Shopping cart 0
Casino-Poker-Jetons Sektglas Casino-Poker-Croupier

Companyby Casinos Austria

Privacy Statement

Privacy Statement of the Casinos Austria and Austrian Lotteries Group

Valid from May 2018

Previous versions of our Privacy Statement can be found at the following link:

Privacy Statement archive

Introduction

Casinos Austria Aktiengesellschaft (hereinafter “Casinos Austria”), Österreichische Lotterien Gesellschaft m.b.H. (hereinafter “Austrian Lotteries”), win2day Entwicklungs- und Betriebsgesellschaft m.b.H (hereinafter “win2day”), Glücks- und Unterhaltungsspiel Betriebsges.m.b.H. (hereinafter “WINWIN”), and Österreichische Sportwetten Gesellschaft m.b.H.(hereinafter “Austrian Sports Betting Company”) - these companies hereinafter collectively referred to as “we” or “us” - thank you for visiting this website.

The Federal Minister of Finance may transfer by means of a licence the right to operate lotteries pursuant to Sec. 14 of the Austrian Gaming Act [German acronym: GSpG], and the right to operate a casino pursuant to Sec. 21 GSpG.

Casinos Austria holds twelve casino licences in Austria, and operates casinos at locations in Baden, Bregenz, Graz, Innsbruck, Kitzbühel, Kleinwalsertal, Linz, Salzburg, Seefeld, Velden, Vienna, and Zell am See. Austrian Lotteries hold the licences to operate specific lotteries such as Lotto, Toto, Sofortlotterien, Klassenlotterie (Class Lottery), Zahlenlotto, electronic lotteries (the “win2day” online sweepstake and games via Video Lottery Terminals (“WINWIN” VLT outlets)), Bingo, Keno, as well as add-on games with multiple draws.

The Austrian Sports Betting Company offers betting, sports betting in particular, pursuant to notices based on the respective Federal State regulations governing bookmakers and totalisators.

You can access and view the current version of the Austrian Gaming Act and the Federal State regulations governing bookmakers and totalisators via the Federal Legal Information System at www.ris.bka.gv.at.

General Information

In this Privacy Statement you will learn which personal data we process by automated means, in what way and for what purpose, on our websites and apps, and in the context of the provision of our services, which we provide on the basis of the licences and authorisations granted to us. In addition, we hereby inform you of your rights as a data subject of the data processing.

We request that you read this Privacy Statement carefully. By using our products and services which result in transfer of your personal data to us, you declare that you have been informed of the use of your personal data pursuant to this Privacy Statement.

The protection of your personal data is of particular concern to us. If you do not agree to the use of your personal data within the scope of this Privacy Statement as it applies to you, please do not make your personal data available to us. In this case, you will not have access to those products and services the use of which requires processing of your personal data (e.g. use of customer loyalty programmes, or use of discount campaigns or event offers tailored to you).

Controllers and Processors

Within the meaning of data protection regulations, the following companies (collectively referred to as the “Group”) act as data processing controllers or, where applicable, as processors, within the scope of our products and services:

Casinos Austria Aktiengesellschaft
FN 99639d

Österreichische Lotterien Gesellschaft m.b.H.
FN 54472g

win2day Entwicklungs- u. Betriebsgesellschaft m.b.H.
FN 249892p

Glücks- und Unterhaltungsspiel Betriebsges.m.b.H.
FN 241637z

Casinos Austria International Holding GmbH
FN 37681p

Österreichische Sportwetten Gesellschaft m.b.H.
FN 196645i

Cuisino Ges.m.b.H. (hereinafter “Cuisino”)
FN 54015i

CAST Casinos Austria Sicherheitstechnologie GmbH
FN 94404 f

Österreichische Klassenlotterie Vertriebsgesellschaft m.b.H.
FN 468412 t

All these companies have their registered office at:
Rennweg 44
A-1038 Vienna

Congress Casino Baden Betriebsges.m.b.H. (hereinafter “CCB GmbH”)
FN 67046y

Kaiser Franz Ring 1
A-2500 Baden

Contact

Your point of contact for data processing is our Data Protection Officer:

Michael Mrak

Address 1038 Wien,
Rennweg 44

Use of our Website and Apps

In principle, it is possible to use our websites (casinos.at, shop.casinos.at, casinosaustriainternational.com, lotterien.at, win2day.at, tipp3.at, oeswe.at, bgs.at, winwin.at) and our apps (win2day: Casino, Lotto, Wetten, Lotteries Shaker, win2day Poker - Texas Holdem, Lotterien App, My Casinos Austria App, tipp3 App) without providing your personal data. However, different regulations may apply to the use of individual services, to which we shall refer separately.

When you visit our websites, information such as your IP address is sent to us. This information includes, for example, details of the end-user device being used (computer, smartphone, tablet, etc.), the browser being used (Internet Explorer, Safari, Firefox, etc.), the time of access to our websites and the amount of data transferred. These data are not used by us to identify the individual user. The information is processed for system security reasons (to protect against misuse). The information is also used to ascertain the attractiveness of our websites and to continuously improve their content and make them even more interesting for you.

When downloading apps, you need to enter the necessary personal authentication details in the app store (e.g. Apple App Store, Google Play Store). We have no influence over, or responsibility for, the data collected in the course of the download, in particular the e-mail address and customer number of your store account or the identification number of your end-user device. We process the device information in the data provided only to the extent that this is necessary for downloading our apps to your device. It will not be processed further by us.

Personal Data

Personal data means any information relating to an identified or identifiable natural person. Below you will find examples of personal data that we collect and process within the scope of your use of our products and services, provided there is a legal basis for doing so:

  • Name,

  • Title,

  • Date of birth,

  • Nationality,

  • Contact address(es)

  • Telephone number, fax number

  • Company information,

  • User administration data (account data, user name, login ID, password)

  • Employer,

  • Official photo ID data (e.g. personal ID card number, passport number, driving licence number, personal master data, ID card scan)

  • Credit card number and data, bank details

  • E-mail addresses,

  • Cookies, IP addresses,

  • Location data,

  • Biometric data (photo),

  • Visit and gaming data

  • Interests (e.g. range of games, events, hobbies, leisure time, sport, cultural and culinary preferences)

  • Income and/or financial circumstances, credit checks, insolvency data.

Note: Not all of the examples shown here are processed by all companies of the Group.

