GDPR
Privacy Policy and Cookie Policy
Effective Date: 26 January 2026
1. General Provisions
This Privacy Policy and Cookie Policy (hereinafter the “Policy”) sets out how ARENA BRNO, a.s., Company ID No.: 091 33 267, with its registered office at Výstaviště 405/1, Pisárky, 603 00 Brno, registered in the Commercial Register maintained by the Regional Court in Brno under File No. B 8383 (hereinafter the “Controller”), processes the personal data of natural persons in connection with the operation of the arenabrno.cz website.
When processing personal data, the Controller is required to comply with directly applicable European Union legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 110/2019 Coll., on the Processing of Personal Data.
The purpose of this Policy is to provide you with clear information about what data we collect, how we protect it, and what rights you have.
2. What Personal Data We Process
Through our website, we may process the following personal data:
- Contact form data: first name, last name, email address, telephone number, and the content of your message.
- Marketing data: email address, telephone number, first name, and last name.
- Technical data: IP address, cookies, and website usage data.
3. Sources of Personal Data
- We obtain personal data directly from you or automatically through cookies.
4. Purposes and Legal Bases for Processing
4.1 Responding to Enquiries and Communication
Legal basis: performance of a contract and the Controller’s legitimate interest.
4.2 Marketing and Commercial Communications
Legal basis: legitimate interest or consent.
4.3 Analytics and Statistics
Legal basis: consent provided through the cookie banner.
4.4 Advertising and Remarketing
Legal basis: consent.
4.5 Compliance with Legal Obligations
Legal basis: compliance with a legal obligation.
5. Data Retention Period
- Contact form: up to 1 year.
- Marketing: until consent is withdrawn, for a maximum of 10 years.
- Cookies: typically 12–24 months.
6. Recipients of Personal Data
- IT and hosting service providers
- Google Ireland Ltd.
- Meta Platforms Ireland Ltd.
- public authorities
Personal data is processed primarily within the European Union.
7. Use of Cookies
- Essential
- Preference
- Analytics
- Marketing
You can change your cookie preferences at any time through the cookie banner.
8. Third-Party Analytics and Advertising Tools
We use Google Analytics 4, Google Ads, and Meta Pixel.
9. Protection of Personal Data
We implement appropriate technical and organisational measures to protect personal data against misuse and unauthorised access.
10. Your Rights
- the right of access to your personal data
- the right to rectification
- the right to erasure
- the right to restriction of processing
- the right to object
- the right to data portability
- the right to withdraw consent
- the right to lodge a complaint with the Czech Data Protection Authority
Contact: info@arenabrno.cz
11. Final Provisions
The Controller reserves the right to amend this Policy at any time. The current version is always available on the website.