FIDE Online Arena Privacy Policy

*This Privacy Policy applies to the processing of personal data by World Chess Events Limited (the “Controller”, “we”, “us”) and describes how your, as data subject’s, personal data is processed in FIDE Online Arena (the “Platform”) and World Chess’ online store.

This Privacy Policy describes the practices and purposes of personal data processing for the provision of Platform services and our online store’s services. It also describes how you may exercise your data subject’s rights in your relationship with the Controller. The Controller processes personal data in accordance with the GDPR and applicable law. Unless otherwise specified, the terms and conditions in this Privacy Policy have the same meaning as the terms in Article 4 of the GDPR.

To ensure that your personal data are processed in a transparent manner, this Privacy Policy explains the following:

By using our services you are representing that you have read and agree to our Privacy Policy. Otherwise, immediately discontinue the use our services.

1. What personal data are processed

To provide you with our services and achieve the purposes stipulated in next paragraph, we are processing certain personal data related to you. Below we have indicated what categories of personal data we process.

Registration data – in order to provide you our services, we are processing your personal data which you provide us upon registering your account in the Platform. Such registration data may include your e-mail address, identification data.

Identification data – to provide you our services we may have to identify you. The identification data may include your first name and last name, date of birth, your address, information received from social media accounts, ID documentation (when registering as FIDE member), and assigned FIDE ID number.

Contact data – to be able to contact you, we may process your e-mail address, phone number and address.

Payment data – to carry out necessary payments we may process your payment data which may include your credit card information, sent and received payments, and other information related to payments.

Game data – when playing games in the Platform, we will process information related to such games, which may include your chess ratings, results, information about how games were played by you on our Platform and in connected services.

Technical data – to ensure smooth provision of our services we will process technical data which may include your browser or mobile device information, information about your operating system, installed extensions and fonts, date and language of the computer or the mobile device.

Usage data – we may collect information that your browsersends whenever you visit our Platform or when you access the Platform by our through a mobile device. The usage data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, mobile type, mobile device unique ID, the IP address of mobile device, mobile operating system, the type of mobile Internet browser, unique device identifiers and other diagnostic data, the pages of the Platform you visit, the time and data of your visit, the time spent on the Platform, unique device identifiers and other diagnostic data. When you access the Platform by or through a mobile device, the usage data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile internet browser you use, unique device identifiers and other diagnostic data.

Cookies data – we also acquire certain information from the use of cookies and similar tracking technologies. The cookies are used to track the activity on our Platform and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier, however, certain information may still be linked to your account. Cookies are sent to your browser from a website and from the mobile application and stored on your device. More information about what type of data and for what purposes are acquired from cookies you can find in our Cookie Policy here.

2. How do we acquire your personal data

During the provision of our services, we may acquire your personal data from various sources.

Some of the personal data we are acquiring directly from you when you register your account or when you are using Platform’s services.

Additionally, personal data related to you may be acquired from the cookies which are used to ensure the workings of the Platform. More information about how we use our cookies can be found on our Cookie Policy here.

When you register your account as FIDE member, we will also acquire your personal data (such as Identification data (e.g. first name, last name, your represented country, etc.) and Game data (e.g. your ratings)) from FIDE (International Chess Federation) and national chess federations and their websites (or other online sources).

When you are registering your account through social media platforms, we may also acquire certain Identification data and e-mail address from social media sites which you have chosen to use to register your account.

3. For what purposes and what legal basis your data is processed

In this section, we provide your details on for what purposes we may be processing different categories of personal data. Also, for users who live in European Economic Area, we also identify the legal basis under which we are processing your personal data for respective purposes in accordance with the General Data Protection Regulation (the “GDPR”).

We may also process your personal data for other legitimate purposes if:

If we are processing your personal data for other purposes than those indicated in the table above, we will make sure that such processing is compatible with the purposes for which the personal data were collected. When possible, we will inform you about new data processing purposes.

4. How long we will be processing your personal data

We will retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy.

Your Registration Data, Identification data, and Contact data and Game data shall be retained as long as you have registered an account in the Platform and for additional 10 years after the respective account has been deleted.

Information about your purchases in our online store - your Identification data, Contact data, Payment data, and information about the purchase will be stored for a period of 10 years.

Please note that certain data, such as Registration data, Identification data, Payment data, information related to the accepted terms and conditions, and other types of contracts concluded with us or consents for personal data processing provided to us, maybe retained even after you have requested to delete your account for the period of applicable limitation periods (no longer than 10 years) to protect our legal interests in case of possible disputes or for accounting purposes.

Your personal data related to the rated games in the Platform will be processed in blockchain technology to ensure the reliability of online ratings and their integrity. This means that personal data processed during and related to rated games (such as Identity Data, e.g. FIDE ID number, and Game data, e.g. results of games and player’s ratings) in Platform will be retained for an unlimited period of time. This is because the relevant technology does not allow to alter historical data to ensure the integrity of respective data.

We will also retain and use your personal data to the extent necessary to comply with our legal obligations or ensure our legal rights (e.g. to resolve disputes and enforce our legal agreements and policies).

Technical data, Usage data, and Cookies data are generally retained for shorter periods of time (no longer than 10 years after their creation) unless the respective data must be retained longer to comply with legal obligations or to protect our legal rights. Personal data for the purposes to detect and prevent cheating will be retained for no longer than 10 years.

Without prejudice to the requirements and limitations stated above, the user may request the deletion of their account and the associated personal data by contacting support@chessarena.com. Please note that after account deletion, your account and the associated data may not be restored.

