Privacy policy

Privacy Policy of Lottohelden

Data protection has a particularly high priority for Lottohelden. The use of Lottohelden's Internet pages is basically possible without any indication of personal data. Should a data collection become necessary and there is no legal basis for the processing, we generally obtain the consent of the persons concerned.
The use of personal data, such as the name, address or e-mail address of the persons concerned, is always in accordance with the General Data Protection Regulation (GDPR - EU 2016/679) and in compliance with the specific data protection regulations applicable to Lottohelden. Through this privacy statement, we want to inform the public about the nature, scope and purpose of the personal data we process. In addition, this Privacy Policy will inform individuals about their rights.
Lottohelden has implemented comprehensive technical and organisational measures to ensure the best possible protection of the processed personal data. Nevertheless, Internet-based data transmissions may contain security gaps, so that complete protection cannot be guaranteed. For this reason, each person concerned is free to transmit any necessary personal data to us by alternative means, e.g. by post or telephone.

Table of contents

1. Terms used

The Lottohelden Privacy Policy uses the terms used in the adoption of the General Data Protection Regulation (GDPR - EU 2016/679). Our privacy policy is intended to be easy to read and understand for all parties involved, therefore the following is a brief explanation of the terms:
a) Personal data
Personal data is any information that can be clearly traced back to a natural person (including "data subject" or "data subject") and is capable of identifying that person. An identifiable person is one who can be uniquely identified by linking a name, identifier or the like with other data.
b) Data subject
The person concerned is the person whose personal data is processed by us.
c) Processing
Processing is any operation involving personal data such as collection, storage, adaptation and alteration, use, transmission or any other form of supply or linkage, erasure and destruction.
d) Limitation of processing
Limitation of processing is the marking of certain personal data with the aim of limiting their future use.
e) Profiling
Profiling refers to the types of automated processing of personal data used for assessments, analyses and forecasts, e.g. regarding work performance, economic situation, health or whereabouts of such persons.
f) Pseudonymisation
Pseudonymization is the processing of personal data without direct identification of the person. This is guaranteed by technical and organisational measures that prevent the merging of information that could be used to identify the natural person.
g) Data controller
The controller is the natural or legal person, entity or body that alone or jointly with others decides on the purposes and means of the processing of personal data.
(h) Processors under contract
A processor is a natural or legal person who processes personal data on behalf of the data controller.
(i) Recipient
The recipient is the natural or legal person or entity to whom personal data are disclosed. Authorities receiving such data on a legal basis in the course of an investigation shall not be regarded as recipients.
(j) Third parties
The third party means anybody other than the person concerned, the controller or the processor.
(k) Consent
Consent is the expression of intent to process personal data.

2. The name and address of the person responsible

Responsible according to the valid data protection regulations (Controller):
Deutsche Lotto- und Toto-Agentur Ltd
Level 5, St Julians Business Centre
Elia Zammit Street
STJ 3153 Malta (EU)
Phone: +49 (0)40-22866076
E-mail: service@lottohelden.com
Website: www.lottohelden.com

3. The name and address of the Data Protection Officer

The data protection officer of Lottohelden can thus be reached:
Data protection officer
Deutsche Lotto- und Toto-Agentur Ltd
Level 5, St Julians Business Centre
Elia Zammit Street
STJ 3153 Malta (EU)
Phone: +49 (0)40-22866076
E-mail: service@lottohelden.com
Website: www.lottohelden.com
Any data subject may contact the data protection officer directly with any questions regarding data protection.

4. Cookies & Tracking

Your privacy is important to us! At this point we would like to give you the opportunity to learn more about the use of tracking technologies and cookies on our website. Further, you can also activate or deactivate the respective tracking technologies or object to the use of specific services.

4.1. Use of Cookies

The pages of Lottohelden use cookies to continuously improve the functionality and in order to offer you services tailored to your preferences. Cookies are small text files that are stored on a computer system via the internet browser. Cookies contain a so-called cookie ID. This ID can be used to identify an Internet browser when the website is visited again. In the long term, we can evaluate your movements on the website and thus improve it.
Different types of cookies are used on Lottohelden. We differentiate between cookies, without which you cannot use the website properly and which are therefore absolutely necessary, and optional cookies, where you can decide whether they are used or not. Thereby, we want to give you the opportunity to determine for yourself the use of tracking technologies while using our website. You can adjust the settings here in your privacy settings.
Moreover, there is also the option of generally preventing cookies from being placed in your browser. You can find more information on this in the documentation of the respective browser provider or in the help section of your browser. Please note, however, that our website may then not be displayed optimally and that some functions might no longer be technically available.

