Privacy policy

The European Lotteries PRIVACY POLICY

The European Lotteries and Toto Association (“EL”) cares about privacy and places great importance on the protection of personal data. EL is fully committed to comply with all applicable data protection laws and regulations at all times. This Privacy Notice applies to personal data that is collected when visiting EL’s websites or when registering for an EL event. The following will provide you with information about the personal data that is collected and how it is processed and used. Please note that if you make use of services provided by third parties, only the Privacy Notice of these third parties shall apply to the personal data collected via these services. 

ABOUT US

In this Privacy Notice references to "we" or "us" or "EL" are to:

The European Lotteries and Toto Association, a company registered in Belgium with company number BE 0888.001.247, whose registered office is at 9-31 Avenue des Nerviens B-1040 Brussels, Belgium.

When EL collects and uses your personal data it will act as a data controller. If you have any questions about how we collect, store or use your personal data, please contact us via info@european-lotteries.org

This Privacy Notice may be subject to modification from time to time. Any changes will be published on our websites. We therefore recommend that you check our Privacy Notice regularly. This Privacy Notice was last updated in July 2023.

INFORMATION WE COLLECT

In the framework of our operations, we may collect and process your personal data, i.e. data which allow us to identify you as an individual. EL collects personal data that may include:

• Name;
• Address;
• Telephone number;
• Email address;
• Job title
• Company;
• Company bank details;
• In case of visa requirements: copy of passport or ID documents;
• Information on event attendance (e.g. list of participants);
• Information on event organisation such as allergy information and disability requests;
• Event photographs and video footage.

We limit our request to personal data that are necessary to provide you with the products or services you have expressed interest in. 

You can visit our website without providing any personal data. However, if you do not provide information requested by us, we may not be able to provide services to you or the website may not function properly.

Please rest assured that we will only take photographs and/or video footages of you during our events provided you have expressly consented to those being taken. You can object to the use of photographs and/or video footages by sending an email to info@european-lotteries.org. EL will then no longer use your personal data and will also remove you from already published material wherever possible.

HOW DO WE COLLECT THAT INFORMATION

We collect your personal data:

• face to face (directly from you and through third parties)
• by telephone
• by email
• via our website

WHO DO WE COLLECT INFORMATION FROM

We collect personal data:

• from you;
• from your employer;
• from other (internal) departments: data is collected by accessing information held by our other internal departments.  This includes access by the majority of departments to personal information held in our IT systems;
• from publicly available sources: in some situations, we use publicly available sources e.g., Internet search engines and social media.

HOW WE USE THE INFORMATION WE COLLECT

EL may use your personal data for a number of different purposes:

• Organize events and manage membership;
• Inform you about EL’s upcoming events, products and services;
• Register for events, seminars or workshops;
• Share with its Members and Partners;
• Send you our newsletter or any information on upcoming seminars and events;
• Comply with legal requirements or other mandatory obligations;
• Improve our services and manage our website’s content as well as website traffic.

In each case, we must have a legal ground to do so. We will rely on the following legal grounds when we process your personal data:

• We need to use your personal data to enter into or perform the contract that we hold with you. For example, to register you for events or manage your membership.
• We need to use your personal information for a legitimate business purpose (e.g. to keep business and accounting records, manage our business operations and to develop and to improve our products and services). When using your personal data based on this legal ground, we will always consider your rights and interests. 
• We have a legal or regulatory obligation to use your personal data.
• We have your consent.

For the purpose of event organisation, we sometimes collect certain types of personal information known as "special categories of personal data", such as information on food allergies and/or disability requirements in relation to event attendees. Data protection law provides additional protections for these types of data. We can rely on the following legal ground when processing special categories of personal data:

• You have given your explicit consent.

Purpose for processing

Legal grounds for using your personal data

To register you as an employee of our Members/Partners and/or event attendee.

• It is necessary to enter into your contract.
• We have a relevant legal or regulatory obligation.

To provide services to you, such as organising events, seminars and workshops, and managing membership.

• It is necessary to enter into your contract.
• We have a legitimate business purpose (to organise events and manage membership).
• You have given your consent.

Communicating with you and resolving any complaints that you might have.

• It is necessary to enter into or perform your contract.
• We have a legitimate business purpose (to send you communications, record and investigate complaints and ensure that future complaints are handled appropriately).

Complying with our legal or regulatory obligations.

