Controller and operator
The operator of the application and the data controller is TIPSPORT a.s., company ID 18600824, registered office at Politických vězňů 156/21, Beroun-Centrum, 266 01 Beroun, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, section B, entry 673.
The technical operation of the application on behalf of the operator is provided by FOC Service s.r.o., company ID 28947738, registered office at Na Žertvách 783/23, 180 00 Prague 8, Czech Republic, acting as a processor. Technical support: info@focs.cz.
Seller accounts are issued by the organizer of the event at which raffle tickets are sold.
Who the app is for
Tombola 50:50 is a point-of-sale tool for the event organizer's authorised sellers. It is not intended for the general public and cannot be used without an account issued by the organizer.
What data we process
Seller data
At sign-in we process the seller's e-mail address and password, and the identifier of the device the app is installed on. This is used to verify the authorisation to sell and to link sales to a specific cash register.
Sales data
We record the numbers of tickets sold, the amount, the time of sale, the payment method and any voided transactions. This data is required for event settlement, the draw and revenue control.
Card payment data
For card payments we record the transaction result and the identifiers provided by the payment terminal. The application neither processes nor stores card numbers or any other payment credentials – these are handled exclusively by the payment service provider GP tom (Global Payments) as a separate controller.
Operational and diagnostic data
To resolve technical problems we process the application's operational records (error states, synchronisation progress).
Data about ticket buyers
Raffle tickets are anonymous. The application processes no data about ticket buyers – no name, contact details or any other identifier is entered.
Why we process the data
- Operating the application and verifying the seller's authorisation.
- Recording sales and settling the event, including statutory obligations related to running a charity raffle.
- Traceability and dispute resolution for payment transactions.
- Security and technical support.
How long we keep the data
Sales and payment data are kept for the period required by law for raffle and accounting records. Seller data is kept for the duration of their authorisation to sell and for a necessary period thereafter.
Who we share data with
- GP tom (Global Payments) – to the extent necessary to process a card payment.
- The hosting provider of the server part of the application, acting as a processor.
We do not share data for advertising purposes and we do not sell it. The application contains no ads and no third-party analytics or advertising SDKs.
Permissions the app requires
- Internet access and network state – communication with the server and detecting outages for offline mode.
- Nearby devices (Bluetooth) – connecting to an external thermal receipt printer. Scanning is used solely to find the printer and is not used to derive location.
- Printing – printing receipts on the built-in printer of the point-of-sale device.
- Display over other apps – used only to bring the application back to the foreground after a payment completes in the payment terminal app. The application does not overlay anything and creates no overlay window.
The application does not access location, contacts, calendar, camera or microphone.
Security
Communication between the application and the server is encrypted (HTTPS). The authentication token and other sensitive data are stored in the secure storage of the Android operating system on the device.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing and to object to processing. You can exercise these rights with the operator as the data controller, through the event organizer, or at info@focs.cz. The procedure for requesting deletion is described on the Data deletion page.
You also have the right to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7 (www.uoou.cz).
Changes to this policy
We may update this policy if the functionality of the application changes. The current version is always available at this address.