ARCADIAN legal

Privacy

How ARCADIAN handles personal data, cookies and EU data protection rights.

Last updated:

1. Controller

The controller of personal data is ARCADIAN SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, KRS 0001242523, VAT PL1133202795, REGON 54481633500000, registered at ul. Ostrobramska 101/4, 04-041 Warsaw, Poland. You can contact us at [email protected].

2. Data we process

Depending on how you use the website, ARCADIAN may process:

  • contact form data such as name, email, phone, message, inquiry type;
  • technical logs needed for security, troubleshooting, fraud prevention and service reliability, including IP-derived city, country and time zone where available;
  • cookie preferences, including the necessary language cookie named AVENTRO_LANG and optional time zone preference arcadianTimeZone.

3. Purposes and legal bases

We process personal data to respond to requests, prepare and perform contracts, secure the service, meet legal obligations and improve the website. The legal bases may include GDPR Article 6(1)(a) consent, Article 6(1)(b) contract or pre-contract steps, Article 6(1)(c) legal obligation and Article 6(1)(f) legitimate interests.

4. Cookies

Necessary cookies are used for language preference, security and session operation. Optional preference, analytics and marketing cookies are disabled by default and should only run after you consent. The preference cookie stores your browser time zone so timestamps can be shown in your local time. Your cookie choices are stored in your browser under arcadianCookieConsent.v1. You can update them at any time by selecting Manage cookies in the footer.

5. Recipients and processors

Data may be handled by hosting providers, email providers, database and backup services, IP geolocation lookup providers where enabled, IT support, professional advisers and public authorities when required by law. Processors must handle data under appropriate contractual safeguards.

6. International transfers

If personal data is transferred outside the European Economic Area, ARCADIAN will use an appropriate legal transfer mechanism where required, such as an EU adequacy decision, Standard Contractual Clauses, or another safeguard recognized under EU data protection law.

7. Retention

We keep personal data only for as long as needed for the purpose collected, including project delivery, legal obligations, accounting, security logs and dispute handling. When data is no longer needed, it is deleted, anonymized or archived where law requires retention.

8. Your EU data protection rights

Subject to GDPR conditions, you may request access, rectification, erasure, restriction, portability and objection to processing. Where processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing.

You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or another competent EU supervisory authority.

9. Security

ARCADIAN applies access controls, upload validation, transport security and operational safeguards appropriate to the service. No internet service can be guaranteed completely secure, so users should report suspected misuse promptly.

10. Updates

We may update this notice when the website, legal requirements or providers change. The update date at the top of the page shows the current version.