Skip to main navigation Skip to main content Skip to page footer
Spielbank Wiesbaden Spielbank Wiesbaden

Information on data protection

I. Data Protection

We are pleased that you are visiting our website. Protecting your privacy is very important to us. Data protection and data security are our top priorities when you use our website. With this privacy policy, we would like to inform you about the extent to which your data is collected when you use our website and for what purposes it is used. We also inform you about your rights in this regard. 

II. Controller

Spielbank Wiesbaden GmbH & Co. KG
Kurhausplatz 1
65189 Wiesbaden
Germany
Phone: +49 611 536 - 100
Fax: +49 611 536 - 199
Email: sekretariat(at)spielbank-wiesbaden.de
Court of Registration: Wiesbaden Local Court
 

III. Competent Data Protection Supervisory Authority

The Hessian Commissioner for Data Protection and Freedom of Information
represented by
Prof. Dr. Alexander Roßnagel
Wilhelmstraße 7
65185 Wiesbaden
Phone: 0611-1408 0
Email:
poststelle(at)datenschutz.hessen.de
 

IV. Data Protection Officer

CTM-COM GmbH
Marienburgstraße 27
64297 Darmstadt
Phone: +49 6151 3942–72
Email: datenschutz(at)ctm-com.de
 

V. Data Subject Rights

You have the following rights regarding your personal data:
Right of access,
Right to rectification or erasure,
Right to restriction of processing,
Right to object to processing,
Right to data portability.
You also have the right to file a complaint with a data protection authority regarding the processing of your personal data.
To exercise your rights regarding your personal data, please contact us at
datenschutz(at)spielbank-wiesbaden.de

Please note that in the event of a request for information, we retain both the request and the subsequent response for a period of three years for evidentiary purposes to confirm that the information was provided properly.
 

VI. Objection or Withdrawal of Consent to the Processing of Your Data

If you have given consent to data processing, you may withdraw this consent at any time. This Withdrawal affects the lawfulness of the processing of your personal data as soon as you have notified us of it.
If the processing of your personal data is based on a balancing of interests, you have the right to object. This is particularly relevant if the processing is not necessary for the performance of a contract with you, as outlined in the corresponding functional description. If you object, we ask that you explain the reasons why we should not process your personal data as intended. In the event of a justified objection, we will review the situation and either cease or modify the data processing, or we will present to you our compelling legitimate grounds that justify further processing.
You may object at any time to the use of your personal data for advertising and analytical purposes.
However, to the extent that statutory retention or record-keeping obligations or other legal bases require the continued processing or storage of the data, the data in question cannot be deleted until such legal basis no longer applies. Until then, processing will be limited to the extent required by law.
 

VII. General Information and Notes

We hereby inform you about the collection of your personal data when you visit our website. Personal data includes all information that can be directly linked to you, such as your name, IP address, mailing address, email addresses, and user behavior.
When you contact us, we store the data you provide (your email address, possibly your name, and your phone number) in order to process your inquiries. As soon as storage is no longer necessary, this data will be deleted or its processing restricted if statutory retention periods apply.

The processing of this data is based on Article 6(1)(b) of the GDPR if your inquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on your consent (Article 6(1), first sentence, letter a of the GDPR) and/or on our legitimate interests (Article 6(1), first sentence, letter f of the GDPR), as we have a legitimate interest in efficiently processing the inquiries submitted to us.
Should we use service providers for certain functions of our services or wish to use your data for advertising purposes, we will provide you with detailed information here regarding the relevant processes. In addition, the defined criteria for the retention period will be specified.

SSL or TLS Encryption
To ensure security and protect the transmission of sensitive content—such as orders or inquiries you send to us as the website operator—we use SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock icon in your browser bar. When SSL or TLS encryption is enabled, the data you transmit to us cannot be viewed by third parties.

Objection to Promotional Emails
We hereby object to the use of contact information published in accordance with the legal notice requirement for the purpose of sending unsolicited advertising and informational materials. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited transmission of promotional information, such as spam emails.
 

VIII. Use of the Website

General
When you use our website purely for informational purposes—that is, without registering or submitting any information—we collect only the personal data that your browser sends to our server. In order to display our website to you and to ensure its stability and security, we collect the data that is technically necessary. This is done on the basis of Article 6(1)(f) of the GDPR.
The following data is collected:

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
    Amount of data transferred in each case
  • Website from which the request originated
  • Browser
  • Operating system and its user interface
  • Language and version of the browser software

Our website is not only intended for obtaining information but also offers various services that you can use. To use these services, you must provide additional personal data, which we use to provide the services and to which the aforementioned privacy principles apply.

