Privacy Policy

Data controller

The data controller responsible for your personal data is the European Chess Union (ECU) or the entity operating this platform as indicated in the contact section. You may contact us at any time regarding your data.

Legal basis

We process your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable national law. Processing is based on: performance of a contract (orders, enrollments), your consent (newsletters, analytics), legitimate interests (security, fraud prevention), or legal obligations.

Data we collect

• Account data: name, email, password (hashed), address
• Order and payment data: purchase history, payment status (processed securely via payment provider)
• Course enrollments and progress
• Technical data: IP address, browser type, device information (for security and analytics, where consented)
• Communications: messages sent via contact forms or support

Purpose of processing

We use your data to: provide and improve our services; process orders and enrollments; communicate with you; ensure security and prevent fraud; comply with legal obligations; and, with your consent, analyze site usage to improve the platform.

Data retention

We retain your data only as long as necessary for the purposes stated above or as required by law. Account data is retained while your account is active and for a reasonable period thereafter. Order and invoice data may be retained for legal and tax purposes. You may request deletion of your data where we have no legal obligation to retain it.

Your rights

Under GDPR you have the right to: access your data; rectify inaccurate data; request erasure; restrict processing; data portability; object to processing; and withdraw consent. You may also lodge a complaint with a supervisory authority. To exercise these rights, contact us using the details in the contact section.

Data sharing

We do not sell your personal data. We may share data with: payment providers (to process payments); hosting and infrastructure providers (under data processing agreements); and authorities when required by law. All processors are bound by appropriate safeguards.

International transfers

Your data may be processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

Security

We implement technical and organizational measures to protect your data, including encryption, access controls, and secure development practices. Despite our efforts, no system is completely secure; we encourage you to use strong passwords and keep your account credentials confidential.

Contact

For any questions about this privacy policy or your personal data, please contact us via the contact page or the email address provided in the footer.