I. Controller, Scope
DAViNCi ESPORTS is a service provided by Celvin Müller (hereinafter also referred to as “Provider”), acting as Controller in accordance with relevant data protection provisions. Please find full company and contact details on the website. The protection of personal data has the highest priority for us. We would therefore like to inform you about which data we collect when, and how we process your personal data. This privacy notice describes the collection and processing of personal data on the website www.davinciesports.com (hereinafter referred to as "Website" or “Platform”). Please note that some of the data processing activities may be performed in joint controllership with one or more vendors on our marketplace, as described in the relevant section further down. In such cases, please refer to the relevant vendor profile available on the marketplace to learn about the joint controller’s details. Data Protection Officer We have appointed a Data Protection Officer, that you can always reach out at: dpo@davinciesports.com.

II. General information about data processing
1. Purposes of processing
In principle, we only process personal data of Users if this is necessary to provide a functional Platform, our contents and services and to close or perform contracts with Users.
2. Legal basis for the processing of personal data
Most often we process personal data according to on one of the following legal bases:
consent
Whenever we collect the data subject’s consent to the processing of personal data, Art. 6 para. 1 a EU General Data Protection Regulation (GDPR) serves as the legal basis.
legal obligation
If the processing of personal data is necessary for compliance with a legal obligation which the Controller is subject to, Art. 6 para. 1 c GDPR serves as the legal basis.
contract or pre-contractual measures
If the processing of personal data is necessary for the performance of a contract to which the data subject is party, Art. 6 para. 1 b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
legitimate interests
If processing is necessary for the purposes of the legitimate interests pursued by the Controller or a third party and if such interests are not overridden by the interests, fundamental rights and freedoms of the data subject, Art. 6 para. 1 f GDPR serves as the legal basis. Unless otherwise specified within this privacy notice, the processing of your personal data is necessary for the performance of a contract with you or in the framework of pre-contractual measures, which take place at your request, and the legal basis for processing is therefore art. 6 para. 1 b GDPR.
3. Data erasure and retention time
In principle and unless otherwise stated, your personal data will only be stored until the purpose of the collection and storage is achieved. If the storage is based on your consent, personal data can be stored as long as you do not revoke such consent. Furthermore, data may be stored if it is required by European or national legal provisions, laws or regulations which we are subject to. Personal data will be blocked or deleted if the retention period set forth by the any such regulations expires, unless further storage is necessary for the conclusion or fulfilment of a contract.
4. Transfer to third countries
Unless otherwise stated, all data processing operations take place within the EU or the EEA countries. Data processing operations carried out by third-party providers established outside the mentioned geographical area may be carried out in part or in full in the countries the respective providers are based in, in accordance with the relevant and applicable data protection regulations. A transfer of personal data outside the EU or the EEA shall only take place on the basis of on an adequacy decision of the European Commission, including the adequacy decision regarding the EU-US Privacy Shield, or subject to appropriate safeguards, such as standard data protection clauses adopted by the European Commission. A list of current adequacy decisions is available on the European Commission's website. Further information about the EU-US Privacy Shield and a list of participating data recipients can be found on the website of the US Department of Commerce.
III. Processing of personal data in general
Regardless of whether you take advantage of any of the Website’s features – such as the creation of User accounts – we automatically collect data about your use of the Website. This includes in particular the accessed URL, access date and time, transferred data volume, http status code of the access reply, web browser type and operating system, HTTP referrer, as well as IP address. This information is not associated with your person. We collect and process such data to ensure Website operation and availability. In addition, it is used to analyse, store and evaluate information about User behaviour in an anonymous form and to continuously improve and further develop our service. We only store your IP address in the log files for a limited period of time, if this is necessary for security purposes. These purposes constitute our legitimate interest, which justifies data processing pursuant to art. 6 par. 1 lit. f) GDPR.
IV. Data processing when creating a User account
When creating a User account, we store the following data: first and last name, password, e-mail address, age. Your User account will be populated with such data, allowing you to set preferences and keep track of your activity. We need to collect an indication about your age to make sure that you comply with our minimum age requirements, or with specific age requirements applicable to selected features. The following additional personal data will be collected once the User account has been created in order to access to certain features of the Website (e.g. to place orders on the marketplace): invoicing data (first and last name, if different from user data), invoicing address, delivery address. Also, once an account has been created, all information or data generated and collected via that account, such as login history, site visits or page views will be linked with you. The provision of all above-mentioned data is required as a precontractual measure of a contract we will be closing with you (e.g. about a membership plan) or in order to perform a contract we have already closed with you and to provide you the relevant service. Failure to provide them so will result in unavailability of our services. Further data and information, such as your personal interests in terms of games, players, teams etc., may be provided on a voluntary basis.