¡Le damos la bienvenida a Chess.com!

This Privacy Policy (“Policy“) outlines how Chess.com collects, uses, protects, and discloses personal information obtained from anyone who uses our Services (“Users“), anyone who creates an account on the Chess.com website or any related content, features, mobile and web applications and other services (collectively the “Services“) which are brought to you by Chess.com, LLC and its affiliate companies.

This Policy addresses requirements in the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA“), as well as any other applicable international, national, and state requirements related to data collection, usage practices, and disclosures.

Lea esta Política atentamente. Al utilizar los Servicios, el usuario acepta el tratamiento de su información de acuerdo con la presente Política. Si nos facilita su información (directa o indirectamente a través de nuestros proveedores de servicios) trataremos su información de acuerdo con esta Política. En caso de que necesitemos utilizar su Información personal para cualquier otro fin distinto de los aquí expuestos, actualizaremos esta Política o le solicitaremos su consentimiento previo, si fuera necesario.

Summary of Key Points

We encourage you to read this entire Policy and our Terms of Service, but here are some key points that may be of your interest:

• Información personal ("IP") hace referencia a la información que identifique, se relacione con, describa, pueda asociarse a, o pueda vincularse de forma razonable, directa o indirectamente, con un consumidor o domicilio particular.
• Durante el registro, podemos pedir al usuario que nos proporcione una dirección de correo electrónico, un nombre de usuario y, si en su país está disponible el registro mediante número de teléfono, le pediremos que nos facilite un número de teléfono.
• We will never ask you to provide us with sensitive PI.
• A los usuarios de pago se les piden los datos de pago cuando compran algo en nuestros Servicios. Consulte la sección "Recopilación de información" para obtener más detalles sobre cómo protegemos los datos de pago.
• Dado que la seguridad de la IP del usuario es importante para nosotros, solo solicitamos la IP cuando dicha solicitud sirve a un propósito comercial y procuramos limitar la recopilación de IP a solo lo necesario para cumplir tales propósitos. También aplicamos medidas de seguridad físicas, técnicas y administrativas razonables y diseñadas para proteger toda la información recogida por los Servicios.

Índice

1. Definiciones

2. Privacidad de menores

3. Recopilación de información

4. Cómo utilizamos la información

5. When We Disclose Information to Third Parties

6. How to Exercise your Right to Access, Change or Correct your Information

7. Cómo ejercer los derechos de cancelación y eliminación de su cuenta y cómo solicitar la reactivación

8. California Privacy Rights Act (CPRA)

9. Información adicional sobre Datos personales tratados según el Reglamento General de Protección de Datos (RGPD)

10. Other Region and State-Specific Terms

11. Enlaces a otros servicios

12. Sede del tratamiento de la información

13. Security

14. Changes to Our Privacy Policy

15. Contact Us

16. Chess Play & Learn (Arcade Version)

1. Definiciones

RGPD

Las siglas RGPD hacen referencia de manera conjunta al Reglamento General de Protección de Datos de la Unión Europea ("UE") y del Reino Unido ("RU").

Personal Data

Los Datos personales, según se definen en el RGPD, hacen referencia a cualquier información relacionada con una persona física identificada o identificable. Una persona física identificable es aquella que se puede identificar, de forma directa o indirecta, en concreto mediante un identificador online como un nombre, número de identificación, datos de ubicación, identificador online o uno o varios factores específicos de la identidad física, fisiológica, genética, mental, económica, cultural o social de dicha persona física. Los términos "Datos personales" e "Información personal" se utilizarán como sinónimos en esta Política.

Usage Data

Usage Data is data collected automatically either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit). Usage Data may include pseudonymous data where applicable.

Cookies

Cookies and/ or similar technologies (collectively referred to as “Cookies“): are small pieces of data stored on your device (computer or mobile device).

Responsable del tratamiento de datos

El Responsable del tratamiento de datos es la persona física o jurídica que (individual o conjuntamente con otras personas) determina los fines y la forma en que cualquier información personal se trata o será tratada. A los efectos de esta política, somos el Responsable del tratamiento de datos de los Datos Personales del usuario.

Data Processors

El Procesador de datos es la persona física o jurídica que procesa los datos en nombre del Responsable del tratamiento de datos y sigue las instrucciones de este (normalmente se refiere a nuestros proveedores de servicios). Utilizamos los servicios de varios Procesadores de datos para procesar los datos de los usuarios de manera más efectiva.

Data Subject

Data Subject is any living individual whose Personal Data we process.

2. Privacidad de menores

Chess.com is not targeted towards minors, meaning a person under the minimum age required to consent to the processing of their personal information as determined by applicable laws in their state or country of residence. Our platform at ChessKid.com is targeted towards minors.

3. Recopilación de información

There are two general categories of information that we collect.

A. Information Users Provide to Us

As more fully set forth below, we and our third-party service providers collect information that Users provide when using the Services, including when Users create an Account, sign up for Services, or contact us with a question, comment, or request.

To register an Account, Users are asked to provide a username, an email address, and/or telephone number (which is optional if you choose to register with an email).

Users are also able to complete their profile with additional information which is optional such as: first and last name, location, country, language, content language, timezone, OTB rating, status, profile picture and any other information the User chooses to share in the “About me“ section of the profile. The flag of the country you choose will appear on your profile.

Keep in mind that certain information from your profile is public and therefore can be accessed by any User, and even by people outside Chess.com. By including information in your profile, you understand that the information that is public can be used by any person or entity for their own purposes.

There is also other information provided that depends on the type of Account. For example:

Payment information such as credit or debit card information and billing address is collected from Users who purchase a subscription, including those who gift a paid Account to others, unless Users are purchasing through iTunes, PayPal, or other similar mechanisms with which we integrate. For your security, we do not store your credit card number in our databases but we and our payment service providers may retain only the first six digits and/or last four digits to identify your Account and respond to your requests and questions and to process the payment.

In addition, Users can provide us with information through separate sections of the Services. These sections, accessible via the Menu or Settings link on the Services, allow Users to administer their Accounts, including when they provide testimonials, seek customer support, or submit comments or questions.

If you submit any information relating to other people in connection with the Services, you represent that you have the authority to do so and permit us to use the information in accordance with this Policy.

When you contact us directly by any means we will collect your email address, name and any information you provide.

B. Information We Collect from Users

We and our third-party service providers collect PI directly from Users of the Services in the form of the actions they take and activities they complete when using the Services. For example, from all Users, we may collect information about patterns of usage and order history.

We and our third-party service providers also use a variety of technologies, such as Cookies, to automatically collect certain technical information from your computer or mobile device over time and across different websites.

We and our third-party service providers may use the information collected through these technical methods for several purposes, including delivering content, tracking and enhancing our Users' experience with the Services, and delivering advertising to visitors of our Services when they visit other websites and applications. For example, when you return to the Services after logging in, Cookies help the Services recognize who you are without having to log back in. More information about the use of Cookies is set forth below.

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of Data Collected

1. Información personal

While using our Service, we may collect certain PI. PI may include but is not limited to:

• Información requerida (nombre de usuario, dirección de correo electrónico o número de teléfono, según proceda)
• Optional Information (first and last name, location, country, language, content language, timezone, OTB rating, status, profile picture and any other information the User chooses to share in the “About me“ section of the profile)
• Public available chess records from FIDE (Fédération Internationale des Échecs)
• Podemos usar los Datos Personales del usuario para enviarle boletines, materiales de marketing o promocionales y cualquier otra información que pueda ser de su interés. A tal fin, solicitaremos su consentimiento previo si la legislación aplicable así lo requiere. El usuario puede optar por no recibir alguna o ninguna de estas comunicaciones a través del enlace de cancelación de la suscripción, siguiendo las instrucciones incluidas en cualquier correo electrónico que le enviemos, cambiando la configuración de sus notificaciones o poniéndose en contacto con nosotros.
• If you use our App for the Apple or Android platform, we may ask, with your permission, to collect your contact list information (including email addresses and phone numbers) to share with Apple or Google for the exclusive purpose of finding your friends and connections.
• If you participate in one of our chess competitions with prizes, you may be required to install software that monitors your activity on your computer or device. This software may log your device processes and tabs, record your device screen, access your webcam(s) and video, record your input and output audio, and track your mouse or cursor movement. This PI will be collected and disclosed to a third-party to conduct the competition, to prevent, detect and investigate violations of the competition's rules and our Fair Play Policy as further described in Section 5 (When We Disclose Information to Third Parties).
• We also collect Usage Data and Cookies Data, as described below in separate sections.

2. Usage Data

También podemos recoger la información que su navegador nos envía cada vez que el usuario visita nuestro Servicio o accede al Servicio por medio de un dispositivo móvil ("Datos de uso").

This Usage Data may include information such as your Internet Protocol address (e.g., IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, your country, your chess statistics and other diagnostic data.

When you access the Service by or through a mobile device, this Usage Data may include information such as your browser type, operating system, device type, the page served, your IP address, how you got to our Website, the time and length of your visit, your language preferences, your approximate geolocation, and the websites you visited prior to visiting the Services. When you download and use one of our Apps, we and our service providers may track and collect App usage data, such as the date and time the App on your device accesses our servers and what information and files have been downloaded to the App based on your device number.

3. Datos de cookies

We use Cookies to provide you with the Services, to track the activity on our Service and to hold certain information. We use the following types of Cookies to recognize your device and to provide and improve our Services:

Cookies esenciales

These Cookies are essential to provide you with services available through the Services and enable you to use some of its features. For example, they allow you to log in to secure areas of our Services and help the content of pages you request load quickly. Without these Cookies, the Services that you have asked for cannot be provided, and we only use these Cookies to provide you with those Services. You may not disable these types of Cookies.

Cookies de funcionalidad

These Cookies allow us to remember choices you make when you use our Services, such as remembering your language preferences, remembering your login details, and remembering the changes you make to other parts of Services which you can customize. The purpose of these Cookies is to provide you with a more personal experience and to avoid you having to reenter your preferences every time you visit our Services.

Analytics and Performance Cookies

These Cookies are used to collect information about traffic to our Services and how Users use the Services. It includes the number of visitors to our Services, the websites that referred them to our Services, the pages they visited on our Services, what time of day they visited our Services, whether they have visited our Services before, and other similar information. We use this information to help operate our Services more efficiently, to gather broad demographic information, and to monitor the level of activity on our Services.

Cookies de redes sociales

These Cookies are used when you share information using a social media sharing button or “like“ button on our Services or engage with our content on or through a social networking website such as Facebook, Twitter, or Google+ and also if you choose to sign up using your social media account. These cookies are also placed on your browser if you access to a section of our Services that provides you with embedded videos from Youtube, Twitch or other third-party websites. Some of these cookies may be considered essential if you log in using your social media account.

Cookies de marketing

Marketing Cookies are used to serve you with advertisements that may be relevant to you and your interests.Third parties might use information gathered by cookies and/or web beacons for the purpose of online behavioral advertising. The types of information that is gathered by third party cookies and/or web beacons as well as the purpose(s) for which this information is used, are set out in the privacy policy of said third parties which we encourage you to review. Chess.com declines all and any liability for any third party cookies or web beacons deployed by third parties for whatever purpose.

Google, as a third-party vendor, uses cookies to serve ads on our Service. Google's use of the DoubleClick cookie enables it and its partners to serve ads to our users based on their visit to our Service or other websites on the Internet. You may opt out of the use of the DoubleClick Cookie for interest-based advertising by visiting the Google Ads Settings web page: http://www.google.com/ads/preferences.

Depending on your country of residence, you may allow or reject the use of non-essential Cookies when using our Services by changing your Cookie preferences here. However, please note that if you reject or block certain categories of Cookies from the Services, the Services may not function as intended. For example, you will not be able to remain logged into your Account, and therefore you would have to log in during each page transition.

You may also opt out of the use of cookies by visiting the Google ad and content network privacy policy at http://www.privacychoice.org/companies or http://www.aboutads.info/choices.

To learn more about this behavioral advertising practice or to opt-out of this type of advertising, you can visit www.networkadvertising.org.

4. Cómo utilizamos la información

Tanto nosotros como nuestros proveedores de servicios externos podemos usar la información recopilada de los Usuarios para los fines siguientes:

• Para permitir que el usuario se registre y utilice los Servicios, incluido, por ejemplo, el envío de comunicaciones sobre su Cuenta, o para permitir que el usuario envíe sus comentarios a través de los apartados de Atención al cliente o Contacto. (Base legal: cumplimiento de nuestras obligaciones legales y cumplimiento de nuestro contrato con el usuario)
• Para completar y tramitar la compra por parte del usuario, que incluye el procesamiento de pagos, la comunicación con el usuario en relación con su compra y el servicio de atención al cliente correspondiente. (Base legal: cumplimiento de nuestro contrato con el usuario, cumplimiento de nuestras obligaciones legales y defensa de nuestros intereses legítimos)
• Para responder a las consultas y atender las solicitudes del usuario, recuperar su contraseña o proporcionarle asistencia técnica. (Base legal: cumplimiento de nuestro contrato con el usuario, cumplimiento de nuestras obligaciones legales y defensa de nuestros intereses legítimos)
• Para hacer llegar al usuario información, circulares, comunicaciones de marketing, publicaciones y otras notificaciones a través de diversos medios a fin de mantenerle informado. (Base legal: consentimiento del usuario, cumplimiento de nuestro contrato con el usuario y defensa de nuestros intereses legítimos)
• Para enviar al usuario publicidad basada en sus visitas a los Servicios. (Base legal: consentimiento del usuario y defensa de nuestros intereses legítimos)
• Para medir la eficacia de nuestra publicidad. (Base legal: cumplimiento de nuestro contrato con el usuario y defensa de nuestros intereses legítimos)
• Para permitirnos evaluar y mejorar los Servicios, el contenido educativo y otros servicios que proporcionamos (por ejemplo, para mejorar nuestro contenido y la experiencia del Usuario); para investigar, evaluar y mejorar la eficacia educativa de los Servicios; y para informar nuestra comprensión de la base de usuarios de los Servicios. (Base legal: cumplimiento de nuestro contrato con el usuario y defensa de nuestros intereses legítimos)
• Para verificar la identidad del usuario o realizar las comprobaciones oportunas para la prevención y detección de fraudes. (Base legal: cumplimiento de nuestras obligaciones legales y defensa de nuestros intereses legítimos)
• Para adaptar y personalizar la experiencia de visualización y consumo de contenidos del usuario. (Base legal: cumplimiento de nuestro contrato con el usuario, su consentimiento y defensa de nuestros intereses legítimos)
• Para mantener y analizar el funcionamiento de los Servicios. (Base legal: defensa de nuestros intereses legítimos)
• Para gestionar y dirigir nuestra empresa. (Base legal: cumplimiento de nuestro contrato con el usuario y defensa de nuestros intereses legítimos)
• En la medida en que lo consideremos necesario o apropiado: (a) para cumplir con la legislación aplicable, incluidas leyes de fuera del lugar de residencia del usuario; (b) para cumplir con un procedimiento legal; (c) para responder a solicitudes de autoridades públicas y gubernamentales, incluidas entidades de fuera de su lugar de residencia; (d) para detectar infracciones o ejecutar nuestros términos y condiciones; (e) para proteger nuestras operaciones o las de nuestras filiales, incluida la seguridad de los Servicios; (f) para proteger nuestros derechos, privacidad, seguridad o propiedad, o los de nuestras filiales, el usuario o terceros y (g) para permitirnos reclamar indemnizaciones disponibles o limitar los daños que podamos defender (en su conjunto, (a)-(g) son Otros usos y divulgaciones). (Base legal: cumplimiento de nuestras obligaciones legales y defensa de nuestros intereses legítimos)
• Para enviar notificaciones automáticas, SMS, alertas y otros tipos de notificaciones al dispositivo móvil del usuario. El usuario puede optar por dejar de recibir notificaciones automáticas en cualquier momento cambiando la configuración de su dispositivo móvil. Si nos facilita su número de teléfono móvil, podremos enviarle mensajes de texto SMS sobre su cuenta con su consentimiento previo, si así lo exige la ley. El usuario debe tener en cuenta que su operador puede cobrarle por los mensajes de texto que reciba. Para dejar de recibir mensajes de texto SMS de nosotros de forma permanente (si se encuentra en EE. UU. o Canadá), el usuario debe escribir STOP, CANCEL o UNSUBSCRIBE en respuesta a cualquier mensaje de texto SMS enviado por nosotros. (Base legal: cumplimiento de nuestro contrato con el usuario, cumplimiento de nuestras obligaciones legales y defensa de nuestros intereses legítimos)
• Para investigar y desarrollar nuevos productos y servicios. (Base legal: cumplimiento de nuestro contrato con el usuario y defensa de nuestros intereses legítimos)
• Para publicar el nombre del usuario en caso de que sea el ganador de un concurso, sorteo, torneo o, en general, de cualquier evento. (Base legal: cumplimiento de nuestro contrato con el usuario, consentimiento del usuario y defensa de nuestros intereses legítimos)
• Para fines administrativos. (Base legal: cumplimiento de nuestro contrato con el usuario y defensa de nuestros intereses legítimos)
• Para organizar nuestros eventos competitivos y para prevenir, detectar e investigar infracciones de la Política de Juego Limpio, Política de Competiciones y las reglas de cualquier torneo organizado por nosotros. (Base legal: cumplimiento de nuestro contrato con el usuario, cumplimiento de nuestras obligaciones legales, consentimiento del usuario y defensa de nuestros intereses legítimos)
• Para cumplir cualquier otra finalidad especificada al usuario en el momento en que se recopiló la información.

5. When We Disclose Information to Third Parties

Information collected from Users will not be disclosed except for the following purposes, which include our operations purposes:

• To service providers such as payment processors, financial institutions, technological, analytical, marketing, advertising service providers and partners and third party professional advisors (i.e., auditors, law firms, etc.), provided that, the service providers agree to keep the information confidential.
• To our affiliates and business partners and their employees for business purposes, when necessary for the purpose of the provision of our services or when such affiliates provide services to us.
• As needed to conduct our competitive events and to prevent, detect and investigate violations of our Fair Play Policy, Competitive Events Policy and the rules of any competitive event organized by us.
• En la medida en que lo consideremos necesario o apropiado según lo establecido anteriormente en Otros usos y divulgaciones.
• With government bodies and law enforcement or where we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements. If required or permitted to do so under the law, and if deemed necessary or warranted, we may provide notice to Users prior to the disclosure.
• Subject to confidentiality agreements, the terms of this Policy, and applicable law, information may be disclosed to service providers, advisers, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we or any of our affiliates are acquired by or merged with another company, or we sell, liquidate, transfer, or license all or a portion of our assets in bankruptcy or otherwise. This means that if some or all our assets are acquired or otherwise transferred or licensed, including in bankruptcy, that such acquirer shall be subject to the same commitments stated under this Policy.
• We may use third-party advertising networks and other affiliates in association with cookies, pixel tags, IFrames or similar technologies to: (1) deliver interest-based advertising to those Users, including our advertising, when those Users visit third-party websites; and (2) provide us with statistics about the effectiveness of our advertising on third-party websites. These third-party advertising networks may use this cookie information in accordance with their own privacy policies.
• To a third-party that uses or supports referral links to our Services only if you click on a referral link.
• Any third-party where such disclosure is required in order to enforce or apply our Terms of Service or other relevant agreements.
• Any third-party if necessary to protect the rights, property, integrity or security of our company, our customers, or others (including, without limitation, you).

En aras de la eficacia del servicio, algunas de estas filiales y terceros están ubicados en territorios fuera de la UE o del EEE y, con carácter puntual, podemos transferir los datos personales del usuario a un tercer país que la Comisión Europea no considere un país seguro para realizar dicha transferencia (decisión de adecuación). Si el usuario es residente en la UE o en el EEE y siempre que sea aplicable, utilizaremos las cláusulas contractuales tipo para garantizar un nivel de protección equivalente al de la UE/EEE u otros fundamentos legales para llevar a cabo dicha transferencia.

6. How to Exercise your Right to Access, Change or Correct your Information

Any User can review or change the information they provided when they registered for the Services by updating the information on their Account profile or by contacting us at support@chess.com. You also can exercise your right of access by requesting it on the “My data“ Section of our Services. In addition, Users may contact us at any time as described in Section “Contact Us“ below, to request that we provide for their review any PI they have provided, or to cease collecting PI from the User.

When we change any PI at your request, we will make reasonable efforts to make the changes in our then-active databases as soon as reasonably practicable and always within the applicable legal term. Changing setting options may not result in immediate changes to the settings, which are subject to our operations and maintenance schedules.

7. Cómo ejercer los derechos de cancelación y eliminación de su cuenta y cómo solicitar la reactivación

Users may cancel their Accounts at any time by using the “Manage Account“ section in the settings or by contacting support@chess.com.

Please bear in mind that after an Account is canceled, the PI and other Account information is not deleted permanently. We store the User information to allow the User to reopen their Account at any time. However, we provide no guarantee, and shall have no liability or obligation to ensure, that all Account Information and Services-related progress will be available or accessible or all learning or personalization features will be able to be recovered or resumed.

Upon Account cancellation or execution of a deletion request (as explained below), anonymized User information may nonetheless persist internally in our backup, archive files or similar databases, and may still be used anonymized, for our internal support, administrative, and record-keeping purposes including, but not limited to, allowing us to improve the Services and other services we provide through research, evaluation, and analytics as permissible by applicable law and for other purposes specifically outlined in this Policy. We may also keep certain information in backup or archive records if required by law or if it is relevant to preventing fraud or future violations of our policies or for legitimate business purposes when permitted by applicable law. All retained data will continue to be subject to our Policy in effect at that time

Following cancellation of an Account, to reactivate your Account and potentially recover previous information and resume where the relevant User left off you will need to request it to support@chess.com using the email address associated with your Account.

If you want to permanently delete your PI you can request it manually by clicking on “Delete“ on the “My Data“ section of the Services or by requesting deletion to support@chess.com. In this case, we will delete your PI, anonymize the information that will remain public such as games statistics, posts and comments, and block your email address and social media accounts from being used on Chess.com in the future.

If you want your posts and public comments to be removed, you must delete them separately before requesting deletion. After you delete your personal data, Chess.com Support Staff will have no means to verify your identity and will not remove these posts for you.

Any data deletion requests will be executed within the term provided by the applicable law.

Please keep in mind that a request to delete PI may lead to cancellation of your Account or the inability to use certain Services, and if any other Account type is linked to a Member Account, a request to delete PI in one of the Accounts may be reflected in your other Account.

8. California Privacy Rights (CPRA)

This Section supplements the information contained in our Policy and applies solely to Users who reside in the State of California. We adopt this notice to comply with the CCPA. Any terms used in this Section have the same meaning as defined in the CCPA. Please note that we may claim legal exemptions for certain types of PI and certain of our Services from all or certain parts of the CCPA.

The CCPA provides California residents with specific rights regarding their PI. This section describes your CCPA rights and explains how to exercise those rights. In this section “you“ or “your“ refers to California residents. Under the CCPA, we are required to disclose the categories of sources from whom we collect PI, and the third parties with whom we share it -- which we already have explained above in Section “Information Collection“, Section “How We Use Information“, and Section “When We Disclose Information to Third Parties“.

Solo el usuario residente en California o la persona que autorice a actuar en su nombre previo registro en la Secretaría de Estado de California, puede hacer una solicitud de consumidor verificable relacionada con sus datos personales.

The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected PI or an authorized representative. We will verify your request by asking you to provide information related to your interactions with us. We will not otherwise ask for PI from you that we would not otherwise maintain as part of us providing our Services.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
• We cannot respond to your request or provide you with PI if we cannot verify your identity or authority to make the request and confirm the PI relates to you. Making a verifiable consumer request does not require you to create an Account with us. We will only use PI provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

To exercise your rights you can always request it to us by sending an email to support@chess.com or by following the steps described below:

• Right to access PI. You may be entitled to receive information regarding the categories of PI we collected, the sources from which we collected PI, the purposes for which we collected and shared PI, the categories of PI that we share and the categories of third parties to whom the PI was shared with, and the categories of PI that we disclosed for a business purpose in the last 12 months. You can exercise this right by requesting it on the “My data“ Section of our Services.
• Right to data portability. You may be entitled to receive a copy of your electronic PI in a readily usable format so you can transmit this data to another organization. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. You can exercise this right by requesting it on the “My data“ Section of our Services.
• Right to Correct. You have the right to request that we correct inaccurate PI that we maintain about you. You are also able to correct any inaccurate PI manually by accessing your profile on the Settings sections of the Services.
• Right to deletion. You may be entitled to request that we delete the PI that we have collected from you. We will use commercially reasonable efforts to honor your request, in compliance with applicable laws. Please note, however, that we may need or be required to keep such information for our legitimate business purposes or to comply with applicable law. To know how to exercise your right to deletion, please refer to the section titled: “Account Cancellation and Reactivation; Data Deletion“ from this Policy.
• Right to opt-out of certain sharing with third parties. We do not sell your personal information to third-parties. We only disclose certain information to our service providers when it is necessary to fulfill our business purposes and in accordance with this Policy.

Do Not Sell or Share My Personal Information.

Even though we do not share your information in exchange for compensation, if you are a California resident, you have the right to request us to not disclose your PI to third parties for monetary or other valuable consideration.

You can exercise such right to opt-out by submitting the following form.

“Do Not Track“ Signals

No admitimos señales "Do Not Track" ("DNT") procedentes de navegadores web. "Do Not Track" es una preferencia que el usuario puede configurar en su navegador web para informar a los sitios web de que no desea ser rastreado.

You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser. If you enable DNT functionality on any device, some of the Services, including paid Services or Chess.com subscriptions, may become unstable.

a. Information We Collect and Share

We have collected the following categories of PI from or about consumers within the last 12 months:

For additional information regarding the PI we collect and have collected in the 12 months preceding the effective date of our Policy, the heading above styled “Types of Data Collected“ under Section 3.B. (Information We Collect from Users).“

b. Business and Commercial Purposes for Which We Use PI

We may use or disclose the PI we collect from each of the Categories of PI (described in the table above) for one or more of the following purposes:

See Section 3 above (How We Use Information).

c. Categories of PI We Share:

We may share your PI by disclosing it to a third party for a business purpose described below. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the PI confidential, and prohibit using the disclosed information for any purpose except performing the contract.

In the preceding 12 months, we have also disclosed the following categories of PI for one or more business purposes:

We share Category A, B, and C Personal Information with our Affiliates, partners, parent/subsidiary organizations, service providers, and government entities and advertising networks.

d. Our Retention of PI

We retain PI for as long as necessary to provide the Services and fulfill the transactions you have requested, or for other business purposes, to comply with our legal obligations, resolving disputes, and enforcing our agreements. We decide how long we need PI on a case-by-case basis. We may consider the following factors when making retention decisions:

• Whether we need to keep some of your PI to maintain your Account;
• Whether we are required by law to keep some types of PI for certain periods of time to comply with our legal obligations; and
• Whether we need some of your PI for other business purposes, such as to prevent harm and ensure safety and security of our Sites; investigate possible violations of our terms and conditions of use; or protect ourselves.

e. Non-Discrimination

We fully support your privacy rights and will not discriminate against you for exercising any of your CCPA rights.

f. Notice of Financial Incentives

We may offer special incentives to Users who enroll in certain promotions. The availability of these promotions to you at any given time will vary. If we offer such programs, we may ask for your PI as a prerequisite to your participation in the promotion.

9. Información adicional sobre Datos personales tratados según el Reglamento General de Protección de Datos (RGPD)

If you are located in the EEA or the UK, our legal basis for collecting and using the Personal Data described in this Policy depends on the Personal Data we collect and the specific context in which we collect it.

The purpose of this section of this Policy is to explain how you may exercise certain of your rights under applicable data privacy laws related to that information. This policy identifies our legal representative and Data Protection Office in the EEA and UK and provides you with the information that you may need to contact them. We (Chess.com, LLC) are the data controller for the processing of your information. Please see Section “Contact Us“ below for our contact details.

Our legal representative in the European Union is Chessable Spain S.L.
Contact: dpo@chess.com
Dirección postal: Av. Diagonal 618, 5B, 08021, Barcelona, España.

Our legal representative in the United Kingdom is Chessable Ltd.
Contact: dpo@chess.com
Dirección postal: London Mindsports Centre, 21-23 Dalling Road, Hammersmith, Londres, W6 0JD.

a. Retention of Data

Conservaremos los Datos Personales del usuario solo durante el tiempo que sea necesario para los fines establecidos en esta Política de Privacidad. Retendremos y utilizaremos sus Datos personales en la medida necesaria para cumplir con nuestras obligaciones legales (por ejemplo, si estamos obligados a conservar sus datos para cumplir con las leyes aplicables), resolver disputas y hacer cumplir nuestros acuerdos y políticas legales; o hasta que el usuario nos indique lo contrario en virtud de sus derechos (y nuestras obligaciones) recogidos en el RGPD.

b. Transfer Of Data

Su información, incluidos los Datos Personales, puede ser transferida a (y mantenida en) servidores ubicados fuera de su estado, provincia, país o cualquier otra jurisdicción gubernamental en la que las leyes de protección de datos puedan ser distintas de las de su jurisdicción de residencia.

If you are located outside the United States and choose to provide information to us, please note that we are a United States based provider. Therefore, we operate our Services, collect and process your Personal Data from the United States.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your Personal Data. If we onward transfer your Personal Data outside the EEA or the UK, we rely on the European Commission's standard contractual clauses and the UK Information Commissioner's equivalent transfer mechanism, as relevant. This is unless the transfer is to a country that has been determined by the European Commission or the relevant UK authorities, as applicable, to provide an adequate level of protection for individuals' Personal Data.

c. Derechos de protección de datos en virtud del RGPD

If you are located in the EEA or the UK, then you have certain data protection rights. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

If you wish to be informed on what Personal Data we hold about you, if you want it to be removed from our systems, please contact us at the contact information provided in Section “Contact Us“, below.

You can edit your Account information at any time. In certain circumstances, you have the following data protection rights:

• The right to access and to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format. You can exercise this right by requesting it on the “My data“ Section of our Services
• The right to update, correct and rectify your personal data. You are also able to update, correct or rectify any inaccurate Personal Data manually by accessing your profile on the Settings sections of the Services.
• Derecho a eliminar la información que tenemos sobre el usuario. Para saber cómo ejercer su derecho a la eliminación, consulte la sección titulada "Cancelación y reactivación de cuenta; eliminación de datos" de esta política.
• The right to object. You have the right to object to our processing of your Personal Data. You can do it by contacting us via the contact information provided in Section “Contact Us“.
• The right to object to marketing. You can object to marketing at any time by opting-out using the unsubscribe/ opt-out function displayed in our communications to you or by managing your preferences on the Notifications section from the Settings.
• The right of restriction. You have the right to request that we restrict the processing of your Personal Data if this is applicable by contacting us via the contact information provided in Section “Contact Us“.
• The right to withdraw consent. You also have the right to withdraw your consent at any time where we relied on your consent to process your Personal Data by contacting us via the contact information provided in Section “Contact Us“.
• Manage your cookie consent. Depending on your country of residence, you may allow or reject the use of non-essential Cookies when using our Services by changing your Cookie preferences here.

If you are unable to perform these actions yourself or if you have any complaints about how we process your Personal Data please contact us via the contact information provided in Section “Contact Us“ to assist you.

Please note that we may ask you to verify your identity before responding to such requests. Some of these rights only apply in certain circumstances and in many cases, are limited by law. For example, where fulfilling your request will adversely affect other individuals or our trade secrets or intellectual property, where there are overriding public interest reasons or where we are required by law to retain your Personal Data. We will respond to your requests to exercise these rights as required by applicable law.

You also have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. However, we invite you to contact us with any concern, as we would be happy to try to resolve it directly. For more information, please contact (a) your local data protection authority in the EEA country in which you reside or work, or where you think an infringement of data protection laws occurred or (b) the UK Information Commissioner's Office, as applicable to you.

d. Designación del Responsable de Protección de Datos

Nuestro Responsable de Protección de Datos RGPD es Josh Levine (el "Responsable de Protección"). La dirección de contacto del Responsable de Protección de Datos es dpo@chess.com.

10. Other Region and State-Specific Terms

a. Estados Unidos

(1) Residentes en Colorado

Scope. This section applies only to Colorado residents. It describes how we collect, use, and share Personal Data of Colorado residents in our capacity as a business under the Colorado Privacy Rights Act (“CPA“) and your rights with respect to that Personal Data. For purposes of this section, the term “Personal Data“ has the meaning given in the CPA but does not include information exempted from the scope of the CPA. Please note that we may claim legal exemptions for certain types of Personal Data and certain of our Services from all or certain parts of the CPA.

Your Colorado privacy rights. As a Colorado resident, you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

• Access. You may request confirmation whether we are processing your Personal Data and access to such Personal Data by requesting it on the “My data“ Section of our Services.
• Correction. You can edit and correct your Personal Data at any time by by accessing your profile on the Settings sections of the Services.
• Eliminación. El usuario tiene derecho, en determinadas circunstancias, a solicitar que eliminemos los Datos personales que nos ha facilitado. Para saber cómo ejercer su derecho a la eliminación, consulte la sección titulada "Cancelación y reactivación de cuenta; eliminación de datos" de esta política o póngase en contacto con nosotros como se indica en la sección "Contacto" de esta política.
• Data portability. You may be entitled to receive a copy of your electronic Personal Data in a readily usable format. You can exercise this right by requesting it on the “My data“ Section of our Services.
• Opt-out of tracking for targeted advertising purposes. If available in your residence or if mandated by law, you may be able to submit requests to opt-out of tracking for targeted advertising purposes by clicking on the following link. We do not otherwise “sell“ your Personal Data to third parties for monetary consideration.
• Oposición a la elaboración de perfiles. El usuario tiene derecho a oponerse al tratamiento automatizado de sus Datos Personales para evaluar, analizar o predecir aspectos personales relacionados con su situación económica, salud, preferencias personales, intereses, idoneidad, comportamiento, ubicación o movimientos, en la medida en que ello dé lugar a decisiones que produzcan efectos jurídicos o de otro tipo. En cualquier caso, nosotros no elaboramos este tipo de perfiles.
• Datos personales sensibles. No procesaremos los Datos personales sensibles del usuario sin su consentimiento.
• Non-discrimination. You have the right to be free from discrimination related to your exercise of any of your Colorado privacy rights.

Authentication. In order to protect your Personal Data from unauthorized access or deletion, we may require you to verify your credentials before you can submit a rights request. If you do not have an Account with us, or if we suspect that your Account has been accessed without your authorization, we may ask you to provide additional PI for verification. If we are subsequently unable to confirm your identity, we may refuse your rights request.

(2) Residentes en Connecticut

Scope. This section applies only to Connecticut residents. It describes how we collect, use, and share Personal Data of Connecticut residents in our capacity as a business under the Connecticut Data Privacy Act (“CDPA“) and your rights with respect to that Personal Data. For purposes of this section, the term “Personal Data“ has the meaning given in the CDPA but does not include information exempted from the scope of the CDPA. Please note that we may claim legal exemptions for certain types of Personal Data and certain of our Services from all or certain parts of the CDPA.

Your Connecticut privacy rights. As a Connecticut resident, you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

• Acceso. El usuario puede pedir una copia de sus Datos Personales enviando la solicitud correspondiente desde el apartado “Mis datos“ de nuestros Servicios.
• Correction. You can edit and correct your Personal Data at any time by by accessing your profile on the Settings sections of the Services.
• Eliminación. El usuario tiene derecho, en determinadas circunstancias, a solicitar que eliminemos los Datos personales que nos ha facilitado. Para saber cómo ejercer su derecho a la eliminación, consulte la sección titulada "Cancelación y reactivación de cuenta; eliminación de datos" de esta política o póngase en contacto con nosotros como se indica en la sección "Contacto" de esta política.
• Data portability. You may be entitled to receive a copy of your electronic Personal Data in a readily usable format. You can exercise this right by requesting it on the “My data“ Section of our Services
• Opt-out of tracking for targeted advertising purposes. If available in your residence or if mandated by law, you may be able to submit requests to opt-out of tracking for targeted advertising purposes by clicking on the following link. We do not otherwise “sell“ your Personal Data to third parties for monetary consideration.
• Oposición a la elaboración de perfiles. El usuario tiene derecho a oponerse al tratamiento automatizado de sus Datos Personales para evaluar, analizar o predecir aspectos personales relacionados con su situación económica, salud, preferencias personales, intereses, idoneidad, comportamiento, ubicación o movimientos, en la medida en que ello dé lugar a decisiones que produzcan efectos jurídicos o de otro tipo. En cualquier caso, nosotros no elaboramos este tipo de perfiles.
• Datos personales sensibles. No procesaremos los Datos personales sensibles del usuario sin su consentimiento.
• Non-discrimination. You have the right to be free from discrimination related to your exercise of any of your Connecticut privacy rights.

Authentication. In order to protect your Personal Data from unauthorized access or deletion, we may require you to verify your credentials before you can submit a rights request. If you do not have an account with us, or if we suspect that your account has been accessed without your authorization, we may ask you to provide additional Personal Data for verification. If we are subsequently unable to confirm your identity, we may refuse your rights request.

(3) Residentes en Virginia

Scope. This section applies only to Virginia residents. It describes how we collect, use, and share Personal Data of Virginia residents in our capacity as a business under the Virginia Consumer Data Protection Act (“VCDPA“) and your rights with respect to that Personal Data. For purposes of this section, the term “Personal Data“ has the meaning given in the VCDPA but does not include information exempted from the scope of the VCDPA. Please note that we may claim legal exemptions for certain types of PI and certain of our Services from all or certain parts of the VCDPA.

Your Virginia privacy rights. As a Virginia resident, you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

• Know. You have a right to know whether we are processing your Personal Data.
• Acceso. El usuario puede pedir una copia de sus Datos Personales enviando la solicitud correspondiente desde el apartado “Mis datos“ de nuestros Servicios.
• Correction. You can edit and correct your Personal Data at any time by by accessing your profile on the Settings sections of the Services.
• Eliminación. El usuario tiene derecho, en determinadas circunstancias, a solicitar que eliminemos los Datos personales que nos ha facilitado. Para saber cómo ejercer su derecho a la eliminación, consulte la sección titulada "Cancelación y reactivación de cuenta; eliminación de datos" de esta política o póngase en contacto con nosotros como se indica en la sección "Contacto" de esta política.
• Opt-out of tracking for targeted advertising purposes. If available in your residence or if mandated by law, you may be able to submit requests to opt-out of tracking for targeted advertising purposes by clicking on the following link. We do not otherwise “sell“ your Personal Data to third parties for monetary consideration.
• Oposición a la elaboración de perfiles. El usuario tiene derecho a oponerse al tratamiento automatizado de sus Datos Personales para evaluar, analizar o predecir aspectos personales relacionados con su situación económica, salud, preferencias personales, intereses, idoneidad, comportamiento, ubicación o movimientos, en la medida en que ello dé lugar a decisiones que produzcan efectos jurídicos o de otro tipo. En cualquier caso, nosotros no elaboramos este tipo de perfiles.
• Datos personales sensibles. No procesaremos los Datos personales sensibles del usuario sin su consentimiento.
• Non-discrimination. You have the right to be free from discrimination related to your exercise of any of your Virginia privacy rights.

Authentication. In order to protect your Personal Data from unauthorized access or deletion, we may require you to verify your credentials before you can submit a rights request. If you do not have an account with us, or if we suspect that your account has been accessed without your authorization, we may ask you to provide additional Personal Data for verification. If we are subsequently unable to confirm your identity, we may refuse your rights request.

b. Australia

Si el usuario es residente en Australia, podrá disfrutar de los siguientes derechos y opciones:

Update your privacy settings. You may update your privacy settings by visiting your account settings and, if available in your country or mandated by law, manage your cookies using the following link.

Gestionar las comunicaciones de marketing que le enviamos. Para actualizar sus preferencias sobre comunicaciones de marketing, el usuario puede ponerse en contacto con nosotros como se indica en el apartado "Contacto", más abajo.

Access, Correction or Deletion. You may request to access, to correct or to delete your PI. You can edit and correct your PI at any time by changing it directly in our Services. To make a request for access you may do it by requesting it on the “My data“ Section of our Services. To know how to exercise your right to deletion, please refer to the section titled: “Account Cancellation and Reactivation; Data Deletion“ from this Policy or contact us at the contact information provided in Section “Contact Us“, below.

