Terms & Conditions Betting and sporting rules Privacy Policy Betting terms Tote
Privacy Policy
 
Thank you for visiting our website www.onextwo.de and for your interest in our company.

Protecting your personal data is important to us.

Personal data means information about the personal or material circumstances of an identified or identifiable natural person.

As personal data enjoys special legal protection, we only collect it when necessary for the provision of our website and services.

In the following we set out the type of personal information we gather during your visit to our website and how we use it. Our data protection practices are in line with all relevant statutory regulations. We will only collect, process, and store your personal data when necessary in order to ensure that our website and its contents and services are fully functional, as well as to handle inquiries and for the purpose of contractual fulfillment, provided however that there is legitimate interest in the context of point f of Article 6 (1)(1) GDPR or other similar legislation. If you have provided separate consent, then your data will also be used for other purposes that are explicitly set out as part of such consent.

Definitions

The IBA Entertainment privacy statement is based on the terms used by European Directives or Regulations upon adoption of the General Data Protection Regulation (GDPR).

We use the following terms, amongst others, in this privacy statement:
  1. Personal data
    Personal data refers to all information that relates to an identified or identifiable natural person (hereafter referred to as “relevant person”). A natural person is referred to as identifiable if they can be directly or indirectly identified, particularly through reference to an identifier such as a name, an identification number, location data, online identification data, or to one or more factors specific to the physical, physiological, genetic, mental, financial, cultural, or social identity of this natural person.
     
  2. Data subject
    A data subject is any identified or identifiable natural person whose personal data is processed by those who are responsible for processing such data.
     
  3. Processing
    Processing is any procedure or any such set of operations performed on personal data, whether automated or not, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, usage, disclosure via transmission, distribution or otherwise making available, alignment or linking, restriction, deletion, or destruction.
     
  4. Restriction of processing
    Restriction of processing involves the marking of stored personal data with the aim of limiting its future processing.
     
  5. Profiling
    Profiling covers any type of automated processing of personal data that enables personal data to be used to evaluate specific personal aspects relating to a natural person, in particular to analyze or forecast aspects regarding the job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or movements of that natural person.
     
  6. Pseudonymization
    Pseudonymization means the processing of personal data in such a manner that the personal data can no longer be linked to a specific data subject without the use of extra information, provided that this additional information is stored separately and also that technical and organizational measures are in place to ensure that personal data cannot be assigned to an identified or identifiable natural person.
     
  7. Controller or person responsible for processing data
    The controller or person responsible for processing data is a natural or legal person, authority, institution or other body that either decides alone or with others on the purpose and means used to process personal data. If the purposes and means of such processing are prescribed by EU law or the laws of Member States, then the controller or the specific criteria for the controller's appointment can be provided for by EU law or the laws of Member States.
     
  8. Processor
    The processor is a natural or legal person, authority, institution, or other body who handles personal data on behalf of the controller.
     
  9. Recipient
    The recipient is a natural or legal person, authority, institution, or other body to whom personal data is disclosed, whether a third party or not. Authorities that may receive personal data as part of a specific inquiry in accordance with EU law or the laws of Member States are not regarded as recipients.
     
  10. Third party
    A third party is a natural or legal person, authority, institution, or body other than the data subject, controller, processor, and persons authorized to process personal data under the direct authority of the processor or controller.
     
  11. Consent
    Consent is the informed and unambiguous permission freely provided by the data subject, in the form of a statement or clear affirmative action, by which the data subject signifies their agreement to the processing of any personal data relating to them.
Controller within the context of Article 4 (7) GDPR

The controller in the context of the General Data Protection Regulation, and other applicable data protection laws and regulations relating to privacy legislation applicable within the member states of the European Union, is

IBA Entertainment Ltd.
Cornerstone Business Centre, Level 1, Suite B
16th September Square
MST 1180 Mosta
Malta

The activities described in the following sections are carried out solely by IBA Entertainment for the purposes of bets on horse racing.

Address and contact details of the Data Protection Officer

The contact details for the controller are:

Email: datenschutz@onextwo.com

All data subjects can contact our Data Protection Officer directly at any time concerning questions and inquiries about data protection.