4.2. Overview of the types of cookies used

In order to enable you to make the most individual data protection settings possible, you will find an overview of the various types of cookies we use below:
Necessary
Necessary cookies are used for functional tracking and ensure the reliable and comfortable operation of the website, so that you can make full use of all our services. At Lottohelden these cookies are used, for example, to confirm your login status or to save the content of your shopping cart for the duration of your visit. Functional tracking is necessary and cannot be deactivated.
Statistics
Statistics cookies or optimization tracking enable us to continuously improve the website. This way we can adapt Lottohelden to the preferences, needs and wishes of our customers and offer you an even better user experience in the future. In order to inform you about specific products and relevant offers, we use information from the analysis of pseudonymised usage data.
Marketing
Lottohelden uses technologies with which we can show you advertisements and current product information on other websites, for example after visiting our website. For this, so-called (re-)marketing cookies from external advertising companies (third party cookies) are used. However, these remarketing cookies are only used with your consent and can be deactivated here at any time.

4.3. Targeted opt-out

You can adjust your personal tracking settings on our website in the "Privacy" section at any time. You also have the option of opting out of certain services. These services are:
If you use the “opt-out” option and do not agree to the placement of a cookie for these services, an opt-out cookie is placed in your browser. This cookie does not contain any information and is only used to assign your objection to you. If you delete your cookies, the opt-out cookie will also be deleted. The opt-out procedure must then be carried out again.

5. Collection of data and information

Technical data:
We collect a number of technical data and information with each call to the site. This general data and information is stored in the log files of the server. We record browser types and versions, the operating system used, the Internet page that is accessed from our site (referrer), the subpage that is accessed, the date and time of access, the Internet protocol address (IP address), the Internet service provider and other data and information that serve to avert danger in the event of attacks on our systems.
Identity data:
The identity data we collect consists of first name, last name, user name and/ or ID, title, date of birth and gender.
Contact information:
Data we may use to contact you are address, e-mail address and telephone numbers.
Payment information:
These are bank account and payment details.
Transaction details:
Details of payments and details of bets placed and games played.
Profile information:
This includes username and password, purchases, orders you make, preferences.
Statistical data:
This includes information about how you use our website, your bets, products and games played.
Marketing and Communication Data:
This includes your preferences in receiving marketing communications from us and our partners and your communication preferences.
Lottohelden does not draw any conclusions about the person concerned. Rather, this data is used to deliver the content of our site and to optimize advertising for it, to guarantee the functionality of our systems and to support law enforcement authorities in the event of a violation. Only an anonymous statistical evaluation is carried out. The server log files are stored separately from the other data.
Since March 26th 2019 this website and your account is operated by DLTA (Deutsche Lotto- & Toto-Agentur - Level 5, St Julians Business Centre, Elia Zammit Street, (EU)), a company of Lottoland Holdings Ltd).
The “transfer”:
The intra-group transfer to Deutsche Lotto- und Toto-Agentur Ltd (Controller) which is
Deutsche Lotto- und Toto-Agentur Ltd
Level 5, St Julians Business Centre
Elia Zammit Street
STJ 3153 Malta (EU)
from (former Controller)
Lottohelden Ltd.
Office Suite A
Ocean Village Promenade
Gibraltar, GX11 1AA,
for the purpose of going on providing our services to european customers, due to upcoming Brexit, included all customer data. A Maltese branch has been established for licensing reasons. The legal basis is „Legitimate Interest“, Art. 6, (1), f) GDPR which is also recognised in Recital 48 GDPR. Key decisions relating to Lottoland Holdings Ltd were and are still being made in Gibraltar. Your personal data remained on the same production servers. For details on this transfer, please get in touch with our data protection officer.
The processing: DLTA manages your player account and passes on player’s bets to European Lotto and Betting Ltd (LEVEL 5, ST JULIANS BUSINESS CENTRE, ELIA ZAMMIT STREET, STJ 3153, MALTA), which is acting as a bookmaker. When placing bets, DLTA acts in the name of and on behalf of the player. The European Lotto and Betting Ltd is licensed and regulated by the Malta Gaming Authority under the license number MGA/B2C/609/2018.

