PRIVACY POLICY
1. Name and contact details of the person responsible for processing and the company data protection officer
This data protection information applies to data processing by:
Person responsible:
GRAND CHESS Arts & Entertainment UG
Managing Director: Guido Randzio
Budapester Str. 40,
20359 Hamburg, Germany
E-mail: info@grand-chess.com
Telephone: 49 -40-30743497
Data protection officer:
According to Art. 37 Para. 4 GDPR in conjunction with Section 38 (1) BDSG a data protection officer doesn’t have to be appointed by GRAND CHESS Arts & Entertainment UG.
2. Collection and storage of personal data and the type and purpose of their use
a.) When visiting the website
When you visit our websites www.grand-chess.com and www.gcae.de, the browser used on your device automatically sends information to the server sent to our website. This information is temporarily stored in a so-called log file. The following information is recorded without any action on your part and stored until it is automatically deleted:
• IP address of the requesting computer
• Date and time of access
• Name and URL of the file accessed
• Website from which the access was made (referrer URL)
• Browser used and, if applicable, the operating system of your computer and the name of your access provider.
The data mentioned are processed by us for the following purposes:
• Guaranteeing the establishment of a smooth connection to the website
• Guaranteeing convenient use of our website
• Evaluation of system security and stability and
• for other administrative purposes.
The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. Our legitimate interest results from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about you personally. In addition, we use cookies and analysis services when you visit our website. You will find more detailed explanations under no. 4. and 5. of this data protection declaration.
b.) When registering for our newsletter
If you have explicitly agreed according to Art. 6 Para. 1 S. 1 lit. a GDPR, we will use your email address to regularly send you our newsletters. To receive the newsletters, it is sufficient to provide an email address.
The newsletter is sent via "MailChimp", a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE # 5000, Atlanta, GA 30308, USA.
The email addresses of our newsletter recipients, as well as their other data described in this information is stored on MailChimp's servers in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to its own information, MailChimp can use this data to optimize or improve its own services, e.g. for the technical optimization of the dispatch and the presentation of the newsletter or for economic purposes in order to determine from which countries the recipients come. MailChimp does not use the data of our newsletter recipients to write to them directly or to pass them on to third parties.
We trust in the reliability and IT and data security of MailChimp. MailChimp is certified under the US-EU data protection agreement "Privacy Shield" and is committed to complying with EU data protection regulations. We have also concluded a "Data Processing Agreement" with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection regulations and, in particular, not to pass it on to third parties.
Further information and the applicable data protection provisions of MailChimp can be found at https://mailchimp.com/legal/privacy/ and https://mailchimp.com/legal/terms/.
You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can send your unsubscribe request at any time to info@grand-chess.com by email.
c.) When calling up our email address
If you have any questions, we offer you the opportunity to contact us via email. Therefore, your own e-mail program will open, with which the e-mail is then sent to us.
The data processing for the purpose of contacting us takes place in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR based on your voluntarily given consent.
The personal data collected by us for the use of the request will be automatically deleted after your request has been dealt with.
d.) When using our contact form
If you have any questions, we offer you the opportunity to contact us using a contact form provided on the website. It is necessary to provide a valid email address, your name and the individual message so that we know who the request came from and to be able to answer it. Further information can be provided voluntarily.
The data processing for the purpose of contacting us takes place in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR based on your voluntarily given consent.
The personal data collected by us for the use of the contact form will be automatically deleted after your inquiry has been dealt with.
e.) For orders
If you would like to purchase products that we offer exclusively from us, such as numbered, limited and/or signed records and special editions, you can contact us on the “Exclusive” menu using the contact form provided there.
It is necessary to provide a valid email address, your name and the individual message so that we know who the request came from and to be able to answer it. Further information can be provided voluntarily.
The data processing for the purpose of contacting us takes place in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR based on your voluntarily given consent.
The personal data collected by us for using the contact form will be automatically deleted after your request has been dealt with.
