Player Registration
Personal data processed
Gender, name, preferred greeting, address, email address, phone number, date of birth, proof of ID, IP address, date and time of registration, payment card, browser, mother’s maiden name, place of birth, emailing preferences, URLs visited, referral URLs, biometric facial image scan versus supplied ID including temporary capture of all fields of the supplied ID.
Purpose for processing and uses of the data
To give you access to the National Lottery website and to distinguish you and your preferences from other users of the site, our website places a combination of Strictly Necessary cookies and other cookies that first require your consent, on your PC or mobile device.
To register as a National Lottery online player in compliance with legal and regulatory requirements such as living in Ireland and over 18, and to ensure responsible play.
To verify your identity comparing the proof of ID supplied versus the information you provide during registration.
To enable your ability to play, PLI requires the storage of your payment card with a specialist card processing company. PLI will only receive limited hashed card details.
To compare your facial features versus a supplied ID image, when the face match/liveness feature is enabled and you provide your consent, in order to verify that you are the rightful owner of the supplied ID image.
To send weekly results, inform you of large jackpots, to provide information about offers and promotions, when you provide consent for such communications.
Lawful basis for processing the data
Contractual and legal obligations: The processing of data is necessary to enter into a contract with PLI and to meet the legal and regulatory requirements of the National Lottery Act and the Licence. If the player does not provide the requested data, including a state-issued ID document, PLI will not be able to complete the player registration.
Consent:
- Direct marketing activity is subject to player consent. The player has the clear option to opt-in to receive marketing communications at registration time and then to opt-out any time.
- Face match & Liveness facility. Where you choose to use the ID Scan feature to compare your facial image versus a supplied ID, you do so by first giving your consent. This feature might not be available at the time of your registration.
Legitimate interest (prior to registration):
- PLI has a legitimate interest in marketing its products to an appropriate audience, while ensuring responsible play controls are employed. This can only be achieved by processing personal data to personalise your experience when visiting the National Lottery website and apps using your visit history, time of visits, browser & device used, and location. PLI will also produce depersonalised general statistics to help improve its products by better understanding what works well for players and the National Lottery, and what does not.
Balance of data subjects’ interest: Players are not tracked outside the National Lottery website or app. Data collected is used to ensure individuals are not mistargeted. PLI will ensure that players who have made the decision to permanently self-exclude from playing lottery games cannot access their old account, nor will they be able to create a new account. PLI employs pseudonymisation (masking of personal details) and data minimisation (only collecting or processing necessary fields of data) amongst the safeguards employed to protect the use of personal data within the business. Players also have the right to object to further processing of their personal data, or to request that their personal data be deleted. Statistical reports are generalised and depersonalised. Logical access controls are used throughout the business to strictly ensure that only those who should be working with specific personal data have access to that data.
Sharing of personal data
PLI shares personal data with:
- Camelot Lottery Services (CLS): management of PLI Gaming Infrastructure and 2nd Line Support Services in relation to applications, networks and security.
- EVO Payments International GmbH, trading as BOI Payment Acceptance (BOIPA), processes your payment card on behalf of PLI. BOIPA fully complies with the PCI/DSS 3.2 security requirements. Please note that PLI will only receive limited hashed card details. Transfers by EVO to third-party companies outside of the European Economic Area shall take place if and only to the extent necessary to enable the provision of services to you. EVO’s privacy policy may be found here: https://www.evopayments.eu/en/privacy-policy/
- Adobe Systems Software Ireland Limited (Adobe Ireland) for marketing campaigns; to measure the traffic on the National Lottery’s website; to run onsite A/B testing and personalisation to enrich the data we’re collecting about your visit in order to help us understand our visitors’ usage of the site so as to provide a better user experience. Adobe will transfer your personal information across national borders and to other countries where Adobe and its partners operate, including the United States. See here for an overview of privacy at Adobe:
https://www.adobe.com/ie/privacy/policy.html
- Intralot Ireland Limited (Intralot): maintenance of PLI’s players and retailers handling platforms and retailer terminals. Intralot support engineers are based both on PLI’s premises and in Greece from where they can login using an encrypted VPN channel. All Intralot access is monitored.
