We respect and protect privacy

In accordance with the requirements of the General Data Protection Regulation of 27 April 2016. (GDPR), we inform you that:

1. The administrator of your personal data is Budimex S.A., ul. Siedmiogrodzka 9, 01-204 Warsaw (hereinafter referred to as “Budimex”).

2. Purpose and legal basis for the processing of personal data:

A. if you are a party to the agreement concluded with Budimex , the purpose of data processing is:

• conclusion and performance of the contract (legal basis: Article 6(1)(B) of the GDPR),
• fulfilment of legal obligations incumbent on Budimex arising m.in. tax regulations (legal basis: Article 6(1)(C) of the GDPR),
• pursuing or defending against claims, which is a legitimate interest of Budimex (legal basis: Article 6(1)(f) of the GDPR).

Providing data is a requirement to conclude and perform the contract.

B. if you are an employee of a company that is a party to the contract concluded with Budimex and you have been indicated in the contract as a person representing the contractor, contact person or responsible for the performance of individual tasks under the contract, the purpose of data processing is to conclude and perform the contract as well as to pursue and defend against claims, which is a legitimate interest of Budimex (legal basis: Article 6(1)(f) of the GDPR).

3. The categories of your personal data processed are: name and surname, function, e-mail address, telephone number, information contained in the comparison of the contract, extract from the National Court Register or CEIDG or power of attorney to conclude the contract.
The personal data was obtained from your employer.

4. Budimex has appointed a Data Protection Officer, who can be contacted in matters related to the protection of personal data by writing to the following e-mail address: dane.osobowe@budimex.pl

5. The recipients of personal data may be: the Investor commissioned by whom the investment is carried out or construction works are carried out, IT solution providers, entities from the Budimex/Ferrovial group, Budimex contractors and other entities, if their participation is necessary to achieve the above purposes.

6. Personal data may be transferred to entities through which Budimex pursues the indicated purposes, including entities maintaining IT infrastructure. In justified cases, personal data may be processed remotely outside the European Economic Area (EEA). If such a transfer were to take place – which can happen m.in. in connection with the possible use by Budimex of IT solutions based on cloud solutions or serviced by a service centre located outside the EEA – Budimex will provide a mechanism which, in accordance with the European Union law, legalises the transfer and provides appropriate guarantees for the protection of personal data. You can obtain a copy of the description of the technical protections transferred outside the EEA by sending a request to: dane.osobowe@budimex.pl

7. Personal data will be stored for the time necessary to achieve the above-mentioned purposes, i.e. until the contract is completed, the guarantee or warranty period expires, for the time required by law in the case of financial data, the statute of limitations for claims expires or until an effective objection is filed to the extent that the basis for the processing is the legitimate interest of Budimex.

8. You have the right to request Budimex to access your personal data, rectify it, delete it or limit its processing, and the right to transfer data.

9. You have the right to object to the processing.

10. You have the right to lodge a complaint with the supervisory authority, in Poland there is the Office for Personal Data Protection.

11. Your personal data will not be subject to automated decision-making or profiling.