1. scope of the processing of personal data

We only process your personal data to the extent necessary to provide our services. Your personal data is regularly processed only on the basis of your consent. An exception applies in cases where prior consent cannot be obtained for factual reasons or where the processing of your personal data is permitted by law.

2. legal basis for the processing of personal data

Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis. When processing personal data that is necessary for the fulfilment of a contract between you and us, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which we are subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of us or a third party and if your interests, fundamental rights and freedoms do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

3. data erasure and storage duration

Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which we are subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

4. transfer of personal data to third parties and processors

As a matter of principle, we do not pass on any personal data to third parties without your express consent. If we nevertheless disclose your data to third parties in the course of processing, transfer it to them or otherwise grant them access to the data, this is also done exclusively on the basis of one of the aforementioned legal bases.
In some cases, we use carefully selected external service providers to process your data. If data is passed on to service providers as part of so-called order processing, this is done on the basis of Art. 28 GDPR. Our processors are carefully selected, are bound by our instructions and are regularly monitored by us. We only commission processors who offer sufficient guarantees that suitable technical and organisational measures are taken to ensure that processing is carried out in accordance with the requirements of the GDPR and BDSG and that your rights are protected.

5. data transfer to third countries

The GDPR guarantees the same high level of data protection within the European Union. When selecting our service providers and cooperation partners, we therefore rely on European partners wherever possible if your personal data is to be processed. Only in exceptional cases will we have data processed outside the European Union or the European Economic Area as part of the use of third-party services.
 We only authorise the processing of your data in a third country if the special requirements of Art. 44 et seq. GDPR are fulfilled.

6. existence of automated decision-making

We do not use automated decision-making or profiling.

1. description and scope of data processing

Each time our website is accessed, our system, i.e. the web server, automatically collects information from the system of the accessing computer or end device of the user.

The following personal data is collected by us:

• IP address of the computer from which the request was sent
• Information about the browser type and version used
• The operating system of the user's end device
• The user's internet service provider
• Date and time of access
• The previous website from which the user arrives at our website

2. legal basis for data processing

The legal basis for the temporary storage of this data and the log files is Art. 6 para. 1 lit. f GDPR (legitimate interest of us as the responsible website operator).

3. purpose of data processing

The temporary storage of the user's IP address by our system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must necessarily remain stored for the duration of the session.
The above-mentioned data is stored in the log files in order to ensure the functionality of our website. We also use this data to optimise the website and to ensure the security of our information technology systems (e.g. to detect attacks).

4. duration of storage

The above-mentioned data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is usually the case after one month at the latest.
 

When you visit our website, we inform you in our "cookie banner" that we use cookies. Cookies are small text files that are stored on your end device (laptop, smartphone, tablet or similar) when you visit our website.

Technically necessary cookies

1. description and scope of data processing

These cookies are necessary for our website to function and cannot be deactivated in our systems. Cookies speichern Informationen, wie beispielsweise Ihre Spracheinstellung, die Besuchsdauer auf unserer Webseite oder Ihre dort getroffenen Eingaben.

2. legal basis for data processing

Rechtsgrundlage für die Verarbeitung ist Art. 6 Abs. 1 lit. f DS-GVO (berechtigtes Interesse von uns als Verantwortliche). Ohne Verwendung dieser Cookies sind das Angebot der Webseite sowie Aufruf und Nutzung der Webseite durch Sie technisch nicht möglich.

3. purpose of data processing

Die Verwendung von technisch-notwendigen Cookies dient dazu, Ihnen die Nutzung unserer Webseite zu vereinfachen. Some functions of our website cannot be offered without the use of cookies. Für diese ist es erforderlich, dass Ihr Browser auch nach einem Seitenwechsel wiedererkannt wird. Your personal data will not be processed in any other way.

4. storage duration

Your personal data will be deleted as soon as it is no longer required to fulfil the purpose for which it was processed. In our case, this is the case after 12 months.

