Data protection at NOVOLINE

The protection of your personal data is very important to us. We would therefore like to take this opportunity to inform you about data protection in our company. We will inform you about what data we collect from you and how we use it. We will also inform you about your rights under applicable data protection law and tell you who you can contact if you have any questions.
It may be necessary to update this privacy policy from time to time, for example due to new legal or regulatory requirements or new offers on our website. To find out about the current status of our data usage provisions, you should visit this page regularly. You can tell whether changes have been made by the update date at the end of the document.
The privacy policy is available in German and English. In the event of any discrepancies between the German and English versions, the German version shall take precedence.

Name and address of the responsible person

We, NOVOLINE.DE GmbH (hereinafter: “NOVOLINE”, “we” or “us”), are responsible within the meaning of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) as well as other data protection regulations on our website and the associated data processing.

Comprehensive information about our company can be found in the imprint.

NOVOLINE.DE GmbH
Saarlandstraße 240
55411 Bingen am Rhein
Germany

E-Mail: [email protected]
Telephone: +49 40 2351576-33

Data protection officer

You can address questions about the processing of your data to NOVOLINE's data protection officer. You can reach the data protection officer using the following contact details

E-mail contact: [email protected]

Address for postal contact:
LÖWEN ENTERTAINMENT GmbH
Datenschutzbeauftragter
Saarlandstraße 240
55411 Bingen am Rhein
Germany

General information on data processing

1. Scope and purpose of the processing of personal data
   Data processing by NOVOLINE essentially serves two purposes.
   • Execution of the gaming contract, i.e. for the purpose of processing the contract. External service providers are also involved here, e.g. credit agencies, payment services or government organizations. They will receive your data to the extent required in each case and will be processed by them for a specific purpose.
   • When you access the website, data/information is exchanged between the device you are using and our server. This also involves personal data. This data is used, among other things, to improve our website, to display advertising or to comply with legal obligations (e.g. player protection).
2. Legal basis for the processing of personal data
   Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis. When processing personal data that is required to fulfill a contract between you and us, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is necessary to fulfill legal obligations, we refer to Art. 6 para. 1 lit. c GDPR as the legal basis. In the event that vital interests of you or another natural person require the processing of personal data, we refer to Art. 6 para. 1 lit. d GDPR as the legal basis. If the processing is necessary to safeguard a legitimate interest of us or a third party and if your interests, fundamental rights and freedoms do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.
3. Data erasure and storage duration
   Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which we are subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
4. Disclosure of personal data to third parties and processors
   In principle, we do not pass on any personal data to third parties without your express consent. If we nevertheless disclose your data to third parties in the course of processing, transfer it to them or otherwise grant them access to the data, this is also done exclusively on the basis of one of the aforementioned legal bases.
   In some cases, we use carefully selected external service providers to process your data. If data is passed on to service providers as part of so-called order processing, this is done on the basis of Art. 28 GDPR. Our processors are carefully selected, bound by our instructions and regularly monitored by us. We only commission processors who offer sufficient guarantees that suitable technical and organizational measures are taken to ensure that the processing complies with the requirements of the GDPR and BDSG and guarantees the protection of your rights.
5. Data transfer to third countries
   The GDPR guarantees the same high level of data protection within the European Union. When selecting our service providers and cooperation partners, we therefore rely on European partners wherever possible if your personal data is to be processed. Only in exceptional cases will we have data processed outside the European Union or the European Economic Area in the context of the use of third-party services.
   We will only allow your data to be processed in a third country if the special requirements of Art. 44 et seq. GDPR are fulfilled.
   We would like to point out that the USA has been considered a safe third country since July 10, 2023 and has a level of data protection comparable to that of the EU. Data transfer to the USA is therefore permitted if the recipient is certified under the “EU-US Data Privacy Framework” (DPF) or has suitable additional guarantees, such as the standard contractual clauses of the EU Commission.
6. Existence of automated decision-making
   We do not use automated decision-making or profiling.
7. Categories of recipients
   Within our company, those offices and departments receive personal data that need it to fulfill the aforementioned purposes. In addition, we sometimes use different service providers and transmit your personal data to other trustworthy recipients. These can be, for example
   • Hosting service providers for the operation of our servers
   • Development service providers for programming, development, maintenance and support of software applications
   • Social media operators for the provision of social plugins
   • payment service providers
   • Service providers for age and identity verification
   • Cooperation partners
   If external processors are used, they are contractually obliged in accordance with Art. 28 GDPR.
8. Secure data transmission
   For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, our pages use SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
   If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Data protection for minors

Our offer is aimed at persons who are at least 18 years old. We do not wish to collect any personal data from persons under the age of 18. If we receive personal data from persons under the age of 18, we will delete this data and not process it any further as soon as we become aware that they are minors.