- Cloudflare to protect the National Lottery’s website against DDoS attacks (Distributed Denial of Service, a type of hacking). This requires personal data to transit through Cloudflare’s infrastructure. This takes place in multiple locations both inside and outside the EEA. The traffic through Cloudflare is fully-encrypted. Cloudflare’s privacy policy is available here: https://www.cloudflare.com/en-gb/privacypolicy/
- GB Group PLC (GBG) for ID verification and comparing a facial image via biometric scan versus a state-issued ID document uploaded by the online account holder. GBG will hold images for a maximum of 31 days if not already deleted by PLI in a shorter timeframe. The identity documents may be processed by GBG to validate format and security parameters for the purpose of fraud prevention. GBG’s privacy notice is available here: https://www.gbgplc.com/en/legal-and-regulatory/products-services-privacy-policy/
- OneTrust, a privacy automation service provider, for ID verification when the National Lottery’s Customer Support team provides a secure link to players for uploading ID images. The identity document will be stored within OneTrust’s secure system for a maximum of 30 days if not already deleted by PLI’s Customer Support team in a shorter timeframe.
- Google Analytics, a web analysis service of Google. Google Analytics uses cookies to measure traffic on the National Lottery’s website to compile reports on website activity and to provide PLI with further services associated with website and internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other data from Google. See here for an overview of privacy at Google: https://support.google.com/analytics/answer/6004245
- Firebase, a Google product, to measure the traffic on the National Lottery's app. See here for an overview of privacy at Google relating to Firebase:
https://firebase.google.com/support/privacy
- Google Ads, a system based on cookies and keywords determined by advertisers. Google uses these characteristics to place National Lottery advertising on pages where they think it might be relevant. PLI pays when users divert their browsing to click on the National Lottery advertising. If a person navigates to our website via a Google ad, a so-called ‘Conversion’ Cookie is stored on the information technology system of the person concerned by Google. The data and information collected through the use of the Conversion Cookie is used by Google to generate user statistics for our website. These statistics are used by PLI to determine the total number of users who have been referred to the National Lottery via Google Ads. Neither PLI nor other Google Ads advertisers receive information from Google that could identify the person who clicked on the ad. See here for an overview of privacy at Google: https://support.google.com/analytics/answer/6004245
- DoubleClick Digital Marketing, a Google product, offers technology products and services that are sold to Core, a third-party advertising agency chosen by PLI, to allow the National Lottery to deploy, target, deliver, and report on interactive advertising campaigns.
- Meta Platforms Ireland Limited (Facebook and Instagram) use cookies, web beacons and other storage technologies to collect or receive information from National Lottery’s websites and elsewhere on the Internet and use that information to provide measurement services, target and deliver ads. You can find Meta Ireland's Privacy Policy at https://www.facebook.com/about/privacy.
- Bing, a web search engine owned and operated by Microsoft. Similar to Google Ads above, the Bing system is based on cookies and keywords determined by advertisers.
- Mkodo, a Pollard Banknote company, chosen by PLI for website and app development and design services. Small quantities of personal data may be processed by Mkodo during access controlled by PLI while providing production support services.
- Legal advisors. In the event of a complaint, pertinent information may be shared with organisations who provide services to the company such as legal advisors.
- Regulator of the National Lottery (RNL). The Regulator may access certain data to assess and ensure that PLI is meeting its obligations to prevent underage or problem play.
Ongoing Player Interaction
Personal data processed
Gender, name, preferred greeting, address, email address, date of birth, proof of ID, IP address, date and time of visit, payment card, browser, mother’s maiden name, place of birth, emailing preferences, URLs visited, referral URLs, games played, number played, amounts played, amounts added, amounts withdrawn, wallet amount, page, length of visit, cookies, biometric facial image scan versus supplied ID including temporary capture of all fields of the supplied ID.
Purpose for processing and uses of the data
To give you access to the National Lottery website and to distinguish you and your preferences from other users of the site, our website places a combination of Strictly Necessary cookies and other cookies that first require your consent, on your PC or mobile device.
To play online National Lottery games in compliance with legal and regulatory requirements such as living in Ireland and over 18, and to ensure responsible play.
To verify your identity comparing the proof of ID supplied versus the information you provide during registration. All players, irrespective of the date when the account was opened, are required to verify their identity, should they wish to add funds to their account.
