Privacy Policy

The controller responsible for data processing on this website is:

Gampeon, Inc.

651 N Broad St, Suite 201

Middletown, DE 19709, USA

Email: privacy@gampeon.com

Representative in the Union under Art. 27 GDPR: Rene Roecker, 363 Triq Manwel Dimech, SLM 1058 Sliema, Malta, email: privacy@gampeon.com. You may address this office on any question about the processing of your data and the exercise of your rights.

[PLACEHOLDER: a section on transfers to a third country is still missing. The controller is a US company; the server and database are in Germany, but access from the US is a transfer within the meaning of Chapter V GDPR and requires a legal basis.]

Purpose: We process your details solely to notify you about the GAMPEON launch and early access, and to shape the platform around the interests of the waitlist.

Data processed: email address, your choice of ‘buy / sell / both’, optionally selected categories, an optional free-text note about your first planned sale, the chosen language, the time of sign-up and confirmation, as well as a hashed (i.e. not stored in clear text) form of your IP address to prevent abuse (rate limiting).

Storage location: Your data is stored in our own database (MariaDB) on our own server — not with an external data service.

Legal basis: your consent pursuant to Art. 6 (1) (a) GDPR. You give it actively via the checkbox in the form.

Double opt-in: After signing up we send you an email with a confirmation link. Your sign-up only becomes effective once you click that link. This ensures the email address really belongs to you.

Withdrawal & deletion: You can withdraw your consent at any time with effect for the future — most easily via the unsubscribe link in our emails, which permanently deletes your stored data. Alternatively, a message to the address above suffices. The lawfulness of processing carried out until withdrawal remains unaffected.

The waitlist and account data itself is stored exclusively on our own server. To send our emails (waitlist confirmation, email address verification on registration, password resets, and order confirmations to buyers and sellers) we use the mail server of our hosting provider under a data processing agreement (Art. 28 GDPR); your email address and the content of the respective message are processed for the purpose of delivery. Provider: ALL-INKL.COM – Neue Medien Münnich, Bautzener Str. 56, 02742 Neusalza-Spremberg, Germany.

The mail server is located in Germany; no transfer to a third country takes place. We have no influence over the mail server of your own email provider, to which we deliver.

This website runs on a server managed by us at IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When the site is accessed, technically necessary server log data (e.g. IP address, time, requested resource) is processed. The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR).

Where enabled, we use Plausible Analytics for anonymous traffic measurement. Plausible uses no cookies and stores no personal data; no profiles of individual visitors are created. The legal basis is our legitimate interest in privacy-friendly statistics (Art. 6 (1) (f) GDPR).

We only set technically necessary cookies: the session cookie ‘gampeon_session’ (keeps you logged in; HttpOnly, Secure, max. 30 days) and the language cookie (remembers your DE/EN choice). Legal basis: § 25 (2) no. 2 of the German TDDDG and Art. 6 (1) (b) and (f) GDPR.

We use no tracking, advertising or third-party cookies — which is why no consent banner asks for your permission here. The cookie notice on the website exists purely for transparency; whether you dismissed it is remembered locally by your browser (localStorage) without processing any personal data.

We store your waitlist data until the launch and the associated notification, at most until you withdraw your consent. After withdrawal or once the purpose no longer applies, the data is deleted unless statutory retention obligations apply.

You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the authority responsible for your place of residence.

We update this privacy policy whenever our data processing changes or legal requirements make it necessary. The version published on this page applies.