Data Sharing with Service Providers & Partners
We occasionally rely on external service providers to process your data. These providers have been carefully selected and commissioned by us, follow our instructions, and are subject to regular review.
Furthermore, we may share your personal data with third parties if promotional campaigns, sweepstakes, contract conclusions, or similar services are carried out in collaboration with partners. You will receive detailed information about this when you provide your personal data or by reading the description of the offer.
If our service providers or partners are based outside the European Economic Area (EEA), you will be informed of this in the offer description.

Data Transfers to the U.S.
There is a current adequacy decision between the European Commission and the U.S. known as the Data Privacy Framework. This adequacy decision ensures that data transfers to the U.S. can generally take place. However, for this to apply, companies must be certified under the Data Privacy Framework ( ) in order to rely on this adequacy decision with regard to potential data transfers to the U.S.

Please also refer to the additional information regarding the tools and services we use in our privacy policy concerning data transfers to the U.S.
Numerous online services and tools use so-called “cookies,” which are often associated with the transfer of data to U.S. providers such as Google, Facebook, Instagram, and others. To avoid such data transfers to the U.S., you should be sure not to grant the consent requested when you visit the website.
 

IX.  Specific Uses of the Website

If you submit inquiries to us via the contact form, we will store the information you provide in the inquiry form—including the contact information you provide there—for the purpose of processing your inquiry and in case of follow-up questions. We will not share this data without your consent.
The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that such consent was requested.
The data you enter in the contact form will remain with us until you request that we delete it, submit a request for the withdrawal of your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been fully processed). Mandatory legal provisions—in particular retention periods—remain unaffected.

Inquiries via Email, Phone, or Fax 
If you contact us via email, phone, or fax, your inquiry—including all personal data contained therein (name, inquiry)—will be stored and processed by us for the purpose of handling your request. We will not disclose this data without your consent.
The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Article 6(1)(a) of the GDPR) and/or on our legitimate interests (Article 6(1)(f) of the GDPR), as we have a legitimate interest in effectively processing the inquiries directed to us.
The data you send us via contact requests will remain with us until you request that we delete it, submit a withdrawal of your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular statutory retention periods—remain unaffected.
 

X. Cookies ("Cookie Policy")

What Are Cookies?
Our website uses so-called cookies to store user-specific data. Cookies are small text files that our website stores on your computer and that contain certain information about you, such as your language selection or personal page settings. When you visit our site again, your browser sends this user-specific information back to us. This allows our website to recognize you and display your preferred settings. Each cookie contains a name and a value.

Consent to the Use of Cookies
When you first visit our website, a cookie banner or cookie consent tool will ask you which cookies you wish to allow. Non-essential cookies, which are not required to provide the website’s services, will only be used after you have given your consent. However, your decision will be stored in a cookie for record-keeping and implementation purposes.
The processing of your personal data via cookies is based in part on our legitimate interest, which is authorized under Article 6(1), first sentence, letter f of the GDPR. In the case of non-essential cookies, your data is processed exclusively with your consent in accordance with Article 6(1), first sentence, letter a of the GDPR. You can view your rights at any time in Section V.
By consenting to the use of the respective cookies by U.S. providers such as Google, Facebook, YouTube, etc., you also consent, pursuant to Article 49(1), first sentence, letter a of the GDPR, to the processing of your data in the United States.
Our notices regarding the tools, plug-ins, and services we use explain in detail whether cookies are set and what data is stored in them under what circumstances.

First-Party and Third-Party Cookies
There are both first-party cookies and third-party cookies. First-party cookies are set directly by our website, while third-party cookies are created by partner sites or their tools, plug-ins, and services, such as Google Analytics. Each cookie must be considered individually, as it stores different types of data. The lifespan of a cookie can range from a few minutes to several years. Cookies are not software programs and do not contain viruses, Trojans, or other malware. Furthermore, cookies cannot access information on your computer.


What types of cookies are there?

  • Essential Cookies
    These cookies are necessary to ensure the basic functions of the website. For example, when a user adds a product to the shopping cart, continues browsing other pages, and proceeds to checkout later. Thanks to these cookies, the shopping cart remains intact even if the user closes their browser window.
     
