Privacy Policy

The data controller responsible for the processing of your personal information collected on topsportses.xyz is:

• Corporate Entity: TopSportsES Digital S.L.
• Tax Identification Number (NIF): ES-B87492105
• Registered Office: Paseo de la Castellana 189, Planta 14, 28046 Madrid, Spain
• Regulatory Authority: Registered in the Mercantile Registry of Madrid (Volume 39.812, Folio 44, Page M-708219)
• Data Protection Officer (DPO): [email protected]

Our data processing practices adhere strictly to:

• EU Regulation 2016/679 (GDPR): Regulation on the protection of natural persons with regard to the processing of personal data.
• Ley Orgánica 3/2018 (LOPDGDD): Spanish Organic Law on Personal Data Protection and guarantee of digital rights.
• Ley 34/2002 (LSSI-CE): Spanish Law on Information Society Services and Electronic Commerce.

We collect and process only the minimal personal data necessary to provide fantasy football gameplay and match simulations:

• Account & Identity Data: Pseudonymous manager handle, email address, password hash (argon2/bcrypt), age verification acknowledgment (18+).
• Fantasy Roster & Gameplay Data: Lineup selections, designated captains, transfers, chips played, formation preferences, simulation configurations.
• Technical Telemetry: Anonymized IP address, user-agent string, device viewport dimensions, timestamp of requests, HTTP referrer.
• Communication Records: Support desk inquiries, ticket correspondence, scoring dispute submissions, and DPO communications.

We obtain personal data through direct input when you register, configure your starting XI, submit a support escalation ticket, or save cookie preferences. In addition, our systems capture technical logs automatically to safeguard our infrastructure from denial-of-service attempts. We employ browser LocalStorage exclusively on your local device to preserve pitch drafts without transmitting unneeded data to remote servers.

Under Article 6 of the GDPR, our legal grounds for processing your data are:

• Performance of a Contract (Art. 6.1.b): Administering your manager account, calculating gameweek fantasy scores, and maintaining tournament rankings.
• Legitimate Interests (Art. 6.1.f): Maintaining fair play, preventing bot manipulation, ensuring cloud infrastructure cybersecurity, and debugging simulation errors.
• Legal Obligation (Art. 6.1.c): Complying with Spanish corporate, tax, and consumer protection statutory requirements.
• Consent (Art. 6.1.a): Where applicable, for non-essential analytical cookies and optional newsletter digests.

Your personal information is strictly dedicated to:

1. Delivering fantasy football squad builder tools and pitch simulations.
2. Scoring live matchday events and calculating official tournament standings.
3. Verifying compliance with our 18+ age restriction policy.
4. Facilitating responsive manager support through our Madrid operations desk.
5. Detecting fraudulent multi-accounting syndicates and unauthorized automated scrapers.

We never sell, rent, or monetize your personal information to third-party data brokers. We engage only vetted European cloud infrastructure providers, managed PostgreSQL database clusters, and certified Spanish sports data feed syndicators bound by strict Data Processing Agreements (DPAs) compliant with Article 28 of the GDPR.

All primary databases and production application servers are physically located within the European Economic Area (EEA), specifically in data centers in Madrid, Spain and Frankfurt, Germany. If auxiliary technical services require routing outside the EEA, we enforce European Commission Standard Contractual Clauses (SCCs) to guarantee an equivalent standard of protection.

Personal data is retained only for as long as your manager account remains active:

• Active Manager Accounts: Data retained throughout your active participation in seasonal Spanish competitions.
• Dormant Accounts: Accounts inactive for 24 consecutive months are flagged for automated pseudonymization and deletion.
• Support Tickets: Resolved manager inquiries are securely purged after 180 days.
• Server Security Logs: Transient network connection logs are systematically overwritten after 30 days.

You possess statutory rights regarding your personal information, which you may exercise without charge at any time:

• Right of Access (Art. 15): Obtain confirmation as to whether your personal data is being processed and receive a complete copy.
• Right to Rectification (Art. 16): Correct inaccurate or incomplete manager details.
• Right to Erasure ("Right to be Forgotten", Art. 17): Request deletion of your manager profile and historical lineups.
• Right to Restriction of Processing (Art. 18): Request temporary freezing of your records during dispute assessments.
• Right to Data Portability (Art. 20): Receive your squad and scoring records in a structured, commonly used JSON format.
• Right to Object (Art. 21): Object to data processing based on legitimate interests.

To exercise these rights, submit a written dispatch to [email protected] with the subject "GDPR Rights Request".

TopSportsES employs state-of-the-art technical and organizational measures to prevent unauthorized access, alteration, disclosure, or destruction of data. These measures include TLS 1.3 encryption in transit, AES-256 encryption for data at rest, role-based access control (RBAC), multi-factor authentication for administrative terminals, and regular automated vulnerability scans.

TopSportsES is strictly intended for individuals 18 years of age or older. We do not intentionally solicit or process data from minors under Spanish law. If we discover that personal data of an individual under 18 has been collected without verified parental authorization, we will immediately terminate the account and permanently delete all related records.

We do not perform automated decision-making that produces legal effects concerning you within the meaning of GDPR Article 22. Automated algorithmic processing is restricted to calculating fantasy scores, simulating tactical match probabilities, and detecting multi-account bot patterns to maintain fair play across our community.

We reserve the right to modify this Privacy Policy to reflect technological improvements, new game mechanics, or statutory updates enacted by the Spanish AEPD. Material changes will be prominently announced on our platform at least 15 calendar days prior to their effective date.

If you have inquiries, complaints, or feedback regarding our privacy practices, please contact our Data Protection Officer directly:

Email: [email protected] • Postal: DPO, TopSportsES Digital S.L., Paseo de la Castellana 189, Planta 14, 28046 Madrid, Spain.

You also have the right to lodge a formal complaint with the Spanish Data Protection Authority:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid, Spain • Website: aepd.es