Last updated 27.07.2020: Addition of sharing of personal data with market research companies.
Premier Lotteries Ireland DAC (PLI) is the operator of the Irish National Lottery. PLI was awarded a 20-year licence to operate the National Lottery by politicians in February 2014 and commenced operations in November 2014.
PLI is based in the National Lottery headquarters building on Abbey Street Lower, Dublin 1.
PLI is the controller of personal data collected and processed from retailers.
This Data Privacy Statement is designed to demonstrate our firm commitment to privacy and to inform you of the personal data that we collect and process in connection with your retailer activity.
It also sets out details of what personal data we process, why we process it, with whom your personal data is shared, and a description of your rights with respect to your personal data.
This Data Privacy Statement will be reviewed from time to time to take into account changes in the law and the experience of the Data Privacy Statement in practice.
To comply with our obligations under the National Lottery Act 2013, we will collect and process information about you referred to in this Data Privacy Statement as ‘personal data’. This information will include your retailer registration details and use of the retailer portal.
The categories of personal data we process, and the lawful bases for doing so, are set out in detail at the end of this Data Privacy Statement.
The personal data we hold, process and retain will be used for management and administrative purposes and for meeting our legal and regulatory obligations. We hold it and use it to protect your rights and interests and to manage our relationship with you appropriately, effectively and lawfully. At the same time, it enables us to run our business.
This includes using your personal data to enable us to manage our contractual relationship, comply with legal obligations, pursue our legitimate interests and protect ourselves in the event of legal proceedings.
The uses we make of each category of your personal data, together with the lawful bases we rely on for those uses are set out in more detail at the end of this Data Privacy Statement.
Where there is a need to process your data for a purpose other than those set out at the end of this Data Privacy Statement, or otherwise outlined to you, we will inform you of this.
Premier Lotteries Ireland are certified to the ISO 27001 standard for Information Security Management Systems for the purpose of protecting the confidentiality, integrity and availability of your personal data.
Your personal data may be disclosed to third parties where we are legally obliged to do so.
It will also be disclosed during activities where we have lawful contractual agreements in place that enable us to operate the National Lottery.
Again, you will find more detailed information on how we share your personal data at the end of this Data Privacy Statement.
We will not transfer your personal data outside the European Economic Area (EEA) for purposes connected with our agreement.
Any personal data that we collect, process and hold about you is retained only for as long as it is required.
However, under the licence to operate the National Lottery, PLI is required to keep certain records, such as financial transactions and the personal data associated with that, for a period of two years after the end of the licence agreement.
In some cases, you may decline to provide us with your personal data. However, where we require relevant personal data to effectively and properly manage our contractual relationship, we may not be able to continue our contract with you if you decline to provide us with that personal data.
You will not be subject to automated decision making or profiling.
You have the following rights under data protection law, although your ability to exercise these rights may be subject to certain conditions and where we are permitted to do so under the terms of our licence to operate the National Lottery.
You can contact PLI’s Data Protection Officer at DPO@lottery.ie or by calling the National Lottery on (01) 836 4444.
PLI uses a secure system for handling access rights requests, which is provided by a specialist service provider called OneTrust. If you would like to exercise any of these rights, please contact us via our Subject Access Request link which is located here: https://www.lottery.ie/contact-us
Application form, contract including applicant’s name, email address, names, addresses, positions held and telephone numbers of owners, partners, directors, officers, or principal shareholders, signature, director's name, turnover, landlord’s name, PPS number (sole traders only).
To complete the contract process.
The information is used internally by PLI Sales & Operations department in accordance with PLI policies. The processing is necessary to enter into a contract with the retailer and for our legitimate interests in managing an effective process. If the retailer does not provide the requested data, PLI may be unable to consider the application.
In the case of a complaint, your personal data may be shared with organisations who provide services to the company such as legal advisors.
Regulator of the National Lottery (RNL): the Regulator may access parts of this data in order to assess whether PLI is meeting its obligations to prevent underage or problem play. https://www.rnl.ie/
Login information, name, address, financial transactions, including sales data.
To provide a facility for retailers to access their data.
The processing is necessary to enter into a contract with the retailer and for our legitimate interests in managing an effective process.
PLI store some data on servers hosted on the Microsoft Azure platform, located in the EEA.
Regulator of the National Lottery (RNL): the Regulator may access parts of this data in order to assess whether PLI is meeting its obligations to prevent underage or problem play. https://www.rnl.ie/
Name, email, phone recordings, instant messages.
To provide assistance to players and to monitor quality of services.
The processing of data is necessary to enter into a contract with PLI and to meet the legal and regulatory requirements of the National Lottery Act and the Licence to Operate the National Lottery. If the retailer does not provide the requested data, PLI will not be able to provide player support.
PLI shares personal data with Camelot Global Services (CGS) for management of PLI’s digital channels, customer care and IT.
Retailer ID, first name, surname, business name, mobile phone number, email address, partial address – town and county.
To conduct Good Causes awareness research and other market research surveys.
Legitimate interest: The processing is necessary for PLI to understand the impact of its work upon the community and the effectiveness of its business. For example, research into the perception of stakeholders with respect to the monies raised for Good Causes in Ireland.
Balance of data subjects’ interest: Retailers do not have to take part in research surveys; they may opt out if contacted and ask not to be contacted again in this regard. Survey reports provided to PLI are anonymous.
PLI shares personal data with RedC Research & Marketing. www.redcresearch.ie/privacynotice/
RedC retain personal data shared with them for a maximum of six months.