Legal information

Privacy policy

This policy explains how we process the personal data of visitors to the LOTOTO.digital website and of people who contact us or work with us. Last updated: 10 October 2026.

01

Controller

  • Company: DANUBE DIGITAL s. r. o. (operator of LOTOTO.digital)
  • Registered office: Cintorínska 12, 811 08 Bratislava, Slovakia
  • Company ID (IČO): 54 818 486
  • Registration: Municipal Court Bratislava III, section Sro, file no. 163518/B
  • E-mail: hello@danube.digital
  • Phone: +421 950 541 343
03

What personal data we process

We process as little personal data as necessary. The website has no registration and no payments. We mainly process:

  • Contact form data: name, company, e-mail, phone (optional), type of operation and the content of your message.
  • Contact details and the content of communication if you e-mail us or call one of our direct contacts.
  • Data of our contact persons, published on the website with their consent: name, job title, work e-mail, phone and photo.
  • Website usage data collected through cookies, only to the extent you have agreed to (see Cookies).
  • Technical data needed to deliver the website (such as IP address and browser type), processed by our hosting provider when you visit the website.

We obtain personal data directly from you – when you fill in the form, write to us, call us or consent to cookies.

04

Purposes and legal bases

Answering enquiries and pre-contract communication

We use data from the form and from e-mail or phone communication to answer your enquiry and prepare a first consultation or an offer. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries and keeping records of communication (Art. 6(1)(f) GDPR). You have the right to object to processing based on legitimate interest. If no contract follows, we delete the data no later than two (2) years after our last communication.

Concluding and performing a contract

If you conclude a contract with us for the analysis, implementation or operation of the solution, we process the identification and contact data of you or your representatives as needed to perform the contract (Art. 6(1)(b) GDPR). Without it the contract cannot be concluded or performed. We process the data for the duration of the contract and then archive it as required by law.

Publishing our contact persons

We publish the names, job titles, work contact details and photos of our contact persons with their consent, so you know whom to contact. We publish them for the duration of their work with us or until consent is withdrawn.

Accounting

Accounting and tax law requires us to keep accounting records (Art. 6(1)(c) GDPR). We keep them for ten (10) years following the year to which they relate.

Measuring visits and conversions

If you agree in the cookie settings, we use analytics and marketing tools deployed through Google Tag Manager. They help us understand how the website is used and measure how many visitors contact us – for example clicks on the “Show us your process” button, contact form submissions or clicks on an e-mail address or phone number. We do not send the content of messages or form data to these tools. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time under “Cookie settings” in the footer. Without consent we measure visits and conversions only in anonymised form, without cookies or advertising identifiers, based on our legitimate interest in knowing how well the website and our ads work (Art. 6(1)(f) GDPR). Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

Handling data subject requests

We also process your data to comply with our legal obligation to handle requests under Articles 12 to 21 GDPR. We keep requests and related communication on the basis of legitimate interest (defence of legal claims) for no more than five (5) years after they have been handled.

05

Cookies

Cookies are small text files that a website stores in your browser. We use necessary cookies without consent because the website cannot work properly without them. Other cookies are used only with your consent.

  • Necessary: “lototo_consent” stores your cookie choice (180 days), “lototo-lang” your manual language choice (1 year, also in browser storage).
  • Analytics (only with consent): measuring visits, for example Google Analytics, deployed through Google Tag Manager.
  • Marketing (only with consent): measuring conversions and ads, for example Google Ads, deployed through Google Tag Manager.

Google Tag Manager loads on every visit. Until you agree to analytics or marketing cookies, Google tools run in cookieless mode (Google Consent Mode): they do not store or read cookies in your browser and send only anonymised signals about visits and conversions, without advertising identifiers. If you arrived from a Google ad, the click identifier may be passed in the URL between pages of the website so that the click can be attributed to a conversion without cookies. You can change or withdraw your consent at any time under “Cookie settings” in the footer; when you withdraw it, analytics and marketing cookies set on our domain are deleted.

We choose the website language based on your browser settings; nothing is stored for this. We only remember your language if you switch it manually.

06

Recipients of personal data

We do not sell personal data or disclose it to third parties unless there is a legal or contractual reason. We share it only to the extent necessary with these recipients:

  • our web hosting and e-mail provider (Websupport, s. r. o.), through which form messages are transmitted and stored;
  • Google Ireland Limited (Google Tag Manager and tools deployed through it) – without consent only anonymised cookieless signals, with consent also data from analytics and marketing cookies;
  • our accounting and tax service provider;
  • public authorities where the law requires it.
07

Transfers to third countries

We do not primarily transfer your personal data to third countries. Data may be transferred to the United States when Google tools are used. Google participates in the EU-U.S. Data Privacy Framework and also provides safeguards in the form of standard contractual clauses under Commission Implementing Decision (EU) 2021/914.

We do not carry out automated decision-making or profiling with legal effects.

08

Security

We protect personal data with appropriate technical and organisational measures against unauthorised processing, loss, destruction or damage. Only authorised persons have access to it, to the extent necessary for their work.

09

Your rights

As a data subject you have in particular the right:

  • of access to your personal data (Art. 15 GDPR);
  • to rectification and completion of your personal data (Art. 16 GDPR);
  • to erasure (Art. 17 GDPR);
  • to restriction of processing (Art. 18 GDPR);
  • to data portability (Art. 20 GDPR) where processing is based on consent or a contract;
  • to object to processing based on legitimate interest (Art. 21 GDPR);
  • to withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal;
  • to lodge a complaint with a supervisory authority – the Office for Personal Data Protection of the Slovak Republic or the authority in the EU country where you live.

You can exercise your rights by e-mail at hello@danube.digital or in writing at our registered office.

10

Data protection officer

The controller has not appointed a data protection officer, as this is not required by law for its activities.

Next step

Have a question about your LOTOTO process?

Show us how LOTOTO works on your site today. We will look at what can be digitalised.