Collection and Processing of Personal Data

We collect and process personal data only to the extent permitted by law. This is the case, for example, if you have given your consent to the processing of personal data concerning you for one or more specific purposes. The processing of your personal data may also be necessary for the performance of a contract or for the fulfilment of a legal obligation imposed on us.

We process your data if you have provided it voluntarily; for example, if you register for one of our online products or in a casino or VLT outlet, order something in the online shop or through our customer service centre, participate in a sweepstake or contact us by other means.

We use the personal data provided by you only to the extent that your data is necessary for the fulfilment of the specific purpose (e.g. for performance of a contract, fulfilment of a legal obligation, registration for one of our online products, sending out newsletters, processing an order in the online shop, sending out information and advertising material, running a game, conducting customer analyses, market research and opinion polls, to answer a question you ask us, or to enable access to certain other information).

We collect and process your personal data for products and services of the Group, which they can use independently of one another.

Casinos Austria

Visiting a casino

If you visit a Casinos Austria casino, you are legally obliged to present an official photo ID for the purpose of establishing and verifying your identity and your age. For this purpose, the data from your official photo ID will be stored in Casino Austria’s customer database on the occasion of your first visit. On each subsequent visit, the data will be recorded, compared and checked, or if you visit our casinos with different official photo IDs, data from those IDs will be stored also. In the course of this procedure, Casinos Austria will process your name, title, date of birth, nationality, and ID data (ID type, ID number, master data, scan). In addition, every time you visit a casino, an up-to-date photo will be taken of you for the purpose of verifying your identity and will be stored in the customer database. Within the scope of legal requirements, your visit and gaming data will also be recorded and processed.

„Glücks Card“ Programme

By participating in Casino Austria’s „Glücks Card“ programme, you have the opportunity to participate in the „Glücks Card“ bonus programme. For the purpose of implementing the „Glücks Card“ programme, and for customer support purposes, Casinos Austria will process your personal data, if available and/or provided: e-mail address(es), name, date of birth, nationality, address(es), telephone numbers(s), interests (cuisine, events, range of games), company, purchasing behaviour in the online shop, use of promotions/items consumed, participation in draws and sweepstakes, as well as your visit and gaming data at the casinos.

On the basis of Art. 107 of the Austrian Telecommunications Act [German acronym: TKG] in conjunction with Art. 6 (1), (b) in conjunction with (a) or (f) of the General Data Protection Regulation (GDPR), you will receive information and mailings from Casinos Austria. The basis for the information and mailings is therefore either your consent or Casino Austria’s legitimate interest in sending direct advertising in the form of information and mailings to customers by means of e-mail, SMS and post.

You may withdraw your consent at any time by post or e-mail. You may object to the data processing on the basis of legitimate interest at any time. You may deregister/unsubscribe from electronic mailings in each mailing.

Within the framework of the „Glücks Card“ programme and the casino information and mailings, Casino Austria uses analysis software to calculate your bonuses and prepare and send you personalised direct advertising which is individually tailored to you.

You can find more information at Information and mailings and at Analysis software. The various advantages and eligibility requirements can be found at www.glueckscard.at.

My Casinos Austria App

With the My Casinos Austria App from Casinos Austria, you may, as a non-registered user, access general information (e.g. opening times, casinos, events) and offers (e.g. information on sweepstakes and offers) from Casinos Austria. By registering with the App and giving your consent, you transfer your e-mail address and user administration data (password, user name - i.e. your e-mail address) to Casinos Austria for processing. IdentityID is used for processing, in order to protect the e-mail address. In addition, you may have your App account verified by Casinos Austria on your next visit to a casino by presenting your official photo ID. The App will then be linked to your personal data from the „Glücks Card“ programme, if available and/or disclosed: e-mail address(es), name, date of birth, nationality, address(es), telephone numbers(s), interests (cuisine, events, range of games), company, purchasing behaviour in the online shop, use of promotions/items consumed, participation in draws and sweepstakes, as well as your visit and gaming data at the casinos. By connecting your App account with the „Glücks Card“ programme, all personal data referenced above will be processed by Casinos Austria, if you have provided them and have not withdrawn your consent. Casinos Austria uses analysis software, in order to display personalised content tailored individually to you and to send you advertising information. By registering as a user of the App, you agree to the participation conditions of the „Glücks Card“ programme and to data processing in accordance with the present Privacy Statement and with that of the App.

If you have given your consent, you will also receive mailings and information about the „Glücks Card“ programme.

You can find more information about the Casinos Austria App and the „Glücks Card“ programme at „Glücks Card“ Programme, Information and mailings, Data processing when using our Apps and Analysis software.

Casino information and mailings

You will receive personalised mailings and information from Casinos Austria by e-mail, SMS, post and telephone, if and to the extent you have given your consent. The mailings and information contain general news and news which has been personalised according to your interests about promotions and offers (e.g. entry price reductions, vouchers, dining services, events, highlights from the lottery world), gaming and betting offers (e.g. poker tournaments, casino tournaments), about services (e.g. information about player protection, customer surveys and benefits of the „Glücks Card“ programme), promotions from the Casinos Austria online shop (e.g. for purchasing vouchers, special offers and discounts), draws and current sweepstakes of the Casinos Austria AG & Austrian Lotteries Group (Casinos Austria AG, Österreichische Lotterien Gesellschaft m.b.H., win2day Entwicklungs- und Betriebsgesellschaft m.b.H., Glücks- und Unterhaltungsspiel Betriebsges.m.b.H., Österreichische Sportwetten Gesellschaft m.b.H., Casinos Austria International Holding GmbH, Cuisino Ges.m.b.H. and Congress Casino Baden Betriebsgesellschaft m.b.H.).

As part of the „Glücks Card“ programme, you will receive these mailings and information as well as benefits from cooperation partners where they are offered under of the „Glücks Card“ programme, either on the basis of your consent or of the legitimate interest Casinos Austria has in sending direct advertising to guests.

You may also receive information and mailings via the My Casinos Austria App and at reception or other points of contact at Casinos Austria casinos.

The personal data which you provide to Casinos Austria in the course of events, tournaments and sweepstakes shall be used for personalised mailings, provided that you have given your consent.

Within the framework of the casino information and mailings, Casinos Austria uses analysis software to send you direct advertising personalised to you.

You can find more information at Information and mailings and at Analysis software.