Provision of the website and creation of log files

Every time our website is called up, our system automatically records data and information on the computer system used by the calling computer. The following data is collected:

Scope of data processing
  1. Information regarding the browser type and version used
  2. Operating system of the device
  3. IP address of the device
  4. Date and time of access
  5. Websites and resources (images, files, other page contents) which were called up on our website.
  6. Websites from which the user’s system accessed our website (referrer tracking)
This data is stored in the log files within our system. This data is not stored together with personal data from a specific user, so identification of individual site visitors does not occur.

Legal justification for processing of personal data
Point f of Article 6 (1) GDPR (legitimate interest). Our legitimate interest lies in ensuring that the purposes stated below are fulfilled.

Purpose of data processing
Logging is carried out to ensure the compatibility of our website for as many visitors as possible, as well as to combat misuse and for troubleshooting purposes. It is necessary to log the technical data from the calling computer in order to react to display errors, attacks on our IT systems, and/or operational faults on our website as quickly as possible. Furthermore, this data is used to optimize the website and to ensure the general security of our IT systems.

Duration of storage
The above-mentioned technical data is deleted as soon as it is no longer required to ensure compatibility of the website for all visitors, and no later than 3 months after our website was called up.

Options for revocation and deletion
The options for revocation and deletion are based on the general regulations regarding the right to revocation and deletion in data protection terms, which are described in this privacy statement.

Specific functions of the website

Our site offers you various functions in which personal data is collected, processed and stored by us when they are used. What happens with this data is explained below:
  • Registration
     
    Scope of processing of personal data

    The following data is processed as part of registration for a player account:
     
  • First name
  • Last name
  • Address (street / number / ZIP code/ town)
  • Date of birth
  • Place of birth
  • Nationality
  • Password of your choice for subsequent authentication
  • Logging of IP address
Legal justification for processing of personal data
Data processing is based on point b of Art. 6 (1) GDPR (pre-contractual agreement or contractual agreement) as well as on point c of Art. 6, para. 1, p.1.

Options for revocation and deletion
The options for revocation and deletion are based on the general regulations regarding the right to revocation and deletion in data protection terms, which are described in this privacy statement.

Duration of storage
We store your personal data for as long as is necessary for the processing purposes listed in point 17.
  • Contact form/chat
Scope of processing of personal data
Data that was entered in our contact form or in the chat feature.
Legal justification for processing of personal data is point f of Article 6 (1) GDPR (legitimate interest). If you use the contact form or chat feature then we assume that you are interested in establishing contact with us and in exchanging information.

Purpose of data processing
The data recorded via our contact form or chat feature will be used for handling that specific request for information.

Duration of storage
Unless required for further contractual performance or provision of services, or data retention obligations, the collected data is deleted once the request for information has been handled.

Options for revocation and deletion
The options for revocation and deletion are based on the general regulations regarding the right to revocation and deletion in data protection terms, which are described in this privacy statement.
  • Login area
Scope of processing of personal data
The registration and login data used by you to enter our site, as well as the data uploaded and transferred by you in the process.

Legal justification for processing of personal data
The majority of data processing is based on point b of Article 6 (1) GDPR (pre-contractual agreement or contractual agreement).
This is necessary for us to provide our service. The same applies to such processing procedures necessary for carrying out pre-contractual measures, such as paper-based customer inquiries in betting shops or during registration on our website. We are also subject to legal requirements which makes processing of personal data necessary, such as the fulfillment of licensing obligations, prevention of money laundering, responsible prevention of gambling addiction, tax obligations and more, based on point c of Article 6 (1) GDPR. Processing procedures, which are not covered by any of the stated legal bases, but are necessary to carry out business activities when the balance of interests is in favor of the welfare of our staff and our owners, and are for the purpose of service provision, as long as there is no overarching legitimate interest or fundamental rights and freedoms that oppose this, are based on point f of Article 6 (1) GDPR.

Purpose of data processing
You can use a separate login area on our website. If you have forgotten your username or password for this area, it is possible to have this data sent to you again after first entering your contact details (email address). Any usage data for the login area is only collected, stored, and processed by us to satisfy the terms of the contract, to observe statutory requirements, to tackle misuse, to compare blacklists, and to rectify malfunctions or, as may apply, maintain functionality. It is not used for any other purpose.

Duration of storage
Data collected as part of the 'Forgotten Username/Password' function is only used for resending forgotten access details.