6. Disclosure of data to third parties

Your data will only be passed on to third parties if this is necessary to record, process, mediate and process your entries and the associated payment transactions, if Lottohelden is legally or officially obliged to do so (e.g. for law enforcement purposes) or if it is necessary to enforce the terms and conditions of business and participation or other agreements concluded with you as well as the rights and claims of Lottohelden. However, your personal data will not be passed on to third parties for advertising purposes.
In order to verify your age and other personal details that you provide during registration as well as the account details provided, Lottohelden compares your details with the database of Schufa Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany (Schufa). Schufa will then return to Lottohelden the degree to which its stored personal data correspond to the personal data you have provided to Lottohelden in percentages and, if applicable, a reference to an identification-based legitimation check carried out by Schufa or another contractual partner in the past. Lottohelden can thus use the match rates transmitted to determine whether a person is stored in Schufa's database at the address you provide. There will be no further data exchange or transmission of different addresses or storage of your data in Schufa's database. For reasons of proof, only the fact that your identity has been verified is stored by Schufa. Further information can be found here: https://www.meineschufa.de/
If necessary, Bürgel Wirtschaftsinformationen GmbH & Co. KG will provide you with credit information to check your creditworthiness, in particular for payments made by direct debit. KG (BWI), Postfach 500 166, 22701 Hamburg, Germany. Due to our legitimate economic interest within the meaning of § 29 (2) number 1. a) of the German Federal Data Protection Act (BDSG), BWI will provide us with the address and creditworthiness data stored in its database on your person, including data determined on the basis of mathematical and statistical procedures, for the purpose of credit checking.
Lottohelden shares your email address, IP address, browser type and device fingerprint IDs with SEON Technologies Lt (www.seon.io) when you register a player account with us. This is to detect fraud and other illegal activities that we want to prevent. This will protect you, other users and us from financial loss and identity theft. SEON stores this data on servers in Ireland and processes the data by checking e-mail addresses and domains and comparing social media registers and IP addresses with public IP address registers. To delete your data from SEON, you can contact our support or contact SEON directly via support@seon.io.
In addition, Lottohelden reserves the right to forward your data to third parties within the European Union or the European Economic Area who will process it on behalf and in the interest of Lottohelden exclusively for the purposes stated in this Privacy Policy. In particular, personal data including copies of official photo IDs (identity card or passport) may be transmitted in certain winning cases to companies that certify the correspondence of customer data from the ID document to the customer account with Lottohelden or to companies that are commissioned to ensure your winnings.
In order to check and enforce any player blocks, Lottohelden may process your data received by Lottohelden from third parties and pass it on to the relevant authorities.

7. Deletion and blocking

We process the data of the person concerned only as long as it is necessary for the stated purpose or if this is provided for by law.
If the purpose of the data collection no longer applies or the legally prescribed storage period expires, the data will be blocked or deleted.

