1. Controller
The controller responsible for the processing of personal data on this website is:
David Shengelia
Vienna Chess School
Karlsgasse 20/1
1040 Vienna
Austria
Email: office@viennachessschool.at
Phone: +43 676 7223227
2. General Information on Data Processing
The protection of your personal data is important to us. We process personal data exclusively in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and – where applicable – the Telecommunications Act (TKG).
Personal data is information relating to an identified or identifiable natural person, such as name, email address, telephone number or IP address.
3. Hosting and Server Log Files
Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.
When you access our website, technically necessary information is processed by the web server and stored in server log files. This may include, in particular, the following data:
• IP address
• Date and time of access
• Page or file accessed
• Browser type and browser version
• Operating system
• Referrer URL
• Access status and other technical information relating to the server request
The processing is carried out to ensure the secure and trouble-free operation of the website, for error analysis, and to detect and prevent abusive or unlawful access.
The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR in the secure and technically reliable provision of our website.
Data stored in server log files is generally deleted no later than seven days after collection. Longer storage may occur in individual cases, particularly where necessary to investigate an attack or misuse.
Processing by ALL-INKL.COM takes place in Germany.
4. Contact
If you contact us by email, telephone or via a contact form provided on the website, we process the data you provide in order to handle your enquiry and any related follow-up questions.
This may include, in particular, your name, email address, telephone number, as well as the messages and information you provide.
Depending on the content of the enquiry, processing is carried out on the basis of Art. 6(1)(b) GDPR for the performance of pre-contractual measures or a contract, or on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR in responding to general enquiries.
The data is stored only for as long as necessary to process the respective enquiry, unless statutory retention obligations or other legitimate reasons require longer storage.
5. Course and Event Bookings via Amelia
For the booking and management of certain courses, appointments and events, we use the WordPress booking system Amelia.
As part of a booking, the following data in particular may be processed:
• First and last name
• Email address
• Telephone number
• Selected course or event
• Booking and appointment information
• Where applicable, additional information required to process the booking
The booking data is stored in our website database and used to process and manage the respective booking and to communicate with participants.
The legal basis is Art. 6(1)(b) GDPR insofar as the processing is necessary for the performance of pre-contractual measures or a contract.
Where statutory retention obligations apply, the relevant data is stored for the legally prescribed period. Other booking data is deleted as soon as it is no longer required for the respective purposes and there are no statutory or legitimate grounds for further storage.
6. Course Registration and Orders via WooCommerce
For registration and the purchase of our courses and training programmes, we use WooCommerce.
As part of the ordering or registration process, the following data in particular may be processed:
• First and last name
• Country/Region
• Telephone number
• Email address
• Child’s name
• Child’s age
• Selected course or offer
• Order information
• Payment and order status
This data is processed in order to accept registrations and orders, process contracts, assign participants to the respective courses and carry out the necessary communication.
The legal basis is Art. 6(1)(b) GDPR. Where data must be stored due to statutory retention obligations, in particular tax and corporate law requirements, processing is carried out on the basis of Art. 6(1)(c) GDPR.
After the respective statutory retention periods have expired, the data is deleted unless there is another legal basis for further storage.
7. Online Payments via Stripe
For online payments, we use the payment service provider Stripe. Stripe is integrated into our booking or ordering system via an interface (API).
When a payment is made, Stripe processes the payment and contact data required to carry out the transaction. This may include, in particular, name, email address, payment information, transaction amount and other information required for payment processing.
Full credit card details are processed directly by Stripe and are not stored as credit card data on our website.
Depending on the available payment method, payment may be made in particular by credit or debit card or via Link by Stripe.
The processing is carried out to process the payment requested by you and is therefore based in particular on Art. 6(1)(b) GDPR. Where statutory retention and documentation obligations apply, Art. 6(1)(c) GDPR may also apply.
As part of payment processing, Stripe may act both as a processor and – depending on the respective processing activity – as an independent controller under data protection law. Stripe also describes these different roles in its data processing agreement.
Further information on the processing of personal data by Stripe can be found in Stripe’s Privacy Policy.
8. Cookies and Consent Management
Our website uses cookies and comparable technologies insofar as they are necessary for the technical operation of the website or where you have consented to the use of additional cookies.
To manage your consent, we use Complianz – GDPR/CCPA Cookie Consent. When you first visit our website, you can use the cookie banner to configure your settings and – where required – consent to or reject the use of certain categories of cookies.
Technically necessary cookies may be used without prior consent insofar as they are required to provide services expressly requested by you or for the technical functioning of the website.
Non-essential cookies and comparable technologies that require consent are used in accordance with the choices you make in the cookie banner.
Where consent is required, processing is based on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 165(3) TKG 2021. Consent that has been granted can be withdrawn or changed at any time with effect for the future via the cookie settings.
An up-to-date overview of the cookies and services used on our website, including information on their name, provider, purpose and storage duration, can be found in our Cookie Policy:
https://viennachessschool.at/cookie-richtlinie/
9. Fonts
The fonts used on our website are provided locally on our web server.
When the fonts are loaded, no connection is established to Google Fonts servers or other external font providers. Therefore, no personal data is transmitted to such providers in connection with the provision of the fonts.
10. Links to Google Maps
No Google Maps map is embedded on our website and no Google Maps API is used.
Our address can be accessed via a standard external link to Google Maps. Simply visiting our website does not establish a connection to Google Maps.
Only when you click the corresponding link do you leave our website and are redirected to Google Maps. The respective provider’s privacy policy applies to the data processing that takes place there.
11. Links to Instagram and Facebook
Our website contains links or icons to our profiles on Instagram and Facebook.
No social media feeds, plugins or widgets from Instagram or Facebook are embedded on our website.
Therefore, simply visiting our website does not establish a connection to the respective social media platforms via these standard links. Only when you click a corresponding link do you leave our website and access the respective external service.
12. Recipients of Personal Data
Where necessary for the respective processing purposes, personal data may in particular be transmitted to the following recipients or categories of recipients:
• Hosting and IT service providers
• Payment service providers, in particular Stripe
• Providers or technical service providers of the booking and webshop systems used
• Tax advisers and accounting services, where required by law or for contract processing
• Authorities and other public bodies, where there is a legal obligation to do so
Personal data is disclosed only where there is an appropriate legal basis for doing so.
13. Storage Period
We generally store personal data only for as long as necessary for the respective processing purpose.
Where statutory retention obligations apply, the relevant documents and data are retained for the legally prescribed period. After the respective periods have expired, the data is deleted unless there is another legal basis or legitimate necessity for further storage.
The specific storage period may vary depending on the type and purpose of the respective data processing. Where specific storage periods are stated in this Privacy Policy for individual processing activities, those periods take precedence.
14. Your Rights
Subject to the applicable legal requirements, you have the following rights in particular:
• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to certain processing activities
• Right to withdraw consent with effect for the future
If you wish to exercise any of these rights, you can contact us at office@viennachessschool.at.
You also have the right to lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority.
15. Data Security
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or unlawful disclosure.
Despite appropriate security measures, absolute security cannot be guaranteed when data is transmitted over the Internet.
16. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if our website, the services used or the legal framework changes.
Last updated: September 2026
