GENERAL TERMS AND CONDITIONS OF PERSONAL DATA PROTECTION - BetX Czech Republic

GENERAL TERMS AND CONDITIONS OF PERSONAL DATA PROTECTION BETX CZ

according to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“Regulation”) and Act No. 110/2019 Coll., on the processing of personal data (“PPD Act”).

I. Basic provisions

  1. The controller of personal data is: EVONA ELECTRONIC, spol. s.r.o., with registered office at: Stará Vajnorská cesta 17, 831 04 Bratislava, Slovak Republic, ID: 31341357, registered in the Commercial Register kept by the District Court Bratislava III, section: Sro, insert No.: 4260/B (“Controller”).

  2. Contact details of the Controller are:
    Postal address: EVONA ELECTRONIC, spol. s r.o., Stará Vajnorská cesta 17, 831 04 Bratislava, SR
    Telephone number: 800 900 890; +421 244 257 333
    Email: info@bet-x.cz

  3. Personal data (“PD”) means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

II. Sources and categories of processed personal data

  1. The Controller processes personal data of the data subject obtained within its business activities while fulfilling its legal obligations, based on the performance of a contract / order, consent, or potentially due to the legitimate interests of the Controller.
  2. The Controller processes only common personal data.

III. Purpose and legal basis for processing personal data

The purpose and legal reasons for processing personal data are as follows:

a) Registration of players for participation in gambling activities and creation of a user account – the legal basis for processing PD is the fulfillment of a legal obligation under Act No. 186/2016 Coll. on gambling (Article 6(1)(c) of the Regulation), provision of PD for this purpose, and the legal basis for processing is a legal requirement – retention period for personal data: 10 years from the completion of player registration, the period starts running from the first day of the calendar year following the year in which the registration was completed;

b) Identification and verification of players – the legal basis for processing PD is the fulfillment of a legal obligation by the controller under Act No. 253/2008 Coll. on certain measures against the legalization of proceeds from crime and the financing of terrorism (Article 6(1)(c) of the Regulation), provision of PD for this purpose, and the legal basis for processing is a legal requirement – retention period for personal data: 10 years from the completion of the last transaction, the period starts running from the first day of the calendar year following the year in which the last transaction was completed;

c) Handling of complaints – the legal basis for processing PD is the fulfillment of a legal obligation under Act No. 634/1992 Coll. on consumer protection and related regulations (Article 6(1)(c) of the Regulation), provision of PD for this purpose, and the legal basis for processing is a legal requirement – retention period for personal data: 5 years from the end of the complaint procedure;

d) Accounting management – the legal basis for processing PD is the fulfillment of a legal obligation under Act No. 536/1991 Coll. on accounting and related regulations (Article 6(1)(c) of the Regulation), provision of PD for this purpose, and the legal basis for processing is a legal requirement – retention period for personal data: 10 years from the end of the contractual relationship;

e) Execution of non-cash payment /winning payout/ – the legal basis for processing PD is the fulfillment of a legal obligation by the controller under Act No. 254/2004 Coll. on limiting cash payments (Article 6(1)(c) of the Regulation), provision of PD for this purpose, and the legal basis for processing is a legal requirement – retention period for personal data: 10 years from the end of the contractual relationship;

f) Membership of the customer (player) in the loyalty program “BETX club” operated by the operator – the legal basis for processing PD is the consent given by the data subject (Article 6(1)(a) of the Regulation), provision of PD for this purpose, and the legal basis for processing is not a requirement of the customer (player) – retention period for personal data: until the consent is revoked, otherwise until the end of the contractual relationship (membership in the loyalty program);
g) Management of the controller’s contractual agenda – the legal basis for processing personal data is the fulfillment of contractual obligations (Article 6(1)(b) of the Regulation), providing personal data for this purpose is a contractual requirement. The retention period for personal data is 10 years from the end of the contractual relationship.

h) Protection and enforcement of rights, rights protected by law, and other legitimate interests of the controller in concluding contractual relationships with third parties – the legal basis for processing personal data is the legitimate interest (Article 6(1)(f) of the Regulation), which involves protecting and enforcing the rights, rights protected by law, and other legitimate interests of the controller in concluding contractual relationships with third parties, during their performance, as well as after their termination, assessing, managing, and optimizing the business and reputational risks of business and other entities, optimizing decision-making processes for users and processes in the area of financial management and cash flow, optimizing the debt recovery process, assessing the risk of non-repayment, assessing the risk of non-repayment of credit or insurance products. The retention period for personal data is until the end of the contractual relationship / if no contract is concluded, personal data are not retained /.

i) For the purpose of placing an ID of an anonymous user – a cookie file (analytical tool for monitoring websites) on the website www.bet-x.cz – the legal basis for processing personal data is consent (Article 6(1)(a) of the Regulation).

