Privacidad y política de protección de datos

Privacy Notice dated 28.03.2018

Introduction
This Privacy Notice (the “Policy”) sets out how Funstage Spielewebseiten Betriebsges.m.b.H registered in Austria with number 258215d and address at Wiedner Hauptstraße 94, 1050 Vienna, Austria, (the «Company, “we” “us” or “our») collects and processes through the websites https://www.slotpark.com, play.slotpark.com and mobile application Slotpark (“Website/Apps”) the Player’s personal data. Personal data means any information from which the user (“you”, “your”) can be directly or indirectly identified such as a name, location, online identifier, gender, financial data, etc., (“Personal Data”). This Notice provides also the users’ rights related to their Personal Data.

You should read this Notice before using the Website/Apps. If you use or register via the Website/Apps, or submit a query to us via the Website/Apps or other means, including telephone or mail, you accept this Notice. If you do not accept this Notice, please do not use the Website/Apps.

This Notice is integral part and applies together with the Website’s/Apps’ General Terms and Conditions (the “GT&C”), available here https://www.slotpark.com/es/terminos-y-condiciones/ The terms not defined in this Notice shall have the same meanings as defined in the GT&C. Therefore you will need to read and understand the GT&C in addition to this Notice.

We are highly committed to preserving your privacy and delivering secure and legally compliant services. This Notice has the following sections:

Who controls the data?
How can I send queries on personal data protection?
What kind of Personal Data does the Company process?
For what purposes is the Personal Data processed?
On what legal basis is the Personal Data processed?
What is the data retention period?
Security and privacy measures
Who can have access to the Personal Data?
Is Personal Data transferred abroad?
What are the Users’ rights on Personal Data?
Notice modifications

Who controls the data?
The Company controls the processing of your Personal Data. This activity is supervised by the Austrian Data Protection Authority.

How can I send queries on personal data protection?
Please read first our FAQ Section and this Notice. In all cases, you can send the queries related to this Notice to the following email address dataprotection@slotpark.com. Our support teams and Data Protection Officer (DPO) shall address them with the due attention.

What kind of Personal Data does the Company process?
Depending on your activities and services chosen on the Website/Apps, we shall process all or part of the following data:

Data provided by you during the creation of the account. They may include, but are not limited to: nickname, first name, surname, email address, address, telephone number, date of birth, gender and ID number;
Website/Apps activity data, that may include but are not limited to: device information, source and destination data, nickname, user ID, account nickname and password, gaming transactions, online payments data, data provided to customer services (including emails and phone calls);
Data that may be provided by government authorities or authorized third party companies in order for us to deliver the GT&C, fulfill regulatory obligations and exercise our legal rights; and
Data collected via cookies when using the Website/ Apps, including in log-out mode. For more information about cookies and how to manage them please see our Cookie Policy ;
Data provided by third parties who’ve obtained in advance your permission to share the data with us for certain services e.g. social media or various mobile applications (where applicable);

We may allow the Website/Apps users to play as guests, also known as “try-mode”. These accounts involve a very limited amount of data such as device information and tokens. The users may decide to convert the try-mode into a user account by completing the registration process.

For what purposes is the Personal Data processed?
We process your data for the following purposes:

administer the Website/Apps, including setting up and operating your account;
ensure the accuracy of your data for the purposes of age verification, preventing fraud, cheating, reducing business risks and protecting the integrity of our games. These activities will include a degree of semi-automatic profiling, based on your registration and gaming activity data;
fulfil the provisions contained in the Website/Apps GT&C;
process online payments with third party payment providers and/or financial institutions;
provide you with customer support, including (where applicable) telephone;
comply with applicable laws, regulatory obligations or respond to requests from government authorities. These obligations are mainly set in financial laws, anti-fraud and responsible gaming. These activities may include a degree of semi-automatic profiling, based on your registration and gaming activity data;
protect our rights, including our related parties. In some cases we may believe that it is necessary, including in good faith, to record and disclose data to: (i) protect, enforce, or defend our legal rights, privacy, safety or property, (ii) protect your and public safety, privacy and security, or (iii) for business risk management;
improve the security, services and features provided by the Website/Apps. This may include research, surveys, ask for your optional feedback, internal training and Affiliates services;
complete potential merger or sale of assets. If we sell all or part of the business or assets, or are involved in a merger or transfer, we may disclose and transfer your data to the other party(s);
further to your specific consent, provide customized marketing communications fitting your interests and expectations. These are based on registration and gaming activity data; and
further to your specific consent provide direct marketing communications that are of (i) generic nature or partially based on your gambling journey and/or (ii) customized via: email, instant messages, and (where applicable) chats, SMS and telephone.

We shall inform you in case the data may be processed for other purposes and parties.