5. possibility of objection

You can delete cookies already stored on your end device at any time. If you wish to prevent the use of cookies, you can refuse to accept cookies in your browser. Please refer to your browser manufacturer's instructions to find out how this works in detail.

Use of technically unnecessary cookies

1. description, purpose and scope of data processing

These cookies help us to improve our offer and our website. For this purpose, we generally collect anonymised data for statistics and analyses. With the help of these cookies, we can, for example, determine the number of visitors and the effect of certain pages on our website and optimise our content.

2. legal basis for data processing

The legal basis for the processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

3. storage duration

Details on the storage duration of cookies and the technologies used in the context of these tracking tools can be found in the cookie statement.

4. possibility of objection

You can delete cookies already stored on your end device at any time. If you wish to prevent the use of cookies, you can refuse to accept cookies in your browser. Please refer to your browser manufacturer's instructions to find out how this works in detail. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Use of Usercentrics

We use Usercentrics' cookie consent technology on our website to obtain your consent to the storage of certain cookies on your end device and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, website: usercentrics.com/de/ (hereinafter referred to as "Usercentrics").

When you enter our website, the following personal data is transmitted to Usercentrics:

• Your consent(s) or the revocation of your consent(s)
• Your IP address
• Information about your browser
• Information about your end device
• Time of your visit to the website

Furthermore, the cookie stored by Usercentrics in your web browser serves to make the consents you have given or their revocation traceable. The data collected in this way remains in our memory until you ask us to delete it, remove the Usercentrics cookie yourself or the reason for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected by this.
The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. c GDPR.

We use various services of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

By integrating Google services, Google may process personal data under certain circumstances. It cannot be ruled out that this data may also be processed outside the EU/EEA in a so-called third country.

For data transfers to third countries, the GDPR provides, among other things, for the possibility of the EU Commission determining the level of data protection in the third country.

Further information can be found at https://policies.google.com/privacy/frameworks?gl=de
You can find more information on the individual Google services in the further data protection declaration.

Tracking through Google Analytics

1. google analytics

If you have given your consent, Google Analytics, a web analytics service provided by Google LLC, is used on this website. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

2. scope of the processing

Google Analytics uses cookies that enable us to analyse your use of our website. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.
We use the 'anonymiseIP' function (so-called IP masking): Due to the activation of IP anonymisation on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
During your visit to our website, the following data is collected, among others:

• the pages you have called up, your "click path"
• Achievement of "website goals" (conversions, e.g. downloads, orders)
• Your user behaviour (e.g. clicks, dwell time, bounce rates)
• Your approximate location (region)
• Your IP address (in abbreviated form)
• technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
• Your internet provider
• the referrer URL (via which website/advertising medium you came to this website)

the referrer URL (via which website/advertising medium you came to this website)

3. purposes of the processing

On behalf of the operator of this website, Google will use this information to analyse your use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website.

4th receiver

The recipient of the data is

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as processor. We have concluded a data processing agreement with Google for this purpose. Google LLC, based in California, USA, and, if applicable, US authorities can access the data stored by Google.

5. transfer to third countries

A transfer of data to the USA cannot be ruled out.

6. storage period

The data sent by us and linked to cookies is automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link
a) do not give your consent to the setting of the cookie or
b) download and install the browser add-on to deactivate Google Analytics HERE.

You can also prevent the storage of cookies by configuring your browser software accordingly. However, if you configure your browser to reject all cookies, this may restrict the functionality of this and other websites.

7 Legal basis and cancellation option

The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by accessing the cookie settings and changing your selection there.
You can find more information on the terms of use of Google Analytics and on data protection at Google at https://www.google.com/analytics/terms/de.html and at https://policies.google.com/?hl=de.

Use of Google Tag Manager

1. description and scope of data processing

Google Tag Manager is a service provided by Google Ireland Limited. Google Tag Manager allows the simplified integration of various scripts for web analysis and remarketing into your own website. It is not a tracking service in the true sense of the word. Google Tag Manager merely passes on data and does not process it itself.

No personal data is processed.

