Privacy Policy

We may collect the following information when you visit our website, contact us, request a demonstration or use our online demo environments:

• Contact information: name, business email address, telephone number, job title and company.
• Marketing preferences: your communication preferences, including the channels you have selected, consent records where applicable, and any requests to unsubscribe or stop receiving communications.
• Enquiry and demonstration information: information you provide when contacting us, requesting a demonstration or interacting with our products.
• Technical information: IP address, browser type, device information, website usage and diagnostic logs, where collected.
• Demo environment data: information and test records entered or generated while using our online demonstration software.

Please do not provide more personal information than is necessary for the relevant purpose.

We use information for the following purposes:

• To respond to enquiries and arrange demonstrations.
• To manage business relationships and communicate with prospective and existing customers.
• To send product updates, industry information, invitations and other marketing communications in accordance with applicable law and your communication preferences.
• To operate, maintain, secure and improve our website and demonstration environment.
• To diagnose technical problems, prevent misuse and protect our services.
• To comply with legal obligations and to establish, exercise or defend legal claims where necessary.

We do not use your information for purposes incompatible with those explained in this policy.

When you submit your contact details through our website, you may be offered the opportunity to select the types of marketing communications you wish to receive. Depending on the options presented, these may include email, telephone or other communication methods.

We record relevant preferences and, where applicable, consent so that we can manage communications in accordance with your choices and applicable data protection and electronic marketing laws. Providing your details for an enquiry or demonstration does not automatically mean you have agreed to receive every type of marketing communication.

You can change your preferences or opt out of marketing at any time by using the unsubscribe link in our communications or by contacting us directly. We may retain limited information on a suppression list where necessary to ensure that we respect your request not to receive further marketing.

Data you enter via our online demos will not be added to any marketing databases.

We provide an online demonstration environment that allows visitors to explore and interact with examples of our software. The demonstration environment is shared and is not intended for real customer data or confidential information.

Information entered into the demonstration environment may be stored in a shared backend and may be accessible to other users of the environment, depending on the functionality and permissions in place. Information may also appear in shared records, screens, reports or other parts of the demonstration application. For this reason:

• Do not enter real personal information relating to yourself, your employees, customers or any other individual.
• Do not enter passwords, payment card details, authentication credentials, sensitive personal information, confidential business information or production data.
• Use fictional names, synthetic records and other test information instead.
• Do not assume that information entered into the demonstration environment is private or accessible only to you.

The demonstration environment is provided for evaluation and illustrative purposes. Demo data may be changed, reset, overwritten or deleted as part of normal operation. Please contact us if you believe that personal or confidential information has been entered into the demonstration environment inadvertently.

We take appropriate measures to protect the systems we operate. However, the shared nature of the demonstration environment means that it should not be used to process real personal or confidential information.

We use third-party service providers where necessary to operate our website, manage business contacts, deliver communications, host software and maintain our systems. These providers may include website hosting providers, cloud infrastructure providers, customer relationship management (CRM) systems, email and communication platforms, and technical monitoring services.

Where these providers process personal information on our behalf, they act as our processors under written contracts that require them to protect your information and to use it only on our instructions.

We do not sell personal information to third parties. We may disclose information where necessary to provide our services, to comply with the law, to protect our rights, or to respond to lawful requests from courts, regulators or public authorities. If Gaming Systems is involved in a merger, acquisition or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.

Gaming Systems is established in Slovenia and primarily processes personal information within the European Economic Area (EEA). Some of our service providers, including our website hosting provider, are located in or operate from countries outside the EEA, such as the United States.

Where personal information is transferred outside the EEA, we ensure an appropriate safeguard is in place as required by Chapter V of the GDPR. This means the transfer is covered by a European Commission adequacy decision (including, for US providers, certification under the EU-US Data Privacy Framework), or by the European Commission's Standard Contractual Clauses together with any additional measures that are necessary. You can ask us for details of the safeguards used for a particular transfer by contacting us using the details in section 15.