• We have a relevant legal or regulatory obligation.

Managing our business operations such as maintaining accounting records, analysis of financial results, statistical analysis, internal audit requirements, receiving professional advice (e.g. tax or legal advice) and facilitating payment of our services.

• We have a relevant legal or regulatory obligation.
• We have a legitimate business purpose (to effectively manage our business operations).

Reviewing, assessing, tailoring and improving our service offerings

• We have a legitimate business purpose (to develop and improve our services to ensure we provide high customer satisfaction)

Investigating or detecting the unauthorised use of our systems, to secure our system and to ensure the effective operation of our systems.

• We have a legitimate business purpose (to ensure the integrity and security of our systems).

Transferring or selling part of our business or re-organising our company structure.

• We have a legitimate business purpose (to manage our business portfolio and re-organise our company).
• We have a relevant legal or regulatory obligation.

To market our services.

• We have a legitimate business purpose (to market our services).
• You have given your consent.

Tracing and recovering debt

• We have a legitimate business purpose (to trace and recover debt that is owed to us).

WITH WHOM WE SHARE YOUR PERSONAL DATA

We share your personal data with other colleagues/internal departments via internal reports and access to central IT systems.

In some cases, we also disclose your personal data to the third parties listed below for the purposes described in this Privacy Notice.

• Service providers for event organisation, PA/PR agencies and website management
• Auditors, solicitors, tax advisors, legal advisors
• Payment providers / IT providers / hosted IT solution providers

We may also share (a part of the) personal data collected for events with EL Partners.

You can contact us for details of specific disclosures made in respect of your data. All these third parties will only have access to your personal data to the extent required to perform their services.

INTERNATIONAL DATA TRANSFERS

Sometimes we (or third parties acting on our behalf) will transfer personal data that we collect about you to countries outside of the European Economic Area ("EEA"). Where a transfer occurs, we will take steps to ensure that your personal data is protected. We will do this by putting in place appropriate contracts. We will use a set of contract wording known as the "standard contractual clauses" which has been approved by the data protection authorities. A summary of our regular data transfers outside the EEA is set out below:

Third party

Country of transfer

Reason for the transfer

Scientific Games

USA

Level 1 Partnership

IGT

USA

Level 1 Partnership

NeoGames SA

Israel

Level 2 Partnership

If you would like further information regarding our data transfers and the steps we take to safeguard your personal data, please contact us via info@european-lotteries.org.

HOW LONG DO WE KEEP PERSONAL DATA

We will not retain your personal data for a period exceeding what is necessary to fulfil the purposes set out in this Privacy Notice or as otherwise required by law. In principle, the retention period shall not exceed five (5) years after the last use of your personal data.

YOUR RIGHTS

Under data protection law you have a number of rights in relation to the personal data that we hold about you. These rights might not apply in every circumstance. You can exercise your rights by contacting us at any time using info@european-lotteries.org.

Please note that although we take your rights seriously, there may be some circumstances where we cannot comply with your request such as where complying with it would mean that we couldn't comply with our own legal or regulatory requirements. In these instances we will let you know why we cannot comply with your request.

When you contact us to exercise one of these rights, we may need to ask you for specific information to confirm your identity.  This is a security measure to ensure that your personal information is not disclosed to any person who does not have the right to receive it.  We may also contact you to ask for more information about your request to speed up our response.

Under certain circumstances, you have the right to:

• Access your personal data;
• Rectify your personal data;
• Request erasure of your personal data;
• Request restriction of processing (e.g. if you think the information we hold on you is inaccurate);
• Withdraw your consent at all times (e.g. unsubscription to our newsletter);
• Data portability;
• Object to the processing of your personal data (e.g. for marketing purposes); 

EL does not carry out automated decision making.

You have a right to file a complaint with the Belgian Data Protection Authority if you believe that we have breached data protection laws when using your personal data. Their contact details can be found here:

Gegevensbeschermingsautoriteit / Autorité de protection des données

Drukpersstraat 35

1000

Brussels (Belgium)

contact@apd-gba.be

HOW WE PROTECT YOUR PERSONAL DATA

EL is fully committed to safeguard your personal data by taking adequate organizational and technical measures against unauthorized access, unlawful destruction or accidental loss of your personal data.

CONTACT INFORMATION

Should you have any questions, queries or concerns regarding this Privacy Notice, please contact us at the following email address: info@european-lotteries.org