To compare your facial features versus a supplied ID image, when the face match/liveness feature is enabled and you provide your consent, in order to verify that you are the rightful owner of the supplied ID image.
To enable your ability to play, PLI requires the storage of your payment card with a specialist card processing company. PLI will only receive limited hashed card details.
To tailor your experience on our digital channels, to improve email marketing activity, and to suggest relevant marketing content.
To send weekly results, to inform you of large jackpots, to provide information about offers and promotions, when you provide consent for such communications.
To create statistics to enable PLI to develop responsible play initiatives and player protection controls such as spend limits and monitoring of account exclusions.
To conduct player satisfaction and market research surveys, including surveys relating to responsible play and gambling awareness.
Lawful basis for processing the data
Contractual and legal obligations: The processing of data is necessary to enter into a contract with PLI and to meet the legal and regulatory requirements of the National Lottery Act and the Licence. If the player does not provide the requested data, PLI will not be able to allow the player to play National Lottery games online. If you already hold an online account and do not wish to undergo the ID verification process when asked to do so, you may no longer be permitted to access your account and it may be closed after a period of time.
Consent:
- Direct marketing activity is subject to player consent. The player has the clear option to opt-in to receive marketing communications at registration time and then to opt-out at any time.
- Face match & Liveness facility. Where you choose to use the ID Scan feature to compare your facial image versus a supplied ID, you do so by first giving your consent.
- Deployment of cookies other than those deemed ‘Strictly Necessary’ for the delivery of the requested service, such as access to our website. Follow this link to our Cookie Policy to find out more.
Legitimate interest:
- PLI has a legal obligation emanating from the Licence to promote responsible gaming practices that prevent problem gaming. It is therefore in PLI’s legitimate interest to undertake data processing activities necessary to achieve this purpose. Your use of the National Lottery website and app will be personalised with a view to not only improving your play experience but also to guard against possible problem play. Measures employed include avoiding targeting individuals who may have gambling issues. To achieve this, PLI analyses recent play history, frequency of play, last win dates, type of games played, location (county), player visit history, time of visit, browser and device used, gender.
Balance of data subjects’ interest: Players are not being tracked outside the National Lottery website or app. The information is processed to ensure individuals are not mistargeted. It is also processed to ensure that players who make the decision to permanently self-exclude their online account from future play are prevented from opening new accounts. Amongst its privacy safeguards, PLI uses pseudonymisation of data during processing to mask the identity of individuals. PLI limits the analysis of play data to 18 months of sales history and users have the right to object to further processing.
- PLI has a legitimate interest in improving direct email marketing activity and to suggest relevant marketing content, while also employing responsible gaming techniques while marketing. This is achieved by using data related to recent play history, frequency of play, last win dates, type of games played, location (county), player visit history, time of visit, browser and device used, gender. PLI will also produce general statistics to improve its products based on game-uptake feedback.
Balance of data subjects’ interest: Players are not being tracked outside the National Lottery website or app. The information is being used to ensure individuals are not mistargeted. It is also used to ensure that players who make the decision to permanently self-exclude their online account from future play are prevented from opening a new account. Amongst its privacy safeguards, PLI uses pseudonymisation of data during processing to mask the identity of individuals. PLI limits the analysis of playing data to 18 months of sales history and does not process the data of self-excluded players. Reports are designed to be generalised and to exclude individual personal data. Logical access controls prevent access to the raw player data used to create these reports.
- PLI has legitimate interest in conducting player satisfaction and market research surveys. PLI shares email address, first name, surname, telephone number, age and gender data with third party market research companies who carry out player surveys on PLI’s behalf.
Balance of data subjects’ interest: PLI will only contact players who have opted in for other forms of marketing contact; players can choose not to respond to surveys; players can review PLI’s Data Privacy Statement prior to completing a survey; third party market research companies will only hold personal data shared with them for six months.
- It is also in PLI’s legitimate interest to conduct surveys relating to responsible play and gambling awareness, your contact details – first name, surname, telephone number, email address – will be shared with research companies, such as RED C Research, who carry out player surveys on PLI’s behalf.