Online shop

In the Casinos Austria online shop, you can buy the products offered at https://shop.casinos.at/. When processing your order, Casinos Austria processes the following personal data: name, title, date of birth, e-mail address, home address, as well as details of your purchasing behaviour and items purchased. Optionally, you may also provide to Casinos Austria your title, telephone number, company name and UID number.  As a shop customer, you will also receive information and mailings, if and to the extent you have given your consent. Software is used to analyse your orders, so that we can send you personalised information about offers in our online shop. More information is available at Analysis software and at Information and mailings.

Feedback service

You can use the Feedback button at www.casinos.at to give general or specific feedback on the website (or an element of the website), make a specific request or ask a question to Casinos Austria. The Casinos Austria Service Center is available to answer your questions by e-mail (service@casinos.at), telephone (+43 1 53440 50) and Fax (+43 1 53440 22222). You can also use the Feedback service on the website. The following personal data will be processed by Casinos Austria on the basis of your consent, if you provide them: Your title, name, e-mail address, home address and nationality.

Cuisino restaurant reservations

At many Cuisino restaurants, you can book a table via the Bookatable and Quandoo services, by entering your personal data, i.e. your name, address and telephone number. You may also make your reservation by telephone or e-mail. Cuisino processes the data you provide for the purpose of making your reservation.

Individual guest service

Provided you have given your consent, Casinos Austria records your date of birth, your interests and hobbies, and your dining preferences in the casinos (e.g. food and drinks) in order to be able to best meet individual guests’ wishes and expectations.

Event calendar

On the Casinos Austria website (www.casinos.at), you can make reservations for certain events in the event calendar. For the purpose of making your reservation, Casinos Austria will process your name, title, e-mail address, address, telephone number, date of birth and (optionally) your company name and telephone number.

Event management and marketing applications

Casinos Austria uses an event management and marketing application for the purpose of organising and managing events for companies and private individuals and to create accompanying work plans and reports. With the aid of this system and based on the event agreement made, Casinos Austria processes your personal data - i.e. your name, telephone number, optionally your e-mail address and physical address, and if available, data on your food and drinks orders - for the purpose of preparing quotations and invoices. In addition, Casinos Austria processes these data in order to ensure the proper handling of events (e.g. work orders to property management, technical services, reception and catering). This makes it possible to coordinate work tasks for the events, promotions and activities that take place every day at the casinos.

For purposes of acquisitions and sales activities regarding its offerings in the Business-to-Business (B2B) sector, Casinos Austria processes contact data of B2B customers (companies and associations). Provided consent has been given, B2B customers receive individual information and mailings from Casinos Austria. More information is available at Analysis software and at Information and mailings.

Austrian Lotteries

Lotteries information and mailings (Glückspost, Bingo News)

Provided you have declared your consent, you will receive mailings and information by e-mail from Austrian Lotteries. Austrian Lotteries uses analysis software, in order to send you personalised direct advertising which is individually tailored to you. More information is available at Information and mailings and at Analysis software.

Bingo Show, Brieflos Show and Money Maker Show

 

Bingo Show - Quiz contestant

You can apply to be a quiz contestant on the Bingo TV-Show at www.lotterien.at/BingoShow. On the basis of your consent, Austrian Lotteries will process the following personal data for the purposes of producing the Bingo Show: Your Bingo receipt number, your title, name, address, e-mail address, telephone number, date of birth, and whether you require a place for a wheelchair user. These data shall be used for one year for the Austrian Lotteries quiz contestants pool, from which four quiz candidates per programme are drawn and invited. If you take part in the Bingo TV-Show as a quiz contestant, the period of use shall be extended to one and a half years. After these data have been used for the quiz contestants pool, Austrian Lotteries stores them for eight years, in order to comply with legal data retention requirements. If you are drawn, you and your team (whose data do not yet need to be provided when you register) will be on the Bingo TV-Show, and Austrian Lotteries will contact you using the personal data you provided.

By taking part in the Bingo TV-Show, you consent to public disclosure of your personal data as determined with the presenters of the TV-Show, and of your prize, for the purposes of producing the Bingo TV-Show. The TV-Show is broadcast by Österreichische Rundfunk (ORF). Picture and sound recordings of you will also be broadcast by Österreichische Rundfunk for the Bingo TV-Show.

Bingo Show - Show guest

You can register as a Bingo TV-Show guest at www.lotterien.at/BingoShow, to be part of the Bingo TV-Show audience. On the basis of your consent, Austrian Lotteries will process the following personal data for the purposes of producing the Bingo TV-Show: Your title, name, address, e-mail address, telephone number and date of birth. In addition, please indicate your preferred date(s) for the show, whether anyone will be accompanying you, and whether you require a place for a wheelchair user. These data will be erased one year after the preferred show date provided. If you are selected as a guest, Austrian Lotteries will contact you using the personal data you provided.

If you are drawn as a quiz contestant, the rules applicable to the data retention period, public disclosure and broadcast of personal data, prizes and the purpose for which they are used shall be the same as those referenced under Bingo Show - Quiz contestant (above).

Brieflos Show – Wheel contestant 

You can apply to be a wheel contestant for the Brieflos TV-Show by submitting a Brieflos participation coupon at one of our sales or reception points. On the basis of your consent, Austrian Lotteries will process the following personal data for the purposes of producing the Brieflos TV-Show: Your name, address and telephone number. In addition, please indicate your preferred date(s) for the show, whether anyone will be accompanying you, and whether you require a place for a wheelchair user. Austrian Lotteries will store these data for eight years, in order to comply with legal data retention requirements. If you are drawn, you will be on the Brieflos TV-Show, and Austrian Lotteries will contact you using the personal data you provided.

By taking part in the Brieflos TV-Show, you consent to public disclosure of your personal data as determined with the presenters of the TV-Show, and of your prize, for the purposes of producing the Brieflos TV-Show. The TV-Show is broadcast by Österreichische Rundfunk (ORF). Picture and sound recordings of you will also be broadcast by Österreichische Rundfunk for the purposes of producing the Brieflos TV-Show.

Brieflos Show – Guest/Quiz contestant

You can register as a guest in the audience or as a quiz contestant on the Brieflos TV-Show at www.lotterien.at/Brieflosshow. On the basis of your consent, Austrian Lotteries will process the following personal data for the purposes of producing the Brieflos TV-Show: Your title, name, address, e-mail address, telephone number and date of birth. In addition, please indicate your preferred date(s) for the show, whether anyone will be accompanying you, and whether you require a place for a wheelchair user. Austrian Lotteries will store these data for eight years, in order to comply with legal data retention requirements. If you are selected as a quiz contestant, Austrian Lotteries will contact you using the personal data you provided.

