Data Protection and Privacy Statement of EP Online Entertainment Ltd. (Updated February 18th
Data protection and privacy is very important to us, EP Online Entertainment ltd. (hereinafter "EP
Online Entertainment" or "we"), 20-22, Wenlock Road, London, N1 7GU, Great Britain. In our position as
data controller we would like to inform you of the nature, scope, and purposes of any collection,
storage, transfer, and/or use of personal data, complying in the process, already at this time, with the
specifications of the EU General Data Protection Regulation (GDPR) and the Privacy and Electronic
Communications (EC Directive) Regulations 2003. For this reason, the relevant standards are already
mentioned at this time in this data protection and privacy statement.
This statement provides you with information on all aspects of our offering that are relevant in
terms of data protection and privacy, particularly:
the collection and storage of your personal data,
the transfer and use of your personal data, and
1. Which personal data we collect and store
If you utilise our offering and/or use our website by filling out the entry fields and/or
contact us and/or merely visit our website, we may collect personal data as follows:
Personal data that you provide us by utilising our offering and/or using our website may be
collected. If one or several provisions of this Agreement should be or become lawfully ineffective, this
shall not impair the validity of the other provisions. The invalid provision will be replaced as quickly
as possible with another provision most closely approximating the economic intent and content of the
invalid provision. “Personal data” includes your name, e-mail address, phone number, and any interests,
etc., that may be identified in surveys.
To the extent when you enter into a contract on our website or issue a declaration of intent, we
store the information for an order and, if any, payment details associated therewith.
To the extent that you answer any questions regarding your preferences, interests, user behaviour,
etc. after participating in the prize draw and/or your interests become apparent because you sign up for
a sample subscription or similar items, we will also store this information to establish a personal user
profile. This user profile enables interest-driven, optimised direct marketing which seems reasonable
for both sides to ensure that you will only receive offers that are relevant to you and fit within the
context of your lifestyle and available purchasing power. For example, if you have provided your gas
provider and have consented for third parties to contact you, we will work with third party brand
partners to send you a utility quote tailored to your needs – thus saving you time researching the
We also collect and process personal data that you provide to us by contacting us.
Personal data that may be collected through your visit to our page, particularly data traffic,
location and time information, IP addresses, browser and device ID and other communication information
provided through the use of your computer.
Further data – such as local times, time zones, and usage data – may also be stored in addition
to the data specified above.
Statistical data may be collected and used in the case of a visit to our website. “Statistical
data” means, among other things, data regarding the use of an Internet browser and the browser version.
2. How and why we process and transfer your personal data, and what it is used for
The data collected during registration to the prize draw is used to conduct the prize draw,
determine the winner, handle the awarding of prizes and notify the winner and transmit the prize
(Article 6(1)(b) GDPR).
If, after the conclusion of the prize draw, declarations of intent for purchase, service, or
other contracts with external companies are received, the data collected, where applicable, and further
data collected on a contract-specific basis will be disclosed to the external company or companies in
question. Otherwise those companies cannot use the data to establish or perform a contract or contracts
(Article 6(1)(b) and (f) GDPR).
Based on the participation agreement that is entered into and in the event of an online
participation in a prize draw, EP Online Entertainment will collect and process your personal data. This
agreement requires that you provide your personal data if and insofar as you wish to participate in our
prize draw offering. The data processing takes place for both our own direct marketing (Article 6(1)(b)
GDPR) as well as for our sponsors to also enable them to engage in individual, demand-driven direct
marketing that is tailored to you via the channels of e-mail, push notifications, mail, phone, and text
message (Article 6(1)(b) GDPR).
Processing your personal data would be in accordance with declaration of consent for advertising
and marketing purposes, via phone, text messages, email, push notifications, mail and/or the disclosure
of data for direct marketing purposes for the mentioned sponsors of the prize draw that may have been
issued separately; this also takes place within the scope of our legitimate interests as established by
your relevant consent (Article 6(1)(f) GDPR).