Balance of data subjects’ interest: The personal data supplied will be the minimum possible for each survey; you do not have to take part in such surveys, if you are contacted by the research company; you can choose to opt out of being contacted again regarding similar surveys; if you choose to take part, your responses will be pseudonymised by the research company prior to being supplied to PLI; third party research companies will only hold personal data shared with them for six months; at PLI, the database containing your responses will only be accessible to a very small number of IT specialists where your personal data will be masked at all times; PLI will ensure that appropriate technical and organisational measure are in place so that no unauthorised individuals within PLI will have the capability of linking your responses to your main customer account; your responses and your pattern of play and expenditure will be anonymously added to other similar respondents to create broad profiles of customers and their attitudes and feelings with respect to responsible play and gambling; once broad profiles are created, PLI’s research database will be fully anonymised or deleted; players can review PLI’s Data Privacy Statement prior to responding to a survey. Unless you opt out of future contact, you may be contacted again in the future regarding a similar survey.
To Opt-Out of Responsible Play Surveys please email opt_out@lottery.ie
(Note: there is an underscore between ‘opt’ and ‘out’ – opt_out)
Sharing of personal data
Personal Data is shared with the same organisations as outlined in the Player Registration section above.
PLI shares email address, first name, surname, telephone number, age and gender with third party research companies, such as RED C Research, who carry out player satisfaction surveys, market research surveys, and surveys relating to responsible play and gambling awareness on PLI’s behalf.
Third party research companies will only hold your personal data for six months.
RED C Research’s privacy notice may e viewed here:
https://redcresearch.ie/privacynotice/
PLI may share players’ data with FTI Consulting Management for running automated checks to discover duplicate accounts and to improve the checking algorithms employed.
Android and iOS Apps
Personal data processed
Geo-location, name, IP address, phone device ID, device IMEI, platform, purchase total, device OS version
Purpose for processing and uses of the data
Location is required to comply with legal requirements (living in and playing from Ireland).
Lawful basis for processing the data
Contractual and legal obligations: The processing of data is necessary to enter into a contract with PLI and to meet the legal and regulatory requirements of the National Lottery Act and the Licence. If a player does not provide the requested data, PLI will not be able to allow the player to play National Lottery games online.
Consent: Direct marketing activity is subject to player consent. The player has the clear option to opt-in to receive marketing communications at the point of registration and then to opt-out at any time.
Push Notifications are messages which are sent from the National Lottery mobile app to users who have downloaded the National Lottery App and have opted-in to receive notifications. These notifications can be considered to be both service and marketing in nature. You have the ability to enable or disable push notifications from the National Lottery mobile app on your phone or device at any time. Here’s how:
If you are using the National Lottery mobile app on an iOS device, you will be automatically prompted to opt in or to opt out of push notifications when you install the app.
If you are using the National Lottery mobile app on an Android device, you will be automatically opted-in to receive push notifications when you install the app. This is normal for Android devices.
You can disable notifications by changing the settings for the App on your mobile device.
Android Phones: Go to settings and select 'Apps'. Tap on the National Lottery App and then select 'Notifications'. You will be given the option to block all notifications from the app.
Apple Phones: Go to Settings, tap on Notifications and select the National Lottery App. You will see the option to allow or disable notifications for the app.
Legitimate interest:
- PLI has a legal obligation emanating from the Licence to promote responsible gaming practices that prevent problem gaming. It is therefore in PLI’s legitimate interest to undertake data processing activities necessary to achieve this purpose. Your use of the National Lottery app will be personalised with a view to not only improving your play experience but also to guard against possible problem play. Measures employed include avoiding targeting individuals who may have gambling issues. To achieve this, PLI analyses recent play history, frequency of play, last win dates, type of games played, location (county), player visit history, time of visit, browser and device used, gender.
Balance of data subjects’ interest: Players are not being tracked outside the National Lottery website or app. The information is processed to ensure individuals are not mistargeted. It is also processed to ensure that players who make the decision to permanently self-exclude their online account from future play are prevented from opening a new account. Amongst its privacy safeguards, PLI uses pseudonymisation of data during processing to mask the identity of individuals. PLI limits the analysis of play data to 18 months of sales history and users have the right to object to further processing.
- PLI has a legitimate interest in improving the direct email marketing activity and to suggest relevant marketing content while also employing responsible gambling techniques while marketing. This is achieved by using data related to recent play history, frequency of play, last win dates, type of games played, location (county), player visit history, time of visit, browser and device used, gender. PLI will also produce general statistics to improve its products based on game-uptake feedback.