2. further information on data processing

Google Ireland Limited is responsible for further data processing. Further information can be found at: http://www.google.de/tagmanager/use-policy.html

Use of Google Ajax ajax.googleapis.com/ jQuery

We also use Ajax and jQuery technologies to optimise loading speeds. In this respect, programme libraries are called up from Google servers. The CDN (content delivery network) from Google is used. If you have previously used jQuery on another page from the Google CDN, your browser will fall back on the copy stored in the cache. If this is not the case, this requires a download, whereby data is sent from your browser to Google.

Use of Google Maps

We provide you with an arcade finder on www.admiral-games.de/spielhalle. On this website, we use Google Maps (API) from Google Ireland Ltd. Google Maps is a web service for displaying interactive (land) maps in order to visualise geographical information. 
By integrating this service, the locations of our arcades 
are displayed 
to you. Information about your use of our app (such as your IP address) is transmitted to Google servers and stored there as soon as you access the subpages in which the Google Maps map is integrated. 
The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information in your end device, the data processing is also carried out on the basis of Section 25 (1) of the German Data Protection Act (TTDSG). Consent can be revoked at any time. If Google Maps is activated, the app provider cannot rule out the possibility that data will be transferred to all Google or Apple data centres (including in non-EU countries without an adequate level of data protection, in particular the USA) without suitable guarantees within the meaning of Art. 46 GDPR. In its judgement of 16 July 2020, case reference: C-311/18 ("Schrems II"), the ECJ found that an adequate level of data protection cannot be guaranteed in the USA.
 On the one hand, there is a risk of access to the data transferred by US security authorities without the possibility of effective legal remedies. On the other hand, there are no enforceable data subject rights. The transfer therefore only takes place within the scope of your consent when activating Google Maps on the basis of Art. 49 para. 1 lit. a in conjunction with Art. 6 para. 1 lit. a GDPR and your consent with a possible processing of your data in an insecure third country. 
You can find more information on the handling of user data in Google's privacy policy: www.google.de/intl/de/policies/privacy/

Integration of CloudFlare

1. description and scope of data processing

On our websites (https://www.admiral-gastro.de/, https://www.novodatasolutions.com/) a web service of the company CloudFlare Inc., 101 Townsend St, 94107 San Francisco (hereinafter: CloudFlare) is reloaded. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to CloudFlare.

2. legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR (legitimate interest of us as the controller) in order to ensure the functionality of the website.

Use of Vimeo

In addition to YouTube, we also use Vimeo as an external video provider on this website. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA. By integrating the videos, a connection to the Vimeo servers is established when they are accessed. This tells the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA. If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account.

Further information on the handling of your user data can be found in Vimeo's privacy policy: vimeo.com/privacy.
By integrating Vimeo, the user is given the opportunity to call up videos and, if necessary, to use the functionalities of Vimeo. The purpose of this is to improve our offering. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR.

Special data usage information when registering and participating in our chat function

Use of the live chat system "Tidio" (Tidio Ltd.) 

So that we can answer your questions as quickly as possible, we use the chat function of Tidio Chat from Tidio Ltd Great Britain, 220C Blythe Road, W14 OHH, London 
on our product website.
If you have any questions about our products or services, you can reach us via the Tidio chat window that appears and send us a message. To start the chat, we need your e-mail address and name.  All online chats are sent via this external online service to the operator's servers in the UK and processed there. We would like to point out that a connection to the Tidio servers is already established when you visit our website and information about the browser, location and operating system you are using can be sent. If you wish to prevent this, you must deactivate JavaScript in your browser.

We use the data exclusively for processing the conversation. We delete the data arising in this context after the processing is no longer necessary or restrict the processing to compliance with the existing mandatory statutory retention obligations. Legal basis for processing Art. 6 para. 1 lit. f GDPR (legitimate interest). We carry out the aforementioned processing for effective customer support and to improve our services.

We have no knowledge of the storage period at Tidio and have no influence on it. Further information on data protection can be found at https://www.tidio.com/privacy-policy/.
Furthermore, the general privacy policy of the LÖWEN Gruppe applies.

