Privacy Policy
Last updated: [DATE]
This Privacy Policy explains how personal data is processed on ChessWay pursuant to the GDPR.
1. Data Controller
The data controller is [Full name / company name / Impressum service], [Serviceable address], e-mail: [contact@chessway.com]. Additional details are provided in the Legal Notice (Impressum).
2. Scope, purposes and legal bases
We process personal data only to the necessary extent pursuant to Art. 6(1) GDPR:
- Website operation and server logs (IP address, timestamp, requested resource, user agent) for stability and security; legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Strictly necessary cookies / local storage: language settings and directory filters; legal basis: Art. 6(1)(f) GDPR.
- Tournament/club submissions and contact inquiries: organizer contact details to verify and publish entries; legal basis: Art. 6(1)(b) or (f) GDPR.
- User comments and ratings: author name, comment content, and IP address for moderation and abuse prevention; legal basis: Art. 6(1)(f) GDPR.
3. Hosting and service providers
ChessWay is hosted with [hosting provider name and address] under a data processing agreement pursuant to Art. 28 GDPR.
4. International transfers
Data is primarily processed within the EEA. Any cross-border transfer complies with EU adequacy decisions or standard contractual clauses.
5. Retention
Data is retained only as long as necessary for the respective purpose or statutory retention periods.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object.
You also have the right to lodge a complaint with a data protection supervisory authority.
7. Automated decision-making
We do not engage in automated decision-making or profiling under Art. 22 GDPR.
8. Amendments
We may update this policy to reflect platform updates or legal changes.