Balance of data subjects’ interest: Players are not being tracked outside the National Lottery app. The information is being used to ensure individuals are not mistargeted. It is also used to ensure that players who make the decision to permanently self-exclude their online account from future play are prevented from opening a new account. Amongst its privacy safeguards, PLI uses pseudonymisation of data during processing to mask the identity of individuals. PLI limits the data to 18 months of sales history and does not process the data of self-excluded players. Reports are designed to be generalised and to exclude individual personal data. Logical access controls prevent access to the raw player data data used to create these reports.
Sharing of personal data
Personal Data is shared with the same organisations as outlined in the Player Registration and Ongoing Player Interaction sections above.
Customer Support
Personal data processed
Gender, name, preferred greeting, address, email address, date of birth, proof of ID, IP address, date and time of visit, payment card, browser, mother’s maiden name, place of birth, games played, numbers played, amounts played, amounts added, amounts withdrawn, wallet balance, length of visit, biometric facial image scan versus supplied ID including temporary capture of all fields of the supplied ID, X (twitter) account, Facebook Messenger account, Instagram account, telephone number, telephone call recordings, instant messages, web chat.
Purpose for processing and uses of the data
To provide assistance to players and to monitor quality of services.
Lawful basis for processing the data
Contractual and legal obligations: The processing of data is necessary to enter into a contract with PLI and to meet the legal and regulatory requirements of the National Lottery Act and the Licence.
If the player does not provide the requested data, PLI will not be able to provide player support.
Sharing of personal data
PLI shares personal data with:
- Camelot Lottery Services (CLS): management of PLI Gaming Infrastructure and 2nd Line Support Services in relation to applications, networks and security.
- Intralot Ireland Limited (Intralot): maintenance of PLI’s players and retailers handling platforms and retailer terminals. Intralot support engineers are based both on PLI’s premises and in Greece from where they can login using an encrypted VPN channel. All Intralot access is monitored.
- Zendesk for Customer Support, call management and call recording, to centrally manage inquiries, requests or any player’s interactions via the support email address, and social media interactions. Please see an overview of Zendesk’s privacy here:
https://www.zendesk.com/company/privacy-and-data-protection/#gdpr-sub
- Zendesk uses Twilio Inc for the storage of telephone call recordings. Zendesk Talk lawfully transfers recordings to the USA to a Twilio Inc. data centre hosted by Amazon Web Services (AWS).
https://www.twilio.com/legal/privacy
- Aircall for Customer Support, call management and call recording, particularly in the Prize Claims department. Special technical and organisational measures, such as restricted access control, have been put in place to outweigh potential risks to winners’ privacy rights. Aircall may transfer personal data to countries outside the EEA and have implemented suitable safeguards designed to ensure compliance with GDPR. An overview of Aircall’s privacy policy may be found here: https://aircall.io/privacy/
- SMTP2Go Inc, an email delivery service for players who successfully purchase a draw-based game ticket; the service is retained to ensure that players receive confirmations of their purchases, especially in the context of scheduled play. Only players’ email addresses are processed by the third party.
Winners
Personal data processed
Data collected on the claim form: name, address, date of birth, telephone number, proof of ID (type and expiry date) and signature.
Data collected on a voluntary basis: gender, occupation, and consent for publicity (photographs, video, name, address and any other information as agreed in writing).
Purpose for processing and uses of the data
To comply with legal and regulatory requirements (such as, winner is over 18).
To facilitate the redemption of draw based games and scratch card prizes as described in the Game Rules.
Lawful basis for processing the data
Contractual and legal obligations: The processing of data is necessary to enter into a contract with PLI and to meet the legal and regulatory requirements of the National Lottery Act and the Licence. If the player does not provide the requested data, PLI will not be able to pay the player.
Consent: Publicity material is processed on the basis of consent. If consent is subsequently withdrawn, PLI will cease to process this information. However, if this information has been shared with third parties (i.e. the media), PLI will no longer be in control of this data and cannot restrict further processing which is already in the public domain.
Gender and occupation information is gathered on a voluntary basis and used purely for statistical purposes.
Sharing of personal data
Personal data is not generally shared with third parties, unless the game type has stipulated the use of third-party providers to facilitate the redemption of game prizes, such as the annuity game EuroDreams.