Trackingpixel Indeed

As part of the introduction of the GDPR at EU level, we have formulated a privacy policy that we provide to our customers in order to be able to map the use of the conversion tracker within your privacy policy: This website also uses a web analytics tool from Indeed (Indeed Ireland Operations, Ltd, 124 St. Stephen's Green, Dublin 2, Ireland). To analyse the use of the website and Indeed.com (if applicable), certain usage data transmitted by your browser is collected and evaluated by Indeed. Indeed may use one or more cookies to collect this usage data. In addition, the IP address assigned to your device at the relevant time and a browser-specific identifier will be transmitted. The IP address is required solely for the purpose of session identification and geolocalisation (down to city level). (This letter is for explanatory purposes only, only the terms of use in their current version are authoritative: https://de.indeed.com/legal )

Supplement DSE - Webfont/ Monotype GmbH

Our website (www.loewen.hausmesse) uses so-called web fonts provided by Monotype GmbH (fonts.com or fast.fonts.net) for the standardised display of fonts. When a page is called up, the browser loads the required web fonts into the browser cache in order to display texts and fonts correctly. For this purpose, the browser used must establish a connection to the fonts.com servers. As a result, fonts.com becomes aware that our website has been accessed via the visitor's IP address. Fonts.com web fonts are used in the interest of a uniform and appealing presentation of the online offers. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest). If the visitor's browser does not support web fonts, a standard font is used by the respective computer. Further information on these web fonts can be found in the privacy policy of Monotype GmbH: www.monotype.com/legal/privacy-policy/.

Xing and Facebook

So-called social bookmarks (e.g. Xing and Facebook) are integrated on our website. These are Internet bookmarks with which users of such services can collect links and news items. These are only integrated on our website as links to the corresponding services. After clicking on the integrated graphic, you will be redirected to the page of the respective provider, i.e. only then will user information be transmitted to the respective provider.

Facebook fan page and Instagram

We operate fan pages on the social networks Facebook and Instagram (operator of the networks: Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland). As the operator of the fan pages, we have concluded an agreement with Facebook on joint controllers (Controller Addendum). This agreement specifies which data processing operations we or Facebook are responsible for when you visit our pages.
You can view this agreement at the following link: www.facebook.com/legal/terms/page_controller_addendum.
Instagram privacy policy: instagram.com/about/legal/privacy/ and Facebook: https://www.facebook.com/about/privacy/.

Facebook Custom Audience: Facebook Pixel

1. description and scope of data processing

We use the visitor action pixel from Facebook to measure conversions, Facebook.

When you visit our website, a direct connection is established between your browser and the Facebook server via the tracking pixel (Facebook pixel). Among other things, Facebook receives the information from your browser that our site has been accessed from your end device. If you are a Facebook user, this allows Facebook to associate your visit to our website with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. We can only select which segments of Facebook users (such as age, interests) our adverts should be displayed to.
Details on how it works can be found on the Facebook website: https://www.facebook.com/business/help/610516375684216

2. legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR (legitimate interest of us as the controller), so we can record the effectiveness of Facebook adverts for statistical and market research purposes.

Settings and objections to the use of your data are possible in the Facebook profile settings: www.facebook.com/settings or via the US site www.aboutads.info/choices/ or the EU site www.youronlinechoices.com.
If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: www.youronlinechoices.com/de/praferenzmanagement/ For more information on the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy, please refer to Facebook's privacy policy at https://www.facebook.com/about/privacy/.

Presence on tiktok.de

LÖWEN Gruppe uses TikTok Pixel, a conversion tracking tool for advertisers, on the website. The service provider is the company TikTok Technology Ltd, 10 Earlsfort Terrace Dublin, D02 T380, Ireland.