Under the menu item "Exclusive" we list the individually numbered and signed products that can be ordered from us.
With one click, the user arrives at a contact form on which he can indicate that he would like to order limited editions from us.
After completing and sending this form, the further processing takes place via email.
Step 1: The user receives an offer email with prices for the product and shipping as well as payment options. This mail then also contains links to our terms and conditions and the revocation policy.
Step 2: After receipt of payment, we will send the ordered product and inform the customer with another manual email about the insured shipment with tracking number.
We save the customer data in our billing and accounting system Lexware Financial Office Plus.
3. Transfer of data
A transfer of your personal data to third parties for purposes other than those listed below does not take place.
We will only pass on your personal data to third parties if:
• you have given express consent to this according to Art. 6 Para. 1 S. 1 lit. a GDPR
• the transfer according to Art. 6 Para. 1 S. 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data
• in the event that there is a legal requirement for the transfer according to Art. 6 para. 1 sentence 1 lit. c GDPR, and
• this is legally permissible and is necessary for the processing of contractual relationships with you according to Art. 6 Para. 1 S. 1 lit. b GDPR is.
4. Cookies
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.), because they do not cause any damage to your device, do not contain any viruses, Trojans or other malware.
Information is stored in the cookie that results in connection with the specific end device used. However, this does not mean that we are immediately made aware of your identity.
The use of cookies serves on the one hand to make the use of our offer more convenient for you. We use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our site.
In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a specific period of time. If you visit our site again to use our services, it will automatically recognize that you have already visited us and which entries and settings you have made so that you do not have to enter them again.
On the other hand, we use cookies to statistically record the use of our website and to evaluate it to optimize our offer for you (see section 5). These cookies enable us to automatically recognize when you visit our site again that you have already visited us. These cookies are automatically deleted after a defined period of time.
The data processed by cookies are necessary for the purposes mentioned to safeguard our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR required.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, if you completely deactivate cookies, you may not be able to use all the functions of our website.
5. Analysis tools
Analysis tools supported by our CMS WIX are:
Google Analytics
Google Ads
Google Tag Manager
Facebook pixel
Yandex Metrica
Tracking tools
The tracking measures listed below and used by us are carried out based on Art. 6 Para. 1 S. 1 lit. f GDPR. With the tracking measures used, we want to ensure a needs-based design and continuous optimization of our website. On the other hand, we use tracking measures to statistically record the use of our website and to evaluate it for you in order to optimize our offer. These interests are to be regarded as legitimate within the meaning of the aforementioned regulation.
The respective data processing purposes and data categories can be found in the corresponding tracking tools.
a.) Google Analytics
For the purpose of a needs-based design and continuous optimization of our websites we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymised usage profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website such as
• Browser type / version
• the operating system used
• Referrer URL (the previously visited page)
• Host name of the accessing computer (IP address)
• Time of the server request
are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be passed on to third parties if this is required by law or if third parties process this data on behalf of us. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking).
You can prevent the installation of cookies by setting the browser software accordingly; however, we would like to point out that in this case not all functions of this website can be used to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will be set which prevents the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?Hl=de ).
b) Google Adwords Conversion Tracking
We also use Google Conversion Tracking to statistically record the use of our website and to evaluate it for the purpose of optimizing our website. In doing so, Google Adwords will set a cookie (see section 4) on your computer if you have reached our website via a Google ad.
These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the website of the Adwords customer and the cookie has not yet expired, Google and the customer can see that the user clicked on the ad and was redirected to this page.
Data protection authorities require the conclusion of an order data processing agreement for the permitted use of Google Analytics. A corresponding template is offered by Google at http://www.google.com/analytics/terms/de.pdf.
Every Adwords customer receives a different cookie. This means that cookies cannot be tracked via the websites of Adwords customers. The information obtained using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.
If you do not want to take part in the tracking process, you can also refuse the setting of a cookie required for this - for example via a browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser so that cookies from the domain “www.googleadservices.com” are blocked. You can find Google's data protection information on conversion tracking here (https://services.google.com/sitestats/de.html).