The claim form is kept in secure storage for a period of up to two years and the data supplied therein is retained electronically for the duration of the Licence plus two years.
If the player, or syndicate, consents to publicity, the name, winnings and imagery may be published on the National Lottery website, via email and social channels and shared with the media (newspapers, radio and/or television stations) as agreed in writing. It will also be archived for future “throwback” marketing purposes.
Once the information has been shared with the media, the information will be in the public domain and PLI will not be able to enforce deletion.
PLI shares personal data with:
Mercer for overseeing the establishment of the annuity policy between the EuroDreams prize winner and Irish Life. Mercer will act as an insurance intermediary and gather all the necessary information, as described in the game rules, to set up an annuity policy and to satisfy Anti Money Laundering requirements.
Irish Life for setting up the annuity policy for EuroDreams prize winners. Irish Life will be responsible for managing the purchased annuity policy and for handling winners’ data subject rights requests. Irish Life’s privacy notice may be found here: https://www.irishlife.ie/ila-privacy-notice/
Hampers & Co for facilitating the redemption of prizes for Hampers & Cash winners. PLI will share prize winners’ name, address, and contact number with Hampers & Co, who then contact them to arrange for the prizes to be chosen and sent out. Please see here an overview of Hampers & Co privacy policy: https://hampersandco.com/pages/our-privacy-policy
Scratch Card Draw Entries & TV Game Show
Personal data processed
Scratch card draw entries: name, address, email address, telephone number and signature.
TV Game Show participants and proxy participants: name, address, date of birth, phone number, signature and type of ID; proxy participant’s name, address & phone number; photographic and TV broadcast imagery.
Beneficiaries of National Lottery funding: video footage of Good Cause funding recipients and their projects.
Purpose for processing and uses of the data
To claim scratch card prizes above a certain value as described in the Game Rules.
To participate on the TV Game Show, or to allow a nominated proxy to participate instead, and for winners to receive prizes.
To publicise the benefits and beneficiaries of Good Cause funding raised by the National Lottery.
Lawful basis for processing the data
Contractual and legal obligations: The processing of data is necessary to enter into a contract with PLI and to meet the legal and regulatory requirements of the National Lottery Act and the Licence. If the player does not provide the requested data, PLI will not be able to pay the player. If a potential participant of the TV Game Show does not provide the requested data, the potential participant will not be able to take part in the TV Game Show.
Consent: Publicity material is processed on the basis of consent. Once the information has been released to the media, PLI would not be able to fulfil requests to withdraw consent.
Sharing of personal data
PLI shares personal data with:
- RTÉ for TV Game Show production purposes
- KPMG during independent observation of draws
- General and selected media and press for publicity purposes
- The public, where limited personal data is publicly announced on the website, and also on the TV Game Show, where the participants drawn for next week’s show are announced.
Second Chance Database
Personal data processed
Name, address, date of birth, telephone number, email address, IP address
Purpose for processing and uses of the data
To register a retail or online National Lottery Player’s entry into a second chance draw in compliance with legal requirements (such as, over 18).
To send information about offers and promotion.
The information is used internally by the National Lottery's digital marketing team.
Lawful basis for processing the data
Contractual and legal obligations: The processing of data is necessary to enter into a contract with PLI and to meet the legal and regulatory requirements of the National Lottery Act and the Licence. If the player does not provide the requested data, PLI will not be able to complete the player registration for the relevant second chance draw.
Consent: Direct marketing activity is subject to player consent. The player has the clear option to opt-in to receive marketing communications at registration time and then to opt-out any time.
Sharing of personal data
PLI shares personal data with:
- Action Point, who create the website in a National Lottery controlled Microsoft Azure server located in North Europe
- Google Analytics is used to measure the traffic on the second chance website.
National Lottery Good Causes and Good Causes Awards
The National Lottery was set up with the express purpose of raising funds for Good Causes, with almost 30 cent of every €1 our players spend on National Lottery games going to Good Causes.
Funds raised by the National Lottery are transferred to the Exchequer and are used to part-finance expenditure by various Government Departments on projects in these categories: Sport, Health, Community, Children & Youth, Arts, Heritage & Irish Language.