  • Functional Cookies
    While these cookies are not strictly necessary, they help improve the website’s functionality. This includes, for example, information such as usernames, language preferences, previously entered form data, font size, and similar settings.
     
  • Performance and Marketing Cookies
    These cookies, which are also provided by external advertising companies, are used to collect information about the websites visited by the user, for example, to generate targeted advertising.
    Other cookies collect information about user behavior on the website, including any error messages, to improve the website’s content and structure. They also measure loading times and how the website performs in different browsers.
     

Disabling or Deleting Cookies in Your Browser
You have the option to configure your web browser so that cookies are generally prevented from being stored on your device or so that you are asked for permission each time before a cookie is set. Cookies that have already been stored can be deleted at any time. You can find the relevant instructions in your web browser’s help section.
Disabling cookies in general may, under certain circumstances, lead to limitations in the functionality of this website.
 

XI. Application Process

Purpose and Legal Basis for Processing
Your personal data is processed for the purpose of establishing an employment relationship, in accordance with Article 6(1)(b) of the GDPR in conjunction with Article 88 of the GDPR. The processing serves exclusively to evaluate your suitability, qualifications, and professional performance for the position to which you are applying.
We also process your personal data for specific purposes, such as extended storage, provided that you have given us your consent to the data processing in accordance with Article 6(1)(a) of the GDPR in conjunction with Art. 7 GDPR.

We may be required to process your personal data pursuant to Article 6(1)(c) of the GDPR. This may be necessary due to various legal obligations, such as the provisions of the German Commercial Code, the German Fiscal Code, retention requirements for tax-related data, the German Social Code, the General Equal Treatment Act, or other relevant regulations.

Types of Data Categories Processed
As part of the application process, we process personal data that we receive from you, for example, through cover letters, resumes, certificates, correspondence, and information provided by you over the phone or in person.

The following categories of personal data may be involved:

  • Personal details (last name, first name, date of birth)
  • Address information (street address, city)
  • Contact information (phone number, email address)
  • Application data (cover letter, certificates, resume)
  • Special categories of personal data (health data, such as illnesses and disabilities)

Recipients or categories of recipients of the data
Access to your data is primarily limited to our Human Resources and Accounting departments, as well as the specific department to which you applied. Our administrators and service providers may access IT-processed data for technical reasons, but they are strictly bound by our instructions and may not use the data for their own purposes. In certain situations, it is necessary to disclose your personal data to third parties, such as our bank for reimbursement of expenses or the postal service when we send you a letter.
In addition, third parties may receive data for specific reasons if is required to do so by law, such as when reporting to the Federal Employment Agency as part of a job application.

Data Retention Period
We retain your personal data for as long as necessary to fulfill our contractual obligations and legal requirements during the application process. If your application is successful, your data will be transferred to your personnel file and used for the administration and termination of the employment relationship. 

If we are currently unable to offer you a position, we will store your data based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR for up to six months after sending the rejection letter in order to protect ourselves against potential legal claims.
As soon as data is no longer needed to fulfill contractual or legal obligations, it will be deleted. Exceptions include cases where statutory retention periods require storage, such as the ten-year periods under commercial and tax law.
We would like to point out that email is not a secure means of communication. Since emails are unencrypted, any information transmitted can potentially be intercepted and altered by third parties. If in doubt, please use our applicant portal or protect your data by other means.
 

XII. Analytics Tools

Google Analytics
If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. For users in the EU, the EEA, and Switzerland, the controller is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Scope of Processing
Google Analytics uses cookies to analyze your use of our websites. The information collected by cookies about your use of the website is typically sent to a Google server in the United States and stored there.
In Google Analytics 4, IP address anonymization is enabled by default. As a result, your IP address is truncated by Google within the member states of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the United States and truncated there. Google states that the IP address transmitted as part of Google Analytics is not combined with other Google data.