Cookies

1. Description, purpose and scope of data processing
   Cookies are used on our websites. Cookies are small text files that are stored on your computer or mobile device when you visit our website and enable your browser to be reassigned. Cookies store information such as your language setting, the duration of your visit to our website or the entries you make there.
   Our website uses the following types of cookies, the scope and function of which are explained below:
   • Essential
     These are cookies and similar methods without which you cannot use our services (e.g. to correctly display our website / functions requested by you, to save your registration in the login area, to record your participation in the game, etc.).
   • Functional
     These are used to monitor anonymized user behaviour on the website, for example to record the number of visits per page. The data collected is used exclusively to optimize the performance and design of this website. These cookies are third-party cookies (e.g. Google Analytics). However, the data is collected in anonymized form and used exclusively by us.
   • Marketing
     Cookies are used for marketing purposes to follow visitors on websites. The intention is to show ads that are relevant and engaging to the individual user and therefore more valuable to publishers and third party advertisers.
   Further information can be found in the cookie policy.
2. Legal basis for processing
   The legal basis for the processing of essential cookies is Art. 6 para. 1 lit. f GDPR (legitimate interest).
   The legal basis for the processing of all other cookies is your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you have given us by making your selection in the cookie banner. You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. To do this, please change the settings by clicking on the cookie policy on our website.
3. Possibility to object
   You can also withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. To do this, please change the privacy settings on the Cookie Policy subpage.
   You can delete cookies already stored on your device at any time. If you wish to prevent the use of cookies, you can refuse to accept cookies in your browser. Please refer to your browser manufacturer's instructions to find out how this works in detail.
4. Duration of data storage
   The data is deleted as soon as it is no longer required for logging purposes and there are no legal obligations to retain it.
5. Transfer of personal data to third parties and processors
   1. Usercentrics Consent Management Tool
      The website uses the Usercentrics Consent Management Platform to fulfill the legal obligation under Art. 7 para. 1 GDPR. The operator is Usercentrics GmbH, Rosental 4, 80331 Munich, Germany. The Usercentrics Consent Management Platform collects log file data, user agent (device, browser type, browser language, browser version, resolution) and consent data (consent yes/no, timestamp, data scope, data attributes, ControllerID, ProcessorID, ConsentID) via a JavaScript. This JavaScript enables Usercentrics GmbH to inform users about certain tags and web technologies on our website and to obtain, manage and document their consent.
      We have concluded an agreement with Usercentrics GmbH for order processing in accordance with Art. 28 GDPR.
      You can find more information about Usercentrics GmbH on this page.
      The privacy policy of Usercentrics GmbH can be found on this page.

Processing of personal data

Player account & registration

1. Purpose and scope of data processing
   You have the option of setting up a password-protected player account with us. The purpose of registration and login is to provide an online gaming function. This includes, among other things, the simplified conclusion of gaming contracts. The personal data is primarily used for the purpose of authentication, authorization, process control and establishing contact
2. Data categories of personal data
   • Personal information:
     • First name
     • Surname
     • Name at birth
     • Date of birth
     • Place of birth
     • Gender
     • Street address
     • House number
     • Postal code
     • Town
     • Country
   • Identification information:
     • E-mail address
     • Password (which you set yourself)
     • Security question and answer (which you define yourself)
     • Mobile number
   • Order data, sales data, payment processing data such as
     • Data from game participation and your customer profile,
     • Payment data (e.g. bank details),
     • Data relating to payment by credit card (e.g. payment amount, currency of payment amount) Payment amount, currency of the payment amount, name of the customer, address of the customer, authentication code, number),
3. Legal basis for data processing
   The legal basis for the processing is Art. 6 para. 1 lit. b GDPR (performance of a contract), as the registration and the login area are necessary for the performance of the contract or for the implementation of pre-contractual measures. Furthermore, the legal basis is Art. 6 para. 1 lit. c GDPR (legal obligation) in conjunction with Section 8 para. 1, Section 23 para. 1 GlüStV.
4. Duration of storage
   We generally only store your data for as long as we need it for the respective processing purposes. If the data is no longer required for the fulfillment of the processing purposes stated in this data policy, it will be deleted. Unless statutory retention periods (e.g. retention obligations under commercial or tax law) prevent deletion.
5. Right to object
   As a registered user, you have the option of canceling your registration at any time. The data stored there can be changed by the user at any time.

Processing for player protection

1. Purpose and scope of data processing
   To protect players and combat gambling addiction, we are obliged to implement specific measures and report them to the central blocking system OASIS. In this context, we use the “Mentor” prevention tool to evaluate gaming behavior for anomalies. In addition, we send queries to the OASIS blocking system in order to exclude blocked players from gaming operations. To monitor the cross-provider deposit limit, your data is transmitted to the transnational central file “LUGAS”. For providers of online games of chance, the connection and transmission of certain customer activities to this higher-level gambling supervisory system is mandatory.
2. Data categories of personal data
   • Identity data (first name, surname, maiden name, date of birth, nationality, alias)
   • Address, place of birth
   • Biometric data (photograph)
   • Contract data (reason for the ban, duration of the ban, the reporting body, documentation, match history)
3. Legal basis for data processing
   The legal basis for the processing of personal data is Art. 6 para. 1 lit b GDPR (fulfillment of contract), Art. 6 para. 1 lit c GDPR (fulfillment of legal obligations) and Art. 6 para. 1 lit f GDPR (protection of overriding legitimate interests of the controller). The overriding legitimate interest is to be able to implement and verify the legal requirements in the area of player protection. The evaluation of gaming behavior serves to fulfill legal obligations for the prevention of money laundering and the prevention of addiction in accordance with GlüStV 2021.
4. Duration of storage
   We only retain your data for as long as we need it for the respective processing purposes, unless statutory retention periods prevent deletion.
5. Transfer of personal data to third parties and processors
   1. Prevention tool “Mentor”
      The tool is operated by our contractor neccton GmbH, Davidgasse 5, A-7052 Müllendorf.
      Further information on data protection at neccton can be found under this link.
   2. Blocking file “OASIS”
      The blocking file is operated by the Darmstadt Regional Council, Luisenplatz 2, 64283 Darmstadt.
      Further information on the OASIS system can be found under this link.
   3. Federal central file “LUGAS”
      The operator of the cross-state central files is the Gemeinsame Glücksspielbehörde der Länder AöR (GGL), Hansering 15, 06108 Halle (Saale).
      Further information on the LUGAS system can be found under this link.

