Privacy Policy

1. Basics

1.1 This document is a description of the Privacy Policy (hereinafter referred to as the "Policy") found on the website at, administered by Arena Operator Sp. z o.o., ul. Bojkowska 59c, 44-100 Gliwice (hereinafter referred to as "Arena").

1.2 The purpose of the Policy is to define the principles, methods of processing, and utilization of data and information from users of the website. It also includes information regarding the rights of individuals concerning their personal data provided to and processed by Arena.

1.3 Please carefully read the content of this Policy. By entering or using this site and providing any personal data, the user accepts the terms of this Privacy Policy.

1.4 Please note that by leaving this site (e.g., by following a link to a page in a different domain), the user enters an area where this Privacy Policy does not apply. Arena is not responsible for the privacy policy principles applied on pages operated by other entities.

2. Principles of Personal Data Protection

Arena is the data controller for the personal data provided by users on the website Arena takes special care to ensure that all personal data is processed in accordance with the purpose for which it was collected and used within the scope of the granted consents and areas allowed by law.

3. Purpose of Personal Data Processing

3.1 Each person providing personal data to Arena through the forms on the website is informed of the specific purpose for which the data is processed and the legal basis for processing.

3.2 Arena uses personal data only for the following purposes, including but not limited to:
a) providing personal data and giving consent for Arena to contact the user,
b) consenting to receive newsletters,
c) applying for a job in recruitment processes organized by Arena,
d) entering into and executing agreements with Arena,
e) participating in contests and promotional events organized by Arena, including those organized through Arena's fan page on Facebook,
f) recording the image of individuals through video surveillance.

3.4 Personal data processed based on consent will be processed until the consent is withdrawn or the purpose for which the data was collected ceases. The consent can be withdrawn at any time without affecting the lawfulness of processing based on the consent before its withdrawal.

Personal data processed in connection with the conclusion and performance of agreements will be processed in accordance with applicable regulations, but no longer than the period in which Arena may assert claims related to the concluded agreement, unless a longer period results from accounting regulations.

Personal data processed in connection with the recruitment process will be processed for a period of 6 months after its completion.

4. Security and Storage of Information

4.1 Arena ensures the security of personal data through appropriate technical and organizational measures to prevent unauthorized processing of data and their accidental loss, destruction, or damage.

4.2 Arena takes special care to ensure that personal information is:
a) legal, fair, and transparent,
b) collected for specific and legally justified purposes and not further processed in a manner incompatible with those purposes,
c) adequate, relevant, and limited to what is necessary for the purposes for which it is processed,
d) accurate and, if necessary, updated,
e) stored in a form allowing identification of the person to whom it relates for no longer than necessary for the purposes for which it is processed,
f) processed in a way that ensures appropriate security of personal data,
g) respecting the realization of the rights of individuals whose data is processed,
h) not transferred without adequate protection to countries outside the European Economic Area or international organizations.

5. Data Acquisition

5.1 Arena records where any personal data was initially acquired.
5.2 Personal data is obtained through:
a) online forms – information is collected through various forms on the website for contact purposes, submitting questions, expressing comments,
b) direct contact – various phone numbers and email addresses are available on the website for direct communication,
c) data on traffic and statistics regarding the frequency of visits to Arena's pages – a register of information on traffic data automatically logged by our server, such as the user's IP address, URLs visited before and after visiting our site, and visited pages. Statistics on the number of page views and visits are also collected. Arena is unable to directly identify the user based on traffic data and usage statistics,
d) when using resources on websites managed by Arena – user information is collected through files such as "cookies." Cookies are small text files transferred from a website and stored on the user's hard drive, used to customize content and services to individual needs and interests of users. Users can disable the acceptance of cookies in their browser at any time, but this may result in the loss of the ability to use the website. Details regarding the use of cookies are specified in the Cookie Policy.

6. User Rights

6.1 Arena respects the rights of individuals related to the processing of their personal data. In particular, every individual whose data is processed has the right:
a) to obtain information about the processing of their personal data,
b) the right to access, request correction, completion, and change of their data,
c) the right to delete data ("right to be forgotten"),
d) the right to limit data processing,
e) the right to data portability,
f) the right to object to the processing of their data for justified purposes of Arena as the data controller, including direct marketing of its products and services, as well as the right not to be subject to a decision based solely on automated processing.

6.2 Arena reserves that in case of absolute inability to identify a person, for example, in connection with the scope of data provided by them, Arena may refuse to take action at the request of the person concerned, unless that person provides additional information allowing identification.

6.3 Arena informs that there is no obligation to delete data ("right to be forgotten") when processing is necessary for:
a) the exercise of the right to freedom of expression and information,
b) compliance with a legal obligation to process under Union or Polish law or for the performance of a task carried out in the public interest,
c) archival purposes in the public interest, for scientific or historical research purposes, or for statistical purposes,
d) the establishment, exercise, or defense of legal claims.

6.4 In the case of an objection by the user to further processing for marketing purposes, profiling, or the transfer of personal data to another data controller, the objection is considered. However, the data controller may leave in the collection data identifying the individual solely to avoid reusing that person's data for purposes covered by the objection.

6.5 The user can exercise the right to information and access to data no more than once every 6 months. Upon request from the person whose data is concerned, the data controller is obliged, within 30 days, to provide necessary information.

6.6 To exercise any of the above rights granted to individuals, please contact directly by sending a message to the email address: or by mail to the Arena address provided above.

7. Scope of User Data Sharing

Arena declares that it does not sell or lend the processed personal data of users to other individuals or institutions, unless it is done with explicit consent or at the user's request, or at the request of authorized state authorities for the purposes of their proceedings or actions related to security or defense, for specific tasks carried out for the public good, when necessary to fulfill legally justified purposes of Arena.

8. Changes to the Privacy Policy

Changes in Arena's privacy protection policy may be influenced by changes in legislation regarding the protection of personal data, as well as other factors. All customers and users will be promptly informed about any changes on our website. In case of changes to the applicable privacy policy, appropriate modifications will be made to the above record.

9. Right to Lodge a Complaint

In any case where an individual believes that their rights arising from legal regulations and this privacy policy are violated, they have the right to lodge a complaint with the Office for Personal Data Protection located in Warsaw at Stawki 2.