Data protection statement

We, the ChessBase Schachprogramme Schachdatenbank Verlagsgesellschaft mbH, welcome your interest in our website. Protecting your private sphere is very important to us. Below, we inform you in detail how we deal with your data.
We take very seriously the protection of your personal data and the way we handle it confidentially. What we do with your personal data is done exclusively in accordance with the legal framework imposed by the data protection law of the European Union, specifically the General Data Protection Regulation (hereinafter “GDPR”) and subsequent applicable regulations.
This data protection statement informs you how we make use of your personal data on our website at www.chessbase.com and about your rights under the GDPR.

I. Name and contact data of the firm to which the statement refers

This data protection statement refers to data processing by: ChessBase Schachprogramme Schachdatenbank Verlagsgesellschaft mbH (hereinafter “ChessBase”, “we”), Osterbekstraße 90a, 22083 Hamburg, Email: info@chessbase.com, Telephone 040 63 90 60-0

II. Processing of personal data

In what follows we inform you about the processing of your personal data whenever you make use of our website simply as a visitor. Information about the processing of your personal data when you make use of what is on offer on our website as a user of the ChessBase online shop can be found below under sub-heading III of this data protection statement. Information about the processing of your personal data as far as further services of ChessBase Online - can be found below under sub-heading IV of this data protection statement.

1. The object of data protection

The object of data protection consists of “personal data”. This is all the information which refers to an identified or identifiable private person (so-called affected person). This includes e.g. information such as name, postal address, e-mail address or telephone number, but also information such as your ChessBase user profile name or data linked to it.
Specific information about the personal data processed by us can be found below in the detailed data processing operations.

2.Collection and storing of personal data and the type and purpose of processing

a. Visiting the website

Whenever you log into our website or leave a comment on it, the IP address of the computer you connected with is temporarily stored in a so-called logfile. The said data is then over-written with fresh data collected the next time you log in or leave a comment.
The legal basis for the data processing is Art. 6 (1) f) DGPR. Our legitimate interest follows from the fact that we are able to recognise any improper use and where appropriate prevent it. On no account will we make use of the data collected for the purpose of drawing conclusions about you as a person.
In addition, when you visit our website we employ cookies and analysis services. You will receive more detailed explanations about this under numbers 4 and 5 of this data protection statement.

b. Receiving a newsletter

Insofar as according to Art. 6 (1)  a) DGPR you have specifically given your consent, we use your e-mail address in order to regularly send you our newsletter. In order to receive the newsletter it is sufficient to have given us your e-mail address.
If you purchase goods or services on our internet site and in doing so leave your e-mail address this can subsequently be used by us in order to send a newsletter. In such a case we will send with the newsletter exclusively direct advertising for our own goods or services. The legal basis for the sending of the newsletter following the purchase of goods or services is in this case § 7  (3) UWG together with Art. 6 (1)  f) DGPR.
You may withdraw consent at any time no matter whether the sending of the newsletter was based on your specific consent or on legally permissible grounds, for example via a link at the end of one newsletter or another. Alternatively you can at any time send us your withdrawal of consent to info@chessbase.com by e-mail. There are no costs involved other than the costs of transmission according to base tariffs.
The data required for the sending of the newsletter are deleted as soon as they are no longer required for the purpose for which they were collected and insofar as no other legal basis requires further processing. Your e-mail address is then stored for the distribution of the newsletters until you withdraw your consent or no longer wish to receive the newsletter.

c. Using our contact form and e-mail contact

  • For questions of any sort we offer you the option of contacting us via a contact form made available on our website. To do so you are required to use a valid e-mail address, so that we know from whom the request comes in order to be able to answer it. Further information can be added if you so wish.
    Alternatively it is possible to make contact via the e-mail address which is provided. In this case your personal data which you have provided with the e-mail will be stored.
    Data processing for the purpose of making contact comes under Art. 6 (1)  f) DGPR. If the goal of making contact is the conclusion of a contract, then the additional legal basis for the processing of the data is Art. 6 (1)  b) DGPR.
    The personal data which we collect is deleted after the question you brought up has been dealt with.

