1. Introduction

Privacy policy describes the manner in which the company Arena Center Zagreb Ltd., with its registered seat in Zagreb, Vice Vukova 6, PIN: 83997642580 (hereinafter: the Company) manages personal data which you have provided us while using website, and in other cases such as applying to a prize competition or a prize game. For the avoidance of any doubt, when the Company receives personal data which you have provided while using the Company’s website, it is deemed to be the controller of that personal data, unless defined differently in a particular case. The Privacy Policy applies irrespective of the device used (personal computer, mobile phone, tablet, or other device) to access the Internet site

It is important that you carefully read this Privacy Policy because every time you use our services (described below) you accept the terms described in this Policy. If you do not accept the terms described in this Policy, i.e. you do not provide consent on processing of personal data (if it is required in a particular case), you will not be able to use our services. However, we would like to point out that you are not obliged to provide personal data to the Company, i.e. there are no consequences if such data is not provided. The Company may amend or supplement this Policy at any moment and the last version of the Privacy Policy will always be uploaded on the Company’s website. Please check the effective date published on top to see when was the Privacy policy most recently updated.

  1. Principles of Personal Data Processing

The Company is processing personal data in accordance with the following principles:

  • Personal data pertaining to the users is processed in lawful, righteous, and transparent manner,
  • Personal data is collected only for specific, explicit, and legit purposes and is not processed in manner incompatible with such objectives,
  • personal data must be adequate, relevant and not in excess in relation to purpose for which it is collected and/or further processed,
  • personal data must be accurate, and if necessary, updated;
  • all reasonable measures must be undertaken for deletion or correction of incorrect, incomplete data, with regard to purposes for which it is collected or for which it is further processed,
  • personal data shall not be retained longer than required for purposes for which they are collected or for which they are processed,
  • personal data shall be processed safely, ensuring protection from unlawful or unauthorised access, loss, destruction and damage.

For purposes of verifying the compliance with the principles stipulated in above sections, the Company shall document the rules and the terms for personal data processing.

  1. Scope of Personal Data Collecting and the Purpose of Processing

Personal data is deemed to be personal data which you have provided to us. The Company collects Personal data in the following cases:

  • When applying for periodic newsletter
  • When applying for prize games and competitions
  • When visiting the website hr

Depending on the circumstances, the Company may collect all or some of the following categories of Personal data:

  • Name and surname,
  • Age,
  • Email address,
  • Home address
  • Telephone number,
  • Your current location data,
  • Bank card data, such as IBAN,
  • Photographs of the face,
  • Personal data obtained during your visit to website hr

The Company collects the above-mentioned Personal data based on your consent because the processing is required due to our legit interests or necessary for implementation of the contracts. Legit interests manifest themselves in improving our services and overall operation and advertising of Arena Centar. We point out that you may withdraw your consent at any moment, however from the time of the withdrawal onwards you will not be able to use available services at website The consent may be withdrawn by giving notice to the Company, pursuant to Section 9 of this Policy, i.e. by clicking the “Unsubscribe” link in our newsletter.

The Company collects and processes Personal data for the following purposes:

  • for providing the service you have requested, such as receiving newsletter,
  • due to application for prize game or contest, for handover of the prize and publishing the information on the prize-winner,
  • for understanding the way you are using our services, so that we may improve your customer experience,
  • in order to offer you customised content and marketing.

The Company shall not use the collected data for automated decision-making, which includes the use of Personal data for evaluation of certain personal aspects relating to a natural person.

We particularly emphasize that you must be at least 16 years old to use our services in relation to which we collect Personal data. If you are under the age of 16, you cannot use our services. Exceptionally, for participants in prize games or contests, at the application we may request them to be at least 18 years old.

  1. Sharing of Personal Data you have provided to us

The Company may share all or some of the collected Personal data with the following receivers:

company NEPI Croatia Management Ltd, seated in Zagreb, Vice Vukova 6, PIN: 94739707578, and with other companies operating within NEPI Rockcastle group, with Company’s business partners (companies that provide IT services and companies engaged for cooperation in the marketing field ,which are seated in Republic of Croatia), whereby the IT service providers (so called Cloud Software Services) may be seated outside European Union, with judicial authorities of Republic of Croatia, pursuant to applicable legislation.

In the case your Personal data would be shared with receivers seated outside the European Union, all measures for ensuring legally sound transfer thereof will be undertaken.