EP Online Entertainment assumes that the consent to receive advertising by phone, text message,
e-mail, push notifications and mail from us and our sponsors, which is to be declared separately, also
constitutes consent for purposes of data protection and privacy law to the processing of your personal
data with the result that – in addition – the relevant, aforementioned data processing is also permitted
pursuant to (Article 6(1)(a) GDPR).
It may be the case that an analysis of your affinities, interests, and preferences is performed
before the data is used for direct marketing and/or disclosed to sponsors. To this end, the answers that
you will provide after registering to the prize draw may also be analysed, and a profile may be
established in order to enable more targeted performance of direct marketing measures by us and our
sponsors, if any (Article 6(1)(f) GDPR).
Using the data obtained, particularly those from our surveys following the prize draw
registration page, we will create a “user profile” of you in order to be able to offer you an
interest-driven service that is geared towards your individual needs and requirements. By creating this
profile, we may categorise personal aspects, such as your interests and preferences, through automated
processing of your data in order to make it possible for both us and our sponsors to send you exclusive
advertising and offers that match you profile.
EP Online Entertainment frequently receives – provided that your end device supports this
function – confirmation of which e-mails from us you open and how you proceed with the e-mail. This
helps us to understand your interests and supports us in making the offers more useful interesting,
tailor-made to you in the future (Article 6(1)(f) GDPR).
Assertion, if any, of your rights (Article 6(1)(c) and (f) GDPR) as provided in Sec. 5 of this
data protection and privacy statement also leads to collection and processing of your personal data.
Disclosure of your personal data may take place in cases in which we are under a legal
obligation of disclosure (Article 6(1)(c) GDPR) or to the extent that disclosure should be necessary to
enforce other rights/demands or for purposes of legal defence, if and insofar as these are based on the
legitimate interests of the organiser or other third parties (Article 6(1)(f) GDPR). The same applies in
the event of (also partially) purchase or sale of business assets and/or other assets, in the event that
our business is otherwise acquired by a third party, in the event of initiation of insolvency
proceedings, or if a request for initiation of insolvency proceedings is denied for lack of sufficient
assets (Article 6(1)(f) GDPR).
In addition to the sectors listed, you can expect EP Online Entertainment ltd. to find and run
3rd party offers from Advertisers that we believe will be of interest to our members. The following two
Networks allow us to send their third party offers. You can view their Advertisers/Client List here:
- Click Labs Group and their Client Portfolio. - We Breathe Media and their Client Portfolio.
3. Protection of your personal data
We take corresponding precautions – administrative/organisational, technical, and physical – to
protect your personal data against loss, theft, abuse, unauthorised access, unauthorised disclosure,
unauthorised modification, and destruction.
EP Online Entertainment is committed to ensuring security of personal information it holds. Your
data is stored in secure servers and we implement a range of measures to protect personal information
from misuse, interference and loss, and from unauthorised access, modification or disclosure. EP Online
Entertainment holds personal information electronically with the assistance of our service providers
including the use of secure enterprise grade servers to store personal information.
Your data is retained for a period of 5 years, after this period the data will be destroyed.
Your data is then held for this period of time as a proof of opt-in and proof of data supply which may
be required for legal reasons.
4. Your rights
You have the right to obtain information regarding the personal data stored regarding you,
including the origin and recipients of your data and the purpose of data processing, at any time
pursuant to Article 15 GDPR. Specifically, you have the right to:
Access your personal data.
Request its rectification.
Request its removal.
Oppose to it being processed.
Request restrictions in it being processed.
The portability of personal data.
You also have the right to demand, at any time, that we correct inaccurate personal information
concerning you (Article 16 GDPR). You can restrict the processing of data if any of the
prerequisites mentioned in Article 18(1) GDPR are met, e.g. in the event of a dispute concerning the
accuracy of your personal data.
