Privacy Policy – Academia de Șah

The Romanian version of this document is the legally binding original. This English translation is provided for convenience only.

Last updated: 12 September 2026

1. Data controller

The data controller is A.C.S. Oxygen — a sports association affiliated with the Romanian Chess Federation, as organiser of the Academia de Șah project.

Contact for data protection matters: office@academiadesah.ro.

2. What data we collect

We collect data you provide via the website forms or through direct contact (phone, email):

Enrolment form: student type, level, preferred schedule, student name, age, parent name (for minors), phone, email, optional message.
Contact form: full name, phone, email, subject and message content.
Administrative data after enrolment (national ID number, only where required for FRSAH registration for official competitions).

With your consent (given in the cookie banner), the website uses Google Analytics for aggregated traffic statistics and to measure Google Ads campaigns. This data is not used for individual profiling. See the Cookies page for details and to change your choice.

3. Purposes of processing

Scheduling the trial lesson and managing course enrolment;
Administrative communication: schedule changes, cancellations, announcements;
Student records for FRSAH registration for official competitions;
Responding to contact form requests;
Fulfilling legal obligations (accounting records).

4. Legal basis

Your consent (Art. 6(1)(a) GDPR);
Performance of a contract (Art. 6(1)(b));
Legal obligation (Art. 6(1)(c));
Legitimate interests (Art. 6(1)(f)).

5. How long we retain data

Active students — for the duration of their participation;
After courses end — up to 3 years in archives;
Persons who did not complete enrolment — up to 12 months;
Financial / accounting data — as required by law (10 years).

6. Who we share data with

Your data is not sold or rented. We may disclose it exclusively to:

Romanian Chess Federation (FRSAH) — for competition registration;
Service providers operating the website and communications (web hosting, email) — under appropriate contractual clauses;
Public authorities, where required by law.

The website uses embedded Google Maps iframes — this may establish a connection to Google's servers. See Cookies.

7. Your rights (GDPR Art. 15–22)

Right of access, rectification, erasure, restriction, portability and objection;
Right to withdraw consent at any time;
Right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP).

Requests: office@academiadesah.ro. We respond within 30 days.

8. Minors

For minor students, data is provided and managed by the parent or legal guardian. Administrative communication is conducted with the parent/guardian, not directly with the child.

9. Security

We apply reasonable technical and organisational measures: HTTPS, restricted data access, written agreements with providers.

10. Changes to this policy

We may update this policy periodically. The current version is displayed on this page. Significant changes will be communicated to active students by email.