Privacy Policy
Data protection
Privacy policy pursuant to Art. 13, 14 GDPR and Section 25 TDDDG
We, Vengi Spielautomaten GmbH, take the protection of your personal data very seriously and strictly comply with the rules of data protection law, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications and Digital Services Data Protection Act (TDDDG).
In accordance with Art. 13 and 14 GDPR and Section 25 TDDDG, this policy informs you about data processing and your rights as a data subject.
Personal data is only collected, processed and disclosed where this is permitted by law or where you have given your consent.
Last updated: July 2026
Controller
The controller within the meaning of the GDPR responsible for the processing of personal data on this website is:
Vengi Spielautomaten GmbH
represented by the managing director: Dijana Dominkovic
Ostbahnhofstr. 18 · 60314 Frankfurt am Main · Germany
Phone: 069 904 345 89
For data protection enquiries, please contact the address above with the subject line “Data protection”.
What is personal data?
Personal data is “individual information about the personal or material circumstances of an identified or identifiable natural person”, such as name, address, email address, telephone number or IP address.
Your data is only collected, processed and disclosed where this is permitted by law or where you have given your consent.
Nature and scope of data processing
1. Automatically collected data (server log files)
Purpose: Provision and security of the website
Legal basis: Art. 6(1)(f) GDPR (legitimate interests)
Data collected:
- IP address (anonymised)
- Browser type and version
- Operating system
- Referrer URL
- Date and time of access
- Pages visited
Storage period: 7 days, followed by automatic deletion
2. Contact form
Purpose: Processing your enquiry
Legal basis: Art. 6(1)(a) GDPR (consent)
Data collected: Surname, first name, email address, content of the message, other voluntary information
Storage period: Until your enquiry has been fully processed, a maximum of 3 years
3. Hosting
Purpose: Provision of the website infrastructure
Legal basis: Art. 6(1)(f) GDPR (legitimate interests)
Hosting provider: MOBYLON®, agency for digital communication
Data collected: IP address, access data, technical information, log files
Storage period: In accordance with statutory requirements
Contact
If you contact us via a form (contact form or enquiry about a machine), by email or by telephone, we process the information you provide to us in doing so: usually your name, business, address or location of the installation site, email address, telephone number, the machine you are enquiring about and your message. We use this data exclusively to answer your enquiry and, where applicable, to prepare a quotation or an installation agreement.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures), otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
Storage period: We delete enquiries once they have been dealt with, unless statutory retention obligations (for example under commercial and tax law) prevent this. If no contract is concluded, we delete the data after twelve months at the latest.
If you have questions about your data or wish to withdraw your consent, please contact:
Spam protection in forms (ALTCHA)
We protect our forms against automated submissions with ALTCHA. ALTCHA runs entirely on our own server: when you submit a form, your browser solves a small computational task, the result of which is checked by our server. No cookies are set for this purpose, no data is transmitted to third parties and no user profiles are created.
In addition, we check form entries for typical characteristics of automated submissions (such as a field that is invisible to humans and the time taken to complete the form).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest: protection of our forms against spam and misuse)
Your rights as a data subject
You have the following rights with regard to your personal data:
Right of access (Art. 15)
Right to information about the processing of your data
Right to rectification (Art. 16)
Right to have inaccurate data corrected
Right to erasure (Art. 17)
Right to erasure (“right to be forgotten”)
Right to restriction (Art. 18)
Right to restriction of processing
Data portability (Art. 20)
Right to receive your data in a structured format
Right to object (Art. 21)
Right to object to the processing
Withdrawal of consent
Right to lodge a complaint (Art. 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority.
Competent authority:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information)
Gustav-Stresemann-Ring 1 · 65189 Wiesbaden
poststelle@datenschutz.hessen.de
Data security
We use technical and organisational measures to protect against manipulation, loss, destruction or unauthorised access.
Technical measures
- SSL/TLS encryption
- Secure server infrastructure
- Regular security updates
- Firewalls and intrusion detection
Organisational measures
- Access controls
- Staff training
- Data processing agreements
- Data protection impact assessment
Use of third-party services
We deliver the fonts, images and scripts of this website exclusively from our own server. When you visit the website, no content is loaded from third-party providers such as Google Fonts, map services or video platforms; your IP address is therefore not transmitted to third parties in this process.
If we link to services of other providers (for example counselling services on player protection), their privacy policies apply as soon as you follow the link.
Data processing on our behalf and disclosure
Where, in the course of our processing, we disclose data to other persons and companies (processors or third parties), we do so exclusively on the basis of a statutory permission, with your consent, on the basis of a legal obligation or on the basis of legitimate interests.
Where third parties are commissioned to process data, this is done on the basis of Art. 28 GDPR. Data is only transferred to third countries (outside the EU/EEA) on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR.
Changes to this privacy policy
We reserve the right to amend this policy where necessary in order to adapt it to changes in the law or to changes in our services. We recommend that you read it regularly to stay informed about how the information we collect is protected.
Consumer dispute resolution
We are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.