Privacy Policy

ARC GmbH ("we", "us", "our") respects your privacy. This policy explains what personal information we collect when you visit www.arc-arc.it.com, request a facility, or otherwise interact with us, and how we use, share and protect it.

1Data controller

ARC GmbH, registered at Am Waldbach 22, 77654 Offenburg, , Deutschland. Registration number BaFin-ID: 50079347  Bak Nr.: 164881  · VAT DE294954365. Regulated by BaFin (Bundesanstalt für Finanzdienstleistungsaufsicht). For any question relating to this policy, contact our data protection team at support@arc-arc.it.com.

2Information we collect

• Identity & contact. Name, business email, phone, job title, employer, correspondence address.
• Financial & commercial. Company financials, aged debtor/creditor listings, asset invoices, VAT number and — where legally required — ultimate beneficial owner information.
• Technical. IP address, device and browser type, referring URL, pages viewed, and interaction data collected via first-party analytics.
• Marketing preferences. Consent to receive updates, unsubscribe records, and event attendance history.

3How we use your information

We process personal data on the following legal bases:

• Contract. To assess, structure, document and administer the facilities we provide.
• Legal obligation. Anti-money-laundering, sanctions screening, tax and regulatory reporting.
• Legitimate interest. Product improvement, fraud prevention, secure operation of www.arc-arc.it.com, business analytics.
• Consent. Marketing communications and non-essential cookies. You can withdraw consent at any time.

4Sharing your information

We share personal data only where necessary and with appropriate safeguards:

• Regulatory bodies including BaFin (Bundesanstalt für Finanzdienstleistungsaufsicht), tax authorities and law enforcement where legally required.
• Vetted service providers (KYC, credit bureaux, cloud infrastructure, professional advisors) bound by written data-processing agreements.
• Funders and credit insurers involved in the specific facility.
• Purchasers or successors in the event of a corporate reorganisation, always subject to equivalent protections.

We never sell your personal data.

5International transfers

Where personal data leaves the Deutschland / European Economic Area, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses, supplemented by technical and organisational measures where required.

6Retention

We retain personal data only as long as necessary: typically for the life of the facility plus a statutory record-keeping period of up to ten years for anti-money-laundering, tax and prudential purposes. Marketing consents are refreshed periodically.

7Your rights

Subject to legal exceptions, you have the right to access, rectify, erase, restrict, port or object to the processing of your personal data, and to lodge a complaint with your local supervisory authority. To exercise any of these rights write to support@arc-arc.it.com.

8Security

ARC GmbH operates under an ISO 27001-certified information security management system. Data in transit is TLS-encrypted; production data at rest is encrypted with rotating keys. Access is role-based and audit-logged. Suspected incidents are triaged within 24 hours.

9Cookies

www.arc-arc.it.com uses strictly-necessary cookies to keep sessions active. Analytics and marketing cookies are only set with explicit consent. See our Cookie Policy for the full inventory.

10Changes to this policy

We may update this policy from time to time. Material changes are notified to registered clients by email at least 30 days before they take effect. The current version and its effective date are always available at www.arc-arc.it.com/privacy-policy.html.

11Contact

ARC GmbH · Am Waldbach 22, 77654 Offenburg, , Deutschland.
Email: support@arc-arc.it.com · Phone: +49 (0) 781 / 93 99 88 0.
Regulated by BaFin (Bundesanstalt für Finanzdienstleistungsaufsicht). Reg. no. BaFin-ID: 50079347  Bak Nr.: 164881  · VAT DE294954365.