Privacy Policy & Data Protection Declaration

Effective Date: August 11, 2026 • Version 2.0 (GDPR & ePrivacy Compliant)

At GameWaypoints (accessible via gamewaypoints.com), protecting your personal information is a fundamental principle. This Privacy Policy details our operational data processing frameworks, user rights under Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR), data retention schedules, and technical security standards.

1. Identity Of The Data Controller

The legal controller responsible for processing personal data collected on this platform is:

2. Categories Of Personal Data Processed

Depending on your interaction with GameWaypoints, we process the following categories of data:

• Support & Inquiry Data: Full name, email address, message subject, priority level, and transmission content submitted through our contact forms.
• Squad Draft Preference Data: Saved pitch lineup formations, selected virtual player picks, and budget balances stored locally in your browser storage.
• Technical & System Log Data: Internet Protocol (IP) address, browser type, operating system version, access timestamps, HTTP request headers, and device telemetry.
• Newsletter & Communication Data: Opt-in email address for receiving fantasy digest metrics and leaderboard updates.

3. Legal Bases For Processing (GDPR Art. 6)

We only collect and process personal data when there is a valid legal basis under GDPR Article 6:

• Consent (Art. 6(1)(a) GDPR): Applies when you voluntarily submit contact forms, opt-in to newsletters, or accept analytical cookies. You may withdraw consent at any time.
• Contract Performance (Art. 6(1)(b) GDPR): Necessary for delivering requested pitch simulator tools, interactive leaderboards, and user settings.
• Legal Obligation (Art. 6(1)(c) GDPR): Compliance with Danish statutory accounting, tax, and cyber security obligations.
• Legitimate Interests (Art. 6(1)(f) GDPR): Necessary for securing platform infrastructure, preventing malicious bot activities, and evaluating overall user engagement metrics.

4. Data Retention Schedules

Personal data is retained only as long as necessary to fulfill the operational purposes for which it was collected:

• Contact Inquiry Records: Retained for 24 months from the date of ticket resolution to ensure quality support continuity.
• System & Access Logs: Server log files are automatically purged after 30 days unless required for active cyber security investigations.
• Cookie & Local Storage Preferences: Retained in your browser local storage for up to 12 months or until manually cleared by the user.

5. Data Sharing, Processors & International Transfers

GameWaypoints strictly avoids selling, renting, or monetizing personal data. We engage trusted third-party technical service providers (e.g. secure cloud hosting nodes, OpenStreetMap Leaflet map tile servers, Google Fonts) operating under strict Data Processing Agreements (DPAs).

All core server infrastructure is hosted within the European Union (EU/EEA). In cases where external diagnostic scripts interact with non-EEA nodes, processing is safeguarded via standard contractual clauses (SCCs) approved by the European Commission.

6. Your Comprehensive GDPR Rights

As a data subject located in the EU/EEA or Denmark, you hold the following rights under GDPR Articles 15 to 22:

• Right of Access (Art. 15 GDPR): Obtain confirmation as to whether your personal data is processed and receive a copy of such data.
• Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete personal records.
• Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): Request permanent deletion of your personal data where processing is no longer justified.
• Right to Restriction of Processing (Art. 18 GDPR): Request temporary restriction of data processing under specific verification conditions.
• Right to Data Portability (Art. 20 GDPR): Receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21 GDPR): Object at any time to processing based on legitimate interests or direct marketing.

To exercise any of these rights, please email our Data Protection Desk at support@gamewaypoints.com.

7. Automated Decision-Making & Profiling

GameWaypoints does not utilize automated decision-making systems or user profiling that produces legal or significant personal effects.

8. Children's Data Protection

Our services are intended for individuals aged 18 and older. We do not knowingly collect or solicit personal data from children under 16. If we discover child data has been transmitted without parental consent, it will be deleted immediately.

9. Supervisory Authority & Complaints

You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe your data processing violates privacy legislation:

10. Policy Amendments

Thor Media Danmark ApS reserves the right to update this Privacy Policy to reflect changing technical or legal requirements. Material amendments will be highlighted on our platform.