Privacy Policy
This privacy policy informs you, in accordance with Art. 13, 14 GDPR, of the nature, scope and purpose of the processing of personal data within our online offering.
1Data controller
Data controller within the meaning of the GDPR:
Archil Iluridze
Dischingerstraße 23, 68723 Oftersheim
Email: support@llottoki.de
2General information on data processing
We only process personal data of our users to the extent necessary to provide a functioning website and our content and services, or where a legal basis exists under Art. 6(1) GDPR (consent, contract performance, legitimate interest). The relevant legal basis is stated for each processing activity below.
3Hosting and server log files
This website is operated with a hosting provider located in the EU; the database is hosted with a separate EU-based provider. Each time the website is accessed, the hosting provider automatically collects information in server log files transmitted by your browser (IP address, date and time of request, page requested, referrer URL, browser and operating system used). This data serves the technical provision and security of the website and is deleted after 30 days at the latest, unless retention is required for security reasons. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, functioning operation).
4Cookies and consent management
This website uses cookies. Technically necessary cookies (including those storing your cookie preference) are set on the basis of Art. 6(1)(f) GDPR and/or § 25(2) TTDSG. All non-essential cookies (analytics, advertising) are only set after your explicit consent via our consent management tool, legal basis Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG. See our Cookie Policy for details on individual cookies.
5Google Analytics 4
Subject to your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, in Consent Mode. Data is only collected after consent has been given; IP addresses are shortened/anonymised by Google. The purpose is statistical analysis of usage behaviour to improve our offering. Legal basis: Art. 6(1)(a) GDPR. You may withdraw your consent at any time via the cookie settings.
6Google AdSense
Subject to your consent, we embed advertisements from Google AdSense (Google Ireland Limited). Google may set cookies and process usage data to display personalised advertising. Legal basis: Art. 6(1)(a) GDPR. Without consent, only non-personalised ads are served. Further information: Google's privacy policy and Google Ads settings.
7Error and outage monitoring (Sentry)
For technical error diagnosis we use Sentry, which, in the event of a software error, collects technical information (including truncated IP address, browser information, error message). No form-input content is transmitted. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functioning, error-free website).
8User account and saved numbers
If you create a user account to save number combinations, we process your email address and a password hash to fulfil the usage contract (Art. 6(1)(b) GDPR). Your saved combinations are processed exclusively to provide this feature and are not shared with third parties.
9Payment processing
Paid add-on features (Premium), where available, are offered exclusively through our mobile application and processed via the payment provider Polar. When a paid subscription is taken out, Polar processes the data required for payment as an independent controller; legal basis Art. 6(1)(b) GDPR. Polar's own privacy policy applies additionally.
10Transfers to third countries
Some of the providers named above (including Google, Sentry) may transfer data to countries outside the EU/EEA, in particular the United States. Where required, these providers rely on EU Standard Contractual Clauses under Art. 46 GDPR or an EU adequacy decision. A list of processors engaged can be requested from the controller.
11Retention period
Personal data is deleted as soon as the purpose of processing no longer applies and no statutory retention obligations apply. Account data is stored until the user account is deleted, server log files after 30 days at the latest, analytics cookies according to the periods stated in the Cookie Policy.
12Your rights as a data subject
Subject to the statutory requirements, you have the following rights regarding personal data concerning you:
- Right of access to your stored data (Art. 15 GDPR)
- Right to rectification of inaccurate data (Art. 16 GDPR)
- Right to erasure of your data (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent given, with future effect
13Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data, in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement.
14Automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place. The statistical analyses and AI-generated explanations displayed on this site are purely informational and have no legal or similarly significant effect on users.
15Changes to this privacy policy
We will update this privacy policy whenever the legal situation, the services used, or the nature of data processing changes. The version published at the time of your visit applies.