By taking part in the Brieflos TV-Show, you consent to public disclosure of your personal data as determined with the presenters of the TV-Show, and of your prize, for the purposes of producing the Brieflos TV-Show. The TV-Show is broadcast by Österreichische Rundfunk. Picture and sound recordings of you will also be broadcast by Österreichische Rundfunk for the purposes of producing the Brieflos TV-Show.

Money Maker Show

If you take part in the Money Maker TV-Show, Austrian Lotteries will process the following personal data, on the basis of your consent, for the purposes of producing the TV-Show: Your name, address, where you are staying, telephone number, e-mail address, clothes size, date of birth, which languages you speak, and whether you require a place for a wheelchair. Austrian Lotteries will store these data for eight years, in order to comply with legal data retention requirements. If you are selected as a Money Maker contestant, Austrian Lotteries will contact you using the personal data you provided.

By taking part in the Money Maker TV-Show, you consent to public disclosure of the personal data as specified in the course of your registration and/or determined with the presenters of the Show prior to the broadcast (such as details of your job and hobbies), and of your prize, for the purposes of producing the Money Maker Show. The TV-Show is broadcast by Österreichische Rundfunk (ORF). Picture and sound recordings of you will also be broadcast by Österreichische Rundfunk for the purposes of producing the Money Maker TV-Show. In order to pay out the prize, a copy of your identity card will be made, in accordance with legal requirements. This will be stored together with your IBAN for a period of eight years, in order to fulfil legal data retention obligations.

Lotteries Shaker App

With the Lotteries Shaker App you can submit Lotto, LottoPlus, Joker and EuroMillions bets, and also play Rubbellos (scratch-off ticket game) and Brieflos. You require a win2day account to submit lottery bets and play Rubbellos or Brieflos. You can find out which data are processed for this purpose at win2day Account. More information about the App is available at Data processing when using our Apps.

Lotteries App

The Lotteries App is a service app based around the products played at the outlets. Bets for Lotto, LottoPlus and Joker can be submitted in the Lotteries App after making a pre-paid credit payment at Austrian Lotteries outlets. No registration is required to use this app. More information is available at Data processing when using our Apps.

Österreichische Klassenlotterie Vertriebsgesellschaft m.b.H.

On the basis of your declaration of consent, the Österreichische Klassenlotterie Vertriebsgesellschaft m.b.H. will process the following personal data: Your name, address, telephone number, fax and mobile phone numbers, e-mail address, date of birth and bank details.

As a customer, you will receive an information letter through the post before the start of the lottery, due to the legitimate interest that Österreichische Klassenlotterie has in sending out information to its customers. No additional advertising will be sent out. You may object at any time to the sending of the information letter, either by mail to office@klassenlotterie.at or by post to Österreichische Klassenlotterie Vertriebsgesellschaft m.b.H., Rennweg 44, 1038 Vienna.

Other partners in the Association of Class Lottery Agencies are:

GST 23  HOHE BRÜCKE GmbH, Wipplinger Strasse 21, 1013 Vienna

GST 28  J. Prokopp Ges.m.b.H., Mariahilfer Strasse 29, 1061 Vienna

GST 33  GKL HOHE BRÜCKE GmbH, Wipplinger Strasse 21, 1010 Vienna

GST 61  Andreas Hrubesch, Lerchenfelder Hauptplatz 7, 3502 Krems

GST 72  Oberbank AG, Untere Donaulände 28, 4020 Linz

GST 82  Paul Fochler Klassenlotterie GmbH, Tummelplatz 6, 8010 Graz

GST 88  Klassenlotterie Prokopp Int. GmbH, Mariahilfer Strasse 29, 1060 Vienna

As a matter of principle, no personal data are exchanged between Österreichische Klassenlotterie Vertriebsgesellschaft m.b.H and the partners of the Association of Class Lottery Agencies.

Win2day

win2day account

To use the win2day range of online games, you need to register at www.win2day.at. To do this, you provide your e-mail address, account details, title, name and date of birth. Optionally, you may also provide a title. In the course of the registration process, your name, date of birth and place of residence are checked against the CRIF GmbH database, in order to comply with the terms of the game and betting regulations. After you have registered, win2day will record and process your visit and gaming data. As soon as you wish to have your winnings paid out, your bank details will also be recorded and processed.

win2day information and mailings

As a win2day customer, due to win2day’s legitimate interest in sending customers direct advertising for win2day’s own and similar products and services, you will receive electronic mailings with personalised offers (e.g. free game credits, draws, sweepstakes) and information about win2day’s range of games and betting. You may object to this processing of your personal data at the time your contact data is collected (opt-out), or on receipt of any electronic mailing (unsubscribe/deregister). Within the framework of the mailings, win2day uses analysis software in order to send you personalised information and offers which are individually tailored to you. More information is available at Information and mailings and at Analysis software.

win2day: Casino, Lotto, Wetten App

With the win2day: Casino, Lotto, Wetten App, you can use all the casino and lottery games and the sports betting range in one app. To take part in the game, you need a win2day account. For this purpose, win2day will process the data that you provide when you register. More information is available at Data processing when using our Apps and at win2day Account.

win2day Poker – Texas Hold´em App

With the win2day Poker – Texas Hold´em App, you can play Online Poker as a cash game in an app. To take part in the game, you need a win2day account. For this purpose, win2day will process the data that you provide when you register. More information is available at Data processing when using our Apps and at win2day Account.

WINWIN

Visiting a VLT outlet with the WINWIN card

You can only visit VLT outlets once you have registered at a VLT outlet, and only with an active WINWIN card. Due to legal regulations, you are required to present an official photo ID when visiting a VLT outlet. Your identity will be established and verified by means of the official photo ID. For this purpose, the data from your official photo ID will also be stored on the occasion of your first visit, and then compared and checked on each subsequent visit. For the purpose of customer registration, WINWIN will process your name, address, ID number, type of ID, biometric data (photo), title (optional), mobile phone number and e-mail address. WINWIN will also process your visit and gaming data, frequency of visits, length of stay and net gaming time, which are collected at WINWIN outlets using the WINWIN card, in accordance with the player protection regulations of the Austrian Gaming Act. In addition, when you register on your first visit to a VLT outlet, an up-to-date photo is taken of you for the purpose of verifying your identity and is stored in the customer database. In some cases, e.g. if the photo is obviously not up to date, another one may have to be taken.