Age and identity check

1. Description and scope of data processing
   As part of the registration process on our website, we are legally obliged to verify age and identity in order to prevent the participation of minors or banned players. We are also obliged to verify your identity in accordance with the Money Laundering Act. We therefore check your age and identity when you open your player account.
   In our identification procedure, the data entered by the player is first compared with reference files of SCHUFA Holding AG (SCHUFA procedure “SCHUFA-IdentitätsCheck Premium” and “SCHUFA-KontonummernCheck” or comparable successor procedures). The verification of the place of birth, birth name and the 1 cent transfer are carried out by the service provider insic GmbH, Brookweg 6a, 22941 Jersbek, Germany. If the match is successful, the company transfers the amount of one cent (EUR 0.01) to the bank account specified by the player in a further step. The transfer text contains a 6-digit activation code, which the player must then enter on the NOVOLINE website in a field provided for this purpose.
   We are also legally obliged to determine whether our gaming guests are sanctioned and politically exposed persons. These queries require the use of an additional service provider, which is integrated into insic. NOVOLINE has chosen Tolerant Software GmbH & Co. KG, Büchsenstr. 26, 70174 Stuttgart, Germany.
   Upon registration and in certain cases where there is a legitimate interest, we regularly check high-risk persons (including politically exposed persons) using World-Checks and transmit your name to Refinitiv Germany GmbH for this purpose. The functions of World-Check include PEP monitoring, anti-money laundering and combating the financing of terrorism.
   For legal reasons, we are obliged to establish the identity of each gaming guest on the basis of a valid identification document and to record certain details from the identification document. We therefore offer our potential gaming guests the opportunity to verify their identity using a web-based video identification procedure via encrypted transmission.
   In accordance with Section 6a of the GlüStV, we are legally obliged to check players' data at least once a year. This serves to avoid duplicate registrations in the transnational gambling supervisory system LUGAS and to prevent potential abuse as well as to ensure the protection of minors and persons at risk of addiction. Two weeks before this period expires, the player is asked to confirm that his account details are up to date. As soon as this confirmation has been provided, an identity check is carried out at Schufa. Alternatively, or in the event of a failed identity check, the player has the option of verifying their identity using PXL-Vision Autoident or in the gaming hall.
2. Data categories of personal data
   • Identity data (first name, surname, maiden name, date of birth, nationality)
   • Possible image and sound recordings for Video-Ident
   • Bank details for SCHUFA account number check plus IBAN
3. Legal basis for data processing
   The legal basis for data processing is the fulfillment of legal and regulatory requirements. In particular to fulfill the requirements of the State Treaty on Gambling (§4) and the Money Laundering Act. Further legal bases for these transfers are Art. 6 para. 1 lit. b (fulfillment of contract) and Art. 6 para. 1 lit. f (legitimate interest) of the GDPR.
4. Duration of storage
   Pursuant to Section 6g GlüStV 2021, players' personal data must be stored for five years from the closure of the gaming account. After this period, the data will be deleted.
5. Disclosure of personal data to third parties and processors
   1. insic GmbH (ID service provider)
      Brookweg 6a, 22941 Jersbek.
      Information on data protection can be found under this link.
   2. Tolerant Software GmbH & Co. KG
      Büchsenstraße 26, 70174 Stuttgart. Tolerant Software is responsible for checking the data quality, i.e. the accuracy of the data.
      Information on data protection can be found under this link.
   3. Refinitiv Germany GmbH
      Friedrich-Ebert-Anlage 49, 60327 Frankfurt. Verification of high-risk persons. As data sources Refinitiv names the provider of World-Check with over 530 sanction, regulatory and law enforcement lists as well as national and international data sources.
      Further information on the activities of the private database and data protection can be found under this link.
   4. SCHUFA Holding AG
      Kormoranweg 5, 65201 Wiesbaden, Germany.
      Information on data protection can be found under this link.
      • SCHUFA note on identity verification: NOVOLINE transmits personal data collected in the context of this contractual relationship regarding the application, execution and termination of this business relationship to SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden in accordance with Article 6(1)(b) and Article 6(1)(f) of the GDPR. Transfers on the basis of Article 6(1)(f) GDPR may only take place insofar as this is necessary to safeguard the legitimate interests of NOVOLINE or third parties and does not outweigh the interests or fundamental rights and freedoms of the data subject. The exchange of data with SCHUFA also serves to verify identity. SCHUFA processes data and also uses it for the purpose of profiling (scoring) in order to provide contractual partners in the European Economic Area and in Switzerland and, if applicable, other third countries with information, inter alia, to assess the creditworthiness of natural persons - provided that an adequacy decision of the European Commission exists in this regard. Further information on SCHUFA's activities can be found in the SCHUFA information sheet in accordance with Art. 14 GDPR or online at this link.
      • SCHUFA note SCHUFA account number check: NOVOLINE transmits personal data collected in the context of this contractual relationship regarding the application, execution and termination of this business relationship to SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden. The legal basis for these transfers is Article 6(1)(b) and Article 6(1)(f) of the General Data Protection Regulation (GDPR). Transfers on the basis of Article 6(1)(f) GDPR may only take place insofar as this is necessary to safeguard the legitimate interests of NOVOLINE or third parties and does not outweigh the interests or fundamental rights and freedoms of the data subject which require the protection of personal data. The exchange of data with SCHUFA also serves to verify the information provided by the customer. Further information on SCHUFA's activities can be found in the SCHUFA information sheet in accordance with Art. 14 GDPR or online at this link.
   5. PXL-Vision
      When you register with us, it may be necessary for you to identify yourself using your smartphone. For this we use the services of the provider PXL Vision AG, Rautistrasse 33, CH-8047 Zurich, Switzerland.
      You can find more information about the PXL Ident process on this website and in the PXL Vision AG privacy policy at this link (PDF).
      Data protection information on quality assurance and development by PXL can be found at this link (PDF).