These websites use cookies that distinguish their visitor from other users. This allows us to improve our website and provide a better browsing experience for individual visitors. Cookies are small data files placed in the browser or hardware of the device containing certain information that enables the website to recognize the visitor. Cookies are used for the basic functionality of the website, streamlining the user interface, customizing advertising content, and analyzing the traffic to our website. We use cookies for the following purposes:

      • Necessary (always active, cannot be turned off): These cookies are necessary for the proper functioning of the website. They help create usable websites by enabling basic functions such as website navigation and access to protected areas of the website. Websites cannot function properly without these cookie files.
      • Analytical: They help us understand how you use the website by collecting and reporting information anonymously. We can use them to improve our website and understand how to communicate with visitors.
      • Profiling (marketing): Thanks to these cookie files, we can display relevant content and advertisements that may be interesting and useful to you.

j) Sending information about news in the services of the controller in the field of gambling, about marketing actions, and about news in the services provided by the controller – the legal basis for processing personal data is the legitimate interest (Article 6(1)(f) of the Regulation), which involves working with registered customers, promoting services after their previous use by the customer. The retention period for personal data is for the necessary time during the customer’s registration or if the customer does not unsubscribe from the subscription during the registration period.

IV. Period of Personal Data Retention

1. The controller retains personal data:

  • For the period necessary to fulfill rights and obligations arising from the law or from the contractual relationship and to assert claims arising from these contractual relationships (for the duration specified in Article III. a) to j) above),
  • Until consent for the processing of personal data for the purposes requiring consent is revoked.

2. After the expiration of the period of personal data retention, the controller will erase the personal data.

V. Recipients of Personal Data

  1. Recipients of personal data may include processors (e.g., external accountants), third parties (e.g., lawyers), individuals who come into contact with personal data, but do not further process them, and are bound by confidentiality obligations to the controller.

  2. The controller does not intend to transfer personal data to third countries (countries outside the EU) or international organizations.

VI. Rights of the Data Subject

  1. Subject to the conditions set forth in the Regulation, the data subject has the right to:

    • Access the personal data,
    • Rectify, erase, or restrict the processing of personal data,
    • Object to the processing of personal data,
    • Data portability,
    • Withdraw consent to the processing of personal data for the purposes of membership in the BETX club at any time by sending an email to: info@bet-x.cz or by calling the following telephone numbers: 800 900 890; +421 244 257 333, without affecting the lawfulness of processing based on consent before its withdrawal,
    • Lodge a complaint with the supervisory authority (Office for Personal Data Protection of the Czech Republic, Pplk. Sochora 27, 170 00 Prague 7, telephone: +420 234 665 111 (switchboard), email: posta@uoou.cz).

VII. Conditions for Securing Personal Data

  1. The controller declares that it has implemented all appropriate technical and organizational measures to secure personal data,
  2. The controller has implemented technical measures to secure data repositories and repositories of personal data in paper form.
  3. The controller declares that only authorized personnel have access to personal data.

VIII. Final Provisions

  1. These General Terms and Conditions for the protection of personal data apply to activities related to the operation of gambling under Act No. 186/2016 Coll., on gambling in the territory of the Czech Republic, and related activities and contractual relationships with third parties, as well as the operation of the website www.bet-x.cz.
  2. The data subject is informed about the processing of personal data separately upon the establishment of a contractual relationship/registration.
  3. The controller is entitled to amend these terms and conditions. The new version of the personal data protection terms will be published without delay. The current version of these personal data protection terms is available on the website www.bet-x.cz.

These General Terms and Conditions for the protection of personal data for BETX CZ shall become effective as of March 22, 2024.