6. Social media plug-ins
We use on our website on the basis of Art. 6 Para. 1 S. 1 lit. f DSGVO social plug-ins from social networks to make GRAND CHESS better known and to get in touch and stay in contact with users and our GRAND CHESS community. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for the data protection-compliant operation is to be guaranteed by the respective provider. We integrate these plug-ins using the so-called two-click method in order to protect visitors to our website in the best possible way.
a) Facebook / Instagram
The following applies for Facebook and the Facebook product Instagram.
Social media plugins from Facebook are used on our website in order to make their use more personal. For this we use the "LIKE" or "SHARE" button. This is an offer from Facebook.
When you call up a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser, which integrates it into the website.
By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged into Facebook. This information (including your IP address) is sent directly from your browser to a Facebook server in the USA and stored there.
If you are logged into Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, for example press the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and shown to your Facebook friends
Facebook can use this information for the purpose of advertising, market research and the needs-based design of Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements shown to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services related to the use of Facebook.
If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your related rights and setting options to protect your privacy can be found in Facebook's data protection information (https://www.facebook.com/about/privacy/).
b) Twitter
Plugins of the short message network of Twitter Inc. (Twitter) are integrated on our website. You can recognize the Twitter plugins (tweet button) by the Twitter logo on our site. You can find an overview of tweet buttons here (https://about.twitter.com/resources/buttons).
When you visit a page on our website that contains such a plug-in, a direct connection is established between your browser and the Twitter server. Through this, Twitter receives the information that you have visited our site with your IP address. If you click the Twitter “tweet button” while you are logged into your Twitter account, you can link the content of our website to your Twitter profile. This allows Twitter to assign your visit to our website to your user account. We would like to point out that, as the provider of the website, we have no knowledge of the content of the data transmitted or of its use by Twitter.
If you do not want Twitter to be able to assign your visit to our website, please log out of your Twitter user account.
You can find more information on this in Twitter's data protection declaration (https://twitter.com/privacy).
c) YouTube
On our website we use for the integration of videos, among other things the provider YouTube, which is operated by YouTube LLC, with headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. based at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
The plugin is marked with the YouTube logo.
If you call up a page on our website that contains such a plug-in, your browser establishes a direct connection to the YouTube servers and the plug-in is displayed. This will tell the YouTube server which of our websites you have visited. If you are logged in as a member of YouTube, YouTube will assign this information to your personal user account. When using the plugin such as If you click the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your YouTube user account and other user accounts of the companies YouTube LLC and Google Inc. and deleting the corresponding cookies from the companies before using our website.
Further information on data processing and information on data protection by YouTube (Google) can be found at www.google.de/intl/de/policies/privacy/
7. Rights of data subjects
You have the right:
• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, if we have not collected it, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information on their details
• to immediately request the correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR
• to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is required to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend Legal claims
• to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert it for the exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR
• In accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible
• To revoke your consent given to us at any time in accordance with Art. 7 Para. 3 GDPR. As a result, we are no longer allowed to continue the data processing based on this consent in the future and
• to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company.
8. Right to Object
If your personal data is processed based on legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for this that arise from your particular situation or the objection is directed against direct marketing mail. In the latter case you have a general right of objection, which is implemented by us without specifying a particular situation.
If you would like to exercise your right of revocation or objection, an email to info@grand-chess.com is sufficient.
9. Data security
We use the widespread SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser when you visit our website. Usually this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed key or lock symbol in the lower status bar of your browser.
Furthermore, we use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
10. Topicality and changes to this data protection declaration
This data protection declaration is currently valid and is as of May 2018. Due to the further development of our website and offers or due to changed legal or official requirements, it may be necessary to change this data protection declaration. You can call up and print out the current data protection declaration at any time on the website at https://www.grand-chess.com/privacy-policy .