Options for revocation and deletion
The options for revocation and deletion are based on the general regulations regarding the right to revocation and deletion in data protection terms, which are described in this privacy statement. We must inform you that the provision of personal data is sometimes required by law (e.g. license and tax regulations) and is also as a result of contractual arrangements. In order to conclude a contract (horse racing betting account with onextwo), it is necessary to provide us with personal data which we then have to process. Not providing such data means that the contract (the horse racing betting account) cannot be concluded.

Identity verification

Data transmission to SCHUFA for identity verification purposes. No credit checks take place, just identity verification.

Purpose of data processing
IBA Entertainment Ltd. transfers personal data that has been collected in the context of this contractual agreement regarding the registration request, implementation, and termination of this business relationship, purely for purpose of identifying persons, to

SCHUFA Holding AG,
Kormoranweg 5,
65201 Wiesbaden

Legal justification for processing of personal data
Identity verification is obligatory in order to comply with regulatory requirements and is therefore primarily based on point c of Article 6 (1) GDPR (fulfilling statutory obligations).

Legal justification of these transmissions can also be:

points b and f of Article 6 (1) of the General Data Protection Regulation (GDPR). Transmissions based on point f of Article 6 (1) GDPR may only take place provided it is necessary to uphold legitimate interests of IBA Entertainment Ltd. or third parties, whilst not outweighing the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data. Data exchange with SCHUFA also fulfills statutory obligations to verify the identity of customers as per Art. 4(5)(1) of the German State Treaty on Gambling as well as additional licensing and regulatory requirements. Further information regarding SCHUFA’s activities can be found in the SCHUFA information sheet as per Article 14 GDPR or online at www.schufa.de/datenschutz.

Payment service providers

Several payment service providers are used for the financial transactions. We process your payment information for the purpose of payment processing. Depending on the type of payment, we will forward your payment information to third parties (e.g. to your credit card provider for credit card payments). When processing payments, your data will be processed by IBA Entertainment Ltd. and processed by the payment provider. The payment providers used act independently as independent bodies in data processing.

The following data will be processed by you as part of payment processing:
  • First name
  • Surname
  • Address (street / house number / zip code / city / Country)
  • Date of registration
  • Phone
  • Title
  • Date of birth
  • E-mail

The following payment service providers are used:
  • Visa
Visa Europe Services Inc.
London branch
1 Sheldon Square
London W2 6TT
United Kingdom
Email: anfragen.europa@visa.com 
Telephone: +44 (0)20 7795 5777

Branch in Germany
Visa Europe Management Services Limited, German Branch
Neue Mainzer Strasse 66-68
60311 Frankfurt 
Email: anfragen.europa@visa.com
Registration court: Frankfurt Regional Court
Registry no: HRB 102483
  • Mastercard
Mastercard Europe is a subsidiary of Mastercard Incorporated, the holding company of Mastercard. Mastercard Incorporated is a private limited liability company according to American law and reports to the US Securities and Exchange Commission (SEC).
Mastercard Europe SA
Chaussée de Tervuren 198A
B-1410 Waterloo
Belgium

For information requests regarding data protection laws, please use the following email address: privacyanddataprotection@mastercard.com
Mastercard Representative Office Germany
Unterschweinstiege 2-14
60549 Frankfurt/Main
Germany

Telephone: +49 (0)69 97 12 10 00
Fax: +49 (0)69 97 12 10 10
Authorized representative: Peter Bakenecker
  • Transfer
The bank sends data contained in the transfer directly to the recipient’s payment service provider or to any intermediaries that are involved. The payment service provider can supply all transfer data to the recipient, including the International Bank Account Number (IBAN).
  • PayPal
If payment is via PayPal, we forward your payment data for payment processing purposes to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereafter referred to as “PayPal”).
PayPal reserves the right to carry out a credit check. To do so, your payment data may be forwarded by PayPal to credit agencies to determine your solvency as per point f, Art. 6 (1) GDPR based on the notion of legitimate interest. PayPal uses the credit check result based on statistical default probability in order to decide whether or not to provide the relevant payment method. Further information regarding data protection, such as the credit agencies used, can be found in PayPal’s privacy statement: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
However, you can revoke processing of your data at any time by notifying PayPal to this effect. Nevertheless, PayPal remains authorized, if necessary, to process your personal data if it is required to handle payments as per the contract.
  • Paysafecard
paysafecard.com Deutschland
Zweigniederlassung der Prepaid Services Company Limited
Roßstr. 92
D-40476 Düsseldorf
HRB 68659
Düsseldorf Regional Court
Website
  • Trustly