By using the TikTok pixel, TikTok is able to identify visitors to the online offering as a potential target group for the display of adverts (so-called "TikTok ads"). In this context, the LÖWEN Gruppe uses the TikTok pixel to display TikTok ads only to those TikTok users who have shown an interest in the online offering or who have certain characteristics (for example, interests in certain topics determined on the basis of websites visited) that have been transmitted to TikTok (so-called "custom audiences"). The TikTok pixel also serves to ensure that the TikTok ads correspond to the interests of the users and are not perceived as annoying. In addition, the TikTok pixel enables the effectiveness of TikTok adverts to be tracked for statistical and market research purposes by determining whether users have been redirected to the website after clicking on a TikTok advert (so-called "conversion").

We would like to point out that TikTok also processes data in the USA. The European Court of Justice has ruled that there is currently no adequate level of protection for data transfers to the USA. TikTok therefore uses so-called standard contractual clauses as the basis for data processing for recipients based in third countries or for data transfer to these countries. These clauses are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards, even if it is transferred to and stored in third countries. Through these clauses, TikTok undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. You can find out more about the standard contractual clauses and the data processed through the use of TikTok Pixel in the privacy policy at https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE and https://ads.tiktok.com/i18n/official/policy/controller-to-controller

Presence on snap.com

LÖWEN-Gruppe nutzt auch den Instant-Messaging-Dienst Snapchat. The service provider is the American company Snap Inc, 2772 Donald Douglas Loop N, Santa Monica (HQ), CA, USA.

The Snapchat pixel is a Snapchat tool used to target advertising campaigns on Snapchat and measure the effectiveness of adverts. When you reach our website via an advert on Snapchat, a cookie is stored on your computer that interacts with a JavaScript code from Snapchat. Dieser Cookie ist ein Datensatz, der auf Ihrem Gerät gespeichert wird. If you are then redirected from an advert on Snapchat to a page on our website, the pixel records predefined user actions, such as completed transactions, leads, search queries or certain page views. When you perform such an action, your browser sends an HTTP request from the cookie via the Snapchat pixel to the Snapchat server to transmit certain information about the action (such as the type of action, time and browser type of the device).

LÖWEN Gruppe uses the data collected by the Snapchat pixel exclusively for statistical and market research purposes and does not pass it on to third parties. You can object to the collection by the Snapchat pixel at any time by adjusting the settings in your browser accordingly.

To ensure that your data complies with European data protection standards, we use so-called standard contractual clauses as the basis for data processing for recipients based in third countries or for data transfer to these countries. We would like to point out that Snapchat stores and processes the data collected in the USA. The European Court of Justice has ruled that there is currently no adequate level of protection for data transfer to the USA. With the help of the standard contractual clauses, Snapchat undertakes to comply with the European level of data protection when processing your data. Further information on the use of the Snapchat pixel and the standard contractual clauses can be found in Snapchat's privacy policy at https://values.snap.com/de-DE/privacy/privacy-policy and https://snap.com/en-US/terms/standard-contractual-clauses 

Unsere Webseiten können Links zu Webseiten anderer Anbieter enthalten, auf die sich diese Datenschutzerklärung nicht erstreckt. Insofar as the use of the websites of other providers involves the processing of personal data, please refer to the data protection notices of the respective providers.

In the following we inform you in accordance with Art. 13 of the General Data Protection Regulation (GDPR) about the processing of your personal data when you apply online via the applicant management software Umantis or via online form or via application assistant or by letter, e-mail to the LÖWEN and Casino Royal Gruppe (see section 1). (as at 09/06/2021)
This data protection information applies in addition to our standard data protection information (https://www.loewen.de/gruppe/datenschutz/).  

1. scope of application

The LÖWEN and Casino Royal Gruppe is jointly responsible for the application process under data protection law. The Gruppe consists of the following companies: LÖWEN ENTERTAINMENT GmbH, ADMIRAL ENTERTAINMENT GmbH, BPA Freizeit- und Unterhaltungs GmbH, Admiral Play GmbH, NOVO INTERACTIVE GmbH, NOVO Data Solutions GmbH & Co. KG, Gesellschaft für Spielerschutz und Prävention mbH and Casino Royal GmbH (including the ADMIRAL and Casino Royal gaming arcades), each of which is named in the invitation to tender. 