Increase of the deposit limit

1. Description and scope of data processing
   As a verified player, you have the option of increasing your legal deposit limit. If you decide to take this step, there are two possible procedures, namely the automated or manual credit check.
   • Automated credit check
     By requesting a limit higher than the statutory limit of 1,000 euros in your player account, or by making a deposit that exceeds the deposit amount of 1,000 euros per calendar month, you initiate the automated credit check process carried out by SCHUFA Holding AG. As a result of this check, we receive either a confirmation (OK) or a rejection (not OK) from SCHUFA.
     According to SCHUFA, the SCHUFA gambling information has no influence on any further credit assessment. It only stores the information that a gambling provider has requested information from SCHUFA and, if applicable, which score value was transmitted. This is intended to ensure transparency for users.
     Furthermore, we use the service provider finAPI GmbH as part of the credit check to retrieve your account information from your account-holding bank. finAPI is a payment institution regulated by the German Federal Financial Supervisory Authority (BaFin) that is licensed to provide account information services and payment initiation services. On your behalf, finAPI retrieves your account data directly from your bank and then transmits the necessary data to us. In doing so, finAPI processes your data as an independent controller on the basis of a contract with you.
   • Manual credit check
     In addition to the automated credit check, registered players are free to undergo a manual check. In this context, our player protection department may request certain documents, including income tax statements, alternative proof of income and bank statements. These documents are required in order to carry out a comprehensive assessment of your financial situation.
2. Data categories of personal data
   • Identity data (surname, first name, address)
   • Financial data (bank details)
3. Legal basis for data processing
   The legal basis for these data transfers is Art. 6 para. 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 lit. f GDPR (legitimate interest). Transfers on the basis of Article 6(1)(f) GDPR may only take place insofar as this is necessary to safeguard the legitimate interests of the gambling provider or third parties and does not outweigh the interests or fundamental rights and freedoms of the data subject that require the protection of personal data. The exchange of data with SCHUFA serves in particular to fulfill legal obligations for player protection and to check the economic performance of gambling, for example in the context of an intended limit increase.
   The transmission of documents as part of the manual check is voluntary and based on your consent (Art. 6 para. 1 lit. a GDPR). The subsequent processing is also carried out in this case on the basis of Art. 6 para. 1 lit. b and f GDPR.
   There is no legal obligation to provide us with these documents. Without providing this data, we will generally not be able to perform our legal task (assessing your performance) and will have to exclude you from the manual limit increase.
4. Duration of storage
   We only store your data for as long as is necessary for the respective purpose of data processing (e.g. processing your request or statutory retention periods or for legal defense).
5. Disclosure of personal data to third parties and processors
   1. SCHUFA Holding AG
      Kormoranweg 5, 65201 Wiesbaden, Germany.
      Information on data protection can be found under this link.
   2. insic GmbH
      Brookweg 6a, 22941 Jersbek.
      Information on data protection can be found under this link.
   3. finAPI GmbH
      Adams-Lehmann-Straße 44, 80797 Munich, Germany
      Information on data protection can be found under this link.

Contact by e-mail / telephone / chat

1. Purpose and scope of data processing
   We can be contacted via our e-mail address. In this case, the sender's personal data transmitted with the request will be stored. If you call us, we collect caller identification information (caller ID). If your telephone number is not suppressed or withheld, we will therefore see the telephone number from which you are calling. This is automatically saved together with the date and time in the call list of the target telephone set. We do not record the call itself. You can also send us a message via a chat window. The chat functions are provided by Zendesk.
2. Data categories of personal data
   • Contact data (e-mail address)
   • Tracking data (IP address, time stamp)
3. Legal basis for data processing
   The legal basis for processing is Art. 6 para. 1 lit. f GDPR (legitimate interest of us as the controller). If the contact is aimed at the conclusion of a contract, Art. 6 para. 1 lit. b GDPR is an additional legal basis for the processing.
4. Duration of storage
   We will delete your data that we have received in the course of contacting you as soon as it is no longer required to achieve the purpose for which it was collected, i.e. your request has been fully processed and no further communication with you is required or requested by you.
5. Possibility to object
   You can object to data processing at any time. The objection should be sent to the following e-mail address: [email protected]
   All personal data stored in the course of contacting us will be deleted in this case. However, we may then not be able to process your inquiries in full.
6. Transfer of personal data to third parties and processors
   1. Zendesk
      The provider is Zendesk, Inc, 1019 Market Street in San Francisco, CA 94103 USA. In order to process your requests, necessary data such as surname, first name, postal address, telephone number, e-mail address are collected via our website.
      Zendesk also processes data in the USA, among other places. Zendesk is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information on this under this link.
      Information on data protection can be found under this link.

Newsletter dispatch and data archiving

1. Purpose and scope of data processing
   As part of the registration process, we are obliged to archive player data for player protection and money laundering prevention. In addition, we offer you the opportunity to subscribe to our newsletter when you register and at any time thereafter. If you agree, we will use the e-mail address you provide to send you information about our services and other promotions.
2. Data categories of personal data
   • Contact details (email address, title, name)
3. Legal basis for data processing
   The legal basis for sending the e-mail newsletter is consent in accordance with Art. 6 para. 1 lit. a GDPR. The legal basis for archiving player data is the legal obligation pursuant to Art. 6 para. 1 c GDPR.
4. Duration of storage
   If you withdraw your consent, your email address will be blocked for sending newsletters. Data storage for archiving purposes is subject to statutory retention periods, including in accordance with Section 8 (4) GwG, and is at least 5 years, unless other statutory provisions on recording and retention obligations provide for a longer period.
5. Possibility of objection
   You can revoke your consent at any time with effect for the future by using the unsubscribe link at the end of each newsletter or by contacting us at [email protected]. If you revoke your consent, your e-mail address will be blocked for sending newsletters.
6. Transfer of personal data to third parties and processors
   1. Symplify
      We use the system of Symplify Technologies AB, 55 Drottninggatan, Stockholm, for marketing communication (e.g. newsletters or push notifications) and for archiving player data. With your consent to receive newsletters, Symplify acts as a mailing service provider. In addition, we are obliged to archive player data for player protection and money laundering prevention. Further information and the privacy policy of Symplify Technologies AB can be found on this page.

