NOVOMATIC24 Privacy Policy

As of: December 2025

1. General Information

We, NOVOMATIC AG, FN 69548b (the "Company"), process your personal data when you use our service or the related website (the "Website" or "NOVOMATIC24"). We treat your personal data confidentially and responsibly at all times. Your personal data is processed in compliance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act (TKG 2021).

2. Responsibility & Data Protection Contact

The controller responsible for data processing within the meaning of the GDPR is NOVOMATIC AG, Wiener Straße 158, 2352 Gumpoldskirchen.

Data protection contact: [email protected]
Technical contact: [email protected]

3. Purposes and Legal Basis of Data Processing

3.1 General processing purposes (NOVOMATIC24)

The data is processed for the following purposes: user registration on the website, management of permissions, correct provision of the website, personalization of your experience with the services, provision of information, playing videos, ensuring security and safety, protecting our legitimate interests and legal rights.

3.2 Specific processing purposes (applications)

Applications without further processing purposes: TOPICA, GAMMA, LINO, GMI, GRINGO, SNOW, MOPS, NOVOBEST, SALT, SHEGY, SPIN.

Application with additional processing purposes: VISTA – NOVOMATIC Video Support Tool Application: VISTA is NOVOMATIC's tool for sharing video content used for marketing, training and sharing marketing assets. Videos may contain personal audio or video data.

3.3 Legal basis

Lawfulness under GDPR is based on: consent (Art. 6(1)(a)) when voluntarily creating a user profile or using functions; performance of a contract (Art. 6(1)(b)) for employment or contractual agreements; legitimate interests (Art. 6(1)(f)) for the Company's interests.

3.4 Legitimate interests

Legitimate interests include providing information and applications within the NOVOMATIC AG Group, assignment of content and permissions to user profiles, monitoring and improving NOVOMATIC24 functionality, and protecting the website from malfunctions and attacks by collecting technical data.

4. Processed Data

4.1 Log data

When you use NOVOMATIC24, we process data that your browser transmits to our server. We log IP address, date and time, requested page, access status, referrer, browser, app, operating system, language and software version to display the website correctly and ensure stability and security.

4.2 Basic data in NOVOMATIC24 ("user profiles")

First name, last name, title, work email address, work phone number(s), organizational data (company/department), unique identification number (for login and synchronization, not displayed). No special categories of sensitive data are processed.

4.3 Application data

4.3.1 VISTA — provides and exchanges videos which may contain personal audio or video data.

4.4 Cookies

Functional cookies are set when using individual NOVOMATIC24 applications. Optional cookies can be deselected at any time.

NameDescriptionValidity
XSRF-TOKEN Security cookie that helps safeguard your account against unauthorized actions Session (until browser window closed)
[appname]_session Keeps you signed in and remembers app preferences Session (until browser window closed)

Optional cookies

NameDescriptionValidity
_pk_id.%number%.c%number% Used for website analytics (ID) 13 months
_pk_ses.%number%.c%number% Used for website analytics (session) 30 minutes
_pk_ref.%number%.c%number% Used for website analytics (site) 6 months

5. Recipients of Personal Data

Your personal data will be processed exclusively by NOVOMATIC AG or processors with contracts in accordance with Art. 28 GDPR. No transfer to third countries takes place except to the hosting provider in Poland and AWS EMEA (email delivery) within the EU.

6. Storage and Deletion

Log data is stored according to internal retention periods. Employee profile data is retained until the employee leaves the company. After account deletion or deactivation, data may be retained when there is a legitimate interest, but for a maximum of 5 years.

7. Your Rights as a Data Subject

You have the right to request information, rectification, erasure, restriction, data portability, objection to processing, and to withdraw consent. To exercise these rights, email [email protected]. You may also file a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

8. Changes to the Privacy Policy

We will adapt these provisions as NOVOMATIC24 evolves. Changes will be announced via NOVOMATIC24.