How Does It Work?
The policy explains when, why, and how we may process your information (“personal data”). Additionally, it offers essential details about your legal rights. This policy’s purpose is not to override any agreements with us or rights you might have under data protection laws.
Your Personal Data is Our Responsibility
The primary responsible authority looking after your personal data is GSH Online Media. The company is fully registered, the official address being Titus Street no. 16, Bucharest. The representative inside the EU of your personal data, also referred to as Data Controller, is GSH Online Media. Data Controller means that the company determines the means and purposes of processing sensitive data.
Furthermore, every piece of information that is gathered is processed in accordance with the General Data Protection Regulation(GDPR), as implemented by European Law.
In essence, this means that your personal information will only be used for authorized and legal purposes.
Although we are primarily responsible for protecting your data, you should know that information may be stored in databases that other companies can access. All those companies will follow the guidelines outlined in this Policy when accessing your information.
Processing Personal Data
If you’re wondering what personal data we process, we’ll break it down for you. When visiting our site, we process the following:
- IP address;
- Location data;
- Website usage;
- Personal preferences and opinions.
Why & When Do We Process Your Personal Data?
When you access our websites or use our services, we will collect the information directly from you. We will use your personal data to:
- Send out promotional emails relating to products and services.
- Analyse information in our systems and databases to improve how we run our business and websites according to user preferences and provide a better service and user experience.
- Improve and target advertisements that you receive from us.
- Register you for a chat forum or community if we make it available, in which you can provide comments.
- Meet or exercise any of our legal obligations or rights.
We will only process your personal data for the purposes set out in the section above and where we are glad that:
- You have provided your consent to us using the data in that way, or
- Our use of your personal data is necessary to support “legitimate interests” that we have as a business (for example, to improve our products or to carry out analytics across our datasets) in a way that is proportionate and respects your privacy.
Who Do We Share Your Data With?
In order to develop our business and deliver services, we partner with many third parties. Every now or then, these third parties may need access to your personal data. On top of that, we have to share your information with any member of our group of companies, including our subsidiaries, our ultimate holding company, and all its subsidiaries, as it is responsibly mandatory for the purposes and on the legal bases set out in this policy.Moreover, we might also share aggregated information. This refers to information about our users that we combine so that it no longer identifies or references an individual user. The aggregated information includes:
- anonymised information for regulatory compliance;
- industry and market analysis;
- demographic profiling;
- marketing and advertising, and other business purposes.
- (I) To comply with our legal obligations.
- (II) To comply with the legal process and to respond to claims asserted against us.
- (III) To respond to requests relating to a criminal investigation or alleged or suspected illegal activity or any other activity that may expose us, you, or any other of our users to legal liability.
The legal background for this processing works in our legitimate interests, which are the protection and assertion of our legal rights and the proper protection of our business against risks.
Another reason for using your data is sending direct marketing communications regarding products and services that our partners and we offer, including, for example, online casinos, sports betting, and financial services. The communication unfolds in the form of email or targeted online advertisements. In some cases, our processing of your personal data for marketing purposes will be based on our legitimate interests. When required by law, it will need your consent.You have the right to refuse to receive direct marketing at any moment. You can contact us or use the opt-out option included in all direct marketing emails.We take measures to keep the amount of direct marketing to a fair and proportionate level and only send you communications that, based on the information we have about you, we feel may be relevant or of interest to you.
How Long Do We Keep Your Personal Data?
We will keep your data as long as necessary for the purposes discussed above in this policy. In some circumstances, we will retain your personal data during a specific period to meet, for example, legal, tax or accounting requirements.We have a data retention policy for the personal information we handle. When your personal information is no longer needed, we'll ensure it's either safely removed or anonymised.
What Are Your Rights?
You are entitled to a number of rights regarding your personal data. You’ll find more information about these rights in the paragraphs listed below. To exert your rights, you may get in touch by sending an email to [email protected].Please note the following if you wish to exert your rights:
You may ask us to:
- Confirm whether we are processing your personal data;
- Offer you a copy of that data;
- Provide you with other information about your personal data, for instance, what data we have, what we use it for, whom we disclose it to, whether we transfer it outside the EU and how we protect it, how long we keep it for, what rights you have, how you can make a complaint, where we got your data from and whether we have carried out any Automated Decision Making or Profiling, to the extent that information has not already been provided to you in this Policy.
- You may ask us to rectify inaccurate personal data.
- We might seek to verify the accuracy of the data before rectifying it.
You may ask us to erase your personal data, but only when:
- It is no longer needed for the purposes for which it was collected; or
- You have withdrawn your consent (where processing was based on consent); or
- Following a successful right to object (see ‘Objection’ below); or
- It has been processed unlawfully;
- To comply with a legal obligation.
We are not obligated to comply with your request to delete your personal data if the processing of your information is necessary:
- For compliance with a legal obligation; or
- For the establishment, exercise, or defence of legal claims;
Although these two are the most likely circumstances in which we would deny that request, there are still specific circumstances in which we are not required to abide by your erasure request.
You may require us to restrict (i.e. keep but not use) your personal data, but only when:
- Its accuracy is contested (see Rectification) to allow us to verify its accuracy; or
- The processing is unlawful, but you do not want it erased; or
- It is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise or defend legal claims; or
- You have exercised the right to object, and verification of overriding grounds is pending.
We can continue to use your personal data following a request for restriction when:
- we have your consent; or
- to establish, exercise or defend legal claims; or
- to protect the rights of another natural or legal person.
You can request to have your personal data "ported" directly to another Data Controller or to get it from us in a structured, common, machine-readable format, but only in the following circumstances:
- The processing is based on your consent or on the performance of a contract with you; and
- The processing is carried out by automated means.
If you believe that your fundamental rights and freedoms outweigh our legitimate interests, you have the right to object to any processing of your personal data that has our "legitimate interests" as its legal justification. We have the opportunity to prove that we have compelling legitimate interests which override your rights and freedoms.
You have the right to request a copy of, or reference to, the safeguards under which your personal data is transferred outside of the European Economic Area.For reasons of commercial sensitivity, we may redact data transfer agreements or associated documents (i.e. obscure specific information included within these documents).
You have the right to file a complaint regarding our processing of your personal data with the relevant local supervisory body.Although you have the right to contact your supervisory authority at any time, we ask that you address any issues with us first.