Privacy Policy

Updated: December 2020

ArenaTech (“ArenaTech”, “we”, “us” or “our”) whose ABN is 11 658 929 205 respect your privacy. ArenaTech is committed to protecting the personal data in our custody and control.

This privacy policy (the “Privacy Policy”) describes how we collect, use and disclose your personal data as part of the activities of the websites operated by ArenaTech under the ArenaTech domain (such as ArenaTech.com) (collectively, the “Website”). This Privacy Policy also describes the rights that you have as a data subject of the personal data processed by ArenaTech.

1. Identification of the Data Controller of your Personal Data and ArenaTech Data Protection Officer.

Whenever a ArenaTech entity collects, uses or transfers your personal data for its own purposes, that ArenaTech entity acts as a data controller of your personal data. The ArenaTech entity acting as a data controller of your personal data is the ArenaTech entity:

That operates the Website; and/or
Where applicable, that is located in your country and/or in the country you choose in the Website, and to which you send requests relating to ArenaTech services and/or products.

So as to better ensure the security of your personal data, ArenaTech has appointed a data protection officer (the “DPO”). You may contact the DPO, if you have any questions or concerns regarding this Privacy Policy and the manner in which ArenaTech processes your personal data, by sending an e-mail to dpo@arenatech.com.au.

2. Personal Data we Collect

ArenaTech collects your personal data from your use of the Website (e.g. visiting the Website pages, the blog, downloading case studies, watching videos on the Website and viewing infographics provided in the Website), when you create an account, from your subscription to the newsletter or any other e-mailing list, from any request you send through the Website (e.g. using the sales contact form, the support form, the webinar form or the free white paper form), when you attend a seminar, a webinar or participate in an online survey or access a whitepaper, when you submit an entry for a contest or promotion, purchase a product or service from our online store, or when you attend an investor event or trade show and provide your personal data to us.

From time to time, ArenaTech receives personal data from business partners, vendors and distributors.

ArenaTech processes the following data that relates to you:

Identification data (such as first and last name, job title, e-mail address, business phone number, company industry, advertising identifiers);
Billing data (such as your billing and shipping addresses, credit card information);
Connection data (such as IP address, operating system, region and language as well as the date and time the Website was accessed);
Log data (such as the credentials used to access your account and/or other Website pages that require log-in credentials);
Activity data (such as the number and the Website pages you visited, if you send a request through a form provided by the Website).

3. How We Use Information Collected?

ArenaTech uses your personal data where it has obtained your consent to send you marketing communications (including by e-mail) related to products and/or services different from those you purchased and/or you requested information.

ArenaTech will use your personal data for its legitimate interest to operate its Website, provide you access to it and to its features, promote its activities and services including the following reasons:

Website visitor’s and prospect’s management, with respect to the access to the Website, to any of its pages and to the services provided (such as webinar, the white papers, the case studies, the video and the blog); provide information and enable interaction with our teams (sales team and any team dedicated to the provision of materials through the Website);
Improve the Website and its features, to better understand how you use the Website; better understand your needs;
Implement marketing activities specific to ArenaTech, with respect to e-mailing activities; newsletter; product and/or service information; and
Implement profiling and targeting activities so as to send you interest based advertisements.

ArenaTech will use your personal data where such processing is necessary to the performance of any sales agreement and/or product and/or service online order with you, including:

Client and prospect management, with respect to everyday internal business purposes in order to process your transactions, maintain your account(s), and provide customer service; manage, administer, collect or otherwise enforce accounts and protect them against fraud; keep you up to date on the latest product announcements, software updates, special offers or other information we think you would like to hear about either from us, including sending you direct marketing information or contacting you for market research;
Improve our services: to better understand your needs and provide you with better services; conduct market research in order to develop marketing strategies.

ArenaTech also uses your personal data for compliance with legal obligations to which ArenaTech is subject, including for legal and regulatory compliance, with respect to maintain business records for reasonable periods as required by applicable tax and other laws.

