications from a third party on our site to allow you to share content and/or opinions from our site with others, for example when you click on the “share” or “I like” buttons that come from social networks.

These social networks can then identify you through these buttons even if you have not used them while browsing the site. It is possible for them to do this if the last time you surfed the site you were connected or active on your sender to your social network at the same time. We have no control over the uses they use or the data they have.

To learn more about how your data and advertising content are used, you can visit your social networks and review their privacy policies. You should then be able, through these policies, to manage your settings according to your preferences on the user accounts of each of the social networks on which you are registered.

Privacy policy of the above-mentioned social networks, click on the social network of your choice:

Google +:

Concerning our advertising network, we remind you, as mentioned above, that all our advertising spaces may contain cookies from third parties (advertiser at the origin of the advertising presented, third party service providers of the advertiser…).
With these cookies and during the prescribed period of validity of these cookies, they can therefore propose ads at the places made available for third party ads, count the number of contents they offer in our spaces, know the audience of these ads and the number of clicks; thanks to this they can claim the sums due to them and establish their statistics. They may also know that your sender is the one who previously visited another site containing one of their ads, and therefore target you and customize their content if necessary.

7.3. The options offered by your browser software (Internet Explorer, Firefox, Google Chrome, etc.).

Your browser software contains many options that you have and that you can set according to your preferences. In this way, you will be able to accept or reject cookies on your transmitter.

However, if you choose to accept the recording of these cookies on your sender, then, when you visit sites or content with cookies present, they will automatically be recorded on your sender.

Depending on your preferences, you can choose to enable a reminder asking you again if you accept or reject cookies before they are stored, or refuse to accept this cookie on your sender each time.

However, it is important to note that the choices you make during this configuration may change or alter your browsing on the Internet or on certain sites or services that require the use of these cookies (such as ordering on our site for example).

In the event that you prefer to refuse these cookies on your transmitter or delete those already stored, we decline any responsibility for the consequences of the alteration of the functioning of our services, which would result from the inability for our services to store or have access to the cookies used for their functioning.

7.3.1. How to choose your options according to your browser?

You have different options and possible choices available depending on your browser. In order to have more, you can consult the help menu of this one.

Internet Explorer™ :

Safari™ :

Chrome™ :

Firefox™ :

Opera™ :


Most of the time, your data are stored within the European Union.

However, when our service providers are located in countries outside the European Union, we share some of your data in third countries, such as with third countries where the European Commission has not carried out a compliance assessment.

In this case, we will ensure that this data sharing is done in accordance with the relevant regulations and that your privacy and fundamental rights are protected (for example, by using contractual clauses from the European Commission).
The Data Protection Delegation can, if you request it, give you more information about data transfer.


Thanks to the technical and organisational measures we take, we can guarantee a level of security in line with the risks to the rights and freedoms of natural persons with regard to the points mentioned in point 2. To do this, we take into account the origin, scope, context, costs and state of knowledge, the purposes of the processing, but also the risks identified.

In addition, we are up to date with the PCI DSS payment card industry security standard, which reflects our commitment to security.


Through the automated processing we use (profiling for example), you are subject to legal effects that affect you.
All this is essential to the conclusion or execution of the contract between you and us.
This is how we can offer and carry out the automation of customer identification and “4 x payment”. The foundations of this operation are attached to the analysis of different variables concerning the type of products, the services ordered, or the customer profile.

If the risk is assessed with these statistics as being too high (fraud/unpaid), then this payment method will not be proposed.

However, if you wish, you can obtain human intervention even though the decisions are automated, so you can give your opinion and/or oppose the automatic decision.


Our personal data policy will be updated whenever necessary to ensure that it is always in compliance with the applicable data protection regulations (at least every three (3) years).

June 20, 2019.