1. GDPR Compliance

arcadiaplay strictly complies with the EU General Data Protection Regulation (GDPR) and applicable privacy laws concerning the collection and processing of personal data.

2. Legal Basis for Data Collection

2.1 Consent (Article 6(1)(a))

We collect personal data with your explicit consent for:

• Sending newsletters
• Responding to contact requests
• Using cookies for analytics and site functionality

2.2 Legitimate Interest (Article 6(1)(f))

We also process data under legitimate interests to:

• Ensure proper website functionality
• Enhance security and prevent fraud
• Diagnose technical issues and optimize performance

3. Categories of Personal Data

Data Category	Purpose	Legal Basis	Retention Period
Technical Data (IP, browser type)	Website performance	Legitimate interest	12 months
Email address	Newsletter delivery	Consent	Until unsubscribed
Name and message	Contact inquiries	Consent	24 months
Cookies	Site operation and analytics	Consent	12 months

4. Your GDPR Rights

4.1 Right to Information (Articles 13–14)

You have the right to know:

• What personal data we collect
• Why and how we process it
• How long we store it
• Who has access to it

4.2 Right of Access (Article 15)

You can request a copy of your personal data. We will respond within:

• One month of receiving your request
• Free of charge
• In a clear and structured format

4.3 Right to Rectification (Article 16)

You may request correction of inaccurate or incomplete data.

4.4 Right to Erasure (Article 17)

You can request deletion of your data if:

• The data is no longer needed
• You withdraw your consent
• The processing is unlawful

4.5 Right to Restrict Processing (Article 18)

You can request limited processing of your data under certain conditions.

4.6 Right to Data Portability (Article 20)

You may request your data to be transferred to another service provider.

4.7 Right to Object (Article 21)

You may object to the processing of your personal data based on legitimate interest.

5. Managing Consent

5.1 Giving Consent

Consent must be:

• Freely given and explicit
• Specific and informed
• Provided for a clear purpose
• Easy to withdraw at any time

5.2 Withdrawing Consent

You can withdraw consent by:

• Emailing: privacy@arcadiaplay.party
• Using the “unsubscribe” link in newsletters
• Submitting a request through our contact form

6. Data Security and Protection

6.1 Technical Safeguards

• SSL encryption
• Secure hosting environments
• Regular security updates
• Access control policies

6.2 Organizational Measures

• Employee training on data protection
• Limited access to personal data
• Regular risk assessments
• Incident management procedures

7. Data Transfers Outside the EU/EEA

We do not transfer personal data outside the EU or EEA unless:

• An adequate level of protection is ensured
• Standard contractual clauses are in place
• You have explicitly consented to the transfer

8. Data Protection Officer

We are not required to appoint a Data Protection Officer because:

• We do not process large volumes of personal data
• We do not process sensitive categories of data
• We do not conduct systematic monitoring of individuals

9. Complaints and Remedies

9.1 Filing a Complaint

If you are unsatisfied with how your data is processed:

1. First, contact us directly to resolve the issue
2. If unresolved, you may file a complaint with the relevant authority

9.2 Supervisory Authority

10. Contact Information

11. Updates to GDPR Information

We may update this GDPR notice as necessary. Major changes will be announced via:

• Notifications on this website
• Email alerts (if applicable)
• Public announcements on our platform