Privacy Policy

mCon esports ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website.

We operate from Breda, the Netherlands, and comply with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679).

01Information We Collect

Contact form data

When you submit our contact form, we collect only the information you voluntarily provide:

• Name
• Email address
• Enquiry type (general, partnership, recruitment, or press)
• Subject
• Message content

Server logs

When you visit our website, our hosting provider automatically collects technical data such as your IP address, browser type, operating system, referring URL, and pages visited. This data is collected for security and performance purposes and is not linked to your identity.

Cookies and embedded content

Our website may embed content from third-party platforms (such as Twitch, YouTube, or social media widgets). These services may set their own cookies and collect data according to their own privacy policies. We do not control these cookies. We do not use analytics or tracking cookies ourselves unless explicitly stated.

02How We Use Your Information

We use your personal data solely to:

• Respond to your enquiries and provide the information or support you requested
• Maintain records of communication for follow-up purposes
• Ensure the security and proper functioning of our website

We do not use your data for marketing, profiling, or automated decision-making without your explicit consent.

03Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases as defined in Article 6(1) of the GDPR:

• Consent — Art. 6(1)(a): When you submit the contact form and tick the consent checkbox, you give us explicit permission to process your name, email, and message to handle your enquiry. You may withdraw this consent at any time.
• Legitimate interest — Art. 6(1)(f): For server logs and technical data, we rely on our legitimate interest in maintaining website security, preventing abuse, and ensuring performance. This processing is minimal and does not override your rights.

04Data Sharing & Service Providers

We do not sell, trade, or rent your personal data to anyone. Your information may be processed by the following categories of service providers, solely to operate our website and respond to your enquiries:

• Hosting, DNS & email provider — Antagonist (Antagonist B.V., Netherlands) hosts our frontend website, backend (Strapi CMS), domain/DNS, and email services. They may process server logs containing your IP address and technical data.
• Content management system — Strapi, hosted on our Antagonist infrastructure, stores and delivers website content including contact form submissions.

All service providers are contractually bound to handle your data in accordance with the GDPR. We only share the minimum data necessary for each service to function.

05International Data Transfers

Our entire infrastructure — frontend, backend, database, and email — is hosted by Antagonist B.V. in the Netherlands. Your personal data remains within the European Economic Area (EEA) at all times. Should this change in the future, we will update this policy and ensure appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) are in place.

Note that third-party embeds (such as Twitch, YouTube, or social media widgets) may transfer data outside the EEA under their own privacy policies.

06Data Retention

• Contact form submissions are retained for a maximum of 6 months after your last interaction with us, after which they are permanently deleted.
• Server logs are retained for up to 30 days for security and performance monitoring, then automatically purged.

You may request early deletion of your data at any time (see Section 7).

07Your Rights Under GDPR

As a data subject, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your personal data
• Restriction — request that we limit how we process your data
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, email us at privacy@mconesports.com. We will respond within 30 days.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority:

08Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted connections (HTTPS), access controls, and regular security reviews.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

09Third-Party Links

Our website may contain links to external websites and platforms (including social media, streaming platforms, and partner websites). We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review their privacy policies before providing any personal data.

10Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

11Contact

If you have questions about this Privacy Policy or wish to exercise your data protection rights, you can reach us at: