Privacy Policy

Legal Notice

Company: CHESS EXCELSIOR EOOD (en adelante, YottaChess)

CIF/TIN/ID: 206366120

Fiscal address: GR.SOFIA UL.PERSENK BL.18, VH.A, AP.4

Contact us:

Terms, Conditions and Services

 

Terms and services for users and visitors of this page.

Please read the agreements carefully before accessing or using our website. By entering our website, you agree to the terms described here. If you do not want to accept all the terms and conditions of this agreement, then you should not enter our website or use our services.

Terms of use

 

By accessing this site, you agree to comply with all provisions set forth in this agreement between you ("the user") and yottachess.com ("we").

If you do not agree to the terms and conditions, do not use this site.

  1. We reserve the right to make changes to this agreement at any time. Such changes will be publicly announced via email, pop-up screens or posted within visible areas of the site.
  2. We may discontinue, change or suspend any aspect of the site at any time. We may change, discontinue or suspend the availability of any database, content, feature or product of the website. We may impose limits on features, including services, use or restrict your access to parts or the entire website without notice or liability.
  3. As part of the services offered by the site, you may provide or upload content to our servers in various forms such as: text, comments, images, etc. By making content available, you represent and warrant that it is not: (i) infringe the intellectual property of others, other proprietary rights or rights of publicity/privacy; (ii) violate any law or regulation; (iii) be unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, libelous, invasive of another's privacy, hateful, or racially, ethnically or otherwise objectionable; (iv) contain viruses, Trojan horses, worms, time bombs, cancelbots or other programming routines that are intended to damage, detrimentally interfere with, decipher, intercept or expropriate any system, data or personal information.
  4. Disclaimer of Warranties

You expressly understand and agree that:

  • (i) your use of the service is at your own risk. the service is provided on an "as is" and "as available" basis
  • (ii) expressly disclaims any and all warranties, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose and non-infringement with respect to the information contained herein.
  • (iii) makes no warranty (a) that the service will be uninterrupted, error-free, secure or virus-free; (b) that the quality of any products, services, information or other material purchased or obtained by you through the service will meet your expectations; and (c) that any errors in the software will be corrected; (d) that the service, products or information will meet your requirements or expectations; (e) the accuracy, completeness or usefulness of any information contained on this site.
  • (iv) you assume the entire risk as to the results and performance of the service in connection with your hardware, and you assume the entire cost of all service, repair and/or correction of your hardware. We are not responsible for any delay or failure to perform resulting from any cause beyond our reasonable control.
  • (v) any material downloaded or otherwise obtained through the use of the service is accessed at your own discretion and risk, and you will be solely responsible for any damage to your computer system or loss of data that results from the download of any such material.

Terms and Conditions for Subscribers

Before making payment for any service offered by YottaChess, it is essential to read the conditions and terms applicable to the provision of the training offered.

These conditions may be modified at any time. It is your responsibility to read them periodically, since the current conditions will be those applicable at the time of payment and registration.

If you have any questions regarding the Conditions or the Privacy Policy, you can contact us by email at: [email protected].

Purchase Process

Payments are processed via Stripe, PayPal, Thrivecart, or Revolut Business through each of the payment links available on the website. Before payment, it is essential to accept the terms and conditions (LSSI-CE). When purchasing a product, your personal data will be recorded.

Communications and payment orders involved in transactions carried out on the website may be archived and stored in Chess Excelsior’s computerized records for the purpose of serving as evidence of transactions, in all cases respecting security conditions and applicable laws and regulations, particularly with regard to the LOPD and the rights granted to Users under the privacy policy.

Prices

The prices applicable to each training program are those indicated on the website on the date the purchase is made.

If you require an invoice, you can request it at [email protected].

Prices may change at any time, but possible changes will not affect registrations for which the User has already received confirmation of their spot and payment. Additionally, such changes will always be communicated in advance through the community.

YottaChess uses all available means to ensure the confidentiality and security of payment data transmitted by the User during transactions.

Right of Exclusion

YottaChess reserves the right to deny or withdraw access to the website without prior notice, on its own initiative or at the request of a third party, for users who fail to comply with these terms of use or who use multiple accounts to download games.

Refund Guarantee

To request a refund for a subscription, you must not have exceeded the number of free downloads. If the refund guarantee has been exceeded, it cannot be applied.

Liability

YottaChess, RESPONSIBLE PARTY

YottaChess, responsible for the website, hereinafter referred to as RESPONSIBLE PARTY, makes this document available to all users of the website to inform them of the terms of use.

Anyone who accesses this website assumes the role of user, committing to the strict observance and compliance with the provisions set forth herein, as well as with any other applicable legal provision.

YottaChess. reserves the right to modify any type of information that may appear on the website, without the obligation to provide prior notice or inform users of such obligations, understanding that the publication on the website of YottaChess is sufficient.

Intellectual and Industrial Property Rights

The website, including but not limited to its programming, editing, compilation, and other elements necessary for its operation, designs, logos, text, and/or graphics, are the property of the RESPONSIBLE PARTY or, if applicable, have a license or express authorization from the authors. All content on the website is duly protected by intellectual and industrial property regulations, as well as registered in the relevant public records. Regardless of the intended purpose, total or partial reproduction, use, exploitation, distribution, and commercialization require prior written authorization from the RESPONSIBLE PARTY. Any unauthorized use is considered a serious breach of the author’s intellectual or industrial property rights.

Designs, logos, text, and/or graphics not owned by the RESPONSIBLE PARTY and that may appear on the website belong to their respective owners, who are responsible for any possible disputes regarding them. The RESPONSIBLE PARTY expressly authorizes third parties to redirect directly to the specific content of the website, and in any case to redirect to the main website at yottachess.com/.

The RESPONSIBLE PARTY acknowledges the corresponding intellectual and industrial property rights in favor of their owners. The mere mention or appearance on the website does not imply the existence of any rights or responsibility, nor endorsement, sponsorship, or recommendation by the RESPONSIBLE PARTY. To make any observations regarding possible infringements of intellectual or industrial property rights, as well as regarding any content of the website, you may do so via email at [email protected].

Disclaimer of Liability

The RESPONSIBLE PARTY disclaims any liability arising from information published on its website provided it has no actual knowledge that such information has been manipulated or entered by an unrelated third pa

Protection of personal data

Contact details of the person in charge: 206366120 (CIF/TIN/ID) with fiscal address GR.SOFIA UL.PERSENK BL.18, VH.A, AP.4 and contact email [email protected].

How to exercise your rights: Users may send a written communication to Isaac's fiscal address or to the e-mail address indicated in the heading of this legal notice, including in both cases a photocopy of their ID card or other similar identifying document, to exercise their rights, which are as follows:

  • Right to request access to personal data: I will tell you whether or not I am processing your data and, if so: what data, how I obtained them, why I am processing them, whether I communicated them, the storage period... Furthermore, I will inform you about the other rights you have and about the possibility to file a complaint with the AEPD.
  • Right to request rectification (if inaccurate) or deletion.
  • Right to request limitation of their treatment, in which case they will only be retained by YottaChess for the exercise or defense of claims.
  • Right to object to treatment. YottaChess will stop processing the data in the way you indicate, unless for compelling legitimate reasons or the exercise or defense of possible claims have to be further processed.
  • Right to data portability. In case you want your data to be treated by a third party, YottaChess will provide the portability of your data to the new responsible.

Models, forms and more information about the rights referred to: Official website of the Spanish Data Protection Agency

Possibility of withdrawing consent: in the event that consent has been given for a specific purpose, you have the right to withdraw consent at any time, without affecting the lawfulness of the processing based on the consent prior to withdrawal.

How to complain to the Control Authority: If a user considers that there is a problem with the way in which YottaChess is handling his data, he can direct his complaints to the corresponding data protection authority, being the Spanish Data Protection Agency the one indicated in the case of Spain.

Cookie Policy

On this website, the responsible party makes use of crawlers for technical purposes (e.g., to mitigate security-related risks).

1.- What are fingerprinting, pixels and cookies

What is passive fingerprinting browser. The browser through which the user wants to see a web page delivers some data to the server where it is located, with which you can make navigation statistics, among which may be: IP, port, type of file requested and configuration of language and characters, as well as, the website of origin and operating system.

What is the active fingerprinting browser. The active fingerprinting browser allows the server to know more data, additional to those acquired through its passive version, such as the size of the screen or the set of extensions installed by the user in his browser, which allows an exhaustive analysis that facilitates the identification of the browser.

What are trackings pixels. Tracking pixel, web beacon or transparent gif is an image inserted in the web that, when loaded in the user's browser, allows to know part of the user's navigation activity.

What are cookies. Cookies are files created in the user's browser to record part of their activity on the Website.

2.- Types and purpose of fingerprinting, pixels and cookies used in this Website

Passive fingerprinting browser: The responsible, through the server from which this Web Site is offered, obtains some data related to the user's navigation among which are: IP, port, type of file requested, browser and language and character settings. This data collection is done with the sole purpose of serving the file or web requested, after which the data is immediately deleted. For more information about the data processing that is carried out, please refer to the web and mail security activity log below.

Tracking pixels. Through the Web Site, tracking pixels may collect data about your navigation, such as the links you have clicked or the pages you visit.

Google Analytics: Through the Website, tracking pixels may collect data about your navigation, such as the links you clicked or the pages you visit.

Technical Cookies for Cybersecurity: This Website may use technical cookies for cybersecurity purposes (never analytical or advertising) to block attacks. For more information about the data processing that is performed, please see the web and mail security activity log below.

3.- How to delete cookies or not be monitored by pixels or fingerprinting

How to delete cookies. You can set your browser to block cookies (manuals: Firefox, Chrome, IE, Safari...) or use TOR.

How not to be monitored by trackings pixels (Do not Track). This Website is set to the DoNot Track standard in 'SuperClean' mode to try to ensure greater privacy for users who have activated that option in their browser. In addition, users can install and configure Ghostery or other similar extensions in their browser to block the pixels at no cost.

How to reduce the monitoring by fingerprinting. The user is invited to use the TOR browser or a trusted VPN.

4.- Additional information:

Analytical system to avoid spam: This website has implemented the reCAPTCHA API, which collects software and hardware information, such as application and device data, and sends them to Google for analysis. This information is used to improve the reCAPTCHA service and overall security. It will not be used to serve personalized Google ads.

User identification. The fingerprinting, cookies and trackings pixels used by the Responsible do not allow him to identify the users.

Co-responsibility in social networks: From the treatment corresponding to the initial obtaining of data from users, YottaChess is co-responsible along with the owners of the social networks indicated and linked in the tab "owner of the website". In relation to this treatment, the owners of the social networks are the main co-responsible for the purpose of receiving applications to exercise rights by the interested parties. Once these data have been collected, each of the social network owners will treat the data independently as indicated by each one in their corresponding privacy policy.

Regulations and conflict resolution

The present Conditions of Use of the Website are governed in each and every one of its extremes by Spanish law. The language of writing and interpretation of this legal notice is Spanish. This legal notice will not be filed individually for each user but will remain accessible through the Internet on this same Website.

Users who are consumers or users as defined by Spanish law and reside in the European Union, if they have had a problem with an online purchase made from YottaChess, to try to reach an out-of-court settlement can go to the Online Dispute Resolution Platform, created by the European Union and developed by the European Commission under Regulation (EU) 524/2013.

Provided that the User is not a consumer or user, and where there is no rule that requires otherwise, the parties agree to submit to the Courts and Tribunals of the city of Madrid, as this is the place where the contract is concluded, expressly waiving any other jurisdiction that may correspond to them.

Web and social network advertising and analytical activities

Analysis of user navigation through the websites and social profiles managed by the manager in order to improve the communication activity and allow third parties to learn from the user and show him personalized advertising for his and the manager's economic benefit.

Co-responsibility in social networks: YottaChess is co-responsible, together with the owners of the social networks indicated and linked in the tab "owner of the website", for the treatment corresponding to the initial obtaining of data from users. These are the main co-responsible parties for the purposes of data management and reception of applications to exercise rights by the interested parties. The owners of each of the social networks are, for their part, solely responsible or with third parties for the processing they carry out once they have obtained the data.

1.- Collective

Users who access websites or social profiles managed by the person in charge.

2.- Data Categories

The type of data processed for this activity is as follows:

  • Browser's user agent chain and IP address relation, together with graphs and total values on the navigation of the whole of the users for each of the website's pages. This data is shown in a disaggregated form, so that it does not allow the person in charge to identify the users.
  • The third parties that have been entrusted with this treatment may have access to the user's identification data by connecting their browsing activities with other information available to them.

3.- Aims of the treatment

Treatments are carried out with two related purposes:

  • Analytical purpose: Analysis of user navigation through the websites and social profiles managed by the manager in order to implement improvements in the communication activity. It also allows third parties to know this user activity.
  • Advertising purpose: To allow third parties to learn from the user and to show him personalized advertising with the aim of the person in charge obtaining economic benefit.

4.- Legal basis

This data processing finds its legal justification in that it is necessary for the satisfaction of legitimate interests pursued by the data controller. (art. 6.1.f of the General Regulations on Data Protection). In particular, these legitimate interests consist in obtaining information that allows the improvement of the activities of the responsible and in obtaining income by means of own and third party advertising systems.

5.- Third parties with access to data

Google LLC

  • Description: US entity. Since the EU-US Privacy Shield framework was invalidated by the CJEU (Schrems II ruling, 2020), international transfers to this provider rely on the European Commission's Standard Contractual Clauses (SCC) and/or the EU-US Data Privacy Framework (DPF, 2023) where the provider is self-certified, with its own privacy policy.
  • Contact details: Torre Picasso, Plaza Pablo Ruiz Picasso, 1, 28020 Madrid. Form.
  • International transference:
  • Treatments:

6.- Target category

No data communications are planned.

7.- International Transfer

International transfers to the US companies indicated in the section "Third parties with access to data" are foreseen.

The international transfers indicated in the registers of the transversal processing activities are carried out insofar as the interested party provides data through the website of the person responsible or his/her social profiles or sends a communication to the person responsible or receives it from him/her.

No other international data transfers are planned.

8.- Deletion deadline

The data is deleted after the following retention periods:

However, the data may be kept for longer periods of time in order to deal with possible responsibilities that may arise from the processing of the data or from the activities of the users.

9.- Data Protection Officer

It is not required for this treatment, because of the data processed and as its responsible executes it, in accordance with the provisions of Article 37 of the General Regulations on Data Protection and Article 34 of the Organic Law 3/2018.

10.- Impact evaluation

It is not required for this treatment, because of the data processed and as its responsible executes it, in accordance with the provisions of Article 35 of the General Regulations on Data Protection and Article 28 of the Organic Law 3/2018.

11.- Risk analysis

A data security risk analysis has been developed. The security measures are those referred to above. The effectiveness of the security measures implemented is reviewed and evaluated periodically and whenever any changes are made. This evaluation is also done whenever there is an update on the systems. For the logical measures, we have the collaboration of a computer team.

Attention to citizens' rights

The treatment consists of the own managements related to the exercise of rights of third on its data incorporated in files whose treatment corresponds to the total or partial person in charge.

1.- Collective

The individuals whose data is processed are those, including representatives of legal entities, who address a request to YottaChess to exercise their rights.

2.- Data Categories

The type of data processed for this activity is as follows:

  • First and last name and e-mail address.
  • First and last name of chess players who have requested that their tournament results or games not be published on the website: this is kept solely to prevent this same data from being republished in future imports of tournament data. No email address or other personal data is retained for this specific purpose.

 

3.- Aims of the treatment

The purpose of the treatment consists of the own managements related to the exercise of rights of third parties on its data incorporated in files whose treatment corresponds to YottaChess total or partially.

In particular, when a chess player exercises their right to object to or request the erasure of the tournament results, games or profile published about them (data originally obtained from public sources, such as tournament organisers), their profile is removed from the website and their first and last name are kept in an internal list for the sole purpose of preventing that same profile from being republished the next time tournament data is imported. This does not involve keeping their email address, nor any data beyond what is strictly necessary for this purpose.

4.- Legal basis

This data processing finds its legal justification in the fact that the processing is necessary for the fulfillment of a legal obligation applicable to the data controller, according to article 6.1.c) of the General Regulations on Data Protection.

5.- Third parties with access to data

The data may be accessed, as the case may be, by the third parties indicated in the transversal treatments.

6.- Target category

No recipients are foreseen.

7.- International Transfer

The international transfers indicated in the registers of the transversal processing activities are carried out insofar as the interested party provides data through the website of the person responsible or his/her social profiles or sends a communication to the person responsible or receives it from him/her.

No other international data transfers are planned.

8.- Deletion deadline

They will be kept for the time necessary to comply with the purpose for which they were collected and to determine possible responsibilities that may arise from such purpose and from the processing of the data.

9.- Data Protection Officer

It is not required for this treatment, because of the data processed and as its responsible executes it, in accordance with the provisions of Article 37 of the General Regulations on Data Protection and Article 34 of the Organic Law 3/2018.

10.- Impact evaluation

An impact assessment has been carried out only for those cases in which the data concerned form part of a processing operation that in itself requires it, in accordance with the provisions of Article 35 of the General Regulations on Data Protection and Article 28 of Organic Law 3/2018. In these cases, it has been included as its own section.

11.- Risk analysis

A data security risk analysis has been prepared as an integral part of the impact assessment. The security measures are those referred to above. The effectiveness of the security measures implemented is reviewed and evaluated on a regular basis and whenever any change occurs. This evaluation is also done whenever there is an update on the systems. For the logical measures, we have the collaboration of a computer team.

Web and email security activity

The person in charge analyzes the behavior of the users in their navigation through the website and the different social profiles in order to prevent and block logical attacks.

1.- Collective

Users who access websites or social profiles managed by the person in charge.

2.- Data Categories

The type of data processed for this activity is as follows:

  • IP addresses.
  • Browser user agent chain.
  • Hashed email address (HMAC-SHA256, irreversible without the system's private key): only kept for accounts whose deletion has been requested, used exclusively to prevent the free plan's download limits from being circumvented by deleting and re-creating an account.

3.- Aims of the treatment

Analyze the behavior of users in their navigation through the website and the different social profiles in order to prevent and block logical attacks. This also includes preventing abuse of the free plan's download limits through the repeated deletion and re-creation of accounts.

When a user requests the deletion of their account, all of their personal data is deleted, with a single exception: a hashed (not reversible) representation of their email address is kept, used only to recognise, if the same email address (or an equivalent alias) is used to create a new account, that it has already used its free downloads before, so as not to grant it a new free quota. This hashed value cannot be used to recover the original email address or to contact the user in any way.

4.- Legal basis

This data processing finds its legal justification in the fact that it is necessary for the satisfaction of legitimate interests pursued by the person responsible for the processing (art. 6.1.f of the General Data Protection Regulations). In particular, these legitimate interests consist of avoiding the destruction or alteration of the data and systems, preventing the blocking of access to them or other unauthorized processing by third parties, and preventing abuse of the free plan through the creation of multiple accounts.

5.- Third parties with access to data

Google LLC

  • Description: US entity. Since the EU-US Privacy Shield framework was invalidated by the CJEU (Schrems II ruling, 2020), international transfers to this provider rely on the European Commission's Standard Contractual Clauses (SCC) and/or the EU-US Data Privacy Framework (DPF, 2023) where the provider is self-certified, with its own privacy policy.
  • Contact details: Torre Picasso, Plaza Pablo Ruiz Picasso, 1, 28020 Madrid. Form.
  • International transference:
  • Treatments:
    • Google services (Gmail, YouTube, etc.): The American company has implemented and maintains anti-malware and intrusion defense systems in the different services used by the manager.

CloudFlare

  • Description: US entity. Since the EU-US Privacy Shield framework was invalidated by the CJEU (Schrems II ruling, 2020), international transfers to this provider rely on the European Commission's Standard Contractual Clauses (SCC) and/or the EU-US Data Privacy Framework (DPF, 2023) where the provider is self-certified, with its own privacy policy.
  • Contact information: San Francisco, California, United States Form.
  • International transference:
  • Treatments:
    • CloudFlare Services (Data Cache, Analytics, Cybersecurity, etc.): The American company has implemented and maintains intrusion defense systems and anti-malwaresystems in the different services used by the manager. It has also implemented different services to improve the speed and deployment of data via CDN to users.

6.- Target category

No data communications are planned.

7.- International Transfer

International transfers to the US companies indicated in the section "Third parties with access to data" are foreseen.

The international transfers indicated in the registers of the transversal processing activities are carried out insofar as the interested party provides data through the website of the person responsible or his/her social profiles or sends a communication to the person responsible or receives it from him/her.

No other international data transfers are planned.

8.- Deletion deadline

The data is deleted after the following retention periods:

  • Google LLC: approximately, 26 months (privacy policy)
  • Hashed email address of deleted accounts: kept for as long as necessary to fulfil the anti-abuse purpose described above.

However, the data may be kept for longer periods of time in order to deal with possible responsibilities that may arise from the processing of the data or from the activities of the users.

9.- Data Protection Officer

It is not required for this treatment, because of the data processed and as its responsible executes it, in accordance with the provisions of Article 37 of the General Regulations on Data Protection and Article 34 of the Organic Law 3/2018.

10.- Impact evaluation

It is not required for this treatment, because of the data processed and as its responsible executes it, in accordance with the provisions of Article 35 of the General Regulations on Data Protection and Article 28 of the Organic Law 3/2018.

11.- Risk analysis

A data security risk analysis has been developed. The security measures are those referred to above. The effectiveness of the security measures implemented is reviewed and evaluated periodically and whenever any changes are made. This evaluation is also done whenever there is an update on the systems. For the logical measures, we have the collaboration of a computer team.

Advocacy and communications activity

The person in charge develops his or her promotional activity in the media, congresses, educational institutions and through this Website, including the service or secondary websites and their social profiles indicated in the 'Website Owner' tab.

1.- Collective

Interested in the activities and information about the activities of the person in charge or the contents he creates or publishes.

2.- Data Categories

The type of data processed for this activity is as follows:

  • Main identification data: Name and surname;

3.- Aims of the treatment

The purpose of the processing is advertising and commercial prospecting, including: sending communications, advertising and information, opinion surveys, commercial prospecting, market segmentation, decision support system and address collection.

4.- Legal basis

This data processing finds its legal justification in that it is necessary for the satisfaction of legitimate interests pursued by the data controller. (art. 6.1.f of the General Regulations on Data Protection). In particular, these legitimate interests consist in the creation of image, the improvement of reputation, the generation or maintenance of conversations on subjects of interest and the attraction of users and potential clients, partners and collaborators, all this also by means of direct marketing actions and obtaining historical and statistical data.

In the event that a service is offered (for example, subscription to the blog) the treatment will have its legal basis in that it is necessary for the execution of a contract to which the interested party is a party or for the application at the request of the latter of pre-contractual measures (Article 6.1.b of the General Regulations on Data Protection).

5.- Third parties with access to data

Google LLC

  • Description: US entity. Since the EU-US Privacy Shield framework was invalidated by the CJEU (Schrems II ruling, 2020), international transfers to this provider rely on the European Commission's Standard Contractual Clauses (SCC) and/or the EU-US Data Privacy Framework (DPF, 2023) where the provider is self-certified, with its own privacy policy.
  • Contact details: Torre Picasso, Plaza Pablo Ruiz Picasso, 1, 28020 Madrid. Form.
  • International transference:
  • Treatments:
    • G Suite: Set of office automation solutions through which the manager receives and sends communications.

 X Corp. (formerly Twitter Inc.)

  • Description: US entity. Since the EU-US Privacy Shield framework was invalidated by the CJEU (Schrems II ruling, 2020), international transfers to this provider rely on the European Commission's Standard Contractual Clauses (SCC) and/or the EU-US Data Privacy Framework (DPF, 2023) where the provider is self-certified, with its own privacy policy.
  • Contact information: 1355 Market Street #900 San Francisco, California 94103.
  • International transference:
  • Treatments:
    • Twitter/X widget: our website embeds Twitter/X's widgets.js script for social sharing buttons, which can set cookies and collect browsing data on behalf of X Corp.

 

GoDaddyIberia SLU (formerly HostEurope or RedCoruna)

  • Description: Spanish entity, with its own privacy policy.
  • Contact details: 36 Coruña Avenue, left mezzanine 27003
    Form.
  • International transfer:
  • Treatments:
    • Hosting: Hosting service of the main website of the responsible, through which the provider has access to the data that users provide or transmit through it.
    • Mail: E-mail service for receiving and sending communications.

Mailjet SAS (Sinch)

  • Description: French entity, with its own privacy policy.
  • Contact details: 13-13 bis Rue de l'Aubrac, 75012 Paris, France.
  • International transference:
  • Treatments:
    • Mailjet: Email marketing and transactional communications service, used to send newsletters, promotions and account-related emails to users who have given their consent.

Anthropic PBC

  • Description: US entity, with its own privacy policy.
  • Contact details: 548 Market St, PMB 90375, San Francisco, California 94104, United States.
  • International transference:
  • Treatments:
    • Claude Code: AI-assisted software development tool used by our technical team to develop, debug and maintain the platform. It may have access to source code and system/database contents during development and maintenance tasks.

OpenRouter, Inc.

  • Description: US entity, with its own privacy policy.
  • Contact details: San Francisco, California, United States.
  • International transference:
  • Treatments:
    • OpenRouter: AI model routing service used to generate the responses of the "YottaCoach" chess assistant feature. Only the chess-related prompt/content needed to generate the answer is sent; no user personal data (name, email, etc.) is shared with this provider.

Others: The person in charge makes use of auxiliary agents such as messenger services or telecommunications, for the reception and remission of messages and data.

5.- Target category

No data communications are planned.

6.- International transference

International transfers to the US companies indicated in the section "Third parties with access to data" are foreseen.

The international transfers indicated in the registers of the transversal processing activities are carried out insofar as the interested party provides data through the website of the person responsible or his/her social profiles or sends a communication to the person responsible or receives it from him/her.

No other international data transfers are planned.

7.- Deletion deadline

Feed: The personal data of those interested in receiving information, including those subscribed to the feed by e-mail, will remain in the system indefinitely as long as the interested party does not request its deletion.

Comments on responsible websites: Comments and their metadata are kept indefinitely so that successive comments can be recognized and approved automatically instead of being kept in a moderation queue. The cookies you decide to create in your browser related to your comments will store your data for one year.

Activities: The personal data of persons registered for general activities will be deleted when these activities have been completed.

Data published online by the responsible: Personal data uploaded by the responsible to websites and profiles in social networks will be kept from the moment the user gives his consent until he withdraws it.

8.- Data Protection Officer

It is not required for this treatment, because of the data processed and as its responsible executes it, in accordance with the provisions of Article 37 of the General Regulations on Data Protection and Article 34 of the Organic Law 3/2018.

9.- Impact evaluation

It is not required for this treatment, because of the data processed and as its responsible executes it, in accordance with the provisions of Article 35 of the General Regulations on Data Protection and Article 28 of the Organic Law 3/2018.

10.- Risk analysis

A data security risk analysis has been developed. The security measures are those referred to above. The effectiveness of the security measures implemented is reviewed and evaluated periodically and whenever any changes are made. This evaluation is also done whenever there is an update on the systems. For the logical measures, we have the collaboration of a computer team.

Google Sign-In (Google user data)

1.- Collective

Users who choose to register or log in to YottaChess using their Google account ("Sign in with Google").

2.- Data Categories

When a user signs in with Google, YottaChess only requests basic, non-sensitive profile data through Google's OAuth openid email profile scope:

  • Full name
  • Email address
  • Google account identifier (used internally to recognise returning users)

YottaChess does not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google Workspace API or sensitive/restricted scope. The same principles described in this section apply to signing in with a Lichess account, which discloses the same categories of basic profile data (username, email).

3.- Aims of the treatment

This data is used exclusively to create and authenticate the user's YottaChess account, and to personalize their experience on the platform (e.g. displaying their name in the account menu).

4.- Legal basis

This data processing finds its legal justification in that it is necessary for the performance of a contract to which the data subject is party (art. 6.1.b of the General Regulations on Data Protection), namely providing the user with an account on the platform.

5.- Use restrictions on data obtained from Google

Data obtained from Google user data through this Sign-In integration is never:

  • Used to serve targeted or personalized advertising;
  • Sold, rented, or transferred to any third-party data broker;
  • Used to determine a user's creditworthiness or for lending purposes;
  • Used to train, develop or improve generalized (non-personalized) artificial intelligence or machine learning models. YottaChess does not use any Google Workspace API to develop or improve such models.

6.- Third parties with access to data

Google LLC itself, as the identity provider, in the course of the authentication process. See the "Google LLC" entries above for details on Google's role and international transfer safeguards. No other third party receives this data.

7.- International transfer

See the "Google LLC" entries above.

8.- Deletion deadline

This data is kept for as long as the user's account remains active. If the user deletes their account, this data is deleted along with the rest of their account data, subject only to the anti-abuse hashed-email exception described under "Web and email security activity" above.

9.- Data Protection Officer

It is not required for this treatment, because of the data processed and as its responsible executes it, in accordance with the provisions of Article 37 of the General Regulations on Data Protection and Article 34 of the Organic Law 3/2018.

ES EN FR RU IN