Payment service provider

1. Purpose and scope of data processing
   For the purpose of deposits and withdrawals, we use external payment service providers via whose platforms payment transactions can be made. Payment transactions are subject to the terms and conditions and the data protection notices of the respective payment service providers, which can be accessed on the respective websites or transaction applications.
2. Data categories of personal data
   • Identity data: Surname, first name
   • Financial data: IBAN, credit card number
   • Contract data: Transactions
3. Legal basis for data processing
   The legal basis for data processing is Art. 6 para. 1 b GDPR, as the processing of the data is necessary for the deposit and withdrawal and thus for the execution of the contract. The legal basis is also Art. 6 para. 1 lit. f GDPR the legitimate interest. This means that we have a legitimate interest in offering you effective and secure payment options and also in preventing fraud.
4. Duration of storage
   The duration of storage of financial documents is determined by legal provisions such as the German Commercial Code (HGB) or the German Fiscal Code (AO) and is ten years.
5. Disclosure of personal data to third parties and processors
   1. Adyen
      When making a deposit, you have the option of selecting a payment method (VISA, MasterCard, etc.). We work together with the payment service provider Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, Netherlands (hereinafter: Adyen) to process payments.
      When you select a payment method, your data is automatically transmitted to Adyen. By selecting a payment option, you consent to the transfer of your personal data.
      For the purpose of fraud prevention and detection, we transmit your IP address to Adyen, among other things. All data is transmitted in encrypted form. Adyen collects and stores the data and only passes it on to the companies involved in the payment process. We do not collect or store the payment data. We have concluded an order processing agreement with Adyen in accordance with Art. 28 GDPR.
      You can find information on data protection at Adyen under this link.
   2. PayPal
      If you wish to pay with PayPal, the amount to be paid by you will be transmitted to PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) together with your first and last name, e-mail address, telephone number and IP address for the purpose of payment authorization. PayPal also offers the option of processing virtual payments via credit cards if a user does not have a PayPal account.
      PayPal may carry out a credit check to ensure your willingness and ability to pay. This corresponds to PayPal's legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the execution of the contract (pursuant to Art. 6 para. 1 lit. b GDPR). For this purpose, your data (such as name, address and date of birth, bank details) will be passed on to credit agencies. We have no influence on this process and only receive feedback as to whether the payment has been made or rejected or whether a review is pending.
      You can find more information on data protection at PayPal on the PayPal website under this link.
   3. PaysafeCard
      We offer you payment by PaysafeCard. The provider of this payment service is “Paysafe Prepaid Services Limited, 3rd floor Kilmore House, Spencer Dock, Dublin 1, Ireland”. If you decide to pay by PaysafeCard, the payment data you enter will be transmitted to PaysafeCard.
      The legal basis for the transmission of your data to PaysafeCard is Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). Consent to data processing can be withdrawn at any time. A revocation does not affect the effectiveness of data processing operations in the past.
      You can find out more about the data processed through the use of PaysafeCard at this link.
   4. NOVO PAY
      We offer the option of using the e-wallet services of NOVO PAY. In this case, personal data is processed by the payment service provider ADMIRAL PAY ISTITUTO DI PAGAMENTO S.R.L., a subsidiary of Novomatic Italia S.p.A. based in Rome, Via Benedetto Croce no. 122-124, as part of the provision of services. These services include the transfer of funds from the end customer's e-wallet account to the gaming account for top-up and withdrawal from the gaming account to the e-wallet account. In order to use this service, you must first register with NOVO PAY, whereby ADMIRAL PAY as the executing payment service provider may request further personal data, such as identification or recognition documents. In addition, ADMIRAL PAY may process your personal data with your consent (Art. 6 para. 1 lit. a GDPR) to respond to specific requests, for marketing communications and for profiling activities. For payment authorization, your first and last name, date of birth and email address will be matched by ADMIRAL PAY with the details provided by NOVOLINE. We have concluded a data processing agreement with ADMIRAL PAY in accordance with Art. 28 GDPR.
      You can find more information on data protection at NOVO PAY under this link.

Provision of the website and log files

1. Purpose and scope of data processing
   Each time our website is accessed, our system, i.e. the web server, automatically collects information from the system of the accessing computer or end device of the user. The storage of the user's IP address by our system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must necessarily remain stored for the duration of the session.
   The above-mentioned data is stored in the log files in order to ensure the functionality of our website. We also use this data to optimize the website and to ensure the security of our information technology systems (e.g. to detect attacks).
   Furthermore, we comply with the requirements of the State Treaty on Gambling, particularly in the area of player protection.
2. Data categories of personal data
   We collect the following personal data:
   • IP address of the computer from which the request was sent,
   • information about the browser type and version used
   • the operating system of the user's device,
   • the Internet service provider of the user,
   • the date and time of access,
   • the previous website from which the user accessed our website.
   The log files are used for the following purposes, among others
   • ensuring a smooth connection setup,
   • ensuring a comfortable use of our website,
   • evaluating system security and stability.
3. Legal basis for data processing
   The legal basis for the storage of the IP address is the legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the purposes of data processing listed above. If the presentation serves the preparation of a contract, the legal basis for data processing is Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. c GDPR (fulfillment of a legal obligation), such as the Internet requirements according to § 4 para. 5 GlüStV
4. Duration of storage
   The above-mentioned data will be deleted as soon as it is no longer required for the purpose for which it was collected.