4. How Long do we Retain your Personal Data?

ArenaTech retains your personal data no longer than it is allowed under the applicable data protection laws and in any case, no longer than such personal data is necessary for the purpose for which it was collected or otherwise processed, unless a longer retention period is required by applicable law. This means that we will retain your personal data for a period not exceeding the greater of, where applicable, the:

Duration of your account;
Duration of the processing of your requests;
Period of time necessary for establishing, performing and terminating the contractual relationship you may have entered into with ArenaTech;
Three years as from the term of the contractual relationship or before if you object to the processing of your personal data for marketing purposes (for clients);
Three years as from the date where such personal data was collected or before if you object to the processing of your personal data for marketing purposes (for prospects);
Duration of the applicable statute of limitations; and
Regarding any information processed through cookies and/or similar technologies you have accepted, for a period of time not exceeding thirteen (13) months as from the date of their implementation. For more information on cookies and/or similar technologies implemented by ArenaTech, please see our cookie policy.

5. Information Sharing and Disclosure to Recipients

ArenaTech will grant access to personal data on a need-to-know basis. Such access will be limited to the portion of the personal data that is necessary to perform the function for which such access is granted.

ArenaTech may need to disclose your personal data to provide you the materials, products or services you requested through the Website and/or perform any agreement entered with ArenaTech (including support services).

As a result, access to personal data within ArenaTech may include its authorized personnel in charge of support services, client management, prospect management, marketing services, sales services and billing services.

Access to personal data by third parties may include: third-party service providers that require it as part of their job in order to perform services on ArenaTech’s behalf, for example repair services, technical support, mailing, billing, marketing, serve you interest-based advertisements, information technology and/or data hosting or processing services or similar services, or otherwise collect, use, disclose, store or process personal data on ArenaTech’s behalf for the purposes described in this Privacy Policy.

Subject to your consent, ArenaTech will disclose your personal data to our business partners so that you can receive from them special offers or other information including direct marketing information or contacting you for market research.

ArenaTech will disclose personal data with your preferred ArenaTech’s distributor to ensure customer satisfaction.
We may share personal data in the event of a proposed or actual financing, securitization, insuring, sale, assignment or other disposal of all or part of ArenaTech or our business or assets, for the purposes of evaluating and/or performing the proposed transaction. Assignees or successors of ArenaTech or our business or assets may use and disclose your personal data for similar purposes as those described in this Privacy Policy.

ArenaTech will also disclose your personal data with your consent, if required to do so by law, to enforce our Terms of Use, in urgent circumstances, or to protect personal safety, the public or our Website.

6. International Data Transfers

Due to the global nature of ArenaTech’s business, ArenaTech may disclose and transfer certain personal data to a foreign country.

6.1. Regarding Canadian data subjects

ArenaTech currently collects, stores and processes your personal data on servers located in Canada but such personal data may be accessed outside of Canada by authorized personnel who will then use and disclose your personal data in accordance with this Privacy Policy.

ArenaTechmay also transfer your personal data to its third-party service providers who are located outside of Canada.

ArenaTech takes commercially reasonable contractual or other measures to protect your personal data if processed or handled by these third-party service providers. While your personal data is located outside Canada it will be subject to the legal requirements in those foreign countries applicable to our third-party service providers, for example, lawful requirements to disclose personal data to government authorities in those countries.

6.2. Regarding EU data subjects

ArenaTech may transfer your personal data to ArenaTech entities and third-party service providers located outside the European Union (“EU”) (such as in Canada).

To comply with EU data protection laws, including the General Data Protection Regulation (GDPR), ArenaTech has entered into a framework agreement, under the terms of which all ArenaTech data importers outside the EU are obligated to process and protect all personal data received from the EU in accordance with the controller-to-controller standard contractual clauses (the “Clauses”), as approved by the European Commission in order to protect all personal data received from the EU.

The transfers of data to third-party service providers (including to those listed in Section 5 above) are secured by implementing the safeguards required under the applicable data protection law (including contractual arrangements entered into with a third-party service provider).

