Privacy Policy

Last updated: July 3, 2026

Schachatelier operates this shop and website, including all related information, content, features, tools, products, and services, to provide you as a customer with a personalized shopping experience (the “Services”). Schachatelier is built on Shopify, which enables us to provide you with the Services. This Privacy Policy describes how we collect, use, or disclose personal data when you visit, use, make a purchase, or otherwise conduct a transaction using the Services, or otherwise communicate with us. If there is a conflict between our general terms and conditions and this Privacy Policy, this Privacy Policy takes precedence with respect to the collection, processing, and disclosure of your personal data.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you confirm that you have read this Privacy Policy and agree to the collection, use, and disclosure of your data as described in this Privacy Policy.

What personal data do we collect or process?

When we use the term “personal data,” we mean information that identifies you or another person, or that can be directly linked to you. Personal data does not include information that is collected anonymously or anonymized in such a way that identification or attribution to you is not possible. Depending on how you interact with the Services, we may collect or process the following categories of personal data:

• Contact data including name, postal address, billing address, shipping address, phone number, and email address.

• Financial data including credit card, debit card, and financial account numbers, payment card information, transaction details, payment method (incl. Klarna), payment confirmation, and other payment details.

• Account information including username, password, security questions, configurations, and settings.

• Transaction information including the items you view, add to cart, add to your wishlist, purchase, return, exchange, or cancel.

• Communications with us including information you provide when communicating with us (by email, contact form, or messenger services).

• Device and usage information including IP address, browser and network connection, and cookies.

Sources of personal data

We may collect personal data from the following sources:

• Directly from you: When you create an account, place an order, or communicate with us.

• Automatically through the Services: Through the use of cookies and similar technologies when visiting our website.

• From our partners and service providers: Data from platforms that enable certain technical functions or payment processing on our behalf.

How do we use your personal data?

Depending on how you interact with us, we use your data for the following purposes:

• Providing and improving the Services: To fulfill our contract with you, process payments, execute orders, and organize shipping.

• Personalization (engraving): To create your personalized chess set, we process the engraving text you enter during the ordering process (e.g., names, dates, short dedications). This information is used exclusively for the manufacture and delivery of your product.

• Marketing and advertising: To send marketing communications (e.g., via Klaviyo), provided you have given your consent.

• Security and fraud prevention: To authenticate accounts and ensure secure payment processes.

• Communication and support: To respond promptly to your customer inquiries.

How do we disclose personal data?

Under certain circumstances, we may disclose your personal data to third parties:

• To Shopify and IT service providers: To provide the shop infrastructure and technical processing.

• To shipping and fulfillment service providers: To deliver your orders.

• To production partners (for personalized items): For personalized items, we transmit the data necessary for production (name/engraving text, delivery address) to our production partner. This transmission may also take place outside the EU/EEA; it relies on standard contractual clauses pursuant to Art. 46 GDPR or contractual guarantees.

• To tree-planting partners (sustainability program): For participating orders, we work with a third-party provider to fund tree planting. For this purpose, minimal order-related data (e.g., order number, quantity) is transmitted to the service provider.

• To marketing and review services: To optimize our offering, gather customer feedback (customer reviews), and send newsletters via Klaviyo Inc. (USA) based on your consent (double opt-in).

Relationship with Shopify

The Services are hosted by Shopify. Shopify processes personal data related to your access in order to provide the Services. Data may be transferred to third countries outside the EU (in particular Canada and the USA). Further information can be found in Shopify's Consumer Privacy Policy. You may also exercise your rights via the link to the Shopify privacy portal.

Third-party websites and links

Our Services may contain links to external websites. We do not guarantee or take responsibility for the privacy practices or security of these third-party platforms.

Children's data

The Services are not intended for use by children. We do not knowingly collect personal data from minors.

Security and retention of your data

No security measure is perfect. We retain your data for as long as necessary to provide the Services, comply with legal obligations, or resolve disputes.

Your rights and choices

As a user in the European Economic Area (EEA), you have the following rights under the GDPR:

• Right of access to the data we hold about you.

• Right to rectification of inaccurate data.

• Right to erasure (“right to be forgotten”).

• Right to restriction of processing and objection to certain processing activities.

• Right to data portability.

• Withdrawal of consent: You may withdraw your consent (e.g., for the newsletter) at any time with future effect via the unsubscribe link.

To exercise these rights, please contact us via the channels below, or use the Shopify privacy portal at https://privacy.shopify.com/en.

Complaints

If you have complaints about data processing, please contact us directly. You also have the right to lodge a complaint with the competent data protection supervisory authority.

International transfers

When we transfer data outside the EEA (e.g., to service providers in the USA or production partners), we rely on recognized mechanisms such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “last updated” date will be adjusted accordingly.

Contact

If you have questions about our data processing practices or this Privacy Policy, please contact us:

Data controller within the meaning of data protection law: Özgür Özel (Schachatelier Berlin), Janichweg 17A, 13629 Berlin, Germany. Email: info@schachatelier.de