WINWIN information and mailings

Provided that you have given your consent, WINWIN will process the personal data that you provided during the registration process and which was subsequently collected, if available and/or disclosed - i.e. your title, name, address, mobile phone number, e-mail address, data on use of promotions, and your visit and gaming data. You will receive information and mailings about offers and promotions (e.g. free game credits, highlights from the lottery world), the range of games, services (e.g. player protection information, customer surveys, advantage clubs), advertising, draws and sweepstakes from WINWIN/Austrian Lotteries by post, telephone, e-mail and SMS.

The personal data which you provide to WINWIN in the course of events and sweepstakes shall be used for personalised mailings, provided that you have given your consent.

WINWIN uses analysis software, in order to send you personalised direct advertising which is individually tailored to you. More information is available at Information and mailings and at Analysis software.

Austrian sports betting company

Tipp3 user account

In order to use the Austrian Sports Betting Company’s online products (“tipp3”), you are required to register and create a user account at www.tipp3.at. When you register, the following personal data will be processed by the Austrian Sports Betting Company, on the basis of the agreement entered into with you: Your name, title, date of birth, e-mail address, user administration data (password and user name, i.e. your e-mail address). In the course of the registration process, your name and date of birth are checked against the CRIF GmbH database, in order to comply with the provisions of betting regulations. After you have registered, tipp3 will process your betting data. As soon as you wish to have your winnings paid out, your bank details will also be recorded and processed.

tipp3 Club

By participating in the tipp3 Club, you will have the opportunity to take part in the Austrian Sports Betting Company’s customer programme. For the purpose of running the tipp3 Club, and for customer support purposes, the Austrian Sports Betting Company processes personal data, i.e. your name, title, date of birth, e-mail address and gaming data. Due to the Austrian Sports Betting Company’s legitimate interest, and on the basis of Art. 107 TKG in conjunction with Art. 6 (1) (f) GDPR, you will receive by e-mail direct advertising in the form of information and mailings about the Company’s own or similar products and services. You may object to this processing at the time your contact data is collected (opt-out), or at any time on receipt of any electronic mailing (unsubscribe/deregister).

Within the framework of the tipp3 Club, Österreichische Sportwetten use analysis software to calculate your bonuses and to provide and send you personalised direct advertising which is individually tailored to you. By participating in the tipp3 Club, you agree to this data processing.

You can find more information at Information and mailings and at Analysis software. You can find the various advantages and participation conditions at www.tipp3.at/Club.

tipp3 App

The tipp3 App is a service app based around the products played at the outlets. No registration is required to use this app. More information is available at Data processing when using our Apps.

tipp3 information and mailings

Provided that you have given your consent, you will receive personalised electronic mailings (e.g. in the form of online newsletters, vendors’ newsletters, club newsletters) with information about special offers and promotions (e.g. vouchers, free game credits), the range of betting products, services (e.g. information about player protection, customer surveys and advantage clubs), advertising, draws and current sweepstakes from the Austrian Sports Betting Company. In the context of the mailings, the Austrian Sports Betting Company will process your personal data, if available and/or disclosed, such as your name, date of birth, and your betting data.

The Austrian Sports Betting Company uses analysis software for the mailings in order to send you personalised direct advertising which is individually tailored to you. More information is available at Information and mailings and at Analysis software.

Corporate Group

Communications of information from companies of our corporate group

Provided that you have given your consent, you will also receive mailings from one of the companies of our corporate group (by post and electronically by e-mail and text message) containing information from Casinos Austria AG and Österreichische Lotterien GmbH corporate group (Casinos Austria AG, Österreichischen Lotterien GmbH, win2day Entwicklungs- und Betriebsgesellschaft m.b.H., Glücks- und Unterhaltungsspiel Betriebsges.m.b.H., Österreichischen Sportwetten GmbH, Casinos Austria International Holding GmbH, Cuisino Ges.m.b.H. as well as Congress Casino Baden Betriebsges.m.b.H).

These mailings contain general and personalised information regarding campaigns and special offers (e.g. highlights from the world of lotteries, free games or betting account balances), our range of games and betting options (e.g. poker tournaments, casino tournaments), the services we provide (e.g. information on protection for gamblers, customer surveys and customer advantage clubs) as well as sweepstake offers.

For these mailings, the company in question will process only the following personal data, if you have disclosed them: Your name, title, date of birth, e-mail address, residential address and nationality. There is no further disclosure or exchange of such data between companies of our corporate group.

For more information on this, see Information and mailings and Betting confidentiality.

Information and mailings

Consent on the basis of sec. 107 (1) Austrian Telecommunications Act [German acronym: TKG] in conjunction with Art. 6 (1) (a) GDPR

You have the option of subscribing to various forms of newsletters and/or mailings from our corporate group.                                                         

Depending on the scope of your consent statement and the purpose of data processing envisaged, we may process various personal data (if you have provided them) for use in advertising, specifically including your name, title, date of birth, nationality, residential address, telephone number, fax number, user administration data, e-mail address, your casino visits and gambling data, as well as information regarding your interests (e.g.: gambling offers, events, hobbies, leisure time, sports, cultural and culinary preferences, campaigns of which you may have availed yourself).

At such time as you provide your consent statement, you will be informed as to what personal data will be processed for what purpose in connection with your initiation of contact with us. If you have consented to receive information and mailings, then, depending on the scope of your consent statement, you may, for example, receive information on current news items and information regarding campaigns and special offers as well as services and sweepstakes by the respective group company.

For mailings and information circulars, your e-mail address, your postal address and your telephone number will be used if you have indicated these options to us. In addition, you may receive information and mailings via our websites and apps in the form of push messages.                                       

You may revoke your consent to receive information and mailings at any time with future effect at datenschutz@cal.at or at the e-mail address set forth in the consent statement, or by post, indicating the company in question, to Rennweg 44, 1038 Vienna, or by using a de-registration link contained in each e-mail sent to you. The revocation of your consent does not affect the lawfulness of our processing of your data on the basis of your consent prior to revocation.  

Your data will only be shared with third parties to the extent this is necessary in order to complete mailings to you. 