8. Rights of data subjects

In order to exercise the rights listed below, our data protection officer is available at all times as the first point of contact. He will initiate all further steps without delay.
a) Right to confirmation
In order to exercise their right to confirmation of a processing operation concerning them, the data subject may at any time contact our data protection officer or another member of staff of the data controller.
b) Right of access
We provide free information about the data stored by us about a person at any time. In addition, we provide information on the following facts:
  • The processing purposes
  • The categories of personal data
  • The recipients or categories of recipients to whom the personal data have been disclosed, in particular recipients in third countries or international organisations
  • Where possible, the planned duration for which the data will be stored or the criteria for determining that duration
  • Concerning the right to rectify or cancel data concerning him or her or to limit the processing or to oppose such processing
  • Regarding the right of appeal to the competent supervisory authority
  • All available information on the origin of the data
  • The existence of automated decision-making including profiling (Article 22(1) and (4) GDPR) including the logic involved and the scope and consequences for the data subject
c) Right to rectification
You have the right to have incorrect personal data concerning you corrected. Furthermore, you may request the completion of incomplete data.
d) Right to cancellation (right to be forgotten)
It is their right to have their data stored with us deleted if one of the following reasons applies and the processing is not necessary:
  • The purpose of the data collection has ceased to apply.
  • They revoke their consent in accordance with Art. 6 para. 1 letter a GDPR or Art. 9 para. 2 letter a GDPR and there is no other legal basis for the processing.
  • You file an objection pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate reasons for the processing, or the data subject files an objection to the processing pursuant to Art. 21 para. 2 GDPR.
  • The data were processed without a legal basis.
  • The deletion of the data is necessary to fulfil a legal obligation.
  • The personal data were collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.
If the data have been published by Lottohelden, we are obliged to delete the personal data in accordance with Art. 17 para. 1 GDPR, Lottohelden takes appropriate measures to inform other responsible parties if necessary.
e) Right to limitation of processing
You have the right to limit the processing of your data under the following conditions:
  • You dispute the accuracy of the data and allow us sufficient time to verify this.
  • The processing is unlawful, but you refuse to delete the personal data and instead demand that the use of the data be restricted.
  • We no longer need the data for the original purposes, but you need the data to assert, exercise or defend legal claims.
  • You have lodged an objection against the processing pursuant to Art. 21 (1) GDPR and it is still unclear whether our legitimate reasons outweigh yours.
f) Right to data transferability
You have the right to receive all data stored by us in a common format. You also have the right to transfer this data to another data controller without any hindrance on our part, provided that the legal basis for the processing is correct (Art. 6 para. 1 or Art. 9 para. 2 GDPR) and the processing is carried out using automated procedures and is not necessary for the performance of a task in the public interest or in the exercise of official authority.
In addition, you can arrange for the personal data to be transferred directly by us to another person responsible, insofar as this is feasible and insofar as this does not affect the rights and freedoms of others.
g) Right of appeal
They have the right at any time, on the basis of their personal situation, to object to the processing of their data carried out on the basis of Art. 6 para. 1 letters e or f GDPR.
In this case, we will no longer process your personal data unless we have legitimate reasons for the processing, which outweigh your interests, or the processing serves to enforce legal claims.
You have the right at any time to object to the processing of your personal data for the purpose of advertising and profiling in connection with such advertising.
Depending on your personal situation, you may object to the use of data that Lottohelden may have for scientific research purposes or for other purposes in accordance with Art. 89 (1) GDPR, provided that such fulfilment is in the public interest.
h) Automated decisions in individual cases including profiling
You may object to the use of your data to make automated case-by-case decisions (including profiling) if that decision would have legal effect or otherwise affect you. If this is necessary for the fulfilment of a contract between you and us or if a legal provision requires this or you expressly consent to this, this right does not apply.
If the decision to perform is made or with their consent, Lottohelden will take reasonable steps to protect their rights and freedoms. This includes, as a minimum, the right for a person to intervene by Lottohelden and to present their point of view and challenge the decision.
i) Right to revoke consent under the data protection law
You may revoke your consent to the processing of your personal data at any time.

9. Applications

We collect the personal data of applicants for the purpose of carrying out the application process. If we conclude an employment contract with the applicant, we store the data for the purpose of carrying out the employment relationship. If no employment contract is concluded, the application documents are automatically deleted two months after the cancellation if no legitimate interests of Lottohelden stand in the way of deletion. A legitimate interest would be, for example, a burden of proof in proceedings under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz - AGG).