2 Who is responsible for data processing and who can I contact?

Personnel management in the LÖWEN and Casino Royal Gruppe is carried out as joint controllers within the meaning of Art. 26 GDPR or as part of order processing in accordance with Art. 28 GDPR. The central point of contact is 

LÖWEN ENTERTAINMENT GmbH 
Saarlandstraße 240 
D-55411 Bingen/Rhein 
Phone: +49 6721 4070 
Email: info@remove-this.loewen.de

3. data protection officer

You can address questions about the processing of your data to the data protection officer. You can reach the data protection officer using the following contact details:
E-mail contact: Datenschutz@remove-this.loewen-grupp.de 

Address for postal contact: 
LÖWEN ENTERTAINMENT GmbH 
Data Protection Officer 
Saarlandstraße 240 
D-55411 Bingen/Rhein

The term " Gruppe " includes all companies in the entire Gruppe of companies.

4. processing of personal data in the context of the application Description and scope of data processing

If you would like to apply via our career pages (https://karriere.loewen-gruppe.de/startseite/  and https://www.werde-admiral.de/), you have the following options:

A. Application via online form

If you would like to apply via the career site https://www.werde-admiral.de/, you can choose between an application via online form and an application via the application assistant (see letter B) 
We collect the following personal data in the online form: First and last name, e-mail address, telephone number, postcode and city as mandatory information (marked with *) and date of birth and street, house number as voluntary information.
 In addition, a questionnaire is available to you; here, too, a distinction is made between mandatory and voluntary information, depending on whether the question is absolutely relevant for filling the vacancy. 
 At the end you can tell us whether you are also interested in other jobs in your area. 
 Uploading documents such as a cover letter, CV, photo or other documents is up to you. 
The data is stored in our applicant management software (see letter C).
We will confirm receipt of your application in writing.

B. Application via online application system

If you use our application-per-WhatsApp function, the legal basis for the communication is your consent, which can be revoked at any time (Art. 6 para. 1 a GDPR). The application-per-WhatsApp function is provided to us by an IT service provider (PitchYou), which may access your data for this purpose as a processor. Further information can be found here: www.pitchyou.de/datenschutz. WhatsApp's data protection information, for example on its processing or on exercising your data protection rights against WhatsApp, can be found here: www.whatsapp.com/legal/privacy-policy-eea.

C. Application via applicant management software

If you apply via the website https://karriere.loewen-gruppe.de/, your data will be stored directly on the systems of our software partner "Abacus Umantis AG". Abacus Umantis AG is a processor within the meaning of Art. 29 GDPR. During the application process, the usual correspondence data such as postal address, e-mail address and telephone numbers are stored in the applicant database in addition to salutation, surname and first name. In addition, application documents such as letters of motivation, CVs, professional, training and further education qualifications and job references are recorded.
We will confirm receipt of your application in writing.

D. Postal and e-mail applications

You can also apply by e-mail or in writing. In this case, we will enter your submitted data in our applicant system. We will confirm receipt of your application in writing and your original documents will be returned to you for our records. You will also be sent the data protection information.
 Your data will also be recorded in our applicant management software for the duration of the application process.
We will confirm receipt of your application in writing.

E. Contact by telephone / call centre

If you contact us by telephone, you will be connected to a call centre commissioned by us, Kuck & Schmidt GmbH & Co KG ("Kuck & Schmidt"). In the case of a telephone application, the call centre collects your first and last name, the content of your request and a contact address where we can reach you (e.g. e-mail address or telephone number) on our behalf and forwards this data to us so that we can get back to you.
To get a first impression of you, you will also be asked to answer the following questions:

• Can you work in shifts and at weekends? If not, what restrictions do you have?
• What experience do you have in service/catering/service?
• What are your strengths and why are you the right person for this position?
• Are you allowed to drive in Germany (class B) and do you have a car at your disposal?
• How do you rate your German language skills?

Kuck & Schmidt will not make any further use of the data. The data will not be stored together with your other personal data. The processing of the data by Kuck & Schmidt takes place on the legal basis of Art. 28 (1) and (3) GDPR. A corresponding contract for the processing of data on our behalf has been concluded with Kuck & Schmidt.