Legitimate interest on the basis of sec. 107 (3) TKG in conjunction Art. 6 (1) (f) GDPR        

Where we receive your e-mail address in connection with a sale or service (e.g. when you register with us in connection with a casino visit or in connection with your participation in an advantage club, when setting up a user account on win2day), the company in question may, on the basis of the existing customer relationship and where there is a legitimate interest, forward direct advertising to you by e-mail (including text messages) in the form of information and mailings relating to that company’s own or similar products and services. You may opt out at any time from such processing in connection with the collection of your contact data (opt-out) or each time the information is forwarded to you by e-mail (“unsubscribe / abmelden“) or text message, and you may also do so at any time by sending a notification by email to datenschutz@cal.at.      

Sweepstakes

In the case of sweepstakes, we will use your data collected for this purpose to process the sweepstakes game, particularly in connection with the notification of winnings. Detailed information may be found in the terms and conditions of the respective sweepstakes. Where you have consented to this, we may process the data collected in connection with a sweepstakes game until such time as you revoke consent to receive mailings and information circulars.

Video surveillance at Casinos and VLT outlets

In order to comply with legal requirements and for your own protection, the gambling operations at the casinos of Casinos Austria and the VLT outlets of Austrian Lotteries are video-monitored in accordance with relevant data protection rules.

Photo and film recordings at events and TV shows

It may be the case that photo and/or video recordings of you will be made and stored at the casinos of Casinos Austria, the VLT outlets of WINWIN in connection with events, or during TV shows of Austrian Lotteries.

Depending on whether you have given consent for this purpose to Casinos Austria or Austrian Lotteries, such recordings may be processed for purposes of marketing by Casinos Austria, WINWIN and/or Austrian Lotteries, for publication on their websites (www.casinos.at, www.winwin.at) or on the local websites of Casinos Austria, for publication on the Facebook pages of those companies and for publication on Casino TV (Infotainment at the casino/on tv.Casino.at). In addition, depending on whether you have granted consent to Austrian Lotteries for this purpose, recordings made during TV shows may be processed for purposes of marketing in internal group media and potentially in third-party media (as described in your consent statement).

Such publication will not give rise to any claims on your part of any kind whatsoever.       

Your consent under data protection law to the processing of photo and film recordings may be revoked at any time with future effect by emailing us at datenschutz@cal.at or by post by writing to us at Rennweg 44, A-1038 Vienna. Revocation of your consent does not affect the lawfulness of the processing of your data prior to revocation, based on your consent.

Game secrecy 

In addition to being subject to the general data protection regulations, our corporate group is subject, in particular, to the provisions of sec. 51 of the Gaming Act [GSpG], which deals with game secrecy. This provision specifies that organisers of games of chance which are covered by the gambling monopoly, as well as the members of their constitutive bodies, employees, contractors and other persons working for such organisers are required to preserve confidentiality (game secrecy) regarding the identity of gamblers and their participation in games of chance (winnings and losses). Exceptions to game secrecy are exhaustively covered by this statutory provision and relate, for example to duties of information to public authorities and courts or to express waivers of game secrecy by the gambler. Because the safeguarding of gambling secrecy is a prerequisite to our maintaining the right to operate games of chance, we preserve strict confidentiality regarding your participation in such games and the winnings or losses generated. The data regarding your visits and games are not exchanged within our corporate group.                                   

Gambler protection

Based on the provisions of the Gaming Act, in certain cases we have a duty to record your conduct during visits and to observe your gambling behaviour and, where necessary, to initiate measures for your own protection.

You will find more information regarding gambler protection and dealing with responsible gambling at www.spiele-mit-verantwortung.at.

Credit information

In certain legally regulated cases, Casinos Austria and WINWIN are required to review your credit standing on the basis of documents, data or information obtained from a creditable and independent source. By carrying out these credit checks, we comply with the legal obligations imposed on us. In addition, our credit checks serve to protect gamblers and are thus in the interests of your own safety.

To carry out credit checks, we will transfer the personal data required (name, address, date of birth) to the following credit agencies:                                               

Bisnode Austria Holding GmbH

Geiselbergstrasse 17-19

1110 Vienna

 

CRIF GmbH

Diefenbachgasse 35-39

1150 Vienna

 

Kreditschutzverband 1870

Wagenseilgasse 7

1120 Vienna

These credit agencies use the above-referenced personal data transmitted by us in order to make appropriate assessments of your credit rating, based on mathematical and statistical procedures (scoring).

In light of our legal mandate, we have a legitimate interest in obtaining information on insolvencies (personal bankruptcies and company insolvencies) in order to take necessary measures to protect gamblers. For this reason, based on a contractual relationship with Kreditschutzverband 1870, information on insolvencies (private bankruptcies and company insolvencies) is provided to us via an insolvency database.

Anti-money Laundering

Based on the provisions of the Financial Markets Money Laundering Act ([German acronym:] FM-GwG) and the Gaming Act (GSpG), throughout our corporate group, we have a duty to compare your personal data with the Dow Jones Risk and Compliance Data based at www.dowjones.com/  if you have registered for our online products or if you visit one of the casinos of Casinos Austria or any VLT outlet.

Whistleblowing system

Our company offers you the option via https://www.bkms-system.net/cal, of using a whistleblowing system to report irregularities within our corporate group to top-level corporate management. As a corporate group, we have an overriding legitimate interest in learning of such irregularities. Communications between you and us are facilitated by a special, secure server, enabling you to use an application service provider which permits you to submit, or us to receive and process and respond to anonymous communications or non-anonymous communications. Business Keeper AG (“BKAG”) has developed this whistleblowing system and works for us within the scope of the data protection rules. This data processing by BKAG takes place exclusively on the territory of the Federal Republic of Germany. BKAG does not have any access whatsoever to the contents of messages exchanged through the whistleblowing system. The data and messages which are entered by the whistleblower are then stored for purposes of processing only for so long as is necessary until processing of the whistleblowing notification is complete. Where, as a whistleblower, you have not entered any personal data, the whistleblowing system preserves your anonymity by means of appropriate technical and organisational measures. What this means is that whistleblowers may provide information without having to provide any identification details but at the same time have the option to provide information on a non-anonymous basis so that a relation to the person may be established.

Contract data processing

Even where we engage data processors, we are responsible for protecting your personal data.                                             

We will only use processors outside the European Union if (i) there is a European Commission adequacy decision for the third country in question or (ii) we refer to the standard contract clauses of the European Commission or (iii) if appropriate guarantees, e.g. the EU/US Privacy Shield, is in place with the third country or (iv) we have concluded binding internal data protection rules with the processor.