    Trustly Group AB
    Rådmansgatan 40
    113 57 Stockholm
    SWEDEN
    contactus@trustly.com
    Reg.no.: 556754-8655
    VAT ID: SE556754865501
     
  • Skrill
Skrill® is a registered trademark of Skrill Limited. Skrill Limited is registered in England and Wales, under the company number 04260907 with registered headquarters at 25 Canada Square, London E14 5LQ. It is approved and regulated by the British Financial Conduct Authority as per the regulations for issuing electronic means and instruments of payment, the “Electronic Money Regulations 2011” (FRN: 900015). The Skrill Prepaid Mastercard is issued internationally by Paysafe Financial Services Limited under license from Mastercard International. Paysafe Financial Services Limited (FRN: 900015) is approved by the Financial Conduct Authority (British financial authority) as an e-money institution as per the Electronic Money Regulations 2011 for issuing electronic means and instruments of payment. Mastercard® is a registered trademark of Mastercard International. » more...
  • Klarna
Klarna: Klarna Bank AB (publ)
Sveavägen 46
111 34 Stockholm
Sweden
0046 8-120 120 00
inkorg@klarna.se

Online retailers that use Klarna payment methods can also contact Klarna GmbH in Germany:

Klarna GmbH
Theresienhöhe 12
80339 München
Management Board of Klarna GmbH
Thomas Vagner
Commercial register
Munich Regional Court HRB 229952
VAT-ID no. DE272596419
Website

Purpose of data processing
IBA Entertainment Ltd. uses payment service providers for payment transactions.

Legal justification for processing of personal data
Data processing is based on points b and f of Art. 6 (1) GDPR (contractual agreement and legitimate interest).
Payment providers forward your data on to third parties if necessary, provided it is required to satisfy the terms of the contract.

Statistical evaluation of visits to this website - web trackers

When this website or individual files thereof are called up, we collect, process, and store the following data:
  • IP addresses or parts thereof
  • Website from which the file was accessed
  • File name
  • Date and time accessing took place
  • Quantity of data transferred and notification about success of retrieval (known as a web log).
We only use this access data in anonymized form for the continual improvement of our online product and for statistical purposes.
Data collection is carried out by us such that no personal data is collected or processed as far as possible. The primary focus of processing is to improve the website and to detect problems.

Google Web Fonts

Purpose of data processing
This page uses what are known as web fonts, provided by Google, to uniformly display fonts. When accessing a page, your browser loads the required web fonts in your browser cache so that texts and fonts are correctly displayed.
For this purpose, your browser must be connected to Google’s servers. This means Google becomes aware that our website is accessed via your IP address. Use of Google Web Fonts is to ensure a uniform and appealing presentation of our online offers. This represents legitimate interest within the context of point f, Art. 6 (1) GDPR.

If your browser does not support Web Fonts, then a standard font on your computer is used.

Further information regarding Google Web Fonts can be found at https://developers.google.com/fonts/faq as well as in the Google privacy policy: https://policies.google.com/privacy?hl=de.

Legal justification for processing of personal data
Point f of Article 6 (1) GDPR. (legitimate interest). We would like to show a uniform presentation of fonts on our website. Our legitimate interest lies in maintaining full functionality of our website as well as to improve usability.

Duration of storage
Google stores inquiries for CSS assets on their servers for one day, and these are largely located outside the EU. Google stores font files for a year. By doing this, Google aims to fundamentally improve website loading times.

Social media presences

Scope of processing of personal data
Social networks such as Twitter can potentially evaluate your user behavior if you visit their website or a website with integrated social media contents such as "like" buttons or advertising banners. Visiting our social media presences will trigger a number of processes that are relevant to data privacy.

If you are logged into your social media account and visit our social media presence then the operator of the social media portal can associate this visit with your user account. However, your personal data can also under certain circumstances be recorded even if you are not logged in or do not have an account with the relevant social media portal. Such data can be acquired via cookies or recording your IP address.

The operator of the social media portal can generate user profiles with this recorded data to store preferences and interests. As a result, advertising tailored to your interests may be shown to you both inside and outside the relevant social media presence. If you have an account with the relevant social network, then advertising tailored to your interests may be shown on all your devices.

