Chess Fun - Privacy Policy
§1. Introduction
This Privacy Policy sets out the rules for processing and protecting personal data of Users of the website Chess Fun, available at https://chess-fun.com hereinafter referred to as the “Service”.
The Privacy Policy has been prepared in accordance with EU Regulation 2016/679 (GDPR), the Polish Personal Data Protection Act of May 10, 2018, and the Act on Providing Services by Electronic Means of July 18, 2002.
§2. Data Controller
The data controller is:
TECHNIK-POL Rafał Butanowicz
Ul. os. Ks. Ryszarda Kulika 18, 43-267 Suszec, Poland
NIP: 6381675754 | REGON: 240766354
Contact e-mail: office@chess-fun.com
§3. Categories of personal data
The Controller may process the following categories of Users’ personal data:
- identification data (name, surname, nickname, account ID)
- contact data (email address, optionally phone number)
- technical information (IP address, device ID, browser and OS data)
- activity data (game history, rankings, messages, comments)
- profile pictures and media voluntarily provided by the User
- payment data — in case of paid services (transaction data, order number, billing data)
§4. Purpose and legal basis of processing
The Controller processes personal data for the following purposes:
- provision of electronic services — pursuant to art. 6(1)(b) GDPR (contract performance)
- account maintenance and ensuring Service functionality
- contact with the User — based on the Controller’s legitimate interest (art. 6(1)(f) GDPR)
- fulfillment of legal obligations (e.g., tax) — art. 6(1)(c) GDPR
- marketing of own services if User has given consent (art. 6(1)(a) GDPR)
- statistical analysis, system security, and fraud prevention
§5. Processing of photos and media
Photos and other materials submitted by Users may constitute personal data if they allow identification of a person. The Controller processes them only to the extent necessary for proper functioning of the Service (e.g., profile picture) and does not share them with third parties without User consent, unless required by law.
By submitting photos or materials, the User declares that they hold copyright and that the persons depicted have given consent for publication in the Service.
§6. Recipients of data
Personal data may be shared with entities cooperating with the Controller, such as:
- payment operators and banks
- IT and hosting service providers
- accounting and consulting firms
- public authorities — only when legally required
All entities processing data on behalf of the Controller are obliged to maintain confidentiality and ensure appropriate security measures.
§7. Transfer of data outside the EEA
As a rule, personal data are not transferred outside the European Economic Area (EEA). In exceptional cases, the Controller will ensure appropriate safeguards according to Articles 46–49 GDPR (e.g., standard contractual clauses or European Commission adequacy decision).
§8. Data retention period
Personal data are kept for the period necessary to achieve the purpose for which they were collected:
- account data — until the account is deleted by the User or the agreement is terminated
- payment data — for the period required by tax law
- data processed based on consent — until withdrawal of consent
- statistical and technical data — up to 12 months from last activity
§9. User rights
The User has the following rights:
- access to their data
- rectification or completion of data
- deletion of data (“right to be forgotten”)
- restriction of processing
- data portability
- object to data processing
- withdraw consent at any time (if processing is based on consent)
To exercise the above rights, contact the Controller at: [email].
The User also has the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) if they believe their data is processed in violation of GDPR.
§11. Data security
The Controller applies appropriate technical and organizational measures to protect personal data, in particular:
- connection encryption (SSL)
- access to systems only for authorized persons
- regular backups
- monitoring IT system security
§12. Changes to the Privacy Policy
The Controller reserves the right to make changes to the Privacy Policy, especially in case of legal changes or introduction of new Service functions.
Users will be informed of any changes via a notice on the website or by e-mail.