Each Government department or body accepts applications for funding on an annual basis and disperses grants accordingly. Each Government department then shares this information with the National Lottery so that we can inform our Players as to what organisations, clubs, voluntary groups etc have received National Lottery Good Causes funding.
Personal data processed
In addition to the name of the voluntary organisation or group, the grant amount and grant purpose, the following personal data is processed: name, address, landline & mobile telephone number, email address, IP address, photographic & videographic imagery.
Purpose for processing and uses of the data
The data will be used to contact and seek permission from certain organisations, groups and sport clubs all over Ireland to enable the National Lottery to create and produce photographic and video stories, including promotional material, that will recognise the inspiring and innovative work being carried out.
These stories may be used, with the consent of those involved, as part of our marketing activities and promoted across our consumer touchpoints e.g. Social, Online, National Lottery App, TV, Radio, Retail & PR communications.
The data is also used to contact and respond to Good Cause Awards entrants as appropriate.
At the Good Causes Award event, photography, videography and soundbites of attendees and winners will be captured to showcase the awards ceremony.
The data is also used to enable the National Lottery to print and distribute personalised signage to Sports Clubs and organisations around the country, to acknowledge funding received through the Sports Capital Programme Grant, which is part-funded by National Lottery Good Causes..
Lawful basis for processing the data
Legitimate interest: To inform and educate our players as to where the Good Causes funding goes and highlight the impact this funding has on the various voluntary groups and communities. Also, the processing of data is necessary to enter the Good Cause Awards competition which the company has a legitimate interest in promoting. Any content captured on the night of the Good Causes Awards is also used to promote the winners of the Good Causes Awards and drive awareness of Good Causes.
Balance of data subjects’ interest: Recognition and awareness of the work being carried out by Good Cause beneficiaries; data subjects have the right to opt out and not take part in promotion of good causes and do not have to enter the Good Causes Awards competition; data subjects have the right to be removed from databases relating to these promotions. However, where photographs, videos and soundbites from the Good Causes Awards ceremony have already been released into the public domain, it may not be possible to have them deleted at that stage.
Sharing of personal data
PLI shares personal data with:
- Third-party content production companies and creative advertising agencies.
- Connector, who create and host the website where the competition entries are made. The server is located in North Europe.
- Third-party market research companies who carry out surveys on PLI’s behalf relating to Good Causes awareness and benefits.
- Asana for marketing workflow management and for helping PLI liaise with media agencies while producing advertising and marketing projects. Good Causes beneficiaries’ pictures, names and contact details may be entered within the software tool. Asana may store information in the United States. Asana complies with EU-US Data Privacy Framework program. Please see here an overview of Asana’s privacy policy: https://asana.com/terms#privacy-policy
Win Awareness – Real Winners’ Stories
For Lottery winners who agree to take part in advertising and promotional campaigns, telling their personal stories.
Personal data processed
Name, address, landline and/or mobile telephone number, email address, IP address, social media accounts, ticket winning information, imagery – both photographic & video, voice recordings, video recordings.
Purpose for processing and uses of the data
The data will be used as part of the National Lottery’s marketing activities and will be promoted across a variety of media and consumer touchpoints. Examples of these consumer touchpoints include but will not be limited to TV, Radio, Outdoor, Online, Social, Retail, PR.
Winners’ stories will also be used internally by the National Lottery in communications such as our internal newsletters. They will also be included on our Retailer portal, the National Lottery access point for our retail partners.
Lawful basis for processing the data
The processing of this data will be obased on consent. Winners are entitled to withdraw the consent to which PLI will fulfil by stopping marketing communications using their data. Once the information has been released to the media, PLI would not be able to fulfil requests to erase the data that will be publicly available.
Sharing of personal data
PLI shares personal data with:
- Third-party content production companies.
- Third-party research companies, employed via our creative advertising agency.
- Creative advertising agencies and professional photographers.
- Connector, who create and host PLI’s website. The server is located in North Europe.
- Asana for marketing workflow management and help PLI liaise with media agencies while producing advertising and marketing projects. Public winners’ pictures, names and ticket winning information may be entered within the software tool. Asana may store information in the United States. Asana complies with EU-US Data Privacy Framework program. Please see here an overview of Asana’s privacy policy: https://asana.com/terms#privacy-policy