When you visit our website, the following information regarding your usage behavior is processed:

  • Page views
  • First visit to the website
  • Start of the session
  • Your “click path,” interaction with the website
  • Scrolls (whenever a user scrolls to the bottom of the page (90%))
  • Clicks on external links
  • Internal search queries
  • Interaction with videos
  • File downloads
  • Ads viewed / clicked
  • Language setting

The following information is also collected:

  • Your approximate location (region)
  • Your IP address (in truncated form)
  • Technical information about your browser and the devices you use (e.g., language setting, screen resolution)
  • Your Internet service provider
  • the referrer URL (the website or advertising material through which you arrived at this website)

Purposes of Processing
Google will use this information on behalf of the website operator to evaluate your use of the website anonymously and to compile reports on website activity. The reports provided by Google Analytics help us analyze the performance of our website.

Recipients
Recipients of the data are or may be:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a processor pursuant to Art. 28 of the GDPR)
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Transfers to Third Countries
If data is processed outside the EU/EEA and the level of data protection does not meet European standards, we have entered into EU standard contractual clauses with the service provider or rely on the Data Privacy Framework adequacy decision to ensure an adequate level of data protection. Google Ireland’s parent company, Google LLC, is located in California, USA. Therefore, data transfers to the USA and access by the authorities to data stored with Google cannot be ruled out. From a data protection perspective, the USA is currently considered a third country where you do not have the same rights as in the EU/EEA. It is possible that you may not have any legal remedies available to you against access by the authorities.

Retention Period
The data we send that is associated with cookies is automatically deleted after two months. Once the specified retention period has expired, the data is automatically deleted on a monthly basis.
Legal Basis
The legal basis for processing this data is your consent pursuant to Article 6(1), first sentence, letter a of the GDPR.

Withdrawal
You may request the Withdrawal of your consent at any time with future effect by visiting the cookie settings and adjusting your preferences (see the “Cookies” section). This does not affect the lawfulness of processing based on consent up until the time of Withdrawal.
You have the option to prevent the storage of cookies from the outset by configuring your browser software accordingly. Please note, however, that completely rejecting cookies may result in functional limitations on this and other websites. Additionally, you can prevent Google from collecting and processing the data generated by cookies that relates to your use of the website (including your IP address) by:

  • not giving your consent to the setting of the cookie, or
  • downloading and installing the browser add-on to disable Google Analytics HERE.

Provider’s Privacy Policy
Google’s Privacy Policy can be found here. The Terms of Service for Google Analytics can be found here.
It is possible that data processing may be carried out by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Please note our information regarding data transfers to the United States.
 

XIII. Marketing Tools

Google Ads Conversion Tracking
As part of our online marketing strategy, we use Google Ads to promote our products and services. Our goal is to generate more awareness online about the high quality of our offerings and to tailor our advertising to your interests and needs. We use Google Ads for conversion tracking on our website; in Europe, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services.

Google Ads, formerly known as Google AdWords, is the proprietary online advertising program of Google Inc. We firmly believe in the quality of our offerings and want as many people as possible to discover our website. At the same time, it is important to us to conduct a precise cost-benefit analysis of our advertising efforts. That is why we rely on the conversion tracking tool from Google Ads.

A conversion occurs when an interested website visitor takes an action. This happens when the visitor clicks on an ad and then performs an action, such as visiting our website. Google’s conversion tracking tool tracks the activities that occur after a user clicks on our Google Ads ad. This allows us to determine whether purchases are made, services are used, or newsletter subscriptions are signed up for.

We use Google Ads to promote our offerings on other websites as well. Our goal is to ensure that our advertising campaigns specifically reach people who are interested in what we have to offer. The conversion tracking tool allows us to identify which keywords, ads, ad groups, and campaigns lead to the desired customer actions. It shows us how many customers interact with our ads and subsequently complete a conversion. This data helps us calculate our return on investment, evaluate the success of our advertising campaigns, and refine our online marketing strategies. Additionally, this information enables us to make our website even more appealing and tailor our advertising offers even better to your needs.
When you take an action on our website, Google records this as a conversion via a cookie that has been set. As long as you remain on our site and the cookie is active, both we and Google know that you came to us via a Google Ads ad. The cookie is then read, and the conversion data is sent back to Google Ads. Other cookies may also be used to track conversions. Google Analytics allows us to further optimize conversion tracking for Google Ads.

We would like to point out that we have no influence over the further use of the data collected by Google. Google states that the data is encrypted and stored on secure servers. Conversion cookies typically expire after 30 days and do not contain any personal data. The cookies named “Conversion” and “_gac,” which are used in conjunction with Google Analytics, have a lifespan of three months.
You can choose not to participate in Google Ads conversion tracking. If you disable the conversion tracking cookie in your browser, tracking will be prevented. You will then not be included in the tracking tool’s statistics. You can adjust your cookie settings in your browser at any time; however, the procedure varies depending on the browser.