3. Disclosure of data
We will only pass on your data to third parties if the data protection regulations allow this. In this sense, we are allowed to disclose your personal data to a third party if this processing is required in order to fulfil a contract with you of for the carrying out of pre-contractual measures, which stem from your request, e.g. passing on your address to a carrier (Art. 6 (1) b) DGPR).
Furthermore, we work together with providers of services, so-called contract workers, who process your data for us and directed by us as described in Art. 28 DGPR (e.g. in evaluating the use of our website via Google Analytics, cf. Number 5). These service providers are carefully selected and contracted by us; they are bound to our instructions and regularly vetted.

4. Cookies

We employ cookies on our website. These are small files which are automatically created by your browser and which are stored on your device (laptop, tablet, smartphone, etc.), whenever you visit our website. Cookies in no way damage your device, do not accept viruses, trojans or other malicious software.

The cookie stores information which is generated on each occasion linked to the device which is actually in use. This does not mean, however, that we receive from them any direct knowledge of your identity.

On one hand, employing cookies serves to make access to what we are offering more pleasant for you. Thus we install so-called session cookies in order to recognise that you have already visited individual pages on our website. These are automatically deleted when you leave our website.

Over and above that we also make use of temporary cookies in order to make things as user-friendly as possible; these are stored on your device for a pre-determined length of time. If you revisit our website in order to avail yourself of our services, it is automatically recognised that you have already been on the site and which inputs and settings you have used so that you do not have to enter them again.

On the other hand we employ cookies for a statistical analysis to evaluate the use of our website and for the purpose of optimising our offer to you (see Number 5).

The data processed by cookies are required for the purposes named to protect our legitimate interests and those of third parties according to Art. 6 (1)  f) DGPR.
Most browsers accept cookies automatically. You can, however, configure your browser in such a way that no cookies are stored on your computer or that a warning is given before a new cookie is saved. Complete deactivation of cookies, however, can lead to you not being able to use all the functions on our website.

5. Analysis by Google Analytics

The tracking measures we have installed have been done on the basis of Art. 6 (1) f) DGPR. With the tracking measures being applied, we want to ensure needs-based design and on-going optimisation of our website. On the other hand, we employ the tracking measures to evaluate statistically the use of our website and for the purpose of optimising what we are offering you. These interests are justified in the sense of the aforementioned regulations.
For the purposes of making our website user-friendly and continually optimising it we make use of Google Analytics, a web analysis service of Google Inc. (https://www.google.com/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this connection pseudo user profiles are created and cookies (see under Number 4) used. The information derived from the cookie about your use of the website such as

  • browser type/version,
  • operating system used,
  • referrer URL (the website described above),
  • host name of the computer accessing the site (IP address),
  • time of logging on to the server,

is transmitted to Google’s server in the USA and stored there in accordance with the agreement we have with Google concerning the data in the contract. The information is used to evaluate the use of the website and to produce reports on the website activities and to provide further services linked to the use of the website and the internet for the purposes of market research and rendering the web pages user friendly. This information is also when appropriate passed on to a third party insofar as this is legally required or insofar as the third party has a contract to work on this data. In no case is your IP-address linked to other data by Google. The IP addresses are anonymised, so that no attribution is possible (IP masking). Sessions and campaigns are ended after a specified length of time. The standard time at which to end a session is after 30 minutes with no activity and for campaigns it is six months. The time limit for can go to a maximum of two years.
You can prevent the installation of cookies through an appropriate setting of your browser software; we would, however, point out that in such a case it is possible that not all functions of this website can be used to their full potential.
Moreover, you can prevent the recording of the data generated via the cookie of your use of the website (including your IP address) as well as the handling of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).
As an alternative to the browser add-on, especially with browsers on mobile devices, you can also prevent the recording by Google Analytics by clicking on this link. An opt-out-cookie is installed which prevents any future recording of your data when visiting this website. The opt-out-cookie is only valid in that browser and only for our website and is installed on your device. If you delete the cookies in this browser, you will have to re-install the opt-out-cookie.