F. Other 

applicant pool

You also have the option of being included in the applicant pool, where your personal data that you have provided as part of the application process will be stored beyond the end of the specific application process.
Telephone contact It is 
possible to contact us by telephone. Among other things, you will be asked to provide your contact details and answer a few job-related questions. You will then receive a response based on your contact details.

5 Purpose and legal basis of processing 

Purpose of data processing

The personal data and documents you provide as part of the application process will be processed by us exclusively for the purposes of processing your application and in the recruitment process. This includes checking your qualifications and storing the data in our electronic application system.

Legal basis for data processing The 
legal basis for the processing of your data as part of your application is Section 26 (1) sentence 1 and (8) BDSG in conjunction with Art. 88 GDPR (decision on the establishment of the employment relationship) and Art. 6 (1) (a) GDPR (consent), e.g. for inclusion in the applicant pool. If we process data for the defence of legal claims asserted against us in the application process, we use Art. 6 para. 1 lit. f GDPR (legitimate interest of us as the controller).
If an employment relationship is established between you and us, we may process the personal data we have already received from you for the purposes of the employment relationship in accordance with Section 26 (1) BDSG.

If your details contain information about your state of health, your membership of a trade union or political party or your sex life (special categories of personal data), we would like to point out that we do not collect this data and that you provide it to us voluntarily and consent to data processing.

6. recipient of the personal data

Due to our organisational structure, your data is collected throughout the entire LÖWEN and Casino Royal Gruppe. Within the Gruppe, only those departments entrusted with the preparation and realisation of the application process will receive your data. This includes employees of the HR department and the specialist departments in which a vacancy is to be filled. Where required by law, we will also make your application documents available to works councils and other interest groups representing the employees of our company as part of the fulfilment of their statutory duties (Section 99 (1) BetrVG). 
If you submit an application to us, we assume that you are also interested in 
other positions in the LÖWEN and Casino Royal Gruppe. This applies in particular to 
the operating units (gaming arcades). The 
legal basis in these cases is Art. 6 para. 1 lit. f GDPR (legitimate interest of us as the controller).
 Whenever your personal data is transferred to external recipients (e.g. Haufe-Umantis) who process this data on our behalf, we will contractually ensure that your data is transferred, protected and processed in accordance with all applicable data protection regulations.
Due to our organisational structure, your data is collected throughout the entire LÖWEN and Casino Royal Gruppe. Within the Gruppe, only those departments entrusted with the preparation and realisation of the application process will receive your data. This includes employees of the HR department and the specialist departments in which a vacancy is to be filled. Where required by law, we will also make your application documents available to works councils and other interest groups representing the employees of our company as part of the fulfilment of their statutory duties (Section 99 (1) BetrVG). If you submit an application to us, we assume that you are also interested in other positions in the LÖWEN and Casino Royal Gruppe. This applies in particular to the operating units (gaming arcades). The legal basis in these cases is Article 6(1)(f) GDPR (legitimate interest of us as the controller). Whenever your personal data is transferred to external recipients (e.g. Abacus Umantis AG) who process this data on our behalf, we will contractually ensure that your data is transferred, protected and processed in accordance with all applicable data protection regulations.

7. duration of storage

We generally store your application data for a period of six months after the end of an unsuccessful application process. If you have given your consent to be included in the applicant pool, your data will be stored for 12 months. 

If an employment relationship is established:

If we establish an employment relationship with you following the application process, we will transfer your data to your personnel file and store it thereafter for as long as required by law.

8. transfer of data to a third country outside the EU

A transfer to a third country is not intended.

9. provision of personal data

The provision of personal data is neither legally nor contractually required, nor are you obliged to provide the personal data. However, the provision of personal data is necessary for the conclusion of a contract of employment with us. This means that if you do not provide us with any personal data when applying, we will not enter into an employment relationship with you.

