Privacy Policy
Last updated: 18 April 2026
This policy describes how ARPA sp. z o.o. processes personal data submitted through this website. We operate in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Polish data protection legislation.
Data controller
The data controller is ARPA sp. z o.o., with its registered office at Żegocino 16A, 76-142 Malechowo, Poland, entered into the Polish National Court Register (KRS) under number 0001055777, VAT ID PL4990697248, REGON 526261288. For any data-protection matters, please contact: [email protected] or by phone at +48 538 638 048.
Scope of data collected
Through the contact form we collect: full name, company name, email address, phone number (optional), selected sector and the inquiry content. Server logs (IP address, browser, access time) are collected solely for security and technical purposes.
Purpose and legal basis
Data from the contact form is processed exclusively to respond to the request for quotation and to conduct subsequent business communication. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest of the controller in responding to inquiries).
Retention period
Inquiry data is retained for the period necessary to handle the request and subsequent business communication, and no longer than 24 months after the last contact. Accounting records are retained for the period required by Polish tax law.
Data recipients
Data may be transferred to trusted technical service providers: Cloudflare (hosting and bot protection), Resend (email delivery), Google (Google Tag Manager and Google Analytics — only with your consent). We do not transfer data outside the European Economic Area without appropriate safeguards.
Data subject rights
You have the right of access, rectification, erasure (the 'right to be forgotten'), restriction of processing, data portability, objection to processing, and the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).
Cookies and Google Consent Mode v2
We use only cookies strictly necessary for the website to function. Google Analytics cookies (loaded via Google Tag Manager) are only set after you grant consent. We implement Google Consent Mode v2, passing granular consent signals: ad storage, ad user data, ad personalization, analytics storage, functionality storage, personalization storage, security storage.
Data security
Data is transmitted over encrypted HTTPS connections only. We apply appropriate technical and organisational measures to protect data against unauthorised access, alteration or loss.
Policy changes
We reserve the right to update this privacy policy. The date of the most recent update is shown at the top of this document. Users will be notified of material changes in a prominent manner.