  1. The period of collection of the Personal Data you have provided to us

We shall collect and process your Personal data depending on the purpose for which you have provided the respective Personal data. Namely, Personal data shall be retained for the following periods:

  • Data which we use for issuing newsletters: as long as there is a valid and lawful consent for Personal data processing,
  • Data which we use for delivery of services on your demand: as long as the service is delivered,
  • Data which we collect for the purpose of application in a prize game or contest: as long as the respective prize game or contest is ongoing. However, bear in mind that we shall process Personal data of all winners even after the completion of the respective prize game or contest, yet longest for a period of 5 years calculating from the respective prize game or contest completion date and due to advocacy in potential legal proceedings.

In any event, your data shall be processed only while a lawful purpose for Personal data processing exists.

  1. Particulars on Personal Data Processing for the purpose of newsletter delivery

Our newsletter is a form of direct marketing messages via which we inform you on discounts, events and generally on news in Arena Centar. In order to receive it , files on the website need to me marked whereby you are providing consent for receiving the newsletter and for the processing of your Personal data. At the registration, your email address must be entered, while entering your name and surname is optional.

You may withdraw the provided consent at any moment, by clicking the button “Unsubscribe” (positioned at the bottom of each message) or by unsubscribing on the website.

For managing the base of subscribers we use the Mailchimp marketing platform which is operated by the company The Rocket Science Group LLC, seated in the United States of America. In this case the mentioned company acts as the Data Processor, whereat it has an obligation to undertake all measures required for Personal data protection, in accordance with European-American regime on privacy protection (so called Privacy Shield). You may learn more on the Privacy Shield on the webpage of the Personal Data Protection Agency, accessible through the following link:

  1. Particulars on applications for prize games and contests

We periodically organize prize games and contests, in cooperation with our media partners. The scope of Personal data that we collect depends on the conditions of the respective prize game or contest, whereby all information pertaining to Personal data processing will always be published within rules of the prize game or the contest. When applying for the prize game or contest, the possibility to subscribe to our newsletter shall always be offered, wherefore the policy on Personal data processing shall be then applicable to the data provided for the purpose of receiving the newsletter.

Bear in mind that we also request your Personal data (for identification purpose) at the prize handover, and it is possible that we publish the photograph of the face of the prize-winner on our website and on social network profiles.

  1. Particulars on the cookies and other technologies

Cookies are small-size files which are temporary stored on your device, with the purpose to record your preferences and selections for the following visits to the website There are several categories of cookies used, namely there are cookies necessary for proper loading of the website, cookies that enable better efficiency of the website, cookies that collect information on how you are using the website (later used for deriving analytic and statistical data), and so called third-party cookies with primary purpose of additions integration (plugins) which allow sharing of content from our website with, for example, social networks.

More information on cookies and other technologies that we use, you may learn on our webpage dedicated for collection and use of cookies and other technologies.

  1. Your Rights

Based on the applicable legislation, your rights are as follows:

  • you may request from us access to your Personal data, i.e. you have the right to receive information whether we process your Personal data,
  • if your Personal data is inaccurate, you have the right (without undue delay) to obtain rectification of that data, as well as the right to supplement it if it is incomplete,
  • you have the right to obtain deletion of your Personal data (without undue delay) if one of the following conditions is met:
  • Personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed,
  • if you withdraw the consent on which the processing is based and if there is no other legal grounds for the processing,
  • if you object to the processing (more on this below),
  • if Personal data has been unlawfully processed,
  • if Personal data must be deleted due to compliance with a legal obligation arising from European Union law or Croatian law,
  • Personal data has been collected in relation to the offer of society services information (such as e-commerce)
  • you have the right to obtain restriction of Personal data processing if one of the following conditions is met:
  • if you contest the accuracy of part of the Personal data, for a period enabling us to verify the accuracy of the respective Personal data,
  • if the processing is unlawful and you oppose the deletion of the Personal data and request restriction of its use instead,
  • if we no longer need the Personal data for the purposes of the processing, but you require it for the establishing, exercising, or defending of a legal claim,
  • if you have objected to processing, and the verification whether our legitimate grounds for processing override your interests, rights and freedoms is pending,
  • you have the right to data transferability, i.e. you have the right to receive the Personal data which you have provided to us, in a structured, commonly used and machine-readable format and to transmit that data to another controller without hindrance from our side. In other words, you have the right of direct transfer of data which we process in a manner where the Personal data is transferred from us (i.e. from our database) to another controller, under the condition that this is technically feasible,
  • you have the right to object at any time to processing of Personal data you have provided us with,
  • you have the right to lodge a complaint with the Personal Data Protection Agency, to the email address or to the address Martićeva 14, 10000 Zagreb.
  1. Third Parties

