Privacy and Cookie Notice

‍

Version: 2025

1. Who we are

This Privacy and Cookie Notice (“Notice”) explains how ChessPoint, operated by PIKMAN STUDIO LTD (“we”, “us”, “our”), processes personal data of visitors to our landing page for the ChessPoint project (the “Site”).

PIKMAN STUDIO LTD is a company registered in England and Wales under company number 16241108, with its registered office at:

International House, 64 Nile Street, London, N1 7SR, United Kingdom

The Site is built and hosted on the infrastructure of Webflow, Inc. (“Webflow”). Webflow provides the website hosting and form functionality we use. Webflow has its own Global Privacy Policy and Cookie Policy, which describe how Webflow processes data in connection with sites hosted on its platform.

Our Site is aimed at potential partners and collaborators who want to contact us about the ChessPoint project. There is no user registration, no customer account, and no crypto or payment functionality on this Site.

By visiting the Site and/or submitting the contact form, you acknowledge that you have read this Notice.

2. Roles: ChessPoint vs Webflow

For the purposes of the EU General Data Protection Regulation (“GDPR”):

  • PIKMAN STUDIO LTD is the data controller for personal data that you submit via our contact form or that we otherwise determine the purposes and means of processing for.
  • Webflow primarily acts as our data processor, providing hosting, storage, and related technical services for the Site and the contact form. Webflow may also process certain data as an independent controller for its own legitimate purposes (such as security, service improvement, and compliance) as described in its own privacy documentation.

Webflow’s main policies are available at (for reference only, not controlled by us):

‍

https://webflow.com/legal/privacy
https://webflow.com/legal/cookie-policy

‍

3. Personal data we collect via the Site

3.1 Data you provide through the contact form

The Site contains a single contact form intended for potential partners. We collect:

  • Your name
  • Your e-mail address
  • The content of your message (free text)

You decide what to write in the free text field; it may include information about your company, project, or other personal details you choose to share.

3.2 Data collected automatically (logs and usage data)

When you visit the Site, Webflow’s hosting infrastructure automatically records certain technical information in server logs, for example: IP address, date and time of request, URLs visited, referrer URL, browser and device type, operating system, and similar diagnostic information.

We can access this information via Webflow’s tools and use it for security and technical monitoring.

3.3 Cookies and similar technologies

The Site is hosted on Webflow. According to Webflow’s Cookie Policy, Webflow may use certain first-party cookies in connection with its services (for example, to maintain sessions, security, preferences, or performance). Webflow does not automatically add marketing or analytics cookies to customer sites; such cookies appear only if the customer (us) chooses to add external tools like Google Analytics, advertising pixels, etc.

On the current version of this Site:

  • We only use cookies that are strictly necessary for basic operation and security of the Site, and any minimal technical cookies required by Webflow’s hosting.
  • We do not use separate marketing or advertising cookies.
  • If we decide to add analytics or marketing tools in the future, we will update this Notice and, where required, provide a consent banner so that you can accept or refuse non-essential cookies.

You can manage cookies through your browser settings. Disabling strictly necessary cookies may affect the functionality of the Site.

4. Purposes and legal bases of processing

We process personal data collected via the Site for the following purposes and on the following legal bases:

  1. Handling partner enquiries
    • Purpose: to receive, read, and respond to your message as a potential partner, collaborator, or interested party.
    • Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in communicating with people who contact us regarding the ChessPoint project.
  2. Operating and securing the Site
    • Purpose: to host the Site, maintain performance, prevent abuse, detect and investigate technical or security incidents, and generate aggregated statistics about Site usage (e.g. traffic volumes, error rates).
    • Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in running a secure and reliable website; and Webflow’s legitimate interests as described in its own policies.
  3. Compliance with legal obligations
    • Purpose: to comply with applicable laws, respond to lawful requests from authorities, or exercise/defend legal claims.
    • Legal basis: legal obligation (Art. 6(1)(c) GDPR) or legitimate interest (Art. 6(1)(f) GDPR), depending on the context.

