Privacy Statement

Last updated 27.07.2020: Addition of sharing of personal data with market research companies.

Who are we?

Premier Lotteries Ireland DAC (PLI) is the operator of the Irish National Lottery. PLI was awarded a 20-year licence to operate the National Lottery by politicians in February 2014 and commenced operations in November 2014.

PLI is based in the National Lottery headquarters building on Abbey Street Lower, Dublin 1.

 

About this data privacy statement

PLI is the controller of personal data collected and processed from retailers.

This Data Privacy Statement is designed to demonstrate our firm commitment to privacy and to inform you of the personal data that we collect and process in connection with your retailer activity.

 

It also sets out details of what personal data we process, why we process it, with whom your personal data is shared, and a description of your rights with respect to your personal data.

 

This Data Privacy Statement will be reviewed from time to time to take into account changes in the law and the experience of the Data Privacy Statement in practice.

 

What personal data do we process?

To comply with our obligations under the National Lottery Act 2013, we will collect and process information about you referred to in this Data Privacy Statement as ‘personal data’. This information will include your retailer registration details and use of the retailer portal.

The categories of personal data we process, and the lawful bases for doing so, are set out in detail at the end of this Data Privacy Statement.

 

How do we use your personal data?

The personal data we hold, process and retain will be used for management and administrative purposes and for meeting our legal and regulatory obligations. We hold it and use it to protect your rights and interests and to manage our relationship with you appropriately, effectively and lawfully. At the same time, it enables us to run our business.

 

This includes using your personal data to enable us to manage our contractual relationship, comply with legal obligations, pursue our legitimate interests and protect ourselves in the event of legal proceedings.

  

The uses we make of each category of your personal data, together with the lawful bases we rely on for those uses are set out in more detail at the end of this Data Privacy Statement.

Where there is a need to process your data for a purpose other than those set out at the end of this Data Privacy Statement, or otherwise outlined to you, we will inform you of this.

Premier Lotteries Ireland are certified to the ISO 27001 standard for Information Security Management Systems for the purpose of protecting the confidentiality, integrity and availability of your personal data.

How is your personal data shared?

Your personal data may be disclosed to third parties where we are legally obliged to do so.

It will also be disclosed during activities where we have lawful contractual agreements in place that enable us to operate the National Lottery.

Again, you will find more detailed information on how we share your personal data at the end of this Data Privacy Statement.

 

Will your personal data be transferred abroad?

We will not transfer your personal data outside the European Economic Area (EEA) for purposes connected with our agreement.

 

How long do we keep your personal data?

Any personal data that we collect, process and hold about you is retained only for as long as it is required.

However, under the licence to operate the National Lottery, PLI is required to keep certain records, such as financial transactions and the personal data associated with that, for a period of two years after the end of the licence agreement.

 

What happens if you do not provide us with your personal data?

In some cases, you may decline to provide us with your personal data. However, where we require relevant personal data to effectively and properly manage our contractual relationship, we may not be able to continue our contract with you if you decline to provide us with that personal data.

 

Will you be subject to automated decision making or profiling?

You will not be subject to automated decision making or profiling.

 

What are your rights under data protection law?

You have the following rights under data protection law, although your ability to exercise these rights may be subject to certain conditions and where we are permitted to do so under the terms of our licence to operate the National Lottery.

 

  • Information Request. The right to receive a copy of and/or access the personal data that we hold about you, together with other information about our processing of that personal data.
  • Update Data. The right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information you may request that we update your data such that it is complete.
  • Data Deletion. The right, in certain circumstances to request that we erase your personal data where we are permitted to do so.
  • Restrict Processing. The right, in certain circumstances, to request that we no longer process your personal data for particular purposes.
  • Object to Processing. The right to object to our use of your personal data or the way in which we process it.
  • Data Portability. The right, in certain circumstances, to transfer your personal data to another organisation.
  • Review Automated Decisions. The right to object to automated decision making and/or profiling
  • File a Complaint. You have the right to complain to the Data Protection You also have the ability to complain to us via our Subject Access Request link which is located here https://www.lottery.ie/contact-us and choose option ‘File a Complaint’.

 

You can contact PLI’s Data Protection Officer at DPO@lottery.ie or by calling the National Lottery on (01) 836 4444.

PLI uses a secure system for handling access rights requests, which is provided by a specialist service provider called OneTrust. If you would like to exercise any of these rights, please contact us via our Subject Access Request link which is located here: https://www.lottery.ie/contact-us

 

Details of Processing Activities

Registration form

 

Elements of personal data

Application form, contract including applicant’s name, email address, names, addresses, positions held and telephone numbers of owners, partners, directors, officers, or principal shareholders, signature, director's name, turnover, landlord’s name, PPS number (sole traders only).

Purpose for processing and uses of the data

To complete the contract process.

Lawful basis for processing the data

The information is used internally by PLI Sales & Operations department in accordance with PLI policies. The processing is necessary to enter into a contract with the retailer and for our legitimate interests in managing an effective process. If the retailer does not provide the requested data, PLI may be unable to consider the application.

Sharing of personal data

In the case of a complaint, your personal data may be shared with organisations who provide services to the company such as legal advisors.

Regulator of the National Lottery (RNL): the Regulator may access parts of this data in order to assess whether PLI is meeting its obligations to prevent underage or problem play. https://www.rnl.ie/

 

Retailer portal

 

Elements of personal data

Login information, name, address, financial transactions, including sales data.

Purpose for processing and uses of the data

To provide a facility for retailers to access their data.

Lawful basis for processing the data

The processing is necessary to enter into a contract with the retailer and for our legitimate interests in managing an effective process.

Sharing of personal data

PLI store some data on servers hosted on the Microsoft Azure platform, located in the EEA.

Regulator of the National Lottery (RNL): the Regulator may access parts of this data in order to assess whether PLI is meeting its obligations to prevent underage or problem play. https://www.rnl.ie/

 

 

Customer support

 

Elements of personal data

Name, email, phone recordings, instant messages.

Purpose for processing and uses of the data

To provide assistance to players and to monitor quality of services.

Lawful basis for processing the data

The processing of data is necessary to enter into a contract with PLI and to meet the legal and regulatory requirements of the National Lottery Act and the Licence to Operate the National Lottery. If the retailer does not provide the requested data, PLI will not be able to provide player support.

Sharing of personal data

PLI shares personal data with Camelot Global Services (CGS) for management of PLI’s digital channels, customer care and IT.

 

Market research

 

Elements of personal data

Retailer ID, first name, surname, business name, mobile phone number, email address, partial address – town and county.

Purpose for processing and uses of the data

To conduct Good Causes awareness research and other market research surveys.

Lawful basis for processing the data

Legitimate interest: The processing is necessary for PLI to understand the impact of its work upon the community and the effectiveness of its business. For example, research into the perception of stakeholders with respect to the monies raised for Good Causes in Ireland.

Balance of data subjects’ interest: Retailers do not have to take part in research surveys; they may opt out if contacted and ask not to be contacted again in this regard. Survey reports provided to PLI are anonymous.

Sharing of personal data

PLI shares personal data with RedC Research & Marketing. www.redcresearch.ie/privacynotice/

RedC retain personal data shared with them for a maximum of six months.