We rely on the following legal bases under Article 6 of the GDPR:

• Responding to enquiries and arranging demonstrations: steps taken at your request before entering into a contract (Art. 6(1)(b)), or our legitimate interest in responding to business enquiries (Art. 6(1)(f)).
• Managing relationships with prospective and existing customers: performance of a contract (Art. 6(1)(b)) or our legitimate interest in running our business (Art. 6(1)(f)).
• Marketing communications: your consent (Art. 6(1)(a)), or, where permitted for existing business contacts, our legitimate interest in promoting our products (Art. 6(1)(f)), always with the right to opt out.
• Operating, securing and improving the website and demo environment: our legitimate interest in keeping our services working and secure (Art. 6(1)(f)).
• Analytics and cookies that are not strictly necessary: your consent (Art. 6(1)(a)), given through the cookie banner.
• Complying with legal obligations: legal obligation (Art. 6(1)(c)).
• Establishing, exercising or defending legal claims: our legitimate interest in protecting our legal position (Art. 6(1)(f)).

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. You can object to processing based on legitimate interests at any time (see section 9).

We keep personal information only for as long as necessary for the purposes described in this policy, or as required by law. As a guide:

• Enquiry and demonstration requests that do not lead to a business relationship: 24 months from our last contact with you.
• Customer and business contact records: for the duration of the business relationship and 5 years afterwards, or longer where required by Slovenian accounting or tax law.
• Marketing preferences and consent records: for as long as you remain subscribed, plus a record of your opt-out on a suppression list for as long as needed to honour it.
• Technical logs and website usage data: up to 12 months.
• Demo environment data: demo data may be reset or deleted at any time as part of normal operation and is not retained as a record.

When information is no longer needed, we delete or anonymise it.

Under the GDPR you have the following rights in relation to your personal information:

• Access: to ask whether we hold personal information about you and to receive a copy of it.
• Rectification: to have inaccurate or incomplete information corrected.
• Erasure: to ask us to delete your information where there is no good reason for us to keep it.
• Restriction: to ask us to limit how we use your information in certain circumstances.
• Portability: to receive the information you gave us in a structured, commonly used, machine-readable format, where processing is based on consent or contract.
• Objection: to object to processing based on our legitimate interests, and to object at any time to direct marketing.
• Withdrawal of consent: where we rely on your consent, to withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us using the details in section 15. We will respond within one month, which may be extended by a further two months for complex requests, and we will tell you if that is the case. We may need to verify your identity before acting on a request. There is no charge, unless a request is manifestly unfounded or excessive.

If you have a concern about how we handle your personal information, please contact us first so that we can try to resolve it.

You also have the right to lodge a complaint with a supervisory authority. In Slovenia this is the Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si, email gp.ip@ip-rs.si. If you live or work in another EU member state, you may complain to the supervisory authority there.

Our website uses a small number of cookies and similar technologies.

• Strictly necessary cookies are needed for the website to work, for example to remember your cookie choices or to submit a form. These do not require your consent.
• Analytics helps us understand how visitors use the website so that we can improve it. We use Webflow Analyze, which does not use cookies and does not identify individual visitors.
• Marketing cookies are set by advertising platforms to measure our campaigns and to show you relevant content on other sites. Where we run campaigns on LinkedIn, we use the LinkedIn Insight Tag, provided by LinkedIn Ireland Unlimited Company, to measure their performance and to show relevant content to website visitors on LinkedIn. It is set only with your consent.

Where consent is required, we ask for it through the cookie banner when you first visit the site. You can change or withdraw your choices at any time through the cookie settings link in the website footer, or by deleting cookies in your browser. Our website does not currently respond to "Do Not Track" browser signals.

We apply appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure. These include encrypted connections (HTTPS) across the website, access controls so that only staff who need personal information can reach it, and contractual security obligations on our service providers.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please remember that the demonstration environment described in section 4 is shared and is not designed for real personal information.

Our website, products and demonstration environments are intended for businesses and their representatives. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.

We may update this policy from time to time to reflect changes in our services, the tools we use or the law. The date at the top shows when it was last updated. Where a change is significant, we will take reasonable steps to let you know, for example by a notice on the website or, where appropriate, by email.

If you have any questions about this policy or how we handle your personal information, or wish to exercise your rights, contact us at:

Gaming Systems d.o.o.
Email: privacy@gamingsystems.com

We have not appointed a data protection officer, as we are not required to do so under Article 37 of the GDPR; privacy requests are handled by our management team.