Oposición y restricción. El usuario puede oponerse a que tratemos su información personal, incluso con fines de marketing, o pedirnos que restrinjamos el tratamiento de dicha información personal. Para oponerse al tratamiento de datos o solicitar su restricción, el usuario debe ponerse en contacto con nosotros en la dirección de contacto que figura en la sección "Contacto" de esta política. Si solicita que dejemos de procesar parte o la totalidad de sus datos personales o revoca (en su caso) su consentimiento para que los utilicemos para los fines establecidos en el presente aviso de privacidad, puede que no podamos prestarle todos los Servicios y la atención al cliente ofrecidos a nuestros usuarios y autorizados en virtud del presente aviso.

c. Brasil

Base legal del tratamiento

We use your PI only as permitted by law. Applicable Brazil data protection law requires us to have a “legal basis“ for each purpose for which we collect your PI. Our legal basis for collecting and using the PI described in this Privacy Statement will depend on the type of PI and the specific context in which we collect it. However, we will normally process PI from you when:

• Tenemos el consentimiento del usuario para hacerlo;
• We have a contract with you and it is necessary to process your PI to perform our contract with you, including to provide you with the benefits of our Services and operate our business;
• The processing is in our legitimate business interests, such as operating our businesses, improving and developing Services, communicating with you, marketing our offerings and services, and personalizing your experience, and to detect illegal activities; and/or
• To comply with legal requirements, including applicable laws and regulations.

Sharing with Credit Bureaus

Inapplicable.

Si el usuario es residente en Brasil, podrá disfrutar de los siguientes derechos y opciones:

Update your privacy settings. You may update your privacy settings by visiting your account settings and, if available in your country or mandated by law, manage your cookies using the following link.

Gestionar las comunicaciones de marketing que le enviamos. Para actualizar sus preferencias sobre comunicaciones de marketing, el usuario puede acceder a la sección "Configuración" de su cuenta.

Access, Correction, Anonymization or Deletion. You may request to access, to correct, anonymize or to delete your PI. You can edit and correct your PI at any time by changing it directly in our Services. To make a request for access you may do it by requesting it on the “My data“ Section of our Services. To know how to exercise your right to deletion, please refer to the section titled: “Account Cancellation and Reactivation; Data Deletion“ from this Policy or contact us at the contact information provided in Section “Contact Us“, below.

Objection and Restriction. You may object to our processing of your PI or ask us to restrict processing of your PI. You may request objection, restriction and portability rights by contacting us at the contact information provided in Section “Contact Us“, below.

Portability. You may request portability of your PI.

Withdraw Consent. If we have collected and processed your PI with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your PI conducted in reliance on lawful processing grounds other than consent.

File a complaint. You have the right to file a complaint with a supervisory authority about our collection and processing of your PI.

d. Canadá

While we take steps to maintain protection of your PI, your PI may be disclosed in response to valid demands or requests from governments, regulators, courts, and law enforcement authorities in those other jurisdictions or countries.

Si el usuario es residente en Canadá, podrá disfrutar de los siguientes derechos y opciones:

Update your privacy settings. You may update your privacy settings by visiting your account settings.

Manage marketing communications from us. To update your marketing communication preferences, you can contact us at the contact information provided in Section “Contact Us“, below. You may also click unsubscribe at the bottom of any marketing emails or messages.

Cookies and other tracking technologies. If available in your country or mandated by law, you may be able to opt-out of interest based advertising by using the following link or by visiting the Digital Advertising Alliance of Canada Opt-Out Page, NAI Opt-Out Page and the Choices Opt-Out Page.

Access, Correction or Deletion. You may make a request to access, to correct or to delete your PI (provided we no longer have a business need to retain your PI). You may request a copy of the PI or delete the PI in your Account by contacting us at the contact information provided in Section “Contact Us“, below. You can edit and correct your PI at any time by changing it directly in our Services. Even if you request for your PI to be deleted, certain aspects may be retained for us to: meet our legal or regulatory compliance (e.g., maintaining records of transactions you have made with us); exercise, establish, or defend legal claims; and to protect against fraudulent or abusive activity on Site or while using our Services. Data retained for these purposes will be handled as described in “Data Retention“.

Retirar el consentimiento. El usuario puede retirar su consentimiento para recopilar, usar y divulgar su Información personal en cualquier momento. Esta retirada de su consentimiento no afectará a la legalidad de los procedimientos que se hayan llevado a cabo antes de dicha retirada ni al tratamiento de su Información personal con una base legal lícita distinta del consentimiento.

File a complaint. You have the right to file a complaint with the applicable Privacy Commissioner about our collection and processing of your PI.

e. India

Where data of Indian individuals is involved, you agree that the “reasonable security practices and procedures“ under Section 43A's Explanation (ii) of the Information Technology Act, 2000 means this Privacy Statement and such data security procedures that we may implement from time to time, and which we may, in our discretion, give you notice from time to time.

What you can do to manage your privacy

You have choices when it comes to managing the privacy of your PI.

Update your privacy settings. You may update your privacy settings by visiting your account settings and, if available in your country or mandated by law, manage your cookies using the following link

Gestionar las comunicaciones de marketing que le enviamos. Para actualizar sus preferencias sobre comunicaciones de marketing, el usuario puede ponerse en contacto con nosotros como se indica en el apartado "Contacto", más abajo.

Correct your PI. You can edit and correct your PI at any time by changing it directly in our Services.

f. México

Si el usuario es residente en México, podrá disfrutar de las siguientes opciones y derechos (conocidos como “derechos ARCO“):

You have choices when it comes to managing the privacy of your PI and exercising your ARCO rights. Please note that we are required to verify your request prior to exercising your rights. After we have received a request, our response will indicate whether the request for access, rectification, cancellation or opposition is appropriate and, if so, the determination will be made within 15 business days from such date. The deadlines may be extended under the terms set out in the applicable laws.

Acceso. El usuario tiene derecho a conocer cuáles son los datos personales a los que tenemos acceso, para qué los utilizamos y las condiciones de uso previstas. Se le facilitarán copias electrónicas de sus datos personales si ejerce su derecho de acceso. El usuario puede pedir una copia de sus Datos Personales enviando la solicitud correspondiente desde el apartado “Mis datos“ de nuestros Servicios. Al presentar una solicitud, debe facilitar una descripción clara y precisa de los datos personales a los que desea acceder y cualquier otra información que facilite la localización de sus datos.

Rectification. You have the right to request the correction of your personal data if it is outdated, inaccurate, or incomplete (Rectification). You can edit and correct your Personal Data at any time by by accessing your profile on the Settings sections of the Services.

Deletion/Cancellation. You have the right to request that we remove your PI from our records or databases when you consider that it is not being used in accordance with the principles, duties, and obligations provided for in the applicable laws. To know how to exercise your right to deletion, please refer to the section titled: “Account Cancellation and Reactivation; Data Deletion“ from this Policy or contact us at the contact information provided in Section “Contact Us“, below. When making a request, please provide a clear and precise description of the personal data you wish to delete/cancel or any other information that facilitates the location of your data.

Opposition/Rejection. You have the right to oppose the use of your personal data for specific purposes. You may request objection, restriction and portability rights by contacting us at the contact information provided in Section “Contact Us“, below. When making a request, please provide a clear and precise description of the personal data you wish to oppose, or any other information that facilitates the location of your data.

Update your privacy settings. You may update your privacy settings by visiting your account settings and, if available in your country or mandated by law, manage your cookies using the following link.

Gestionar las comunicaciones de marketing que le enviamos. Para actualizar sus preferencias sobre comunicaciones de marketing, el usuario puede ponerse en contacto con nosotros como se indica en el apartado "Contacto", más abajo.

