Privacy Policy

Last Updated: January 2026

BROS KAFE OG BAR AS ("we," "our," or "us") operates the Arena Hellas platform and related mobile applications through Bros Digital. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile applications, website, and related hospitality and venue management services.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account in our mobile applications
• Use features such as booking, orders, or venue access
• Contact us through our website, email, or within our applications
• Participate in entertainment, games, or community features
• Subscribe to updates or marketing communications

This information may include:

• Name and contact information (email address, phone number)
• Account credentials
• Booking and order preferences
• Payment information (processed by trusted third parties)
• Any other information you choose to provide

1.2 Automatically Collected Information

When you use our mobile applications or website, we may automatically collect certain information, including:

• Device information (device type, operating system, unique device identifiers)
• Usage data (features used, time spent, interactions within the application)
• IP address and general location data (for service optimization)
• Application performance data (for improving user experience)
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our mobile applications and services
• Personalize your experience within our applications
• Process bookings, orders, and venue management requests
• Enable entertainment and community features
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities to improve our services
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who perform services on our behalf (hosting, analytics, payment processing) under strict confidentiality agreements
• Legal Requirements: When required by law, court order, or to protect our rights, safety, or the rights and safety of our users
• With Your Consent: When you have given us explicit permission to share your information
• Anonymized Data: We may share aggregated, anonymized data for analytics or reporting, but this data cannot identify individual users

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Your Rights (GDPR Compliance)

If you are located in the European Economic Area (EEA), you have certain data protection rights:

• Access: You have the right to request copies of your personal data
• Rectification: You have the right to request correction of inaccurate data
• Erasure: You have the right to request deletion of your personal data
• Restriction: You have the right to request restriction of processing
• Data Portability: You have the right to request transfer of your data
• Objection: You have the right to object to processing of your personal data

To exercise these rights, please contact us using the information provided below. You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

6. Children's Privacy

Our mobile applications are intended for users who are 18 years of age or older (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

7. Hospitality and Venue Data

As part of our digital hospitality and venue management services, we may collect data related to bookings, orders, and venue usage. This data is used to improve our services and the guest experience. Where applicable, such data is processed in accordance with this policy and applicable law.

8. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our services, you consent to the transfer of your information to our facilities and those third parties with whom we share it as described in this policy.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us