Marketing, web analysis, monitoring and optimization

1. Description and scope of processing
   We collect and analyze user data on our website in order to monitor the performance of the website, improve user experience and derive optimization measures. We use analysis tools and technologies to collect information about visitors, their behavior, preferences and interactions.
2. Data categories of personal data
   • Usage data (e.g. websites visited, interest in content, access times)
   • Meta/communication data (e.g. device information, IP addresses)
3. Legal basis for data processing
   The legal basis for the processing of your personal data is consent (Art. 6 para. 1 lit. a GDPR). Consent can be revoked at any time under cookie settings or via the settings in your browser.
4. Duration of storage
   The personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.
5. Possibility to object
   You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. To do this, please change the privacy settings on the “Cookie policy” subpage.
   You can delete cookies already stored on your device at any time. If you wish to prevent the use of cookies, you can refuse to accept cookies in your browser. Please refer to your browser manufacturer's instructions to find out how this works in detail.
6. Disclosure of personal data to third parties and processors
   1. Tradedoubler technology
      We process your personal data as part of the Tradedoubler technology (of Tradedoubler GmbH, Herzog-Wilhelm-Straße 26, 80331 Munich) in order to track whether you have come from the website of one of our cooperation partners and thus to measure the success of our affiliate partners. This information is analyzed by the technology provider Tradedoubler and made available to us. We have concluded an order processing agreement with Tradedoubler in accordance with Art. 28 GDPR. You can find more information about Tradedoubler GmbH on this website. The privacy policy of Tradedoubler GmbH can be found on this page.
      Storage period: The data stored through tracking will be deleted as soon as it is no longer required for our recording purposes, at the latest after 30 days.
   2. Crazy Egg
      Our website uses a website analysis tool from Crazy Egg (Crazy Egg Inc., 16220 E. Ridgeview Lane, La Mirada, CA 90638) to record interactions exclusively with anonymized IP addresses. Crazy Egg uses cookies to analyze how the website is used by customers (e.g. which content is clicked on). We use this information to improve the functionality and presentation of our website and thus enable you to make more optimal use of our website. Consequently, visual usage profiles are created (e.g. so-called heat maps).
      We have concluded an order processing contract with Crazy Egg in accordance with Art. 28 GDPR in conjunction with the EU standard contractual clauses, in which Crazy Egg undertakes to protect the data of our users and to process it in accordance with the applicable data protection regulations. Crazy Egg uses the data collected exclusively on our behalf, for the purpose stated here. Crazy Egg will not make any further use of the data or pass it on to third parties. The data collected by Crazy Egg is not stored together with other personal data of our website visitors.
      Further information about Crazy Egg Inc. and the Crazy Egg tool can be found on this website. The Crazy Egg Inc. privacy policy can be found on this page.
      Storage period: The data stored through tracking is deleted as soon as it is no longer required for our recording purposes, at the latest after one year.
   3. Google services
      We use various services provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. By integrating Google services, Google may process personal data under certain circumstances. It cannot be ruled out that this data will also be processed outside the EU/EEA in a so-called third country, in the USA. Google is an active participant in the EU-US Data Privacy Framework (DPF), which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information about this on this page.
      Google also uses the so-called standard contractual clauses (Art. 46 (2) and (3) GDPR). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that personal data is also processed outside the EU and EEA in accordance with European data protection standards. Through the EU-US DPF and the SCC, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the Google Ads Data Processing Terms, which refer to the standard contractual clauses, on this page.
      You can find out what data Google collects and what it uses this data for on this page.
      1. Google Tag Manager
         Google Tag Manager is a service provided by Google Ireland Limited. Google Tag Manager allows the simplified integration of various scripts for web analysis and remarketing into your own website. It is not a tracking service in the true sense of the word. Google Tag Manager merely passes on data and does not process it itself. No personal data is processed.
         Google Ireland Limited is responsible for further data processing. Further information can be found on this page.
      2. Google Analytics
         This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. We use Google Analytics with activated IP anonymization. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can find more information on terms of use and data protection on this page or on this page.
         If individual pages of our website are accessed, the following data is stored: anonymized IP address; the website accessed; the website from which the user accessed the page of our website accessed; the subpages accessed from the page accessed; the time spent on the website; the frequency with which the website is accessed.
         The data stored through tracking is deleted as soon as it is no longer required for our recording purposes. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by installing the browser plugin available at this link.
      3. Google Conversion Tracking
         The website uses Google conversion tracking. If you click on an ad placed by Google, a conversion tracking cookie valid for 30 days is stored on your end device. This cookie is not used for personal identification. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers.
         You can deactivate interest-based Google ads on Google in your browser by activating the “Off” button on this page or by deactivating them on this page.
      4. Google AdSense
         This website uses Google AdSense, a service for integrating advertisements from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google AdSense uses cookies to help the website analyze how users use the site. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons can be used to analyze information such as visitor traffic on these pages. This enables Google to place context-sensitive third-party advertisements on our online offers based on search terms in search engines or key terms in the website content, for example.
         The information generated by cookies and web beacons about the use of this website (including your IP address) and the delivery of advertising formats is transmitted to a Google server in the USA and stored there. This information may be passed on by Google to contractual partners of Google. However, Google will not merge your IP address with other data stored by you. You can object to the processing by adjusting the cookie settings on our website (see the “Cookies” section), making settings in your browser or deactivating the “advertising cookies” by installing the browser plug-in from this page. Alternatively, if you have a Google account, you can deactivate the “advertising cookies” under this link. You can find more information on how Google AdSense works and Google's privacy policy at this link.
      5. Google Marketing Platform
         Our website also uses other services of the Google Marketing Platform (formerly “Google Doubleclick”). These services use cookies to display ads that are relevant to users, to improve campaign performance reports or to prevent a user from being shown ads more than once.
         Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, Google can use cookie IDs to record so-called conversions, i.e. whether a user sees an ad and later visits the advertiser's website and purchases something there. According to Google, these cookies do not contain any personal information.
         Your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this service. According to Google, by integrating these services, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address.
         In addition, cookies enable us to understand whether you perform certain actions on our website after you have accessed or clicked on one of our ads on Google or on another platform (conversion tracking). (“Floodlight”). Google uses this cookie to understand the content you have interacted with on our websites in order to be able to send you targeted advertising later.
         You can find more information about the Google Marketing Platform at this link.
   4. Facebook Pixel, Facebook Custom Audiences and Facebook Conversion
      We use various services of Meta Platforms Ireland Ltd (Facebook), Merrion Road, Dublin 4, D04 X2K5, Ireland. Through the integration of Facebook services, Meta Platforms Ireland Ltd. may process personal data. It cannot be ruled out that this data will also be processed outside the EU/EEA in a so-called third country, in the USA. Meta is an active participant in the EU-US Data Privacy Framework (DPF), which regulates the correct and secure transfer of personal data of EU citizens to the USA. You can find more information about this on this page.
      Meta Platforms Ireland Ltd. also uses the so-called standard contractual clauses (Art. 46 (2) and (3) GDPR). Standard Contractual Clauses (SCC) are model clauses provided by the EU Commission and are intended to ensure that personal data is also processed outside the EU and EEA in accordance with European data protection standards. Through the EU-US DPF and the SCC, Meta undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. The Facebook data processing conditions, which refer to the SCC, can be found at this link.
      With the help of the Facebook pixel, Facebook is able to determine you as a visitor to our online offer as a target group for the display of advertisements (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).
      Further information on data processing by Facebook can be found on this page.
   5. Microsoft Advertising