Cómo limitar el uso y la divulgación de la Información personal del usuario

Si el usuario reside en México, también tiene derecho a limitar el uso o divulgación de su información personal poniéndose en contacto con nosotros según se indica en el apartado "Contacto" que figura más abajo.

How to withdraw your consent

Si el usuario reside en México, también tiene derecho a retirar su consentimiento al tratamiento que hacemos de su información personal poniéndose en contacto con nosotros según se indica en el apartado "Contacto" que figura más abajo.

g. Tailandia

Base legal del tratamiento

We use your PI only as permitted by law. The Thai Personal Data Protection Act (“PDPA“) requires us to have a “legal basis“ for collecting your PI. Our legal basis for collecting and using the PI described in this Privacy Statement will depend on the type of PI and the specific context in which we collect it. However, we will normally process PI from you when:

• Tenemos el consentimiento del usuario para hacerlo;
• We have a contract with you and it is necessary to process your PI to perform our contract with you, including to provide you with the benefits of our Services and operate our business;
• The processing is in our legitimate business interests, such as operating our businesses, improving and developing Services, communicating with you, marketing our offerings and services, and personalizing your experience, and to detect illegal activities; and/or
• To comply with legal requirements, including applicable laws and regulations.

Si el usuario es residente en Tailandia, podrá disfrutar de los siguientes derechos y opciones:

Update your privacy settings. You may update your privacy settings by visiting your account settings and, if available in your country or mandated by law, manage your cookies using the following link.

Gestionar las comunicaciones de marketing que le enviamos. Para actualizar sus preferencias sobre comunicaciones de marketing, el usuario puede acceder a la sección "Configuración" de su Cuenta.

Access, Correction, Anonymization or Deletion. You may request to access, to correct, or to delete your PI. You can edit and correct your PI at any time by changing it directly in our Services. To make a request for access you may do it by requesting it on the “My data“ Section of our Services. To know how to exercise your right to deletion, please refer to the section titled: “Account Cancellation and Reactivation; Data Deletion“ from this Policy or contact us at the contact information provided in Section “Contact Us“, below.

Objection and Restriction. You may object to our processing of your PI or ask us to restrict processing of your PI. You may request objection, restriction and portability rights by contacting us at the contact information provided in Section “Contact Us“, below.

Portability. You may request portability of your PI.

Withdraw Consent. If we have collected and processed your PI with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your PI conducted in reliance on lawful processing grounds other than consent.

File a complaint. You have the right to file a complaint with a supervisory authority about our collection and processing of your PI.

11. Enlaces a otros servicios

In certain sections of our Services, we may include links to third-party websites or applications (for example, Facebook and Twitter). These websites and applications are governed by their own privacy policies or information collection practices, which may be substantially different from ours. We do not guarantee and are not responsible for the privacy or security of these websites, including the accuracy, completeness or reliability of information found on these websites. If you follow links to websites not affiliated or controlled by us, we encourage you to review the privacy policies and information collection practices of any external websites and apps, as those parties' practices would not be subject to this Policy.

12. Sede del tratamiento de la información

Our Services are controlled and operated by us from the United States. Your information may be stored and processed in any country where we have facilities or in which we engage service providers, including the United States, which may have data protection laws that are different from those of your country. In addition, your information may be subject to access requests from governments, courts, or law enforcement officials in countries where it may be processed, under the laws of those countries.

13. Security

The security of your PI is important to us, and we employ physical, technical, and administrative security measures designed to safeguard the information collected by the Services. We use industry standard SSL (secure socket layer technology) encryption to transfer PI. Other security safeguards include, but are not limited to, data encryption, firewalls, and physical access controls to buildings and files. We also conduct periodic audits of our security (no less than annually) to apply best practices and reasonable industry standards. However, no data transmission over the Internet can be guaranteed to be completely secure. If there is a breach of our security, we will notify you where required by law or deemed necessary and appropriate under the circumstances.

Account holders create a password in the registration process. You can help protect against unauthorized access to your Account and PI by selecting and protecting your password appropriately and limiting access to your computer and browser by signing off after you have finished accessing your Account. At registration, we assign a Member ID to each Account and use those Member IDs to authenticate logins, allow access to the subscription content, and monitor compliance. The Member ID is also used to authenticate users when requesting technical support. Access to information is limited (through user/password credentials and two-factor authentication) to those employees who require it to perform their job functions.

Some of the precautions we take to protect PI includes: (a) limiting employee access to PI to only those employees with a need to such access to fulfill their job responsibilities; (b) conducting background checks on our employees and, specifically, upon all employees that may have access to PI; (c) requiring employees to sign confidentiality agreements upon hiring; (d) conducting regular employee privacy and data security training and education; and (e) protecting PI with commercially reasonable technical, contractual, administrative, and physical security safeguards.

Please be aware, however, that no information system can be guaranteed to be 100 percent secure, so we cannot guarantee the absolute security of your information. Moreover, we are not responsible for the security of information you transmit to the Services over networks that we do not control, including the internet and wireless networks. If you have reason to believe that your interaction with us is not secure, please contact us as described in Section “Contact Us“ below.

14. Changes to Our Privacy Policy

We constantly try to provide the best services, and accordingly our Policy will change from time to time. If we substantially update this Policy, we will notify you by posting the revised Policy on our Services, and for certain revisions that materially expand the ways in which we use or share the information previously collected from you through the Services, either display an alert next to the Policy, display an alert upon login to the Services, or directly communicate with you (e.g. via our messaging service or the email address associated with your Account).

15. Contact Us

Chess.com LLC se encuentra en los Estados Unidos de América y somos el operador de todos nuestros Servicios. Puede ponerse en contacto con support@chess.com si tiene alguna pregunta, reclamación o problema relacionado con esta Política o con sus datos personales.

For all Accounts

Mailing address:
Chess.com LLC
Responsable de Protección de Datos
Josh Levine
877 E 1200 S nº. 970397
Orem, UT 84097
Email: support@chess.com

16. Chess Play & Learn (Arcade Version)

This Section contains the provisions that only apply specifically to our mobile application known as Chess - Play & Learn (Arcade Version) (the “App“). This section is intended to complement the Policy above and it does not apply to our Sites or other Services.

Data Collection and Use

The App collects non-identifiable gameplay data to send to Apple iCloud, specifically to record a User's progress (win record) vs. the App's built-in roster of computer opponents. We do not store any of this data, but it is sent to Apple services (iCloud and Game Center) for storage and use.

The App also collects the User's anonymized Game Player ID for the App's “Online Play“ feature, where it is used to maintain a chess skill rating as online games are played. This helps ensure Users are matched with opponents of similar skill levels.

The Game Player ID is also used to maintain a list of chess puzzles the User has solved in the App's “Daily Puzzle“ feature and may also be used for other App features if that is necessary to fulfill a User request. The processing of this data is subject to your consent and you are able to revoke such consent by changing the settings from your device.

The App is available to Users through the different app stores and collects non-identifiable gameplay data from all Users. The basis for this collection of information is to support the internal operations of the App and your consent in some cases.