Moreover, you have the right to revoke any declaration(s) of consent to the processing of your
personal data that may have been issued, with effect for the future (Article 7 GDPR). Such a
revocation does not, however, affect the legality of the processing that has taken place up until
Furthermore, you have the right to demand the erasure of your data and assert your right to be
forgotten pursuant to Article 17 GDPR. If the statutory prerequisites are met, we will proceed in
this regard even without such a request having been issued on your part and will erase your personal
Your request must include the date, your name and surname(s), your specific request and address
for notification purposes. In order to dispel any reasonable doubt about the identity of the person
sending the request, we ask you to provide a passport or similarly identifying document, to confirm your
In the event that EP Online Entertainment has not resolved your request correctly, you may write
to request ownership of the data to the Information Commissioner's Office (ICO), whose details may be
consulted at https://ico.org.uk/
5. Right to object and right to revoke; consequences
The participant is permitted to object to the processing of his/her data for advertising purposes and/or to revoke consent, if any, that has been granted for this purpose, without being required to state any reasons. Processing of data for advertising purposes and/or the use of the participants’ data to this end will then be halted without delay. The organiser will also notify its sponsors of any such objection and/or revocation without any undue delay.
You can unsubscribe at any time by emailing us at firstname.lastname@example.org or by clicking this.
6. Usage data and cookies
You can view our Internet pages without providing personal information. However, certain
technical data, known as "usage data", are generated whenever our pages are visited. In addition, we may
use one or more cookies and integrate social media plugins in some cases. The text below is intended to
provide you with information regarding this as well.
When you visit our Web pages, the only items of information we store by default are the website
from which you reached our page, the name of your Internet service provider, which Web pages you visited
within our Internet presence, and the date and duration of your visit. The data obtained is fully
Your IP address and a time stamp are also stored for security reasons and used for internal
purposes. The IP address is a machine-related code that provides information of the computer or Internet
gateway used to access the Internet at the time of online retrieval. A time stamp is a value in a
defined format that assigns a certain point in time to an event (for example, sending or receiving a
message, modification of data, etc.). The purpose of a time stamp is to make it clear to people or
computers when events occurred.
wish to use our Web pages. These are small files that are stored on your hard drive and store specific
information that can be retrieved by the server that has placed the cookie on your computer. The cookies
used may be “session” cookies, which are automatically deleted as soon as you close your browser window,
and/or cookies that are valid for a longer period. The information stored in cookies may concern, in
particular, the login (your visit, if you log in), the date and time of your visit to us, the cookie
number, and the URL of the website from which you reached our site.
individual needs and requirements. Cookies also make it possible to record the statistical frequency of
retrieval of the various pages of our Internet presence and the general navigation.
of our prize draw or other offerings associated therewith on our part – please adjust your browser
settings accordingly before you use our pages. You can prevent new cookies from being accepted and
stored in these settings. For further information, please consult your browser's help pages or contact
the producer or provider of the browser.
Occasionally, you may be asked to give your further consent to the receipt of our or partner’s
push notifications. Your personal data will then be processed on the (additional) basis of this consent,
in accordance with Art. 6 (1)(a) GDPR. In this case, the giving of your consent is, of course, also
covered by the rights as set out in Clause 5 of this declaration. In addition to the above-named
provisions you can – for the purposes of withdrawing your consent to the receipt of push notifications –
also change the relevant push notification settings in your browser. If you are using a desktop PC with
a “Windows” operating system, you can unsubscribe by right-clicking on the relevant push notification in
the settings list.
7. Deletion of cookies
As a user, you have the right at any time to decide which cookies – including those for push
notifications – you wish to accept or delete. You can adjust the individual settings thereto in the
settings menu of your Internet browser. For further information, please contact the provider of your
of business, is not aimed at minors. No personal data of minors are knowingly collected, used, and/or
9. Data storage and retention
Your data is retained on our UK based server, and under GDPR regulations will not be transferred outside of the EU. A copy of our data retention policy is available on request.