Your data will be transmitted to third parties if we are legally obliged to do so, if the data transfer is necessary to perform our contract relations or if you have expressly consented to the transfer of your data.                                  

External processors and business associates or other cooperators will only receive your data to the extent necessary, for example: to perform a contract, to process your order or to process sweepstakes.                                  

Your personal data will not be sold to third parties or otherwise marketed.

Duration of storage

We will store data you have provided to us solely for customer service purposes or for marketing and information purposes (such as newsletters) until such time as you revoke your consent to this. Otherwise, your personal data will be automatically erased or blocked for further use if you have not used our online services or other services and products for a period of more than three years (from the date of your last contact with us or the last use of the services).

In the case of a contract such as in connection with your visit to a casino or VLT outlet or in the case of your use of our online products, your personal data will be stored following complete performance of the contract until expiry of any guarantee, warranty, prescription periods and statutory retention periods applicable to us, and in addition, until conclusion of any legal disputes as to which the data may be required as evidence.                                             

You may find the storage periods for personal data collected in connection with the TV shows of the Austrian Lotteries (Bingo, Brieflos and Money Maker) here.

Cookies

In order to improve our website and make it as optimal as possible for your use, we use cookies on the websites of our corporate group. Cookies are small text files that are stored on your electronic device (e.g. computer, smartphone, games console) when you visit our website, which permit your browser to be recognised when you visit our website again. Cookies store information such as your language settings, the duration of your visits to our website or information you enter there. This prevents you from having to re-enter all of the required data each time it is required. In addition, cookies enable our systems to recognise your preferences and to align our websites to your interests.

When visiting our websites, you will find more information on the use and application of cookies via the cookie notice placed on our websites.

Sessions

The websites and apps of win2day (www.win2day.at) and Österreichischen Sportwetten (www.tipp3.at) as well as the online shop of Casinos Austria’s website (https://shop.casinos.at/) use sessions. Sessions (session ID, session number) are generated by the server at the beginning of our session. The session must be transferred with the server’s response to your computer and supplied by it at the time of each subsequent access. With the help of unique sessions, the data stored on the server side (e.g. your betting slip) can be uniquely linked to a user at the time of each access. The session ends when you click on Logout. After a certain period of no activity on the websites of win2day and tipp3, you will be automatically logged-out, which will also terminate the session.                                

Google Analytics web analysis tool

Google Analytics is used on the websites of our corporate group. This is a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies, text files which are stored on your computer permitting analysis of your use of the websites. The information generated by cookies about your use of our websites is usually transmitted to a Google server in the United States and stored there. However, if IP anonymisation is enabled on our websites, your IP address will be truncated by Google beforehand within the Member States of the European Union or other parties to the Treaty on the European Economic Area. Only in exceptional cases will your full IP address be sent to a Google server in the United States and truncated there. Google will use this information on our behalf to evaluate your use of our websites, compile reports on your website activity and provide us with other services related to website activity and Internet usage. The IP address provided by your browser in connection with Google Analytics will not be linked to other Google data.

You may prevent storage of cookies by means of a setting in your browser software. However, we do point out that in such case you may not be able to fully use all of the functions of our websites. You can also prevent collection of data generated by the cookie and relating to your use of our website (including your IP address) and processing of such data by Google by downloading and stalling the browser plug-in provided from the following link: 

Google Analytics

Piwik web analysis tool

The website of the Austrian Lotteries (www.lotterien.at) and the website of Glücks- und Unterhaltungsspiel Betriebsges.m.b.H. (www.winwin.at) use Piwik, an open-source software program for statistical evaluation of visitor numbers. Piwik uses cookies, text files that are stored on your computer and permit analysis of your use of our websites. The information generated by the cookie regarding your use of the website (including your IP address) is transmitted to and stored by a server which we operate ourselves. The evaluations created by Piwik are used to compile reports on website activity.

Econda web analysis tool

The website of Casinos Austria (www.casinos.at) uses cookies for creating non-personalised statistics. On Casinos Austria’s website, ECONDA.de, a web analysis service of the provider Econda GmbH, Zimmerstrasse 6, 76137 Karlsruhe, collects and stores data from which useable profiles can be created through the use of pseudonyms. These user profiles are used to analyse visitor behaviour and are evaluated to improve and tailor our services. Cookies may be used for this purpose. Anonymised user profiles will not be merged with other personal data relating to the individual behind the pseudonym without the specific, express consent of the data subject. You may object to the collection and storage of data for purposes of web analytics at any time with future effect by clicking on the following link:

Econda

Siteimprove analytics web analysis tool

The website of Casinos Austria (www.casinos.at) uses Siteimprove Analytics, a web analytics service provided by Siteimprove. Siteimprove Analytics uses “cookies”, which are text files stored on your computer or smartphone to assist Casinos Austria in analysing how visitors use the site. The information generated by the cookies regarding the visitors’ website usage is stored and processed by Siteimprove on servers in Denmark.

IP addresses are completely anonymised before collected data can be viewed via the Siteimprove suite by Casinos Austria. Reversal of the anonymisation of IP addresses and matching of IP addresses to data collected is not possible.

Casinos Austria will use this information to evaluate the behaviour of website users, to create reports regarding this and, finally, to improve the website experience for visitors. Siteimprove will not share this information with third parties or use it for marketing or advertising purposes of any kind.

You may object to the collection of your data by Siteimprove Analytics by clicking on the following link. This will set an opt-out cookie preventing future collection of your data when you visit the website.

Security

We implement technical and organisational security measures to protect your data from manipulation, loss, destruction and access by third parties. Our security measures are constantly improved in line with technological developments.

We undergo annual certification in accordance with the GoodPriv@cy international data protection seal of quality, which assists us in reviewing our strict data protection policy and supports us in continually improving it.                       

In addition, we comply with the Code of Conduct approved by the Austrian Federal Chancellery pursuant to the Data Protection Act 2000 for state-licensed gaming operators.                                                              

All information we receive from you such as your name, address, telephone number, e-mail address, account information or credit card number is transmitted and protected between your browser and our central server via SSL (Secure Socket Layer). Our security server software encrypts all information provided by you before it is transmitted to us. The information is not decrypted until it reaches our server. This prevents unauthorised persons from reading, modifying, interpreting or copying this information during data transfer and subsequently sending it repeatedly.

