Legal information
Privacy policy
This policy explains how we process the personal data of visitors to the LOTOTO.digital website and of people who contact us or work with us. Last updated: 10 October 2026.
Controller
- Company: DANUBE DIGITAL s. r. o. (operator of LOTOTO.digital)
- Registered office: Cintorínska 12, 811 08 Bratislava, Slovakia
- Company ID (IČO): 54 818 486
- Registration: Municipal Court Bratislava III, section Sro, file no. 163518/B
- E-mail: hello@danube.digital
- Phone: +421 950 541 343
Legal framework
This policy is issued in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (the “GDPR”) and with Slovak Act No. 18/2018 Coll. on the protection of personal data.
What personal data we process
We process as little personal data as necessary. The website has no registration and no payments. We mainly process:
- Contact form data: name, company, e-mail, phone (optional), type of operation and the content of your message.
- Contact details and the content of communication if you e-mail us or call one of our direct contacts.
- Data of our contact persons, published on the website with their consent: name, job title, work e-mail, phone and photo.
- Website usage data collected through cookies, only to the extent you have agreed to (see Cookies).
- Technical data needed to deliver the website (such as IP address and browser type), processed by our hosting provider when you visit the website.
We obtain personal data directly from you – when you fill in the form, write to us, call us or consent to cookies.
Purposes and legal bases
Answering enquiries and pre-contract communication
We use data from the form and from e-mail or phone communication to answer your enquiry and prepare a first consultation or an offer. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries and keeping records of communication (Art. 6(1)(f) GDPR). You have the right to object to processing based on legitimate interest. If no contract follows, we delete the data no later than two (2) years after our last communication.
Concluding and performing a contract
If you conclude a contract with us for the analysis, implementation or operation of the solution, we process the identification and contact data of you or your representatives as needed to perform the contract (Art. 6(1)(b) GDPR). Without it the contract cannot be concluded or performed. We process the data for the duration of the contract and then archive it as required by law.
Publishing our contact persons
We publish the names, job titles, work contact details and photos of our contact persons with their consent, so you know whom to contact. We publish them for the duration of their work with us or until consent is withdrawn.
Accounting
Accounting and tax law requires us to keep accounting records (Art. 6(1)(c) GDPR). We keep them for ten (10) years following the year to which they relate.
Measuring visits and conversions
If you agree in the cookie settings, we use analytics and marketing tools deployed through Google Tag Manager. They help us understand how the website is used and measure how many visitors contact us – for example clicks on the “Show us your process” button, contact form submissions or clicks on an e-mail address or phone number. We do not send the content of messages or form data to these tools. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time under “Cookie settings” in the footer. Without consent we measure visits and conversions only in anonymised form, without cookies or advertising identifiers, based on our legitimate interest in knowing how well the website and our ads work (Art. 6(1)(f) GDPR). Withdrawing consent does not affect the lawfulness of processing before the withdrawal.
Handling data subject requests
We also process your data to comply with our legal obligation to handle requests under Articles 12 to 21 GDPR. We keep requests and related communication on the basis of legitimate interest (defence of legal claims) for no more than five (5) years after they have been handled.
Recipients of personal data
We do not sell personal data or disclose it to third parties unless there is a legal or contractual reason. We share it only to the extent necessary with these recipients:
- our web hosting and e-mail provider (Websupport, s. r. o.), through which form messages are transmitted and stored;
- Google Ireland Limited (Google Tag Manager and tools deployed through it) – without consent only anonymised cookieless signals, with consent also data from analytics and marketing cookies;
- our accounting and tax service provider;
- public authorities where the law requires it.
Transfers to third countries
We do not primarily transfer your personal data to third countries. Data may be transferred to the United States when Google tools are used. Google participates in the EU-U.S. Data Privacy Framework and also provides safeguards in the form of standard contractual clauses under Commission Implementing Decision (EU) 2021/914.
We do not carry out automated decision-making or profiling with legal effects.
Security
We protect personal data with appropriate technical and organisational measures against unauthorised processing, loss, destruction or damage. Only authorised persons have access to it, to the extent necessary for their work.
Your rights
As a data subject you have in particular the right:
- of access to your personal data (Art. 15 GDPR);
- to rectification and completion of your personal data (Art. 16 GDPR);
- to erasure (Art. 17 GDPR);
- to restriction of processing (Art. 18 GDPR);
- to data portability (Art. 20 GDPR) where processing is based on consent or a contract;
- to object to processing based on legitimate interest (Art. 21 GDPR);
- to withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal;
- to lodge a complaint with a supervisory authority – the Office for Personal Data Protection of the Slovak Republic or the authority in the EU country where you live.
You can exercise your rights by e-mail at hello@danube.digital or in writing at our registered office.
Data protection officer
The controller has not appointed a data protection officer, as this is not required by law for its activities.
Next step
Have a question about your LOTOTO process?
Show us how LOTOTO works on your site today. We will look at what can be digitalised.
