1. Who is responsible for data processing?

The person responsible for the purpose of Article 4 No. 7 of EU Regulation 2016/679 („GDPR“) and other national data protection laws of member states as well as other provisions of data protection law is the person listed in the imprint:
ZEAL Network SE
Straßenbahnring 11
20251 Hamburg
Our data protection officer can be reached at:
datenschutz nord GmbH
Konsul-Schmidt-Str. 88
28217 Bremen
E-Mail an datenschutzbeauftragter@lotto24.de

2. Which data do we process?

When you visit our Website via your browser, we only collect the personal data that your browser transmits to us to enable you to visit our Website, and to ensure stability and safety:
– IP address,
– Time,
– the requested page and
– Information about the end device, operating system, and browser version you are using.
We process the transmitted IP address strictly earmarked, for a period of 90 days, in the interest of being able to detect, limit and eliminate attacks on our websites and in order to fulfil the conditions and provisions contained in our gaming permission. After this period, we will delete or anonymize the IP address. The legal basis for the processing of the above data is Art. 6 Para. 1 lit. c and Art. 6 Para. 1 lit. f GDPR.

3. Cookies

We use cookies on our websites. Cookies are small text files that can be stored and read on your end device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. Cookies can contain data that makes it possible to recognize the device you are using. In some cases, however, cookies only contain information on certain settings that cannot be related to a specific person.
We use session cookies and permanent cookies on our websites. The processing is based on Art. 6 Para. 1 S. 1 lit. f GDPR and in the interests of optimising or enabling user guidance and adapt-ing the presentation of our website.
Your browser settings can be changed to inform you of cookie usage and make this transparent for you. You can also delete cookies at any time via the corresponding browser setting and pre-vent the setting of new cookies. Please be aware that our web pages will not be optimally displayed and that some functions will no longer be available.

4. Online applications 

You have the possibility to apply via our website for the vacancies we advertise. We process your personal data based on § 26 BDSG-neu. We process the data that you disclose to us within the scope of your online application exclusively for the purpose of selecting applicants. Data will not be processed for any other purpose.
You yourself determine the scope of the data that you wish to transmit to us within the frame-work of your online application. Online applications are encrypted and transmitted electronically to a server of our service provider Greenhouse Software Inc. The applicant data will only be forwarded to the people in our company involved in the recruitment process of the respective position(s) you applied for. In addition, your data will not be passed on. Your data will be treat-ed confidentially in our company. If your application is unsuccessful, your data will be deleted 6 months after you have been rejected from all your applications at ZEAL Network SE and its subsidiaries.
If we are also allowed to consider your application for other or future job advertisements, please include a note to this effect on your application. We will then process your data based on Art. 6 Para. 1 S. 1 lit. a GDPR.

5. Data processors 

We transmit your data within the scope of data processing in accordance with Art. 28 GDPR to service providers who support us in the operation of our websites and the associated processes (here analytical tracking as well as online application). We select, engage and regularly monitor the service providers carefully and they are bound to our instructions. We use the following service providers in particular:
Greenhouse Software Inc.
The job offer page and the online application form are operated by Greenhouse Software Inc., the service provider commissioned by us. Greenhouse is a cloud service provider based in the USA and provides the technical solution for our application and recruiting management. When you visit the job offer page, log files/data will also be saved. The data will be processed for us by the service provider strictly in accordance with instructions within the framework of a data processing relationship. This data ensures the proper functioning of the subpage and also serves to improve and secure the systems. This data record consists of:
– Browser type/version,
– Operating system used,
– IP address,
– Date and time of the server request
The mentioned data will be completely deleted after six weeks. The legal basis for the processing of the above data is Art. 6 Para. 1 Letter f GDPR.
When you submit the job offer form, your personal data entered there will be transferred to a server of our service provider in the USA and stored there. The personal data transmitted in this way will be processed for us by the service provider strictly in accordance with instructions within the framework of our data processing relationship. A reasonable level of data protection is provided by Greenhouse Software Inc. participation in the Privacy Shield in accordance with Art. 45 Para. 1 GDPR. You can view the certificate here.

6. Vimeo Videos

On some subpages of our website we embed Vimeo videos. A visit of these sub-pages leads to Vimeo content being downloaded. In this context, Vimeo also receives your IP address, which is technically required to retrieve the content. We have no influence on further data processing by Vimeo, which is operated by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. However, when embedding the videos, we take care to activate the extended data protection mode offered by Vimeo.

7. Google Maps

We use Google Maps to display maps and to create directions. This is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter: Google).
Through certification according to the EU-US Privacy Shield Google guarantees that it will follow the EU’s data protection regulations when processing data in the United States. To enable the display of certain fonts on our website, a connection to the Google server in the USA is established whenever our website is accessed. If you access the Google Maps components integrated into our website, Google will store a cookie on your device via your browser.
Your user settings and data are processed to display our location and create a route description. We cannot prevent Google from using servers in the USA. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in optimizing the functionality of our website. By connecting to Google in this way, Google can determine from which website your request has been sent and to which IP address the directions are transmitted. If you do not agree to this processing, you can prevent the installation of cookies by changing the appropriate settings in your browser.
Further details can be found in the section about cookies above. In addition, the use of Google Maps and the information obtained via Google Maps is governed by the Google Terms of Use and the Terms and Conditions for Google Maps. Detailed information on Google’s privacy policy can also be found here.

8. Your rights

When processing your personal data, GDPR grants you as a website user certain rights:
Right to information (Art. 15 GDPR):
You have the right to request confirmation as to whether personal data concerning you are be-ing processed; if this is the case, you have the right to access this personal data and the information specified in Art. 15 GDPR.
Right to rectification and cancellation (Art. 16 and 17 GDPR):
You have the right to demand immediately the correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data. You also have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued.
Right to limitation of processing (Art. 18 GDPR):
You have the right to demand the restriction of the processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have lodged an objection against the processing in accordance with Art. 21 GDPR or for the duration of any examination as to whether our legitimate interests outweigh your interests as a data subject.
Right to data transferability (Art. 20 GDPR):
In certain cases, which are listed in Art. 20 GDPR in detail, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to demand the transfer of this data to a third party.
Right of objection (Art. 21 GDPR):
If data is collected on the basis of Art. 6 Para. 1 S. 1 lit. f GDPR (data processing to safeguard legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are verifiable compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
Right of appeal to a supervisory authority
You have according to Art. 77 GDPR the right on complaint with a supervisory authority if you are of the opinion that the processing of the data concerning you offends your rights. In particular, the right of appeal may be exercised before a supervisory authority in the Member State in which you are staying, at your place of work or at the place where the alleged infringement is suspected.

9. Who can I contact if I have questions about the privacy policy?

If you have any questions about the collection, processing or use of your personal data, or if you need information, correction, blocking or deletion of data, please contact our data protection officer:

datenschutz nord GmbH
Konsul-Smidt-Str. 88
28217 Bremen
E-Mail an datenschutzbeauftragter@lotto24.de
or via mail to
ZEAL Network SE
Straßenbahnring 11
20251 Hamburg