10. no automated decision-making

There is no automated decision-making pursuant to Art. 22 (1) and (4) GDPR.

11. rights of data subjects

You have a right of access (Art. 15 GDPR) and a right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or to restriction of processing (Art. 18 GDPR) or a right to object to processing (Art. 21 GDPR) and a right to data portability (Art. 20 GDPR). If you request the deletion of your application data during the application process, this will be considered a withdrawal of your application.
 You have the right to withdraw your declaration of consent under data protection law at any time. The 
withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You also have the right to lodge a complaint with a data protection supervisory authority.

12. declaration of consent

By submitting your application, you consent to your data being processed as part of the application process described above.

Information about Jobspreader Analytics

Jobspreader Analytics is a software from Wollmilchsau GmbH (Beim Strohhause 27, 20097 Hamburg https://wollmilchsau.de) with which simple usage analyses can be carried out that are precisely tailored to our Jobspreader job campaigns.
Jobspreader Analytics is used to record how many users (not which users) have reached our careers website from a job advert distributed via the jobspreader. It also records how many of these users (not which ones) started an application process on the careers website and how many users (not which ones) completed this process, i.e. sent off an application.
This information is used to optimise content and processes in terms of ergonomics and technical performance.
In addition, we record how often the page on which Jobspreader Analytics is installed is accessed and how often consent to the loading of cookies is given.
In addition, the user's IP address is processed for a short time, as this is technically necessary. Jobspreader Analytics has no means of identifying a person by their IP address. However, the IP address is deleted immediately afterwards and not processed any further.

Processing of information in accordance with § 25 TTDSG

Four cookies are set as part of Jobspreader Analytics, for which we obtain your consent in accordance with Section 25 (1) TTDSG. The stored cookies allow the company to gain an overview of visitor flows and process cancellations on its own pages and applications.  You can revoke your consent at any time via the selection in the cookie settings.

Within our company, those offices and departments receive personal data that need it to fulfil the aforementioned purposes. In addition, we sometimes use different service providers and transfer your personal data to other trustworthy recipients. These can be, for example

• Hosting service provider for the operation of our servers
• Development service provider for programming, development, maintenance and support of software applications
• Operators of social media for the provision of social plugins
• HR service provider to support the selection of applicants
• Co-operation partner

If external processors are used, they are contractually obliged in accordance with Article 28 GDPR.
 

You have the following rights in connection with the processing of your personal data by us:

1. right to information

You have a right of access to the personal data stored about you. In addition, you are entitled to information about the information listed in Art. 15 GDPR.

2. right to rectification and right to erasure

You also have the right to rectification of inaccurate personal data and completion of incomplete personal data in accordance with Art. 16 GDPR and erasure of your personal data if the requirements of Art. 17 GDPR are met.

3. right to restriction of processing

You can restrict the processing of your personal data under the conditions set out in Art. 18 GDPR.

4. right to cancellation

If one of the reasons under Art. 17 (1) GDPR applies, you can demand that we erase the personal data concerning you without undue delay, unless there is an exception to the erasure obligation under Art. 17 (3) GDPR.

5. right to information

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
 You have the right vis-à-vis us to be informed about these recipients.

6. right to data portability

According to Art. 20 GDPR, you have the right to receive the personal data concerning you from us in a machine-readable format and to transmit the data to another controller without hindrance, provided that the requirements of Art. 20 para. 1 lit. a GDPR are met, or to obtain that your personal data be transmitted directly by us to another controller, insofar as this is technically feasible and does not adversely affect the freedoms and rights of other persons. This right does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

7. right of objection

In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, insofar as this is done on the basis of Art. 6 para. 1 lit. e or lit. f GDPR. In the event of such an objection, we will no longer process this data unless we can prove that there are compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

8. right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time by notifying the LÖWEN Gruppe. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

9. right to lodge a complaint with a supervisory authority

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law. 
You can find a list of supervisory authorities at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Data protection information of the LÖWEN Gruppe: Events

Data protection information for business partners

Data protection information for Webex via Telekom

Data protection information for online meetings and video conferences