The legal basis for the processing of your data is the consent you have provided in accordance with Art. 6(1)(a) of the GDPR. For more information, see the “Cookies” section.

Provider’s Privacy Policy:
Google’s Privacy Policy can be found here.

It cannot be ruled out that data processing may be carried out by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Please note our information regarding data transfers to the U.S.

Remarketing
We use the “Google Remarketing” service to stay in touch with you. This technology allows our ads to be displayed to you as you browse the internet after you have visited our website. This is achieved through cookies stored in your browser that track your browsing behavior across various websites, which is then analyzed by Google.
Google is able to identify your previous visit to our website. However, according to Google, the data collected for remarketing is not combined with any personal data that Google may store. Google relies on pseudonymization, particularly for remarketing campaigns.

Meta Pixel
This website uses the Meta Pixel from Meta Platforms Inc., USA (formerly Facebook).
We have embedded a code on our website known as the Meta Pixel. This JavaScript code snippet loads functions that allow Meta (Facebook) to track your interactions if you arrived at our site via Meta ads. When you purchase a product on our website, the Meta Pixel is activated, which stores your activities in one or more cookies. These cookies allow Meta to match your user data (such as your IP address and user ID) with the information in your Facebook or Meta account before Meta deletes this data. The collected data remains anonymous to us, is not accessible to us, and is used exclusively for advertising purposes. If you are logged into Meta or Facebook, your visit to our website is automatically associated with your user account there.
We strive to present our services and products exclusively to those who have a genuine interest in them. By using the Meta Pixel, we can tailor our advertising activities more precisely to users’ preferences and interests. This enables Meta users who have opted in to personalized advertising to receive relevant ads. In addition, Meta uses the collected data for analytical purposes and to run its own advertising campaigns.
The processing of personal data is based on the consent given by users in accordance with Article 6(1)(a) of the GDPR. For more information, see the “Cookies” section.

You can learn how the Meta Pixel is used for advertising campaigns here.

You can change your ad settings on Meta/Facebook here, provided you are logged into Facebook.

Here you can manage your preferences regarding usage-based online advertising. There, you can disable or enable multiple providers at once or adjust the settings for individual providers.

You can find more information about Facebook’s Privacy Policy here.

It is possible that data processing may be carried out by Meta Platforms Inc., USA. Please note our information regarding data transfers to the USA.
 

XIV. Integration of Map Services

Google Maps
On this website, we use Google Maps, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This allows us to display interactive maps directly on the website at and makes it easier for you to use the map feature.

In order to provide Google Maps in its entirety, the company collects and stores certain data from you. This includes your search queries, IP address, and geographic coordinates. This data is stored on Google Maps’ servers. We can only inform you about this; we have no control over it. By integrating Google Maps into our website, Google places a cookie (name: NID) in your browser that stores information about your usage. Google uses this information primarily to optimize its services and to offer you personalized advertising.
The legal basis for the processing of your data is your consent pursuant to Art. 6(1)(a) of the GDPR. For more information on this, please refer to the “Cookies” section above.

It cannot be ruled out that data processing may be carried out by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Please note our information regarding data transfers to the United States.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider’s Terms of Service
here and in the Google Maps Terms of Service.

There you will also find further information about your rights in this regard and settings options to protect your
privacy.
 

XV. Integration of Video Services

Vimeo
We use videos from Vimeo on our website. The video portal is operated by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA. A plug-in allows us to provide you with exciting video content directly on our site. Please note, however, that this may result in personal data being transmitted to Vimeo.
When you visit a webpage that contains a Vimeo video, your browser establishes a connection to the Vimeo servers, resulting in a data transfer. Vimeo collects, stores, and processes this data on its servers. Vimeo collects data from you regardless of whether you have an account or not. This includes your IP address, technical information about your browser, your operating system, and basic device information. Vimeo also stores information about which website you are using the Vimeo service on and what actions you take there, such as the duration of your session or which buttons you click on the website. Vimeo can track and store these actions using cookies and similar technologies.
If you are logged in as a registered member of Vimeo, it is possible that more data will be collected, as there may already be multiple cookies in your browser. In addition, your activities on our website will be directly linked to your Vimeo account. To avoid this, you should log out of Vimeo while visiting our website.
Our goal is to make the best possible content available to you in the simplest way. We will not be satisfied until we have achieved this goal. Vimeo enables us to offer high-quality content directly on our website. Instead of simply sending you a link to an interesting video, we allow you to watch the video directly on our site. This enhances our service and simplifies your access to exciting content. In this way, we supplement our text and images with high-quality video content.
The legal basis for the processing of personal data is your consent in accordance with Art. 6(1)(a) of the GDPR. For more information, please see the “Cookies” section.

