Privacy Policy.
Last updated: January 2026. This policy applies to all personal data collected and processed by Arolena, ul. Lwowska 18, 00-564 Warsaw, Poland, in connection with the operation of this website and the provision of our nutritional food-supplement information service.
Identity of the Data Controller
The data controller responsible for personal data processed through this website is Arolena, with its registered correspondence address at ul. Lwowska 18, 00-564 Warsaw, Poland. For data-related enquiries, the controller can be contacted at [email protected] or by telephone at +48 22 351 90 47.
Arolena processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, “GDPR”) and applicable Polish data protection legislation.
Categories of Personal Data
When you use the contact form on this website, we collect the personal data you voluntarily provide: your name, email address, and the content of your message. An optional subject field and telephone number may also be provided at your discretion.
When you visit the website, our web hosting infrastructure automatically records technical data including your IP address, browser type, operating system, referring URL, pages visited, and the date and time of your visit. This technical data is processed for legitimate interest purposes including website security and performance analysis.
We do not collect any special categories of personal data (such as data concerning health, biometric data, or genetic data) through this website. The website does not request, and you should not provide, any such special-category data via the contact form or any other input field.
Lawful Basis for Processing
Contact form submissions are processed on the basis of Article 6(1)(b) GDPR (processing necessary to take steps at the request of the data subject) and Article 6(1)(f) GDPR (legitimate interests in responding to correspondence).
Technical server log data is processed on the basis of Article 6(1)(f) GDPR (legitimate interests in maintaining website security and operational performance). Cookie-based analytics data is processed on the basis of Article 6(1)(a) GDPR (consent), which you manage via the cookie consent banner on this site.
Where you have provided consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawals of consent can be submitted in writing to [email protected].
Data Retention Periods
Contact form correspondence is retained for a period of twenty-four (24) months from the date of receipt, after which it is securely deleted unless a longer retention period is required by applicable law or ongoing correspondence.
Technical server log data is retained for a maximum of twelve (12) months before automated deletion. Cookie consent records are retained for twelve (12) months or until the consent is withdrawn, whichever is earlier.
Rights of Data Subjects
Under GDPR, you have the right to: request access to the personal data we hold about you; request correction of inaccurate personal data; request erasure of your personal data where no legitimate grounds for retention exist; object to processing based on legitimate interests; request restriction of processing; and lodge a complaint with the Polish supervisory authority, the Urząd Ochrony Danych Osobowych (UODO), at ul. Stawki 2, 00-193 Warsaw, or via uodo.gov.pl.
To exercise any of the above rights, please contact us in writing at [email protected]. We will respond to verifiable requests within thirty (30) days in accordance with Article 12 GDPR.
Arolena products are nutritional food-supplements registered with the applicable local regulatory authority under food-supplement classification. Products meet compositional and labelling requirements for nutritional supplement categories. This privacy policy governs personal data only and does not constitute product documentation.
Updates to This Policy
This privacy policy may be updated periodically to reflect changes in applicable law, our data processing practices, or operational arrangements. The date at the top of this page reflects the most recent revision. Continued use of the website following a policy update constitutes acknowledgement of the revised terms.
Material changes affecting the rights of data subjects will be communicated through a notice on the website homepage for a period of at least thirty (30) days prior to the effective date of the change.