We do not use contact form data from this Site for broad marketing campaigns, newsletters or similar, unless you explicitly ask us to and provide your consent.

5. How we store and share your data

5.1 Storage on Webflow

Contact form submissions and related technical data are stored on Webflow’s infrastructure. This typically includes:

  • The form content (name, e-mail, message)
  • Metadata such as time of submission and IP address
  • Server logs relating to access and performance

Webflow processes this information to provide hosting and form functionality, as well as for its own security and platform operations, as described in its Global Privacy Policy and Cookie Policy.

We may also configure the form to forward submissions to our internal e-mail address or other tools we use (e.g. a CRM or ticketing system). In such cases, the message will be stored both in Webflow and in those additional systems.

5.2 Other service providers

In addition to Webflow, we may share personal data with:

  • E-mail and communication providers used to receive form submissions
  • IT security and maintenance providers (where needed)
  • Legal or professional advisers (only if necessary in a specific case)

These providers act as our data processors and process personal data only on our documented instructions.

5.3 Public authorities

We may disclose personal data when required to do so by law, for example in response to a court order or a lawful request from a supervisory authority or law-enforcement agency.

We do not sell or rent your personal data.

6. International transfers

Webflow is a U.S. company. According to its Global Privacy Policy, Webflow may store and process personal information in the United States and other countries, and relies on mechanisms such as the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses to safeguard data transferred from the EU/UK/Switzerland.

By using Webflow, we indirectly transfer the data you submit on the Site to Webflow’s infrastructure. We only use Webflow in ways that are consistent with applicable data protection law and Webflow’s own commitments.

If we use any additional service providers outside the European Economic Area (“EEA”), we will ensure that appropriate safeguards (such as adequacy decisions or Standard Contractual Clauses) are in place.

7. Data retention

We keep personal data no longer than necessary for the purposes described above:

  • Contact form submissions: normally retained for up to 12 months after the last relevant contact, unless we need to keep them longer for legal reasons (for example, in case of an ongoing negotiation, dispute or claim).
  • Server logs and technical data: retained for a limited period determined by Webflow and our security needs (typically between 3 and 12 months).
  • Cookies: stored according to their individual lifetime, as configured in our Site settings or as defined by Webflow for strictly necessary cookies.

After these periods, data is deleted or irreversibly anonymised.

8. Your rights under GDPR

Depending on your location and subject to applicable law, you may have the following rights with respect to your personal data:

  • Right of access – to obtain confirmation as to whether we process your data and to receive a copy.
  • Right to rectification – to request correction of inaccurate or incomplete data.
  • Right to erasure – to request deletion of your data in certain situations.
  • Right to restrict processing – to request that we limit processing in specific circumstances.
  • Right to data portability – to receive certain data in a structured, commonly used and machine-readable format and transmit it to another controller.
  • Right to object – to object to processing based on our legitimate interests.
  • Right to withdraw consent – where processing is based on consent (e.g. for non-essential cookies), you may withdraw it at any time.
  • Right to lodge a complaint – with a data protection supervisory authority in your EEA member state or in the country where an alleged infringement took place.

To exercise your rights with respect to data we control, please contact us at the address below.
For rights relating to Webflow’s own processing as an independent controller (for example, when it uses data for its own platform operations), you should rely on the contact details and procedures described in Webflow’s Global Privacy Policy.

9. Contact details

Controller: PIKMAN STUDIO LTD
Company number: 16241108
Registered office: International House, 64 Nile Street, London, N1 7SR, United Kingdom
E-mail (privacy contact): chess@pikman.studio

You can use these contact details for any questions about this Notice or about our use of your personal data.

10. Changes to this Notice

We may update this Notice from time to time, for example if we change the way we use the contact form, add analytics tools, or modify our choice of service providers.

The most recent version will always be available on this Site and will indicate the date of the last update. If we make material changes, we may also provide an additional notice on the Site.