For more information on the purpose and scope of data collection and its processing by Vimeo, please refer to Vimeo’s privacy policy and here regarding
cookies.
Please note our information regarding data transfers to the United States.
 

XVI. Use of Social Media

General Information
We maintain publicly viewable profiles on various social networks. A list of the networks we use is provided below.
Social networks are able to comprehensively analyze your user behavior as soon as you visit a website with integrated social media elements such as “Like” buttons or advertising banners. Visiting a social media profile can trigger numerous processes relevant to data protection.

Personal Data
If you are logged into your social media account and visit our profile, the platform operator can associate your visit with your account. Even if you are not logged in or do not have an account, your personal data may still be collected—for example, through cookies on your device or by recording your IP address.
Social media platform operators can use the collected data to create user profiles that reflect your preferences and interests. This makes it possible to present you with advertisements tailored to your interests, both within and outside your social media profile. If you have an account on such a social network, advertisements tailored to your interests may appear on all devices on which you are or have been logged in.
Please note that we cannot track all data processing activities carried out by social media platforms. Depending on the provider, additional processing operations may be performed by the platform operators. For details, please refer to the terms of use and privacy policies of the respective social media platforms.

Note on Risks
Please be advised that user data may be processed by the respective providers outside the territory of the European Union. This may entail risks for users, as, for example, it could make it more difficult to enforce their rights. In the case of U.S. providers that guarantee a secure level of data protection through EU standard contractual clauses or rely on the Data Privacy Framework adequacy decision, please note that they are committed to complying with EU data protection standards.
Please review our information regarding data transfers to the U.S.

Purpose of Processing/Legal Basis
The processing of personal data on our social media platforms is based on our legitimate interests pursuant to Art. 6(1)(f) of the GDPR. Our goal is to provide information about our services, make posts more engaging, determine the optimal time for publication, and communicate with active customers, prospects, and users. However, we have no influence over any further processing carried out by the platform operators.
The legal basis for setting the aforementioned cookies is the consent you have provided in accordance with Article 6(1)(a) of the GDPR. For more information, please see the “Cookies” section or the “Social Media Plugins” section.

Joint Responsibility
When you visit one of our social media profiles, such as on Facebook, we are jointly responsible with the platform operator for the data processing activities that take place during your visit.
Please be aware that, despite our joint responsibility with the operators of social media platforms, we do not have complete control over the data processing activities on these platforms. Our ability to act depends largely on the corporate policies of the respective provider.

Exercising Your Rights
In general, you can exercise your rights both with us and with the operator of the respective social media platform.
However, we would like to point out that concerns can be addressed most effectively directly with the operators. They are the only ones who have access to user data and can therefore take immediate action and provide information . If you still need assistance, we are of course available to help.

Retention Period
The data we collect directly from your social media profile will be deleted from our systems as soon as the purpose for which it was stored no longer applies, you request its deletion, you withdraw your consent to its storage, or the purpose for which it was stored has ceased to exist. Cookies stored on your device will remain there until you delete them. Mandatory legal provisions, in particular retention periods, remain unaffected by this.
We have no influence over the duration of storage of your data retained by social media operators for their own purposes. For further details, please contact the social media operators directly (for example, by reviewing their privacy policies; see below).

Providers’ Privacy Policies
For a detailed description of the various processing methods and opt-out options, please refer to the privacy policies and information provided by the operators of the respective social networks, over which we have no control and which apply when using the corresponding services.
 