7. Your Rights as Data Subject

As a data subject, you may have certain rights, including the:

Right to Access: the right to obtain confirmation from ArenaTech as to whether any personal data concerning you is processed by ArenaTech. This includes the right to access such personal data to obtain a copy of it free of charge (except for repetitive or excessive requests), and to be provided with a description of main features of the processing implemented in relation to your personal data, including:

(i) Purposes of such processing,
(ii) Categories of personal data concerned,
(iii) Recipients or categories of recipients of personal data,
(iv) The envisaged retention period or, if not possible, the criteria used to determine it,
(v) Existence of the right to request rectification or erasure of personal data, as well as the right to object to or request restriction of processing,
(vi) The right to lodge a complaint with a supervisory authority,
(vii) Information relating to any third party source of personal data if the data were not collected from you, and
(viii)The existence, the logic involved, the significance and the consequences of any automated decisions, including profiling.
If you are located in the EU, and your personal data is transferred outside the EU, you have the right to be informed of the appropriate safeguards implemented relating to such transfer.

Right to Rectification: the right to obtain without undue delay the rectification of inaccurate, incomplete or outdated personal data concerning you.

Right to Erasure: the right to obtain without undue delay the erasure of your personal data where:

(i) Such personal data is no longer necessary in relation to the purpose(s) for which it was collected or otherwise processed;
(ii) You withdraw the consent on which the processing was based, and there are no other legal grounds for the processing;
(iii) You object to the processing, as provided below;
(iv) Your personal data has been unlawfully processed;
(v) Your personal data has to be erased for compliance with a legal obligation. In some cases ArenaTech may refuse such request, notably where such data is necessary to comply with a legal obligation.

Right to Restriction: the right to restrict the processing of your personal data in the following cases:

(i) Where you claim inaccuracy of your personal data processed by us (the restriction being provided for a period enabling ArenaTech to verify the accuracy);
(ii) Where the processing appears unlawful, and you oppose the erasure and request the restriction of use of your personal data instead;
(iii) Where ArenaTech does not need such personal data for the purposes of processing, but such personal data is required by you for the establishment, exercise or defense of legal claims; and
(iv) Where an objection is raised by you in relation to the processing, pending the verification whether the legitimate grounds of ArenaTech override those of you.

Right to Object: the right to object, at any time and on legitimate grounds relating to your particular situation, to the processing of your personal data, including the processing for marketing purposes as well as the profiling related to such marketing activities.

Right to Data Portability: where the processing is based on your consent or on a sales contract, and where such processing is carried out by automated means, the right to request from ArenaTech:

(i) to communicate to you the personal data concerning you, in a structured, commonly used and machine-readable format, in order to be able to further transmit such personal data to another data controller; or
(ii) to directly transmit such personal data to such other data controller, if technically feasible.

Right to Withdraw Consent: where the processing of your personal data is based on consent, the right to withdraw such consent (subject to applicable contractual and legal restrictions) at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint: the right to lodge a complaint with the competent supervisory authority.

Where you are a French user you also have the right to contact ArenaTech to define the instructions for the processing of your personal data after your death.

In case you wish to exercise any of the rights here above mentioned, please contact us by sending an email to dpo@arenatech.com.au.

8. Safeguards

We have implemented commercially reasonable physical, organizational and technological safeguards to protect personal data against loss or theft, as well as unauthorized access, disclosure, copying, use or modification. However, you should be aware that absolute security cannot be guaranteed.

9. Children’s Privacy Protection

Our Website does not target and is not intended to attract children under the age of 13. ArenaTech does not knowingly solicit personal data from children under the age of 13 or send them requests for personal data.

10. Third-Party Sites

Our Website may contain links to websites operated by other companies. Some of these third-party sites may be co-branded with a ArenaTech logo, even though they are not operated or maintained by ArenaTech.

Although we choose our business partners carefully, ArenaTech is not responsible for the privacy practices of web sites operated by third parties that are linked to our Website. Once you have left our Website, you should check the applicable privacy policy of the third party website to determine how they collect, use, disclose, and otherwise deal with personal data.

11. Your California Privacy Rights

Consumers residing in California have certain rights with respect to their personal information under the California Consumer Privacy Act (“CCPA”) (California Civil Code Section 1798.100 et seq.) and the “Shine the Light” Law (California Civil Code Section 1798.83). If you are a California resident, then this Section 11 and the additional disclosures related to the collection, use, disclosure, and sale of personal information applies to you.

