OpenOverGokken and the associated helplines fall under the responsibility of the Kansspelautoriteit.

The Kansspelautoriteit handles your personal data carefully and follows the rules set out in the General Data Protection Regulation (GDPR). The GDPR helps protect citizens’ privacy. In this privacy statement, we explain how we handle personal data.

Different types of personal data

Personal data is information that says something about you or can be linked to you. You share personal data with the Dutch Gambling Authority when you contact us. There are different types of personal data.

Ordinary personal data

Your name, phone number or email address are personal data. But also your computer’s IP address or your citizen service number. If the Kansspelautoriteit processes data about you, you are considered the ‘data subject’ under the GDPR. ‘Processing’ means ‘working with’, for example sending or storing your personal data.

Special personal data

Some personal data is more sensitive because processing it can have a big impact on your privacy. Data about your race, religion or health are examples of special personal data. This data is specially protected by law and can only be processed in situations allowed by law. In addition, there is sensitive personal data. Examples are your citizen service number (BSN) and financial data, such as information about income and debts.

Criminal personal data

Criminal data include information such as a criminal record, criminal offenses, suspicions, and security measures. Criminal personal data are also extra protected by law.

Read more about personal data on the website of the Data Protection Authority.

We only process data for a good reason

We process personal data to perform our duties as a gambling regulator. Consider granting licenses, supervising, enforcing the law, or informing players about preventing gambling addiction.

Voor de verwerking van persoonsgegevens moet een goede reden zijn, zoals bedoeld in artikel 6 van de AVG. Denk aan de uitvoering van een wettelijke plicht, of als je als betrokkene toestemming geeft, of als de verwerking noodzakelijk is voor de vervulling van een taak van algemeen belang.

How the Kansspelautoriteit works with personal data

Reliable and honest

• we take measures for a reliable, proper, and careful handling of personal data
• we treat personal data confidentially: only people with the right authorisation and a duty of confidentiality can process your data.
• we secure personal data well: we follow at least the guidelines and standards of the Dutch government for information security
• we make agreements with external parties such as software suppliers and data centers if they process personal data and we check whether they comply with the agreements

Data subject is central

• When processing your personal data, such as storing or sending it, we always take into account the privacy rights of the data subjects.

Retention of personal data

• as long as necessary for the purpose for which they were collected or
• as long as required by the Archives Act and
• no longer than legally permitted.

Transparent

The Kansspelautoriteit informs you about the purpose and method of processing personal data:

Only with third parties if there is a good reason

The Kansspelautoriteit only shares personal data with others if it is necessary to fulfil a legal obligation or a task in the public interest. For example, the Authority can share data with other regulators or the Public Prosecution Service. This only happens when it is necessary.

The Kansspelautoriteit handles your personal data carefully when providing it to third parties. The Authority always checks the legality first.

You can see which organisations the Kansspelautoriteit may share personal data with, if necessary, in the Personal Data Protection Regulations.

Social media and external platforms

The Kansspelautoriteit also uses personal data shared by individuals on social media or other public sources. But only for the performance of its tasks.

The Kansspelautoriteit also posts messages on external platforms, such as Instagram and LinkedIn. We have no control over how these platforms handle your personal data. We advise you not to share any privacy-sensitive information in response to our posts.

You have the right to access your data

You have the right to access your personal data. The Kansspelautoriteit will then show you what data it has about you. You can also object to a certain processing.

Additionally, you can request your personal data to be:

• modified
• deleted
• restricted
• transferred to another party

If you are not satisfied with the handling of your personal data, you can file a complaint with the Dutch Data Protection Authority.

Which data we process

Purpose and description

The Kansspelautoriteit processes personal data when a player or a relative of a player contacts one of its helplines (by phone, online chat, or Whatsapp). With these helplines, the Kansspelautoriteit aims to prevent gambling addiction. This is a task of the Kansspelautoriteit arising from the Gambling Act.

Data subjects

• Players of games of chance
• Relatives of players of games of chance

Types of personal data

• Personal details such as name and first name
• Contact information, such as phone number or email
• Financial data for budget assistance
• Data on gender, age group, and living situation

• Health data such as psychological or addiction issues

• Data on offered internal or external interventions
• Data for license applications
• Data for handling reports
• Data for collecting fines
• Data for Cruks
• Data for legal procedures
• Data for enforcement and supervision
• Data for website analysis
• Data for general research

Contact

The Data Protection Officer (DPO) of the Kansspelautoriteit is independent and supervises the processing of personal data. You can ask your question via fg@kansspelautoriteit.nl or by phone 070 – 302 13 00.

The board of directors of the Kansspelautoriteit is the data controller as defined in the GDPR.