On what legal basis is the Personal Data processed?
The processing of Personal Data for the purposes of:

The above sections from (1) to (5) are necessary for the execution of the Website/Apps GT&C. Therefore are mandatory as otherwise the services could not be provided;
The above section (6) is requested by law and therefore it is also mandatory;
The above section (7) to (9) are based on our legitimate interest, and include business risk management and protection of our products integrity. They are adequately balanced with your interest since the data processing is performed within the limits strictly necessary for these activities. You can object to this processing at any time as provided in this Notice;
The above sections (10) and (11) are optional. Without your consent we shall not provide generic and/or customized marketing communications.

What is the data retention period?
These periods and criteria will apply, unless a different period is required or permitted by law, or we have reasonable belief that it is necessary:

data collected for the purposes of the above sections from (1) to (9) are retained during the execution of the Website/Apps GT&C. Plus the retention periods set or allowed by specific laws, after the termination of the services;
data collected for the purpose of the above sections (10) and (11) are retained during the execution of the Website/Apps GT&C and/or until you have required their deletion.

Security and privacy measures
We process the data with partially or fully automated electronic means and protect them with adequate security measures. The activities that may produce significant legal effects, such as decisions based on profiling, always involve a human intervention and/or final decision. We use appropriate legal, administrative, technical, personnel and physical measures to safeguard the data against loss, theft and unauthorized use, disclosure or modification.

The Website/Apps may contain links to and from partner networks or third party websites/apps. If you follow a link to any of these websites/apps, note that they have their own privacy policies and terms. We do not accept any responsibility for their content. Please check such policies and terms before accepting and submitting any information to them.

Who can access to the Personal Data?
The data can be processed by recipients located within or outside of the European Economic Area (EEA) in compliance with these limits:

our employees who are responsible for processing and safekeeping the data;
our parent company, some sister companies and third party providers to offer the GT&C services, e.g. for payments and marketing services or our legitimate interest. This may include employees, associates, agents, subcontractors and product providers;
government authorities to comply with legal obligations. This may involve the reporting of fraudulent or criminal suspicion and responsible gambling cases to relevant authorities or other authorized third parties.

Third parties access to your data is limited only to the information necessary to perform their function on our behalf or as required by law. They shall be made subject to confidentiality and data protection obligations provided by law and as considered necessary by us.

You can contact us in case you need further information on the data processors.

Is Personal Data transferred abroad?
We shall not transfer your data outside the EEA unless the due safeguards are in place.

Some non-EEA countries are recognized by the European Commission (EC) as providing an adequate level of data protection. The list of these countries is available at: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm

For transfers from the EEA to countries not considered adequate by the EC, the Company will put in place appropriate and suitable safeguards to protect the Personal Data and in compliance with the applicable data protection laws, such as standard contractual clauses adopted by the EC as per the EU General Data Protection Regulation 2016/679 (the “Privacy Regulation”).

Your data may be processed outside of the EEA to deliver some of the Website/Apps services:

some data may be processed in the USA, depending on the payment provider chosen by you and activities undertaken by the payment provider.

You can contact us in case you need further information.

What are the Users’ rights on Personal Data?
You can at any time:

obtain confirmation of the existence of personal data. This information is primarily provided in your account;
know the origin, purposes and method of data processing and the logic applied to electronic processing. This information is provided in this Notice and when you use the Website/Apps features.
request to update, correct or integrate further relevant data. This is provided via the customer service;
revoke at any time the data processing consent. It does not affect the lawfulness of the data processing based on the previously given consents. This is offered via specific tools e.g. opt-out or un-subscriptions;
request to restrict the data processing where:

– You contest the accuracy of the data until we have taken sufficient steps to correct or verify the accuracy;
– the processing is unlawful but you do not want that we erase the data;
– We no longer need the data for the provided purposes, but you require them to establish, exercise or defend a legal claim; or
– You have objected the data processing justified by legitimate interests, pending verification if we have legitimate grounds to continue processing;

object the data processing, including those based on our legitimate interest, and (where applicable) the decisions being taken by fully automated means. This request may result in the termination of the services provided to you;
request the erasure of data without undue delay. This request may result in the termination of the services provided to you;
receive an electronic copy of the provided data, if you like to port them to a different service provider. This is offered by the customer service; and
lodge a complaint with the data protection authority.

Unless otherwise provided, these services are offered by sending a written request. They are free of charge however in certain circumstances, we may apply a reasonable fee and fully or partially refuse the request. We will do our best to accommodate your requests but sometimes other legal obligations or third party rights may take precedence.

Your requests shall be handled within one month of receipt. This may be extended by two further months based on the complexity and number of the requests.

Notice modifications

This Notice is valid from the date indicated in its header. We could make further modifications due to business developments or legal and regulatory changes. You shall be notified in advance in case of significant changes.