Further information about data protection in connection with Google Analytics can for example be found in the Google Analytics help pages (https://support.google.com/analytics/answer/6004245?hl=en).

6. Data security

When you visit the website we make use of the common SSL process (Secure Socket Layer) in connection with the highest level of encoding which is supported by your browser. In general this involves a 256 Bit encoding. If your browser does not support 256 Bit encoding, we will instead revert to 128 Bit v3 technology. You can recognise whether an individual website of ours on the net is encoded by the by the representation of a closed key or padlock symbol in the bottom status bar of your browser.
Moreover, we make use of appropriate technical and organisational security measures in order to protect your data against random or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously being improved according to technological developments.

III. How we use the personal data of users of the ChessBase online shop

If you use the ChessBase online shop (hereinafter “ChessBase Shop”) the following supplementary information is in force.

1. ChessBase user account

In order to acquire goods and/or services via the shop, you have to log in with your ChessBase user account. If you do not have such a ChessBase user account, you will be asked to set up a new ChessBase user account. With your ChessBase user account accessible via your e-mail address and the password you have chosen, you have at any time access to your previous orders and control over your personal data for the processing of orders.
To set up a ChessBase user account you have to enter into the input box the user profile name you wish, your e-mail address and the password you wish to use.
Our justification for the use of the data for the management of the ChessBase user account, and which you input pursuant to an order, derives from Art. 6 (1)  b) GDPR, since the use of the data is required in order to fulfil the contract requested.
If you wish, we will delete the ChessBase user account. Until then we will store the relevant data without limit of time so that you can at any time have access to it. When a ChessBase user account is deleted after the processing of an order (expiration of the warranty period) we lock the data referring to specific purchases and delete it after expiration of the warranty period.
We also process the purchase history associated with your ChessBase user account. This processing is justified by reference to Art. 6 (1)  f)  GDPR and serves our justified interest in always improving what we offer an offering you suitable products from the ChessBase Shop.

2. Payment data, delivery address and billing address

When acquiring wares and/or services in the ChessBase Shop you are required to choose a way to pay and let either us or the company which guarantees your payments have the relevant payment data.

Insofar as you also use your ChessBase user account for ChessBase online offers, you have possibly while using the database acquired “ChessBase ducats” (hereinafter “ducats”). This is a unit of currency with which players and users on ChessBase etc. can “reward” one another. You can also use these ducats to pay for products in the ChessBase Shop. You will find details of this from the conditions referring to the ChessBase shop on the website. We process personal data concerning these ducats.

Insofar as you make use of the option to take delivery from us of goods in embodied form, you provide us in the ChessBase Shop with a delivery address and a billing address.
Our justification for the use of your payment data, delivery address and billing address for the settlement of your purchase, and which you input pursuant to an order, derives from Art. 6 (1)  b) GDPR, since the use of the data is required in order to fulfil the contract requested.

IV. Processing of personal data of users of the ChessBase Online offers and the Apps: “Playchess”- platform, ChessBase Live Database, ChessBase “MyGames Cloud”, online browser chess game “Fritz!”, the ChessBase Training and “Opening App”

Whenever you make use of the ChessBase Online offers, the following supplementary information is valid.

ChessBase offers you, e.g., the option to make use of the following online services: the “Playchess” platform, ChessBase Live Database, ChessBase “MyGames Cloud”, the online browser chess game ”Fritz!”, the ChessBase Training and “Opening App” (hereinafter “ChessBase Online Offers”).

