Privacy Policy

Last updated: June 2025

1. Introduction

Opening Chess Trainer ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our chess training platform and services.

This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our services, you consent to the data practices described in this policy.

2. Data Controller

Opening Chess Trainer is the data controller for your personal data. You can contact us at [email protected]

3. Information We Collect

3.1 Personal Information

  • Name and email address (when you create an account)
  • Payment information (processed securely by third-party providers)
  • Profile information (chess usernames, chess rating, preferences)
  • Communication data (support messages, feedback)

3.2 Usage Data

  • Chess opening repertoires and training data
  • Learning progress and performance metrics
  • Platform usage statistics and preferences
  • Device information and IP addresses

3.3 Cookies and Tracking

We use essential cookies for platform functionality like authentication. You can manage cookie preferences in your browser settings.

4. How We Use Your Information

We process your personal data for the following purposes:

  • Service Provision: To provide and maintain our chess training platform
  • Account Management: To create and manage your user account
  • Personalization: To customize your learning experience and recommendations
  • Communication: To send service updates, support responses, and marketing (with consent)
  • Legal Compliance: To comply with legal obligations and protect our rights

5. Legal Basis for Processing

Under GDPR, we process your data based on:

  • Contract Performance: To provide services you've subscribed to
  • Legitimate Interest: To improve our platform and prevent fraud
  • Consent: For marketing communications
  • Legal Obligation: To comply with applicable laws

6. Data Sharing and Disclosure

We may share your information with:

  • Service Providers: Third-party vendors who assist in platform operations
  • Payment Processors: Secure payment handling (Stripe, PayPal)
  • Analytics Providers: To understand platform usage (anonymized data)
  • Legal Requirements: When required by law or to protect our rights

We never sell your personal data to third parties for marketing purposes.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a machine-readable format
  • Restriction: Limit how we process your data
  • Objection: Object to processing based on legitimate interest
  • Withdraw Consent: Withdraw consent for marketing or cookies

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and staff training
  • Secure hosting with reputable providers

9. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

  • Account Data: Until account deletion or 3 years of inactivity
  • Training Data: Until account deletion (for service provision)
  • Payment Data: As required by financial regulations (typically 7 years)
  • Marketing Data: Until consent is withdrawn

10. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure adequate protection through:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions for certain countries
  • Certification schemes and codes of conduct

11. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected such data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. Your continued use of our services after changes constitutes acceptance.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

Email: [email protected]

Subject Line: Privacy Policy Inquiry

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.