Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the GDPR is:

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2. General Information and Legal Bases

We process personal data only where there is a legal basis for doing so. Depending on the purpose, processing is based on Art. 6 (1) GDPR, in particular: (a) your consent (Art. 6 (1)(a)); (b) the performance of a contract or pre-contractual measures (Art. 6 (1)(b)); (c) compliance with a legal obligation (Art. 6 (1)(c)); and (f) our legitimate interests (Art. 6 (1)(f)).

Storage period. We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods (e.g. commercial and tax law retention obligations). Once these periods expire, the data is routinely deleted.

SSL/TLS encryption. For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the lock symbol in your browser's address bar.

3. Hosting

Our website is hosted by the following processor: Netlify, Inc., 2325 3rd Street, Suite 215, San Francisco, California 94107, USA. Netlify processes data on our behalf exclusively in order to operate, deliver and secure the website. We have concluded a data processing agreement (DPA) pursuant to Art. 28 GDPR with Netlify. The legal basis is our legitimate interest in a secure and efficient provision of our online offer (Art. 6 (1)(f) GDPR). As Netlify also processes data in the USA, this transfer to a third country is safeguarded by the EU Standard Contractual Clauses (Art. 46 GDPR) and, where applicable, the EU-US Data Privacy Framework. Further information: netlify.com/privacy.

4. Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are:

• browser type and version,
• operating system used,
• referrer URL,
• host name of the accessing computer,
• time of the server request,
• IP address (anonymised / shortened where possible).

This data is not merged with other data sources. It is processed on the basis of Art. 6 (1)(f) GDPR; we have a legitimate interest in the technically error-free presentation and optimisation of our website, which requires the collection of server log files.

5. Cookies, Local Storage and Consent

Our website uses cookies and comparable technologies (e.g. local storage) — small data entries stored on your device. Technically necessary entries that are required to operate the website are stored on the basis of Art. 6 (1)(f) GDPR and § 25 (2) TDDDG. Entries that are not strictly necessary — in particular the affiliate tracking of our payment provider Lemon Squeezy (see Section 9) — are only stored and read with your prior consent pursuant to Art. 6 (1)(a) GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future via the consent dialog (where provided) or by deleting the stored cookies in your browser settings; the lawfulness of processing carried out until withdrawal remains unaffected.

6. Contact by Email or Contact Form

If you contact us by email or via a contact form, the information you provide (e.g. name, email address, message content) will be stored by us in order to process your request and in case of follow-up questions. The legal basis is Art. 6 (1)(b) GDPR where your request relates to a contract, and otherwise our legitimate interest in answering enquiries (Art. 6 (1)(f) GDPR), or your consent (Art. 6 (1)(a) GDPR). We delete this data once it is no longer required, unless statutory retention obligations apply.

7. Customer Account and Order Processing

When you create an account or place an order, we process the data required to perform the contract (e.g. name, email address, login data and order details). The legal basis is Art. 6 (1)(b) GDPR (performance of contract). Data required for tax and commercial law purposes is retained for the statutory periods (Art. 6 (1)(c) GDPR).

8. Payment Processing via Lemon Squeezy (Merchant of Record)

The sale and payment processing of our digital products are handled by our reseller Lemon Squeezy, LLC (USA), which acts as Merchant of Record and is therefore the contractual seller towards the customer for the purchase. When you make a purchase, you enter your payment and billing data (e.g. name, email address, payment details, country) directly with Lemon Squeezy. Lemon Squeezy processes this data as an independent controller for the purposes of contract and payment processing, invoicing, tax remittance and fraud prevention. We ourselves generally only receive the information required for order management (e.g. order, email address, purchase status), not full payment data.

The legal basis for the processing connected with the purchase is the performance of a contract or pre-contractual measures (Art. 6 (1)(b) GDPR). Lemon Squeezy also processes data in the USA; this transfer to a third country is safeguarded by EU Standard Contractual Clauses (Art. 46 GDPR). Details: lemonsqueezy.com/privacy.

9. Affiliate Tracking (Lemon Squeezy)

To attribute referrals from our partner programme, Lemon Squeezy sets cookies and/or local-storage entries in your browser (affiliate tracking). This is used to recognise whether a purchase was made via a referral/partner link. These entries are not strictly necessary for the operation of the website and are therefore only stored and read on the basis of your consent pursuant to § 25 (1) TDDDG; the subsequent processing of the data collected is based on your consent under Art. 6 (1)(a) GDPR. You can withdraw your consent at any time with effect for the future (see Section 5). We do not use any web-analytics tools (such as Google Analytics, Matomo or Plausible).

10. Your Rights as a Data Subject

Under the GDPR, you have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR);
• Right to rectification (Art. 16 GDPR);
• Right to erasure ("right to be forgotten", Art. 17 GDPR);
• Right to restriction of processing (Art. 18 GDPR);
• Right to data portability (Art. 20 GDPR);
• Right to object to processing based on Art. 6 (1)(f) GDPR (Art. 21 GDPR);
• Right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR).

To exercise any of these rights, please contact us at chessmasterclasspro@gmail.com.

11. Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority competent for the controller is:

12. Amendments to this Privacy Policy

We reserve the right to amend this Privacy Policy to ensure that it always complies with current legal requirements or to reflect changes to our services. The current version applies to your next visit.