Privacy Policy

The controller responsible for data processing on this website is:

GAMPEON

363 Triq Manwel Dimech

SLM 1058 Sliema, Malta

Email: [PLACEHOLDER: privacy@gampeon.com]

Purpose: We process your details solely to notify you about the GAMPEON launch and early access, and to shape the platform around the interests of the waitlist.

Data processed: email address, your choice of ‘buy / sell / both’, optionally selected categories, an optional free-text note about your first planned sale, the chosen language, the time of sign-up and confirmation, as well as a hashed (i.e. not stored in clear text) form of your IP address to prevent abuse (rate limiting).

Storage location: Your data is stored in our own database (MariaDB) on our own server — not with an external data service.

Legal basis: your consent pursuant to Art. 6 (1) (a) GDPR. You give it actively via the checkbox in the form.

Double opt-in: After signing up we send you an email with a confirmation link. Your sign-up only becomes effective once you click that link. This ensures the email address really belongs to you.

Withdrawal & deletion: You can withdraw your consent at any time with effect for the future — most easily via the unsubscribe link in our emails, which permanently deletes your stored data. Alternatively, a message to the address above suffices. The lawfulness of processing carried out until withdrawal remains unaffected.

The waitlist data itself is stored exclusively on our own server. To send the confirmation and launch emails we use a technical delivery service (Resend) under a data processing agreement (Art. 28 GDPR); your email address is processed for the purpose of delivery. Provider: [PLACEHOLDER: Resend, address].

Where data is transferred to a third country (e.g. the USA) in that process, this is done on the basis of appropriate safeguards such as the EU Standard Contractual Clauses. [PLACEHOLDER: add specifics after review.]

This website runs on a server managed by us at [PLACEHOLDER: hosting/data centre provider, address]. When the site is accessed, technically necessary server log data (e.g. IP address, time, requested resource) is processed. The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR).

Where enabled, we use Plausible Analytics for anonymous traffic measurement. Plausible uses no cookies and stores no personal data; no profiles of individual visitors are created. The legal basis is our legitimate interest in privacy-friendly statistics (Art. 6 (1) (f) GDPR).

We only set technically necessary cookies: the session cookie ‘gampeon_session’ (keeps you logged in; HttpOnly, Secure, max. 30 days) and the language cookie (remembers your DE/EN choice). Legal basis: § 25 (2) no. 2 of the German TDDDG and Art. 6 (1) (b) and (f) GDPR.

We use no tracking, advertising or third-party cookies — which is why no consent banner asks for your permission here. The cookie notice on the website exists purely for transparency; whether you dismissed it is remembered locally by your browser (localStorage) without processing any personal data.

We store your waitlist data until the launch and the associated notification, at most until you withdraw your consent. After withdrawal or once the purpose no longer applies, the data is deleted unless statutory retention obligations apply.

You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the authority responsible for your place of residence.

We update this privacy policy whenever our data processing changes or legal requirements make it necessary. The version published on this page applies.