Links to other sites

Our websites contain links to other websites. Compliance with the relevant data protection rules for such websites is the responsibility of the operators of those websites and is therefore beyond our control. We therefore bear no responsibility for the privacy policies or content of those other websites.

Digital services (Facebook, Conversational interfaces, etc.)

To use some of the offers and services of our corporate group, you must have an account on the Facebook social network, 1601 South California Avenue, Palo Alto, CA 94304, United States, or Amazon Media EU S.à r.l. (Société à responsabilité limitée), 5 Rue Plaetis, L-2338 Luxemburg. When you visit Facebook pages or use an Alexa device, a direct connection is made between your device and the Facebook server or Amazon server. As a result, Facebook or Amazon will receive the information that you have called up our Facebook page or, using the Amazon Alexa device, Casinos Austria or Skill Lotteries under your IP address. We would point out to you that we have no knowledge of the content of the data transmitted or its use by Facebook or Amazon. You may find further information on these points at  

Privacy Statement of Facebook and/or  

Privacy Statement of Amazon.

Content on external channels is created and extended with the utmost care. However, the degree of currency and correctness will be affected by technical factors such as the Internet connection or the currency of the operating system you are using and we are thus unable to guarantee it.

Analysis software

Fully automated decision-making processes

At present, there are no fully automated decision-making or profiling processes in our group of companies within the meaning of Art. 22 GDPR, because no purely automated decisions are taken that would have any legal effect on your or significantly affect you in a similar way.                                                 

Profiling for direct marketing purposes

For some mailings, we use analytics software (IBM Campaign and IBM Watson Campaign Automation) to analyse personal data to provide you with personalised offers tailored to you and direct mailings that are tailored to your needs and requirements. Based on the data collected in connection with the relevant customer loyalty and/or newsletter programme, we are able to offer you personalised offers and information tailored to your needs.                      

In addition, in connection with customer loyalty programmes and/or advantage clubs, you are deemed to consent that your data will be processed using this analysis software in order to calculate bonuses (random and visitor’s bonuses in the case of the “Glücks Card“ programme of Casinos Austria or balls in the case of the tipp3 Club).

The information and mailings for which this software is used are listed under collection and processing of personal data in respect of the group products in question.

You have the right to object at any time to the processing of data relating to you for purposes of direct marketing.        

Details on how to unsubscribe from mailings and information circulars on which we use this analysis software may be found in each individual mailing and in the terms and conditions of our bonus programme/advantage club. However, you are also welcome to contact us by e-mail at datenschutz@cal.at.

Data processing when using our apps

As a basic rule, we collect, process and use your data only so far as necessary for proper functioning of the apps or for conducting our own market and opinion research. We use tracking technologies to measure your usage behaviour.

For technical reasons, the apps automatically transmit certain technical data to our server when you use our services, including, in particular, identifying characteristics, information on the beginning and end and the scope of the use in question and details regarding the services used by you in each case, for example the date and time of the use, the operating system used, the volume of data transmitted and configuration data. This is necessary due to the way our apps operate.

In addition, our apps use a token which is automatically generated when the app is first used. The token is a small text file (similar to a cookie) which is stored locally within the app and contains only a randomly generated identification number. The token serves as an identifier, allowing us to recognise your app installation in order to provide the required content to the app (for example, permitting us to send push messages to the app where you have given your consent). The token is stored on our servers and in a special area of the app to which only the app has access. After four years of inactivity, the token is deleted, making it impossible for our servers to recognise this app installation.

Your rights

You may assert the following rights regarding the processing of your data under the General Data Protection Regulation and national data protection law:                                                           

Right of information

You may ask us for information as to whether we process your personal data, and if so, which of your personal data we process and to what extent.

Right of correction    

If we process personal data of yours which is incomplete or incorrect, you may request its correction and/or completion by us at any time.

Right of deletion   

You may request that we erase your personal information if we have unlawfully processed it, if the processing disproportionally interferes with your legitimate interests, if your personal information is no longer necessary for the purposes for which it was collected, if you have revoked your consent and there is no other legal basis for processing or if deletion of the data is required to fulfil a legal obligation. Please note that there may be reasons which would militate against immediate erasure, e.g. in the case of legally mandated retention requirements.  

Right to restrict processing                        

You may ask us to restrict the processing of your data if

  • you dispute the correctness of the data for a period of time that allows us to verify the accuracy of the data;                           
  • the processing of your data is unlawful, but you opt against deletion and instead request restriction of the use of your data;                                 
  • we no longer need the data for its intended purpose, but you still need the data to assert, exercise or defend your legal rights, or
  • you have objected to the processing of the data.                              

From the time of the request for restriction, such data will only be processed with your individual consent or for purposes of asserting and enforcing legal claims.

Right of data portability            

You may ask us to provide you with the data which you have given to us in a structured, standard machine-readable format, provided that

  • we are processing such data on a basis of revocable consent you have given or to perform a contract between us and
  • the processing is carried out by means of automated procedures.         

Right of objection

For reasons arising out of your particular situation, you may at any time object to the processing of personal data relating to you which are required in order to safeguard our legitimate interests or those of a third party. Following your objection, your data will no longer be processed unless there are compelling legitimate grounds for processing it which outweigh your interests, rights and freedoms, or if the processing is for the purpose of enforcing, pursuing or defending legal claims.

You may object at any time to our forwarding of advertising to you without any need to state reasons for this.

Right of complaint

If you believe that we are in violation of Austrian or European data protection laws when processing your data, we would ask you to contact us in order to resolve any questions you may have. You also have the right to contact the competent data protection authority and, as of 25.05.2018, you also have the right to contact the EU Supervisory Authority.                                 

Assertion of rights          

If you wish to assert one of the rights referred to above in relation to us, please simply use the e-mail address datenschutz@cal.at.

In connection with your assertion of your rights, it is possible that we may request additional information to confirm your identify (such as official photo ID). The purpose of this is to protect your rights and your privacy so that no third party is able to obtain information about your data.                                                

We will respond to all reasonable requests free-of-charge and as soon as possible in accordance with applicable law.                              

Updates to our privacy policy

We will amend our privacy policy from time to time. Changes to our privacy policy will become effective when provided on our company’s websites and apps and posted at our casinos and VLT outlets. If we make substantial amendments, we will inform you of this via our online services.