10. Use of Google Analytics (with anonymization function)

On this page, we have integrated the component Google Analytics (with anonymization function). Google Analytics is a web analytics service. Web analysis includes the collection, collection and evaluation of data about the behaviour of visitors to Internet sites. Among other things, the web analysis service collects data on which website you came to our site from (referrer), which subpages of the website you access or how often and for how long you view a subpage. We use this to optimize the site and for cost-benefit analysis of Internet advertising.
The operating company of the Google Analytics component is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland.
We use the addition "_gat._anonymizeIp" for the web analysis via Google Analytics. This shortens the IP address of Google's Internet connection and thus makes it anonymous if our site is accessed from the EU or from another country that is a party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyze the flow of visitors to our site. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us showing the activities on our website and to provide other services in connection with the use of our website.
Google Analytics places a cookie on your computer. When the cookie is set, Google is able to analyse the use of our website. Each time you access one of the individual pages on this site, your Internet browser is prompted by the respective Google Analytics component to transmit data to Google. As part of this process, Google obtains knowledge of personal data, such as your IP address, which Google uses, among other things, to track the origin of visitors and clicks and subsequently to enable commission statements.
Your personal information, for example, the access time, the place from which the access originated and the frequency of visits to our website by you, is stored by means of the cookie. Each time you visit our website, this personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected through the technical process with third parties.
As already described above, you can prevent a cookie and thus the setting of cookies from permanently contradicting at any time by means of a corresponding setting of the Internet browser used. This browser setting would also prevent Google from setting a cookie on your computer. In addition, a cookie already set by Google Analytics can be deleted at any time via the browser.
Furthermore, you have the possibility to object to the collection of the data generated by Google Analytics and related to the use of this site and the processing of this data by Google and to prevent you. To do this, you must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information on visits to Internet pages may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as a contradiction.
For more information and to review Google's privacy policies, please visit https://www.google.de/intl/de/policies/privacy/ and https://marketingplatform.google.com/about/analytics/terms/de/. Google Analytics is explained in more detail under this link https://marketingplatform.google.com/intl/de/about/analytics/.

11. Use of Google Tag Manager

Lottohelden uses the Google Tag Manager. The Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal information. The tool triggers other tags that may themselves collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will persist for all tracking tags implemented with Google Tag Manager.

12. Use of Trusted Shop Trustbadge

To display our ratings collected by Trusted Shops, the Trusted Shops Trustbadge is integrated on some of our websites.
This serves according to art. 6 para. 1 lit. f GDPR the protection of our in the context of a balancing of interests predominant legitimate interests in an optimal marketing of our offer. The trust badge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.
When you call up the Trustbadge, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your visit to the site.
Consent
Art. 6 para. 1 letter a GDPR serves Lottohelden as a legal basis for processing in which we obtain their consent for the respective processing purpose.
Example: the use of marketing cookies
Contracts
If the processing of personal data is necessary to fulfil a contract to which you are a party, as is the case, for example, with processing operations that are necessary for the provision of a service or consideration, the processing is based on Art. 6 para. 1 letter b of the GDPR. This also applies to pre-contractual measures, e.g. for inquiries regarding our services.
Example: your customer details for creating and managing your account
Legal obligations
The processing is based on Art. 6 para. 1 letter c of the GDPR in order to fulfil tax obligations.
Vital interests
If a visitor were injured on our premises, his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. In this case, the processing would be based on Art. 6 para. 1 letter d of the GDPR.
Legitimate interests
Finally, processing operations could be based on Article 6 para. 1 letter f of the GDPR. This applies in cases where the legitimate interest of Lottohelden or a third party is involved, provided that their interests, fundamental rights and fundamental freedoms do not prevail.
See also recital 47 sentence 2 GDPR.
Example: intra group data transfer

14. Legitimate interests

If, as mentioned above, the processing of the data is based on Art. 6 para. 1 letter f of the GDPR, our legitimate interest lies in the performance of our business activities for the benefit of our employees and shareholders.

15. Duration of storage

Our criteria for the storage duration of data are the respective legal retention periods. After this period has expired, your data will be routinely deleted or blocked, unless it is necessary for the fulfilment of the contract or the initiation of the contract.

176 Provision of personal data

We would like to inform you that the provision of personal data is partly required by law or may result from contractual regulations. Sometimes it may be necessary for a contract to be concluded that you provide us with personal data, which will then be processed by us. Failure to do so would mean that the contract could not be concluded with you. Before any personal data is provided by you, you must contact our data protection officer. Our data protection officer will then inform you whether the provision of the data is required by law or contract, whether there is an obligation to provide the data and what the consequences would be if the data were not provided.

17. Lead Supervisory Authority

Gibraltar Regulatory Authority,
2nd floor, Eurotowers 4,
1 Europort Road, Gibraltar.
(+350) 20074636
info@gra.gi
February 2022

Your browser is not supported
You are seeing this notice, because you are visiting Lottohelden with an outdated browser. We recommend that you install a newer version or an alternative browser to get the full functionality of our site.