      For our online marketing measures, we also use the advertising program of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. You can find out how the data is collected in the following description of the individual measures.
      We would like to point out that Microsoft also processes the collected user data in the USA, among other places. Microsoft is an active participant in the EU-US Data Privacy Framework (DPF), which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information about this on this page.
      Microsoft also uses the so-called standard contractual clauses (Art. 46 (2) and (3) GDPR). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that personal data is also processed outside the EU and EEA in accordance with European data protection standards. Through the EU-US DPF and the SCC, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find Microsoft's SCCs on this page.
      The actual storage period can vary greatly. For search queries via Bing, Microsoft deletes your saved search queries after 6 months by deleting your IP address. Cookie IDs that are generated via the MUID cookie, for example, are made unrecognizable after 18 months. You can deactivate cookies at any time in the settings on this website or in your browser. In addition, you can deactivate the function of interest-based advertisements under this link. You can find Microsoft's privacy policy on this page.
      1. Microsoft Conversion Tracking
         We use the “Microsoft Advertising Conversion Tracking” application (formerly “Bing Ads”) from Microsoft Corporation (“Microsoft”) to measure the reach of advertisements. It is used to determine how successful our individual advertising measures are on Bing. In this way, we want to develop and display advertising that is of interest to you and make our offer more attractive. For this purpose, the UET Tag (Universal Event Tracking Tag) from Microsoft is integrated into our online offering.
         This JavaScript code enables Microsoft to use cookies to collect pseudonymized data about your visit and the use of our online offering (e.g. about the browser session and the website displayed) and to provide us with aggregated, non-personal statistics on this basis (e.g. how many visitors have reached a specific target page). This allows us to track the actions that have taken place after an advertisement has been seen on Bing or after it has been clicked on.
      2. Microsoft Advertising Remarketing
         We also use the “Microsoft Advertising Remarketing” application (formerly “Bing Ads”). This application enables us to show you our advertisements when you continue to use the internet after you have visited our website. In this way, we want to show you advertising that is of interest to you. This is done via a cookie stored in your browser (see above), which is used to record and evaluate your usage behavior. No personal information about individual website visitors is disclosed to us and website customer target groups can only be targeted by us in advertisements if the customer target group has reached a critical size in terms of numbers. This makes it impossible for us to determine individual visitor identities.
         You can deactivate tracking in various ways. For example, you can prevent the storage of cookies in your browser settings, in which case our online offering may only function to a limited extent for you. It is also possible to deactivate interest-based ads on this page.
   6. CND
      We use Motion Media Analytics from CND (CND Motion Media GmbH, Holzstr. 2, 80469 Munich, Germany) to measure the effects of our TV commercials on our websites. We have implemented the CND tracking script in our websites for this purpose. The service generally works without cookies. If you have given your consent, CND sets a session cookie on our behalf to register the access of pages and a cookie with the time of your first visit, which is deleted after 28 days.As part of the survey, users are recorded as a purely statistical variable or visitor events are recorded for purely statistical purposes. Processed IP addresses and email addresses are anonymized. No personal data is collected and permanently stored by CND during the use of our website. It is therefore not possible to draw conclusions about individual households or persons.We have concluded an order processing contract with CND. The legal basis for the use of CND is Art. 6 para. 1 lit. f GDPR and Art. 6 para. 1 lit. a GDPR for cookies after consent. You can find more information about the service provider on this page.If you wish to prevent CND from collecting data during your visit to our website, you can deactivate CND directly with the provider here.
   7. Yahoo Web Analytics
      We use the web analytics tool from Yahoo (Yahoo EMEA Limited, 5-7 Point Square, North Wall Quay, Dublin 1, Ireland). The web analysis service “Yahoo Web Analytics” uses technologies such as “cookies”, “tracking pixels” and “device fingerprinting” to track specific user behavior on websites. This also involves processing information that is stored on users' end devices. With the help of the “tracking pixels” integrated into websites and the “cookies” stored on users' end devices, “Yahoo Web Analytics” processes the information generated about the use of our website by users' end devices - e.g. that a specific web page has been accessed - and access data for the purpose of statistically analyzing website usage. The access data includes, in particular, the IP address, browser information, the previously visited website and the date and time of the server request. The storage period for your data is twelve months. Further information on data protection in the context of Yahoo Web Analytics can be found under this link.
   8. Taboola
      We use the content discovery technology of Taboola (16 Madison Square West, 7th Floor, New York, New York 10010) to recommend other online content that may be of interest to you. The representative of Taboola in the EU is LionheartSquared (Europe) Ltd, 2 Pembroke House, Upper Pembroke Street 28 - 32, Dublin, D02 EK 84, Ireland. In order to make these recommendations, Taboola uses cookies and similar technologies to collect information about your device and your user behavior on this website (and other partner websites) and creates user profiles using pseudonyms, which in principle do not allow any conclusions to be drawn about personal data.
      The pseudonymous profiles created in this way are stored by Taboola for 13 months.
      In addition to the general revocation options, you can also use this link to revoke your consent and prevent Taboola from collecting data on this website in the future.
      Further information can be found in Taboola's privacy policy at this link.
   9. Ingenious
      We use tracking technology from Ingenious Technologies AG, Französische Straße 48, 10117 Berlin, to establish a connection between a user's click on an advertising medium or the display of an advertising medium (touch point) and an action by you (e.g. registration or newsletter subscription). At each touch point, your browser sends an HTTP request to the Ingenious server, which transmits certain information.
      This information includes the URL of the website on which the advertising material is placed (referrer URL), the browser identification (user agent) of the end device (including information about the device type and operating system), the IP address of the end device (this IP address is anonymized by Ingenious before storage), HTTP headers (data packet automatically transmitted by your browser with various technical information), the time of the request and, if previously stored on the end device, the cookie with its entire content.
      The tracking technology stores cookies on your end device to document actions. Information about the last touch points is stored in the cookie (i.e. when a specific advertising medium was displayed or clicked on by an end device). A cookie ID generated by Ingenious is also stored in the cookie. This cookie ID is used by Ingenious to store data about the touch points and information about your actions. The stored touch points can be combined into a sequence chain (user journey) if necessary.
      In the case of an action request, the deposit amount is usually transmitted and stored by Ingenious. In addition, the following values can be transmitted and saved Your customer number, new customer feature, your age and gender as well as the information provided by you in a customer survey.
      The information transmitted to Ingenious and the cookies are used exclusively for the purpose of correctly allocating the success of an advertising medium and the corresponding billing.
      Further information can be found at this link; the privacy policy can be found at this link.
   10. Outbrain
       On our website we use the technology of the provider Outbrain UK Ltd, 121 Kingsway, First Floor, London WC2B6PA, United Kingdom.
       With the help of a so-called “Outbrain widget”, you will be referred to further content on our website that may also be of interest to you. In addition, every website visitor who interacts with a widget is assigned a “Unique User ID” (UUID) by Outbrain. This UUID is assigned to the respective browser or device of a website visitor.
       The “Outbrain pixel” is used on our website to determine whether a website visitor has a UUID. This allows us to measure the effectiveness of our campaigns. If a website visitor has a UUID, this also enables us to display advertisements to these UUIDs. Outbrain is the recipient of the data triggered by the retrieval of the Outbrain pixel. For this data processing, Outbrain and we are considered joint controllers within the meaning of the GDPR (Art. 26). The joint responsibility is limited exclusively to the collection of data by the Outbrain pixel. The processing carried out by Outbrain after collection is not the subject of joint responsibility.
       All data points, such as page views and clicks associated with a user ID, are stored for 13 months and then deleted.
       The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG; consent can be revoked at any time with effect for the future.
       You can prevent tracking for the display of interest-based recommendations by Outbrain at any time. To do this, visit your so-called interest profile under this link to revoke your consent to behavioral advertising and/or to prevent the transfer of your personal data to Outbrain's third-party partners. Outbrain's privacy policy is available at this link; there you will find further information on Outbrain UK Ltd's data protection.