11.1. Collection and Use of Personal Information

In the preceding 12 months, we have collected the following categories of personal information:

Identifiers (such as first and last name, email address, alias, postal address, online identifier, internet protocol address, operating system, account name, or other similar identifiers);
Categories of personal information described in California Civil Code § 1798.80(e) (such as name, telephone number, and address);
Characteristics of protected classifications under California or federal law;
Commercial information (such as billing data);
Internet or other electronic network activity information (such as connection data, operating system, region, language, date and time the Website was accessed, log data (such as the credentials used to access your account and/or other Website pages that require log-in credentials), or activity data (such as the number and the Website pages you visited, if you send a request through a form provided by the Website));
Geolocation data;
Audio, electronic, visual, thermal, olfactory, or similar information (such as voice recordings);
Professional or employment-related information (such as job title, business phone number, or company industry);
Education information; and
Inferences drawn from any of the above information.

For examples of more specific information we collect and the sources of such collection, please see Section 2 above.

We collect personal information for the business or commercial purposes as described in Section 3 above.

11.2. Disclosure of Personal Information

We may share your personal information with third parties as described in Section 5 above. ArenaTech does not sell personal information (i.e., we do not exchange your personal information directly for monetary compensation). We do allow our advertising partners to collect certain device identifiers and electronic network activity via our services to show ads that are targeted to your interests. To opt-out of having your personal information used for targeted advertising purposes, which may be classified as a “sale” under the CCPA, please contact us as set out in Section 11.6 below. Only you or your authorized agent acting on your behalf may make a request to opt-out.

In the preceding 12 months, we have disclosed for a business purpose or sold (as defined under the CCPA) all the categories of personal information set out in Section 11.1 to:

Our subsidiaries and affiliates;
Internet service providers;
Data analytics providers;
Our business partners who perform marketing activities at the direction of ArenaTech;
Third-party service providers, affiliates, vendors, subcontractors, and payment processors that interact with us in connection with the products and/or services we offer; and
As otherwise described in Section 5 above.

11.3. Your Consumer Rights

If you are a California resident, then you have the right to (i) request more information about the categories and specific pieces of personal information we have collected and disclosed for a business purpose in the last 12 months, (ii) request deletion of your personal information, (iii) opt-out of the sale of your personal information, if applicable, and (iv) be free from discrimination for exercising your rights under the CCPA. You may make these requests by contacting us as set out in Section 11.6 below. Before processing your request, we must verify your identity.

Only you or an authorized agent acting on your behalf may make a verifiable request regarding your personal information. To qualify as a verifiable request, you or your authorized agent must:

Provide enough information so that we may verify your identity as the person about whom we collected personal information, such as by confirming the email address we have on file for you or your recent purchase history; and
Describe your request with sufficient detail such that we may properly understand, process, and respond accurately.

Upon receipt of your request, we will contact you directly, based on the contact information we have collected, or you have provided, to outline the steps needed to verify your identity.

11.4. Authorized Agents

For an authorized agent to be recognized as acting on your behalf, you must either:

Verify your identity directly with ArenaTech as set out above and provide explicit authorization permitting your agent to act on your behalf; or
Provide (or have your agent provide) legal proof of Power of Attorney.

11.5. Shine the Light

California law permits residents of California to request certain details about how their information is shared with third parties for direct marketing purposes. If you are a California resident and would like to make such a request, please contact us as set out in Section 11.6 below.

11.6. Contact Information

In case you wish to exercise any of the rights as set out in this Section 11, you may reach us by email, telephone, or by mail as follows:

Email: dpo@arenatech.com.au

12. Changes to this Privacy Policy

If ArenaTech makes any substantial changes to this Privacy Policy, we will make reasonable efforts to notify you of such changes by posting an announcement on our Website.

We urge you to review this Privacy Policy frequently so that you are aware of the most current version. Your continued provision of personal data or use of our services following any changes to this Privacy Policy constitutes your acceptance of any such changes.

This Privacy Policy was last updated on:

VERSION NO. UPDATE

DATE

April 30, 201

December 2, 2020

13. Questions or Suggestions

If you have questions or concerns about our collection, use, or disclosure of your personal data, or if you require any additional information, please contact our DPO at dpo@arenatech.com.au

14. Manage your Information

You may contact our DPO at dpo@arenatech.com.au to update you information, where applicable.

At any time, you can withdraw the consent given to the processing of your data by sending an email to dpo@arenatech.com.au

Privacy Policy

​