5. When the personal data may be shared with third parties

We may share your personal data to persons who are authorized by us and to our cooperation partners, which helps us to ensure our services and may act as our data processors, acting as IT service providers (including, but not limited to e-mail service providers, website or mobile application maintenance services, server providers or maintainers), marketing providers, payment service providers, delivery service providers, and others. When sharing your personal data to third parties we will carry out all necessary activities to ensure that third parties ensure adequate protection of your personal data.

For example, when you make payments in the Platform or our online store, your Identification Data and Payment Data will be processed by payment service provider Stripe, Inc., a company registered under the laws of the United States of America who provides us with payment processing service, and Identification Data and Contact Data will be processed by delivery service providers (couriers) to deliver ordered goods to your indicated address (where you order goods at our online store).

The Platform and online store is operated in partnership with other parties (with affiliates and business partners) which may also have access to your personal data. Such parties include:

The Platform is operated in partnership with FIDE to ensure that players can play FOA rated games. For this reason and to ensure better analysis of games for anti-cheating purposes, your personal data such as your Identification data and Game data will also be shared with FIDE for its processing purposes (where FIDE acts as independent data controller). FIDE privacy policy is available here: https://www.fide.com/privacy

Additionally, we may share your personal data in following situations:

i) ********After receiving substantiated request in accordance with procedures of applicable law, we may share your personal data to persons authorized by law (e.g. investigation authorities);

ii) ********When necessary to protect our interests protected by the law (e.g. when a person has infringed our interests) we may share the personal data with courts, bailiffs or other relevant state institutions;

iii) ********To our partners such as auditors, lawyers and other specialists or consultants, financial institutions, insurers (if necessary);

iv) ********To payment service providers to the extent necessary to make or receive a payment.

Also, we will share your personal data when you decide to use application programming interface (API) to receive our services through third parties.

We will not share your personal data with third parties if there will not be a legitimate purpose and legal basis for that.

In certain situations when we are cooperating with third parties (e.g. by using third party cookies or financial service providers) in addition to this Privacy Policy, the privacy policies of respective third parties will also be applicable to your personal data processing. We are encouraging to familiarize with respective privacy policies; however, we do not take any liability for their content.

Lastly, please note that certain Identification data and Game data will be available to all the visitors of the Webpage and Platform (e.g. first name, last name, your rating, and results of the games).

6. Information about the personal data transfer outside EU

Please know that we are established in the United Kingdom, which is no longer a member state of the European Union. However, we have undertaken to comply with the GDPR obligations when processing your personal data.

Your personal data in accordance with this Privacy Policy will be shared with FIDE which is established outside European Union – in Switzerland. According to the European Commission, Switzerland is deemed as providing adequate protection of personal data (Commission’s decision here).

Your personal data may be made available and processed by our affiliates and business partners established outside the European Union. For the purposes of provision of Platform’s services and online store services, personal data may be shared LLC «I-EXP» and World Chess US Inc. (United States).

Additionally, some of the data may be transferred to the United States of America to our server providers and online store development platform providers.

We will ensure necessary safeguards for the transfer of your personal data outside European Union, such as conclusion of standard data protection clauses adopted by the European Commission with data recipients established outside the European Union, if the European Commission has not adopted a decision determining that respective state ensures adequate data protection standards. For more information about the applied safeguards and where to obtain the copies of them, please contact us by writing to our e-mail: support@worldchess.com

7. Processing of children’s personal data

We do not specifically advertise to children under the age of 18.

We do not knowingly collect personally identifiable information from anyone under the age of 13 without the parental consent/consent of a legal guardian. If you become aware that your сhild has provided us with personal data without your consent and you would like his/her data removed, please contact us and we will delete the respective account. The same applies to the cases where you would like to withdraw your consent at a later date.

8. Automatic decision making

We use automatic decision to determine your chess ratings (including FIDE online rating) which is determined based on such data as Game data, number of games played, score against opponents, opponents ratings (in accordance with FIDE rules).

To ensure the fairness of the games in the Platform, the anti-cheating technology is also based on the automatic decision making. By using analytical tools and processing Usage data, Technical data, Game data, Cookies data and other available data, together with human analysis it is determined whether the user of the Platform is engaging in unfair game practices. You have right to appeal the decision in accordance with Platform’s terms and conditions.

9. Your rights arising out of the GDPR

In accordance with the General Data Protection Regulation, you have certain rights in respect to your personal data processing. In situations stipulated by the GDPR you have the following rights:

a. ********Right of access

b. ********Right to rectifications

c. ********Right to erasure

d. ********Right to object

e. ********Right to withdraw your consent

f. ********Right to restrict the processing of personal data

g. ********Right to data portability

To request the fulfillment of your rights, please contact us via e-mail: support@worldchess.com. Please note that for the fulfillment of your requested right, we may be required to process additional personal data and may request your identification.

In situations where you are not satisfied with our data processing activities, you always have a right to submit a complaint to your national data protection authority. You can find your data protection authority in the following website: https://edpb.europa.eu/about-edpb/board/members_en

10. Amendments to the Privacy Policy

We reserve our right to unilaterally update this Privacy Policy at any time. The actual version of the Privacy Policy will be available on our Website and/or Platform. We recommend reviewing this Privacy Policy regularly so that you remain informed of any changes.

11. Contact details of the Controller

If you have any questions regarding your personal data processing or this Privacy Policy, please, contact us by writing to our e-mail address: support@worldchess.com or by using contact information below:

World Chess Events Limited Registration number: 10589323 Registered address: Eastcastle House, 27/28 Eastcastle Street, London, United Kingdom, W1W 8DH

This Privacy Policy is in force from August 20, 2021