1. Data controller
The controller of personal data collected in connection with the CocoWorld website and Minecraft server is:
Raphaël Berger
CocoWorld Association
Official name: COCOWORLD COCOCLUBFR
SIREN/SIRET: 990 034 944 / 990 034 944 00019
Registered office: 42 Allée Neuve, 54520 Laxou, France
- Email: [email protected]
- Privacy contact point: [email protected]
- Data Protection Officer (DPO): Raphaël Berger, reachable at the email address above
2. Data collected
CocoWorld only collects data that is strictly necessary for the operation of the Site and Server. Depending on how you use the services, this may include:
- Identification data: Minecraft username, unique account identifier (UUID), email address;
- Order and billing data: purchase history, order number, payment receipts (banking details are handled exclusively by the payment provider and are not stored by CocoWorld);
- Connection and technical data: IP address, Server connection logs, Discord identifiers when an account is linked;
- Support data: content of support tickets, exchanges with the CocoWorld team;
- Browsing data: pages visited, cookies and trackers (see section 9).
CocoWorld does not collect any sensitive data within the meaning of the GDPR (ethnic origin, health, political or religious opinions, etc.) and never requests such information from its players.
3. Purposes of processing
Data is processed for the following purposes:
- Managing orders and delivering digital benefits;
- Processing payments, in conjunction with the payment provider;
- Handling support requests, complaints and account migrations;
- Preventing fraud and maintaining Server security (combating cheating, abusive multi-accounting, and identity fraud);
- Improving the Site and Server (usage statistics, bug fixing);
- Complying with the association's legal, accounting and tax obligations;
- Sending Server-related communications (announcements, order information), unless the user objects.
CocoWorld does not process any data for the purpose of third-party commercial prospecting.
4. Legal basis for processing
Each processing activity is based on one of the following legal bases under the GDPR:
- Performance of a contract: processing orders, delivering benefits, customer support;
- Compliance with a legal obligation: retention of invoices, anti-fraud measures;
- Legitimate interests of CocoWorld: Server security, cheat prevention, service improvement, in a manner that respects the rights and freedoms of the individuals concerned;
- Consent: where required (optional communications).
5. Recipients and service providers
Personal data is accessible only to authorised CocoWorld team members (development, moderation, administration), limited to what is necessary for their duties.
Certain data may be shared with technical service providers acting on behalf of CocoWorld:
- Mollie: for payment processing (CocoWorld neither receives nor stores banking details);
- Pixeleur: for technical development of the Site;
- Freshperf: for hosting the Site and Server;
- Discord: for account linking and ticket-based support.
CocoWorld does not use any third-party audience analytics or advertising tracking tools (no Google Analytics or equivalent).
CocoWorld ensures that these providers offer sufficient data protection guarantees and are contractually bound by confidentiality and security obligations.
Data is never sold, rented, or transferred to third parties for commercial purposes.
6. Transfers outside the European Union
To CocoWorld's knowledge, no personal data is transferred outside the European Union: hosting (Freshperf) is provided in France, and the payment provider (Mollie) is a European company that processes data within the EU.
Should this situation change (change of provider, new third-party tool located outside the EU), this policy will be updated to specify the applicable appropriate safeguards (European Commission standard contractual clauses, adequacy decision, or another mechanism recognised by the GDPR).
The Discord platform, used for account linking and support, may involve processing by a company outside the EU under its own terms and conditions.
7. Retention period
Data is kept only for as long as necessary for the purposes for which it was collected:
- Account and order data: for the duration of use of the benefits, then archived for the period required by accounting and tax obligations;
- Payment receipts and invoices: 5 years (accounting and tax obligations);
- Support data (tickets): for the time required to process the request, then for a variable period for evidentiary purposes if necessary;
- Connection data and technical logs: for the time necessary for Server security.
At the end of these periods, data is deleted or anonymised.
8. Your rights
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights regarding your personal data:
- Right of access: obtain confirmation that your data is being processed and receive a copy;
- Right to rectification: correct inaccurate or incomplete data;
- Right to erasure: request deletion of your data, within the limits provided by law;
- Right to restriction of processing;
- Right to object, in particular to processing based on legitimate interests;
- Right to data portability, where applicable.
To exercise these rights, you may contact CocoWorld using the details in section 13, specifying your request and, if necessary, providing proof of identity (username, email linked to the account).
CocoWorld undertakes to respond within the legal deadline of one month, which may be extended by a further two months in the case of complex requests.
You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) if you believe your rights are not being respected: www.cnil.fr
10. Data security
CocoWorld implements reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, including: role-based data access restrictions, account and password security measures, and regular backups.
In the event of a data breach likely to result in a risk to the rights and freedoms of the individuals concerned, CocoWorld undertakes to notify the CNIL and, where necessary, the individuals concerned, in accordance with applicable legal obligations.
11. Minors
The Server and Site may be used by minors, subject to the authorisation of their legal representative, particularly for any purchase. CocoWorld ensures that only strictly necessary data is collected and encourages parents or guardians to supervise the use of the Server by minors in their care.
A parent or guardian may exercise the rights referred to in section 8 on behalf of a minor for whom they have legal responsibility.
12. Policy updates
CocoWorld reserves the right to modify this privacy policy at any time, in particular to reflect changes to the Site, Server or applicable legislation. The version in force is the one published on the Site, with its update date.
The legislation governing this Privacy Policy may be amended. CocoWorld endeavours to align with any new applicable legislation as quickly as possible.
13. Contact
For any questions regarding this privacy policy or the exercise of your rights, you may contact CocoWorld:
- By email: [email protected]
- Via the official Discord server, or the Site's ticket system when available