XVII. Existing Social Media Profiles

Facebook
Our Profile:
https://www.facebook.com/SpielbankWiesbaden

Service Provider: Facebook Ireland Ltd., also known as Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA;

Facebook Website
Facebook Privacy Policy

“Insights Data”
When you use our Facebook fan page, we receive statistical data in various categories, known as “Insights data.” We can access and analyze this data. Page Insights are aggregated data that provide us with insights into how users interact with our page. They include the total number of page views, “Likes,” activity on the page, interactions with posts, video views, the reach of posts, comments, shared content, replies, the distribution of men and women, information on origin by country and city, language, views and clicks in the shop, clicks on the route planner, and phone numbers.
For more information on “Insights data,” including how to exercise your rights, click here.

Joint Control
Pursuant to Article 26 of the GDPR, the fan page operator and Facebook share joint responsibility as controllers.
To this end, a corresponding agreement has been entered into with the fan page operators (available here)
Facebook bears primary responsibility under the GDPR for the processing of Insights data and fulfills all obligations under the GDPR regarding the processing of this data (including Articles 12 and 13 of the GDPR, Articles 15 through 22 of the GDPR, and Articles 32 through 34 of the GDPR).
You can contact Facebook’s Data Protection Officer via the general
Facebook contact form.

Instagram
Personal Profile:
https://www.instagram.com/spielbankwiesbaden

Service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA;
Instagram website
Instagram Privacy Policy
 

XVIII. Information on Linking to Social Media Profiles

Linking to Social Media Profiles via Images or Text Links
Our website also contains links to social media profiles on the platforms mentioned. These are integrated as linked images or text links. This type of linking prevents an automatic connection from being established with the platform’s server when a webpage containing a social media link is accessed in order to display an image from the platform. Only when the user clicks on the image are they redirected to the corresponding platform’s service.
After the user is redirected, the respective provider collects information about the user. It cannot be ruled out that the collected data may be processed in the United States.
Please note our information regarding data transfers to the United States.
The data initially collected includes the IP address, the date, the time, and the page visited. If the user is simultaneously logged into their account on the relevant platform, the operator could associate the information collected from that specific visit with the user’s personal account. If the user clicks the platform’s “Share” button, this information could be stored in their personal account and potentially published. To prevent the collected data from being directly linked to their account, users should log out before clicking on the graphic. Additionally, users can configure their account at to prevent such linking.
 

XIX. Social Media Plug-ins

Information on the Use of Social Media Plug-ins
We currently use the following social media plugins: Facebook, Instagram.

We use the so-called “two-click solution.” This means that, by default, no personal data is transmitted to the plug-in providers when you visit our website.
You can identify the plug-in provider by the icon on the box, which displays the initial letter or logo. We offer you the option to communicate directly with the plug-in provider via a button. The information that you have visited the corresponding page of our website is only transmitted to the plugin provider if you click on the marked field and thereby activate it. In doing so, the aforementioned data collected during general use of the website is also sent. According to the providers, Facebook and Xing anonymize the IP address in Germany immediately after it is collected. By activating the plug-in, your personal data is transferred to the respective plug-in provider and stored there; in the case of providers in the U.S., this also includes storage in the United States. Because the plug-in provider primarily collects data via cookies, we recommend deleting all cookies via your browser’s security settings before clicking the grayed-out box. For more information, see the “Cookies” section.
Our control over data collection and processing is limited, and we are not fully informed about the scope of data collection, the purposes of processing, or the retention periods. Furthermore, we lack information regarding the deletion of data by the plug-in provider.
The plug-in provider stores the data collected from you as user profiles and uses it for advertising, market research, and/or to tailor its website to your needs. Such analysis is conducted in particular to display targeted advertising and also informs other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to do so, you must contact the respective plug-in provider. The plug-ins enable you to interact with social networks and other users, which helps us improve our services and make them more attractive to you as a user.

Legal Basis
The legal basis for the processing of your data is the consent you have provided in accordance with Art. 6(1)(a) of the GDPR. Further information on this is provided in the “Cookies” section above.

Data Transfer
Your data is transferred regardless of whether you have an account with the plug-in provider or are logged in there. If you are logged in, the data we collect is directly associated with your account with the plug-in provider. If you click the activated button and, for example, share the page, the action is saved in your account and publicly shared with your contacts. It is advisable to log out of social networks regularly, especially before using the button, to prevent your activity from being linked to your profile with the plugin provider.
You can find detailed information on the purpose and scope of data collection, as well as its processing, in the providers’ privacy policies. These policies also explain your rights and the options available to protect your privacy.

Addresses of the respective plug-in providers and URLs to their privacy policies:

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection:
http://www.facebook.com/help/186325668085084