The website of General Automatic Amusement NV (registered office located at 1120 Brussels, Avenue des Croix de Guerre 120, company number 04.07.052.085). GAA places great importance on the confidentiality and security of your personal data.
This personal data protection policy aims to inform you in a clear, simple, and transparent manner about the processing carried out on the personal data you entrust to us, or that we may collect during your browsing on our web or mobile sites https://www.gaa.be/ (hereinafter referred to as the “Site”), their possible transfer to third parties, and the rights and options available to you to control your personal information and protect your privacy.
The Site is published and operated by General Automatic Amusement NV.
https://www.gaa.be/ is operated by BWC, registered with the CBE under number 0842.448.364, with its registered office at 1120 Brussels, Avenue des Croix de Guerre 120, Belgium.
GAA is hereinafter referred to as “the Operator”.
By posting a comment or a reaction on the Site, the User provides personal data (hereinafter “the Data”) to GAA, which processes it.
GAA is the data controller for the personal data collected on the Site within the meaning of the applicable personal data regulations, in particular Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”).
Personal data means any information relating to an individual who can be identified directly or indirectly by reference to one or more elements specific to them, such as their name, first name, national register number, bank account, postal or email address, or an IP address, etc.
GAA collects and processes your data in order to:
GAA informs you that you may modify your communication preferences on the Site at any time by emailing info@GAA.be.
We may collect your personal data on the occasion of:
In the course of our activities, we may collect certain data directly from you for the purposes detailed in point II of this policy.
The information we may collect includes:
GAA processes your personal data on the following legal grounds:
Your personal data is processed by GAA staff. We ensure that only authorised persons within GAA have access to your personal data when necessary to manage our commercial relationship or comply with our legal obligations.
We may also share your personal data:
GAA may also share your data with third parties to comply with legal, regulatory, or contractual obligations, or to respond to requests from duly authorised authorities (including administrative or judicial authorities).
The User declares that GAA has fully informed them of the rules relating to the use of the Site and its Services.
GAA advises the User not to disclose any personal data by email or fax unless expressly requested by the Operator. It is the User’s responsibility to verify carefully and beforehand that such requests indeed originate from the Operator.
GAA has defined retention periods for your personal data in accordance with its legal obligations and the recommendations of the competent data protection authorities.
User Data is stored on GAA’s gaming servers and in Data Centres in Belgium. All Data is stored in encrypted and secured files. No third party may access this Data. In the event that a third party gains access to these files, GAA undertakes to make every effort to ensure that the information in these files remains unreadable.
For marketing, legitimate interest, and service purposes, Data is kept for the time necessary to fulfil the processing purpose.
In accordance with the applicable regulations, including the GDPR, you have the right to access and rectify your personal data, the right to request their erasure, to object to their processing, and to obtain restriction of processing for legitimate reasons or portability where applicable.
You also have the right to give instructions on the retention, erasure, and disclosure of your personal data after your death.
You have the right to obtain from GAA confirmation as to whether or not Data concerning you is being processed and to access such Data, as well as the information referred to in Article 15 of the GDPR.
Under Article 16 GDPR, you have the right to have inaccurate Data rectified without undue delay and to have incomplete Data completed.
You have the right to request that GAA delete your Data without undue delay and GAA has the obligation to erase such Data where one of the following grounds applies:
a) The Data is no longer necessary for the purposes for which it was collected or otherwise processed;
b) You withdraw consent on which the processing is based and there is no other legal ground for processing;
c) You object to automated processing (profiling) and there are no overriding legitimate grounds for processing, or you object to processing for marketing purposes;
d) The Data has been unlawfully processed;
e) The Data must be erased to comply with a legal obligation under Union law or the law of the Member State to which GAA is subject.
This right does not apply where processing is necessary, in particular (a) to comply with a legal obligation requiring processing under Union law or the law of the Member State to which GAA is subject; b) for the establishment, exercise, or defence of legal claims.
You have the right to obtain restriction of processing from GAA where:
a) The Data is inaccurate;
b) Processing is unlawful and you oppose erasure and request restriction instead;
c) GAA no longer needs the Data for processing purposes but it is still required by you for legal claims;
d) You have objected to processing pending verification of whether GAA’s legitimate grounds override yours.
You may request that Data provided to GAA be transferred to another controller without hindrance from GAA in accordance with Article 20 GDPR.
You may object at any time to processing necessary for the performance of a task carried out in the public interest or for legitimate interests pursued by GAA.
You may also object at any time to processing for marketing purposes, including profiling.
These rights may be exercised directly with GAA:
A response will be provided within one (1) month of receipt of your request.
You also have the right to lodge a complaint with the competent data protection authority:
Pursuant to Article 37 GDPR, a Data Protection Officer has been appointed: Mr Serge Sacré.
For any questions regarding Data processing, the Data Protection Officer can be reached by phone at 02/201.11.77 or by email at serge.sacre@goldenpalace.be.
In accordance with the GDPR, the Operator undertakes to take all necessary measures, in view of the nature of the data and the risks related to processing, to preserve the security of User Data and, in particular, to prevent such Data from being altered or accessed by unauthorised third parties. Technical measures include anonymisation, and organisational measures include internal audits.
When GAA uses subcontractors to carry out processing, GAA ensures that they provide sufficient guarantees regarding the implementation of technical and organisational measures.
When processing is likely to result in a high risk to the rights and freedoms of Users, GAA conducts a Data Protection Impact Assessment before processing in accordance with Article 35 GDPR.
GAA uses cookies on its website. You can find more information in our cookie policy.
GAA may amend this data protection policy at any time. If GAA makes significant changes to the way it processes your personal data, its data protection policy, or its cookie policy, GAA will inform you on the Site or by other means such as email, so that you can take note of the changes before browsing the Site.
Last updated: 13.08.2025