Please note that we are unable to replicate all processing methods on the relevant social media portals. Depending on the provider, further processing procedures may be carried out by the social media portal operators if necessary. For details, please refer to the terms of use and data privacy policies of the relevant social media portals.

Purpose of data processing
Our social media presences should ensure a wide-ranging presence on the Internet. We maintain publicly accessible profiles in social media. These are:
  • Twitter
  • Youtube (onextwo TV)
  • OneXtwo blog (https://horselivede.wordpress.com/)
As part of our OneXtwo blog, we maintain relations with third-party advertising companies that place adverts on our website and may carry out tracing measures on these websites if necessary. Although we do not share any personal information with these third-party advertising companies, they may place cookies on your computer if you visit our website or other websites so that they can show you targeted advertising. This privacy statement does cover the acquisition methods or use of the recorded information by these companies.

Legal justification for processing of personal data
Point f of Article 6 (1) GDPR. (legitimate interest). Analysis processes initiated by social networks may have a different legal basis, which must be stated by social network operators (e.g. consent in the context of point a of Art. 6 (1) GDPR).
If you visit one of our social media presences then we are responsible, along with the operator of the social media platform, for the data processing procedures that are initiated as part of this visit. You may as a matter of principle assert your rights both against us and against the operator of the social media portal in question.

Please be aware that despite our shared responsibility with the social media portal operator, we do not have full influence over the data processing procedures conducted by social medial portals.
Duration of storage

Data acquired directly by us via our social media presence will be deleted from our systems as soon as the purpose for which they are stored ceases to apply, you ask us to delete it, you revoke your consent to its storage, or the purpose for data storage no longer applies. Cookies will remain stored on your end device until they are deleted. Mandatory statutory requirements - particularly storage periods - remain unaffected.

We do not have any influence over the duration for which data held by social network operators is stored for their own purposes. Please refer to the social network operators directly for further information (e.g. consult their privacy policy, see below).

Information about the use of cookies

Scope of processing of personal data
We use cookies on various pages to enable the use of specific functions on our website. These so-called 'cookies' are small text files that your browser is able to store on your computer. These text files contain a typical string of characters that serve as a unique identifier so that the browser is recognized when returning to our website. The procedure for placing a cookie is also called 'setting a cookie'.

Legal justification for processing of personal data
Point f of Article 6 (1) GDPR. (legitimate interest). Our legitimate interest lies in maintaining the full functionality of our website, improving usability, and enabling more tailored customer approaches. Identification of individual site visitors is only possible with the aid of cookie technology if the site visitor has previously granted us corresponding personal data with their separate consent.

Purpose of data processing
The cookies are set by our website to maintain the full functionality of our website and to improve usability. In addition, cookie technology enables us to recognize individual visitors through usernames, e.g. an individual, random ID, so that we can offer more tailored services.

Duration of storage
Our cookies are stored until they are deleted from your browser or, in the case of a session cookie, until the session expires.

Options for revocation and deletion
You are able to customize your browser in such a way that you either generally prevent cookies from being set, are only informed about cookies being set, decide on a case-by-case basis whether to accept them, or generally accept cookies. Cookies can be set for different purposes, for example for identifying that your computer has already been connected to our website (persistent cookies) or storing recently viewed sites (session cookies). We set cookies to offer an enhanced user experience. In order to make use of our user-friendly functions, we recommend you allow cookies to be accepted for our website. The options for revocation and deletion are also based on the general regulations regarding the right to revocation and deletion in data protection terms, which are described in this privacy statement.

Data security and data protection, communicating by email

When it is being collected, stored and processed, your personal data is protected in such a way that it cannot be accessed by third parties. However, we cannot guarantee complete data security in the event of unencrypted communication by email. We therefore recommend sending highly confidential information either via encrypted means or by post.

Legitimate interests in processing pursued by the controller or a third party

If the processing of personal data is necessary in the legitimate interest of business activities when the balance of interests is in favor of the welfare of our staff and our owners, for the purpose of service provision, as long as there are no overarching legitimate interests or fundamental rights and freedoms that oppose this, then this is based on point f of Article 6 (1) GDPR.

Use of service providers

In providing its services, IBA Entertainment Ltd. also uses other external parties within the following categories: bookmaking, support, marketing, data center operation, data storage and cloud, dispatch service providers (land-based and electronic post), dispatch of newsletters, payment service providers, money laundering prevention, service providers for customer identity checks, betting offices, comparison of statutorily required blacklists.