You can book your access to the ChessBase Online Offers by means of a subscription. To make use of these offers you need a ChessBase user account. Information concerning the ChessBase user account with reference to the setting up of a user account and the methods of payment for the ChessBase online shop apply as appropriate.
When you make use of the ChessBase Online Offers, we process, in addition to the data processed for a simple visit to the ChessBase website, the following additional data:

  • your user profile name
  • your playing statistics
  • ducats-vouchers
  • player evaluation

Data is recorded concerning your activities as a user in order to improve your experience as a user (by the saving of the last game of chess which you looked at so that as you continue as a user you are able to have direct access to this information). In addition cookies are stored in your browser to support your use of the online offers.

For online games, which you play as a registered user, your playing data is recorded and analysed. This allows us to evaluate and rank your ability in terms of Elo ratings. Alternatively you can play friendly games without evaluation or anonymous games by choosing to access the site as a guest.

With regard to the “Playchess” platform, other users can according to the circumstances follow online games which you are playing, comment on them and evaluate them. Moreover, they can see information about your user profile (user profile name, player ranking, awards).

Our justification for the use of your data for ChessBase Online Offers derives from Art. 6 (1)  b) GDPR, since the use of the data is required in order to fulfil the contract requested. This also holds true for the analysis of your play, to the extent that this operates in your favour. Insofar as you have supplied the payment data for taking out a subscription for the ChessBase Online Offers, this is also valid.

To the extent that we employ your activities as a user in order to improve what ChessBase offers in the way of goods and services and the ChessBase Online Offers, this is carried out based on Art. 6 (1)  f) GDPR for our own legitimate interest and the legitimate interest of our users in improving ChessBase products, especially the training material contained in ChessBase.

V. Your rights

1. Some points on mandatory information

According to Art. 13 (2) e) GDPR we advise you that the provision of your personal data is neither legally nor contractually required. Insofar as its provision is necessary for the fulfilling of a contract, this is made clear during the ordering process in compulsory fields. Moreover, you are not obliged to provide us with personal data. Not doing so will have no negative consequences for you, apart from the fact that it may not be possible to fulfil the order you desired. We do not process your personal data for the purposes of some automated decision making.

2. Rights of the data subject

You have the right:

  • According to Art. 15 GDPR to obtain information about personal data of yours processed by us. Specifically, you can obtain information concerning the purposes of the processing, the category of personal data concerned, the categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data, the right to lodge a complaint, where the personal data are not collected from the data subject, any available information as to their source, the existence of automated decision-making, including profiling, and meaningful information about their details;
  • According to Art. 16 GDPR the right to obtain without undue delay the rectification of inaccurate or incomplete personal data we have stored and which concerns you;
  • According to Art. 17 GDPR the right to obtain the erasure of personal data concerning you, so long as the processing is not required for exercising the right of freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public interest or for the establishment, exercise or defence of legal claims;
  • According to Art. 18 GDPR the right to obtain restriction of processing your personal data when the accuracy of the personal data is being contested by you, the processing is unlawful and you oppose the erasure of the personal data and we no longer need the data but you require it for the establishment, exercise or defence of legal claims or according to Art. 21 DSGVO you have raised an objection to its processing;
  • According to Art. 20 GDPR the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit those data to another data controller;
  • According to Art. 7  (3)  GDPR the right to withdraw your consent at any time. This has as a consequence that for the future we may no longer continue to process the data for which this consent was given and
  • According to Art. 77 GDPR the right to lodge a complaint with a supervisory authority, As a rule this may be that of your habitual residence, place of work or the headquarters of our firm.

3.The right to object

Insofar as your personal data is being processed on the basis of legitimate interests according to Art. 6 (1)  f) GDPR, you have the right according to Art. 21 GDPR to raise an objection against the processing of your personal data, if there are grounds for it which result from your particular situation or if the objection is directed against direct marketing. In the latter case you have a general right to object, which will be implemented by us without specification of a special situation.

VI. Validity and changes to this data protection statement

This data protection statement is at present in force and dates from May 2018.

The further development of our website and offers on it or altered legal or official requirements can make it necessary to make changes to this data protection statement. You can access and print out the data protection statement in force at any time at https://en.chessbase.com/pages/security.