1. Who is responsible for your information
The website operator and data controller is Glenarinoriaquiel Limited, with its contact address at 20 Alderman Drive, Henderson, Auckland 0612, New Zealand. General privacy enquiries can be sent to info@glenarinoriaquiel.com. This policy explains how information is handled when you use the Glenarinoriaquiel website, make a club enquiry, ask about membership, or contact us about an event.
Glenarinoriaquiel operates in New Zealand. We aim to handle personal information consistently with the New Zealand Privacy Act 2020 and the Information Privacy Principles. Where the European Union General Data Protection Regulation (GDPR) or United Kingdom GDPR applies to a particular visitor or processing activity, we also apply the relevant rights and lawful-processing requirements described below.
2. Scope and information we may collect
This policy applies to information submitted through this website or provided directly in connection with website-originated enquiries. Depending on how you contact us, information may include your name, email address, the topic of your enquiry, your stated chess experience, the content of your message, and correspondence needed to answer it.
We do not ask visitors to provide unnecessary sensitive categories of personal information through the public contact form. Please keep messages relevant to chess club participation, events, membership and general enquiries.
Basic technical information may be processed by the web server that hosts the site, such as request time, requested page, browser type, and truncated or security-related connection information. This information is used for delivery, security, troubleshooting and aggregate reliability analysis, not to build advertising profiles.
3. Why we use personal information
We use personal information only for defined club and website purposes. These include answering enquiries, arranging a first visit, responding to membership questions, providing event instructions, maintaining necessary correspondence, preventing misuse of the website, and administering the club relationship when a visitor becomes a member.
We do not sell personal information. We do not use the website contact form to create unrelated marketing profiles. If we later introduce an optional mailing list, participation will require a clear affirmative choice and a straightforward way to stop receiving those messages.
4. Lawful bases where GDPR applies
Where GDPR applies, the lawful basis depends on the context. We may process information because it is necessary to take steps at your request before entering a membership arrangement; because processing is necessary to perform a club membership arrangement; because we have a legitimate interest in replying to enquiries, operating a secure website and administering club activities; because a legal obligation requires retention; or because you have given consent for a specific optional purpose.
When we rely on legitimate interests, we consider the purpose, necessity and impact on the individual. We do not use legitimate interests as a blanket justification for unrelated processing.
5. Retention and deletion
We keep enquiry information only as long as it is reasonably needed for the purpose for which it was collected. Routine enquiries that do not lead to ongoing participation are periodically deleted. Membership-related correspondence may be retained longer where it forms part of the administrative record, is required to resolve an issue, or must be kept to meet an applicable legal or accounting obligation.
When information is no longer required, we take reasonable steps to delete it or render it no longer identifiable. Backup copies may remain for a limited rotation period before being overwritten.
7. International access and transfers
Because internet infrastructure and service providers may operate across borders, limited personal information may be processed outside New Zealand. Where GDPR applies and information is transferred from the European Economic Area or another jurisdiction with transfer restrictions, we use an available lawful transfer mechanism and appropriate safeguards where required.
New Zealand privacy law also places conditions on overseas disclosures. We consider the receiving party, purpose and available protections before making an overseas disclosure that falls within those rules.
8. Security and data minimisation
We apply reasonable technical and organisational measures intended to protect information from loss, unauthorised access, alteration or disclosure. Measures may include access controls, software updates, least-privilege practices, secure hosting configuration, backups and limits on who can view enquiries.
No internet service can guarantee absolute security. For that reason, we also minimise the information requested through the site. Visitors should avoid sending information that is not needed for the club enquiry.
9. Your privacy rights
Under New Zealand law, individuals may have rights to request access to personal information held about them and to request correction. Where GDPR applies, additional rights may include access, rectification, erasure, restriction, objection, data portability, and the right to withdraw consent where consent is the lawful basis.
These rights are not absolute and may be limited by applicable law. We may need enough information to verify the requester before disclosing or changing personal information. Requests can be sent to info@glenarinoriaquiel.com. We will respond within the timeframe required by the applicable law.
10. Young players and family enquiries
The club may host chess activities in which younger players participate, but the public website is not designed to collect detailed personal information from children independently. A parent or guardian should make enquiries on behalf of a child when appropriate. Event-specific arrangements for younger participants are communicated directly to the responsible adult.
11. Questions and complaints
If you believe personal information has been handled incorrectly, contact us first at info@glenarinoriaquiel.com so the issue can be reviewed. Individuals in New Zealand may also have the right to complain to the Office of the Privacy Commissioner. Where GDPR applies, an individual may have the right to complain to the data protection authority in the jurisdiction where they live, work or believe an infringement occurred.
Privacy contact details: Glenarinoriaquiel Limited, 20 Alderman Drive, Henderson, Auckland 0612, New Zealand, info@glenarinoriaquiel.com.
12. Changes to this policy
We may update this policy when website functions, club processes or applicable legal requirements change. The revision date at the top of the page indicates the current version. Material changes will be reflected in the published policy before or when the relevant processing changes take effect.