Privacy

This website is administered by Budimex S.A. with its registered office in Warsaw (01-204) at ul. Siedmiogrodzka 9 (hereinafter “Controller” or “we”), which is the Controller of your personal data.

The Administrator attaches importance to the protection of privacy and protection of personal data. The Privacy Policy sets out how we take care of your personal data and your rights related to their processing. However, in the online environment, we use cookies that may collect certain information about you. The exact way of using cookies is described below.

The Administrator has appointed a data protection officer who can be contacted via e-mail dane.osobowe@budimex.pl in any matter related to the processing of personal data.

The purposes, legal bases and period of personal data processing are indicated separately for each purpose of data processing, in which we explain how we use the personal data that we collect through the website.

USE OF THE WEBSITE

We process personal data of all persons using this website, including IP address, time spent on the website or other identifiers and information collected through cookies. They can be recorded in system logs. It is a special computer program that is used to store a chronological record containing information about events and activities that relate to the IT system used to provide our services. The information collected in the logs is processed primarily for purposes related to the provision of services available on our website. We also process it for technical and administrative purposes, for the purpose of ensuring the security of the IT system and managing this system, as well as for analytical and statistical purposes.

Personal data is processed for the purpose of:

• provision of services by electronic means in the scope of sharing the content collected on the website, inter alia, in the case of personal data processed in cookies, used for the purposes of technical configuration – the legal basis for the processing is the necessity of processing for the performance of the contract (Art. 6 sec. 1(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”).
• conducting analytical and statistical research – then the legal basis for the processing is our legitimate interest (Article 6(1)(f) of the GDPR), consisting in conducting analyses of your activity and preferences, in order to improve the functionalities used and the services provided;
• technical, administrative, related to the security of the IT system and the management of this system and the provision of services – the legal basis for the processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), consisting in conducting IT and administrative works aimed at maintaining the security and proper functioning of the website;
• possible determination and pursuit of claims or defence against claims – the legal basis for the processing is our legitimate interest (Article 6(1)(f) of the GDPR), consisting in the protection of our rights.

Your personal data will be stored for the period of:

• in the field of providing services by electronic means – for the time you use the website or for the time of the stored cookie. Information about the storage time of individual cookies is available on the cookie board.
• where the basis for the processing is our legitimate interest, also until you effectively object to the processing of data.

CONTACT FORMS

We provide the possibility of contacting us using the electronic contact form. Your personal data will be processed by the Administrator for the purpose of correspondence in connection with the questions sent. The use of the form requires providing personal data necessary to make contact and respond to your inquiry. You may also provide additional data to facilitate our contact or to handle your query. Providing the data listed in the form as mandatory is required in order to accept and handle the inquiry, and failure to provide them results in the inability to process it. Providing other data is voluntary.

Personal data is processed for the purpose of:

• handling your inquiry sent via the form and pursuing or defending against claims – the legal basis for the processing is our legitimate interest (Article 6(1)(f) of the GDPR).

Your data will be processed for the following periods:

• handling your inquiry and for the duration of the limitation period for claims, i.e. a period of six years or until you effectively object to the processing of your data.

NEWSLETTER

If you agree, we will provide you with the service of sending a newsletter consisting in sending you marketing messages and offers to the e-mail address provided by you. Providing data is voluntary, and failure to provide them results in the inability to send it.

Personal data is processed for the purpose of:

• send you promotional and informational materials, including commercial information. The legal basis for such processing will be Art. 6 sec. 1 lit. b GDPR.
• if you choose the Investor Relations newsletter – in order to send you information materials for investors, including information about reports and financial indicators. The legal basis for such processing will be Art. 6 sec. 1 lit. b GDPR.

Your data will be processed until:

• the functioning of the newsletter or to unsubscribe from the newsletter.

Cookies are small text files installed on the User’s device. Cookies collect information that facilitates the use of the website – e.g. by remembering information about the User, e.g. regarding logging in or language preferences. On the Website, the Administrator uses its own files, which are installed directly by the Website. Third-party cookies are also used – which are cookies from a domain other than the domain of the visited website – primarily for analytical and advertising activities of the Administrator.

The Website uses cookies primarily to:

• ensure the proper functioning of the website, remember the User’s choices on the website – and if the User gives the appropriate consent – also to analyse and track traffic on the Website. Cookies are also installed on the Website, based on the consent obtained.

FIRST-PARTY COOKIES (NECESSARY)

The Administrator’s use of necessary cookies is necessary for the proper functioning of the website. These cookies are installed in particular for the purpose of remembering login sessions or filling in forms, as well as for the purposes of setting privacy options.

• The legal basis for the processing of data in connection with the use of necessary cookies is the necessity of processing for the performance of the contract (Article 6(1)(b) of the GDPR).

FUNCTIONAL AND ANALYTICAL COOKIES

Functional cookies are used to remember and adapt the Website to the User’s m.in choices. language preferences. Functional cookies may be installed by the Administrator and its partners via the Website. Analytical cookies enable obtaining information such as the number of visits and traffic sources on the Website. They are used to determine which pages are more and which are less popular and to understand how Users move around the website by keeping statistics on Website traffic. The data processing is carried out in order to improve the performance of the Website. The information these cookies collect is aggregated and is not intended to identify you personally. Functional cookies may be installed by the Administrator and its partners via the Website.

