Datenschutzerklärung

Data controller

Veritral is the controller of the personal data described in this policy. You can contact us about privacy matters at support@veritral.com; please write "Privacy" in the subject line so your message reaches the right team.

This policy covers our website, our website assistant, enquiries sent to us and the business accounts of our customers. It does not cover the personal data of players of casinos and sportsbooks run by our customers: each operator is the controller for its own players and publishes its own privacy notice. Where we process player data on an operator's behalf, we act as processor under a data processing agreement with that operator.

What we collect

Depending on how you interact with us, we may process:

• Contact and enquiry data: name, company, business email address, Telegram username, your role (operator, agent or partner), the products you are interested in and the content of your message, when you use our contact form or write to us.
• Website assistant chats: the messages you exchange with the assistant on our website, and any contact details you choose to share in the conversation.
• Customer portal account data: for business users of backoffice.veritral.com, name, business email, login credentials (stored in hashed form), role and permissions, account settings, support requests, and security logs such as sign-in times and IP addresses.
• Business and billing data: company details, contract and invoicing information, and payment records relating to our services.
• Technical data: IP address, browser type, device information, pages requested and timestamps recorded in server and security logs, plus the cookie or local-storage values described in our Cookie Policy.
• Communications: messages exchanged with our team by email or Telegram.

We do not ask for special categories of personal data and ask you not to send them to us.

How we use it and legal bases

We use personal data for the following purposes, relying on the legal bases indicated:

• Responding to enquiries and demo requests, including through the website assistant. Legal basis: legitimate interests in answering business requests and, where you ask us to, taking steps before entering into a contract. Where we ask for your consent in a form, we also rely on that consent.
• Providing and supporting our services and the customer portal, including account management, integration support and service messages. Legal basis: performance of a contract with your organisation and our legitimate interest in managing that relationship.
• Security, fraud prevention and service integrity, including access controls, logging and IP whitelisting. Legal basis: legitimate interests and, where applicable, legal obligations.
• Billing, accounting and tax. Legal basis: legal obligations and performance of a contract.
• Improving our website and services, including reviewing anonymised or aggregated assistant conversations. Legal basis: legitimate interests. Any analytics cookies are used only with your consent.
• Business marketing about our products to business contacts. Legal basis: legitimate interests or consent where required by law. You can object or unsubscribe at any time.
• Complying with law and responding to lawful requests from authorities. Legal basis: legal obligations.

Where we rely on legitimate interests, we have balanced those interests against your rights. You can ask us for more information about this assessment.

Sharing and processors

We do not sell personal data. We share it only as needed with:

• service providers acting as our processors, such as hosting and infrastructure providers, email and messaging services, and AI service providers that power the website assistant, all bound by contracts requiring them to protect the data and use it only on our instructions;
• professional advisers, such as lawyers, accountants and auditors, under confidentiality duties;
• authorities, regulators or courts where required by law;
• a buyer or successor in the event of a merger, acquisition or reorganisation, subject to this policy.

International transfers

Our team, customers and service providers are located in several countries, so personal data may be transferred outside the European Economic Area (EEA) and the United Kingdom. Where a transfer goes to a country without an adequacy decision, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs) and, for UK data, the UK International Data Transfer Addendum, together with additional measures where needed. You can request more information about these safeguards by contacting us.

Retention

We keep personal data only as long as needed for the purposes above:

• enquiries, contact form submissions and assistant chats: normally up to 24 months after our last contact, unless they lead to a business relationship;
• customer portal accounts and contract data: for the duration of the relationship and afterwards as long as required to meet legal, accounting and tax obligations or to establish or defend legal claims;
• security logs: for a limited period appropriate to their purpose, unless needed to investigate an incident.

When data is no longer needed, we delete or anonymise it.

Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections, access controls, hashed passwords, logging and restricted staff access. No system is completely secure, so please tell us promptly if you believe your account or data has been compromised.

Your rights

Under the GDPR and UK GDPR, and subject to legal conditions, you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have data erased;
• restrict how we use your data;
• object to processing based on legitimate interests, including direct marketing at any time;
• data portability for data you provided to us under consent or contract;
• withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise these rights, contact support@veritral.com. We may need to verify your identity and will respond within the time limits set by law, normally one month.

Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU or EEA country where you live, work or where the alleged infringement took place, or in the United Kingdom with the Information Commissioner's Office (ICO).

Cookies

Our use of cookies and similar technologies is explained in the Cookie Policy.

Changes and contact

We may update this policy from time to time, for example when our services or legal requirements change. The "Last updated" date shows the current version. For any question about this policy or your personal data, contact support@veritral.com.