Links to other websites

Our Internet site contains external links or hyperlinks to websites from other providers as well as information about player protection. 

They shall be distinguished from in-house content. When selecting an external link or hyperlink you will be forwarded from our website to that of the external provider. In this case we cannot accept any responsibility on behalf of the third-party provider for confidential handling of your data as well as adherence to data protection regulations. Responsibility lies solely with the relevant website provider.

If we are made aware of illegal content from external links or hyperlinks that are on our website then we will remove the relevant links immediately.

Videos/livestream

In addition to our own videos, we also use videos from other video platforms or streaming services:

YouTube: Videos; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://www.youtube.com; privacy statement: https://policies.google.com/privacy; Privacy Shield (ensuring data privacy when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; opt-out option: Opt out plugin:
 http://tools.google.com/dlpage/gaoptout?hl=de, settings for display of adverts: https://adssettings.google.com/authenticated.

SIS
: https://www.sis.tv/online/

Easygate
: https://www.xb-net.com/easygate/

The Hong Kong Jockey Club:
https://hkjclive-lh.akamaihd.net

Adherence to compliance requirements

Purpose of data processing
Your data may also be processed under certain circumstances to comply with statutory requirements or to identify and correct problems, as well as to execute monitoring programs and measures. Furthermore, your personal data may be processed as part of compliance checks within the group of companies.

In addition, your data is processed as part of the “OASIS GlüStV” player exclusion system (online inquiry regarding player status as per the German State Treaty on Gambling). This system is available to all online gambling providers, who are obliged as per the German State Treaty on Gambling to be connected to the nationwide exclusion system to protect players and fight gambling addiction. Information is available at: https://innen.hessen.de/buerger-staat/gluecksspielneu/spielsperrsystem-oasis

Legal justification for processing of personal data
We process your personal data in order to satisfy our statutory obligations set out in point c of Article 6 (1)(1) GDPR. Furthermore, we also process your personal data on the grounds of our legitimate interest of correcting malfunctions and preventing fraud, as well as, if necessary, asserting our rights, on the basis of point f of Article 6 (1)(1) GDPR.

Duration of storage
We store your personal data for as long as is necessary for the processing purposes listed in point 17. If the data is no longer required for the purposes listed in point 17, then we store your personal data for the length of time during which you can assert claims against us or we can assert claims against you. In addition, we store your personal data for as long as and to the extent that we are legally obliged to do so. Corresponding retention obligations and obligations to provide proof arise, amongst other things, from German Commercial Law, gaming legislation requirements, as well as the German Money Laundering Act. The corresponding retention obligations can apply for up to ten years.

Scheduled deletion and blocking of personal data

The controller processes and stores personal data about the data subject only for the period required to fulfill the storage purpose, or if it is stipulated by European Directives or Regulations or another legislator in laws and regulations that the controller must observe.
If the storage purpose ceases to apply or a retention period prescribed in European Directives or Regulations or by another competent legislator expires, then personal data is routinely blocked or deleted in line with statutory regulations.

Right of appeal

In some cases, you might not be satisfied with our response to your question. You are then entitled to obtain legal advice, to issue a complaint to the Data Protection Officer, or to contact the relevant regulatory authorities.

Right to data portability

You have the right to receive data stored by us in a structured, accessible, and machine-readable format, or for your personal data to be transferred directly from us to another responsible party, provided it is technologically feasible and also that this does not infringe the rights and freedoms of other persons in any way.

Data storage

We do not store your personal data for any longer than the duration of your time with us as a customer, and only store it for as long as it is required for the relevant processing purpose. Appropriate blocking of data then takes place until the statutory retention period has elapsed, at which point it is permanently deleted.

Revocation of consent - data requests and requests for amendments - deletion & blocking of data

You are entitled to receive information about your stored personal data free of charge as well as, where applicable, to correct, block, delete or restrict processing of this data. Your data will then be immediately deleted upon request unless otherwise prevented by law or other obligations to retain such data. You are entitled to revoke your consent to us at any time. You can send information, deletion and correction requests regarding your data, along with any suggestions, to the following address:

IBA Entertainment Ltd.
Cornerstone Business Centre, Level 1, Suite B
16th September Square
MST 1180 Mosta
Malta
Email: datenschutz@onextwo.com

Date: 12/16/2019