Additional services

Google Fonts

This website uses so-called web fonts from Google for the uniform display of fonts. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to Google's servers. This informs Google that our website has been accessed via your IP address. If your browser does not support web fonts, a standard font will be used by your computer. Further information can be found under this link; the privacy policy can be found on this page.
Legal basis for data processing: The legal basis for processing is Art. 6 para. 1 lit. a GDPR (consent).

Google Maps

On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps is a web service for displaying interactive (land) maps in order to visualize geographical information. By using this service, you can search for our local arcades.
Information about your use of our website (such as your IP address) is transmitted to Google servers and stored there as soon as you access the subpage with the “arcade search”, in which the Google Maps map is integrated. This takes place regardless of whether Google provides a user account that you are logged into or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit.f GDPR on the basis of Google's legitimate interests in the display of personalized advertising, market research and/or the needs-based design of its website. Further information can be found at this link; the privacy policy can be found on this page.
Legal basis for data processing: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR). Further information on the use of cookies can be found in the “Cookies” section of this privacy policy.
Basis for third country transfers: Data Privacy Framework (DPF).

Links to websites of other providers

Our websites may contain links to websites of other providers that are not covered by this privacy policy. Insofar as the use of the websites of other providers involves the processing of personal data, please refer to the data protection notices of the respective providers.

Rights of data subjects

You have the following rights in connection with the processing of your personal data by us:

1. Right to information
   You have a right of access to the personal data stored about you. In addition, you are entitled to information about the information listed in Art. 15 GDPR.
2. Right to rectification and right to erasure
   You also have the right to rectification of inaccurate personal data and completion of incomplete personal data in accordance with Art. 16 GDPR and erasure of your personal data if the requirements of Art. 17 GDPR are met.
3. Right to restriction of processing
   Under the conditions of Art. 18 GDPR, you can restrict the processing of your personal data.
4. Right to erasure
   If there is a reason under Art. 17 (1) GDPR, you can request the immediate deletion of personal data concerning you, unless there is an exception to the deletion obligation under Art. 17 (3) GDPR.
5. Right to information
   If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom your personal data have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
   You have the right to be informed about these recipients.
6. Right to data portability
   According to Art. 20 GDPR, you have the right to receive the personal data concerning you from us in a machine-readable format and to transmit the data to another controller without hindrance, provided that the requirements of Art. 20 para. 1 lit. a GDPR are met, or to obtain that your personal data be transmitted directly by us to another controller, insofar as this is technically feasible and no freedoms and rights of other persons are affected. This right does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
7. Right to object
   In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, insofar as this is done on the basis of Art. 6 para. 1 lit. e or lit. f GDPR. In the event of such an objection, we will no longer process this data unless we can prove that there are compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
8. Right to revoke the declaration of consent under data protection law
   You have the right to withdraw your declaration of consent under data protection law at any time by notifying NOVOLINE. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
9. Right to lodge a complaint with a supervisory authority
   In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.
   You can find a list of supervisory authorities under this link.

How can you exercise the above rights?
You can assert all of the data subject rights described above against NOVOLINE by sending your specific request to the following contact details: [email protected]
Please note that we must ensure that we are actually dealing with the data subject in the case of such requests.

For specific requests, you can also contact the appointed data protection officer directly (see “Data protection officer”). The topics and content addressed are subject to strict confidentiality.

Privacy policy as of 28.04.2025

Download as PDF