1. Who is responsible for data processing?
The person responsible for the purpose of Article 4 No. 7 of EU Regulation 2016/679 („GDPR“) and other national data protection laws of member states as well as other provisions of data protection law is the person listed in the imprint:
Our data protection officer can be reached at:
datenschutz nord GmbH
E-Mail an email@example.com
2. Which data do we process?
When you visit our Website via your browser, we only collect the personal data that your browser transmits to us to enable you to visit our Website, and to ensure stability and safety:
– IP address,
– the requested page and
– Information about the end device, operating system, and browser version you are using.
We process the transmitted IP address strictly earmarked, for a period of 90 days, in the interest of being able to detect, limit and eliminate attacks on our websites and in order to fulfil the conditions and provisions contained in our gaming permission. After this period, we will delete or anonymize the IP address. The legal basis for the processing of the above data is Art. 6 Para. 1 lit. c and Art. 6 Para. 1 lit. f GDPR.
We use session cookies and permanent cookies on our websites. The processing is based on Art. 6 Para. 1 S. 1 lit. f GDPR and in the interests of optimising or enabling user guidance and adapt-ing the presentation of our website.
Your browser settings can be changed to inform you of cookie usage and make this transparent for you. You can also delete cookies at any time via the corresponding browser setting and pre-vent the setting of new cookies. Please be aware that our web pages will not be optimally displayed and that some functions will no longer be available.
4. Online applications
You have the possibility to apply via our website for the vacancies we advertise. We process your personal data based on § 26 BDSG-neu. We process the data that you disclose to us within the scope of your online application exclusively for the purpose of selecting applicants. Data will not be processed for any other purpose.
You yourself determine the scope of the data that you wish to transmit to us within the frame-work of your online application. Online applications are encrypted and transmitted electronically to a server of our service provider Greenhouse Software Inc. The applicant data will only be forwarded to the people in our company involved in the recruitment process of the respective position(s) you applied for. In addition, your data will not be passed on. Your data will be treat-ed confidentially in our company. If your application is unsuccessful, your data will be deleted 6 months after you have been rejected from all your applications at LOTTO24 AG.
If we are also allowed to consider your application for other or future job advertisements, please include a note to this effect on your application. We will then process your data based on Art. 6 Para. 1 S. 1 lit. a GDPR.
5. Data processors
We transmit your data within the scope of data processing in accordance with Art. 28 GDPR to service providers who support us in the operation of our websites and the associated processes (here analytical tracking as well as online application). We select, engage and regularly monitor the service providers carefully and they are bound to our instructions. We use the following service providers in particular:
Greenhouse Software Inc.
The job offer page and the online application form are operated by Greenhouse Software Inc., the service provider commissioned by us. Greenhouse is a cloud service provider based in the USA and provides the technical solution for our application and recruiting management. When you visit the job offer page, log files/data will also be saved. The data will be processed for us by the service provider strictly in accordance with instructions within the framework of a data processing relationship. This data ensures the proper functioning of the subpage and also serves to improve and secure the systems. This data record consists of:
– Browser type/version,
– Operating system used,
– IP address,
– Date and time of the server request
The mentioned data will be completely deleted after six weeks. The legal basis for the processing of the above data is Art. 6 Para. 1 Letter f GDPR.
When you submit the job offer form, your personal data entered there will be transferred to a server of our service provider in the USA and stored there. The personal data transmitted in this way will be processed for us by the service provider strictly in accordance with instructions within the framework of our data processing relationship. A reasonable level of data protection is provided by Greenhouse Software Inc. participation in the Privacy Shield in accordance with Art. 45 Para. 1 GDPR. You can view the certificate here: https://www.privacyshield.gov/participant?id=a2zt00000004U1KAAU
6. Vimeo Videos
On some subpages of our website we embed Vimeo videos. A visit of these sub-pages leads to Vimeo content being downloaded. In this context, Vimeo also receives your IP address, which is technically required to retrieve the content. We have no influence on further data processing by Vimeo, which is operated by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. However, when embedding the videos, we take care to activate the extended data protection mode offered by Vimeo.
7. Google Maps
We use Google Maps to display maps and to create directions. This is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter: Google).
Through certification according to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Google guarantees that it will follow the EU’s data protection regulations when processing data in the Unit-ed States. To enable the display of certain fonts on our website, a connection to the Google server in the USA is established whenever our website is accessed. If you access the Google Maps components integrated into our website, Google will store a cookie on your device via your browser.
Your user settings and data are processed to display our location and create a route description. We cannot prevent Google from using servers in the USA. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in optimizing the functionality of our website. By connecting to Google in this way, Google can determine from which website your request has been sent and to which IP address the directions are transmitted. If you do not agree to this processing, you can prevent the installation of cookies by changing the appropriate settings in your browser.
8. Your rights
When processing your personal data, GDPR grants you as a website user certain rights:
Right to information (Art. 15 GDPR):
You have the right to request confirmation as to whether personal data concerning you are be-ing processed; if this is the case, you have the right to access this personal data and the information specified in Art. 15 GDPR.
Right to rectification and cancellation (Art. 16 and 17 GDPR):
You have the right to demand immediately the correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data. You also have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued.
Right to limitation of processing (Art. 18 GDPR):
You have the right to demand the restriction of the processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have lodged an objection against the processing in accordance with Art. 21 GDPR or for the duration of any examination as to whether our legitimate interests outweigh your interests as a data subject.
Right to data transferability (Art. 20 GDPR):
In certain cases, which are listed in Art. 20 GDPR in detail, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to demand the transfer of this data to a third party.
Right of objection (Art. 21 GDPR):
If data is collected on the basis of Art. 6 Para. 1 S. 1 lit. f GDPR (data processing to safeguard legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are verifiable compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
Right of appeal to a supervisory authority
You have according to Art. 77 GDPR the right on complaint with a supervisory authority if you are of the opinion that the processing of the data concerning you offends your rights. In particular, the right of appeal may be exercised before a supervisory authority in the Member State in which you are staying, at your place of work or at the place where the alleged infringement is suspected.
If you have any questions about the collection, processing or use of your personal data, or if you need information, correction, blocking or deletion of data, please contact our data protection officer:
datenschutz nord GmbH
E-Mail an firstname.lastname@example.org
or via mail to