Our website contains links which lead to some other websites, such as Company’s profiles on social networks, websites of public transportation via which you can reach Arena Centar etc. We bear no liability for security or privacy of any data collected by those websites while using them. We kindly ask of you to carefully read privacy statements applicable on those websites.

  1. Contact Details

For any questions in relation to this Privacy Policy application, you may contact us via email address: or on the address: Calea Floreasca No. 169A, Floreasca 169, Cladirea A, etajul 5, Sector 1, Bucharest, Romania (to the attention of: NEPI Rockcastle).

Legal Notices and Conditions of Use

  1. Intellectual Property

Any use of website (hereinafter: website) is subject to conditions stated below. Data provided on this website may be copied for non-commercial purposes only and only for an individual use, provided that copyrights, other intellectual property rights and all the applicable limitations are observed. In all other events data may not be copied, reproduced, or somehow distributed without prior explicit written consent of Arena Center Zagreb Ltd. In relation to the foregoing, the website users are particularly forbidden to:

  • Publish the website content on other Internet sites,
  • Sell, lease or provide licence or alike of any website content,
  • Publicly display any content from the website,
  • Reproduce, copy, and generally use any content from the website for commercial purposes.

In addition, by using or surfing the website, users or third parties do not acquire any rights over the website content, neither over the trademarks, copyrights and similar of which Arena Center Zagreb Ltd. is the right-holder.

  1. Accessibility of the website and accuracy of information on the website

Arena Center Zagreb Ltd. shall undertake reasonable efforts so that the website contains accurate and up-to-date data; however, it cannot be responsible for its accuracy and completeness. All users who access the website use the content thereof at their own liability. Arena Center Zagreb Ltd. shall not be liable for any direct, indirect or any other damages arising from access, use or the inability to use the website or due to any error or incompleteness of content thereof. Likewise, Arena Center Ltd. shall endeavour to enable the access to the website at all times, yet it does not guarantee that the website or any part thereof will be accessible at any moment, nor may it be held liable for any damage caused due to website inaccessibility.

  1. Other Websites

The website contains third party information and links to other websites over which Arena Center Zagreb Ltd. does not have control. Whenever possible, such information shall be designated accordingly. Arena Center Zagreb Ltd. is not liable for the accuracy or any other aspect of such information and does not assume any responsibility for such information. It is recommended to investigate the conditions of use at the referred websites.

  1. Permitted Use

The users (website visitors) may not:

  • Use the website in a manner that causes or may cause any kind of damage,
  • Use the website in an unlawful manner,
  • Carry out automatic data-gathering from the website (so called data mining),
  • Use any kind of information from the website for marketing services (e.g. for direct contacting of the consumer),
  • Send or transfer to the website malicious and/or harmful software,
  • Carry out attacks by overburdening the website (so called Denial-of-Service attacks).
  1. Breach of these Legal Notices and Conditions of Use

Without prejudice to other rights held by Arena Center Zagreb Ltd. pursuant to applicable legislation, in the event of breach of the conditions of use set herein, or Arena Center Zagreb Ltd. has reasonable grounds to suspect occurrence of breach, Arena Center Zagreb Ltd. may:

  • send one or more warnings to the user,
  • Temporarily or permanently block the access of the user to the website,
  • Block the IP address of the personal computer or other device accessing the website,
  • Initiate judicial and other proceedings against the user.

If Arena Center Zagreb Ltd. does not exercise any of its above-mentioned rights, this shall not be interpreted as a waiver of such rights by Arena Center Zagreb Ltd.

  1. Final Provisions

The applicable law for the interpretation of these Legal Notices and Conditions of Use shall be the law of the Republic of Croatia. Arena Center Zagreb Ltd. reserves the right to amend the content of these Legal Notices and Conditions of Use, as well as the website, in any way, at all times and for any reason, and shall not be liable for any kind of possible consequences resulting from such alternations.