• The legal basis for the processing of Personal Data in connection with the use of functional and analytical cookies by the Administrator is its legitimate interest (Article 6(1)(f) of the GDPR), consisting in ensuring the highest quality of services provided on the Website, in connection with the User’s consent to their storage (separate for analytical files, separate for functional files).

Consent to cookies

The processing of Personal Data in connection with the use of functional and analytical cookies is subject to obtaining the User’s consent to the use of functional and analytical cookies through the cookie consent management platform. This consent may be withdrawn at any time.

When you visit our website for the first time, you will be informed about our use of cookies. As part of a dedicated tool that is displayed during your first visit to the website, you have the option of managing cookies from the website. In addition, you can always change your cookie settings from the website by clicking on “Cookie settings”. In addition, you can also delete cookies from your browser level. Browsers manage cookie settings in different ways. In the secondary menu of your web browser you will find explanations on how to change your cookie settings.

THIRD-PARTY COOKIES

Our website uses features provided by third parties, which involves the use of cookies from third parties. The use of these cookies is described below.

Piwik PRO Analytics Suite

We use Piwik PRO to collect information about your visit to our website, such as the pages you have viewed, the time you have spent on the website or the transitions between individual pages. This will help us better understand how it is used – what works well, what is broken and what we should improve. For this purpose, we use cookies from the Piwik PRO Group for the Analytics Suite service. As part of the service, we collect demographic and interest data. As part of the cookie settings, you can decide whether you agree to the collection of such data about you or not. More information about this tool can be found at the link: https://piwik.pro/privacy-security/

Google Tools

Google reCAPTCHA

This function is responsible for verifying whether the data in the contact form has been entered by a human or by an automaton. For this purpose, the user’s behavior on the website is analyzed. This analysis starts automatically when you enter the website. As part of the analysis, which takes place in the background, Google reCAPTCHA analyzes information about mi.ni. IP address, time spent on the site. The data collected as part of the analysis is transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Detailed information on the use of this tool can be found at the link: https://policies.google.com/privacy

Google Maps

We use Google Maps to display our locations interactively so that you can conveniently use the map function. To use the functions of Google Maps, it is necessary to store your IP address. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you are logged in to your Google account, the information you have visited our website will be assigned to your Google profile. Detailed information on the use of this tool can be found at the link: https://policies.google.com/privacy

Social media cookies

Budimex and our partners, i.e.: social networks such as Facebook, LinkedIn, Twitter, Google, YouTube, TikTok use various solutions and tools used for analytical and marketing purposes.

Our website uses plug-ins from social networks (Facebook, Google+, Twitter, YouTube, Linkedin, TikTok). Plugins allow the User to share content published on a selected social networking site. The use of plug-ins on the website means that the respective social network receives information about your use of our website and can assign it to the user profile created on the respective social network. Budimex has no knowledge of the purpose and scope of data collection by social networking sites. Detailed information on this can be found at the following links:

Facebook: https://www.facebook.com/policy.php

Google: https://privacy.google.com/take-control.html?categories_activeEl=sign-in

Twitter: https://twitter.com/en/privacy

YouTube: https://policies.google.com/privacy?hl=pl

LinkedIn: https://www.linkedin.com/legal/privacy-policy

TikTok: https://www.tiktok.com/safety/pl-pl/privacy-and-security-on-tiktok/

You have the right to access the content of your data and request their rectification, deletion, restriction of processing, the right to transfer data, as well as the right to lodge a complaint with the supervisory authority, in Poland it is the Office for Personal Data Protection.

If we process your data on the basis of our legitimate interest, you have the right to object to the processing of your data. You can do this by contacting us via the following email address: gdpr@budimex.pl

To the extent that your data is processed on the basis of consent, you can withdraw this consent at any time by contacting us at the following e-mail address: gdpr@budimex.pl. The withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal.

We conduct ongoing risk analysis to ensure that personal data is processed securely, i.e. that only authorised persons have access to the data and only to the extent that it is necessary due to the tasks they perform. We make sure that all operations on personal data are registered and performed only by authorized employees and associates.

The Administrator takes all necessary actions to ensure that its subcontractors and other cooperating entities also guarantee the use of appropriate security measures in each case when they process personal data on our behalf.

Using the website involves sending queries to the server on which the website is stored. Each query directed to the server is saved in the server logs. Logs include your IP address, server date and time, information about your web browser and the operating system you are using. Logs are saved and stored on the server.

The data stored in the server logs are not linked to specific persons using the website and are not used by the Administrator to identify visitors to the website.

Server logs are only auxiliary material used to administer the website, and their content is disclosed only to persons authorized to administer the server.

Personal data will be disclosed to external entities providing services to the Administrator (e.g. IT service providers, providers of analytical and marketing tools, analytical and marketing agencies).

The Administrator reserves the right to disclose selected information concerning the User to competent authorities or third parties who submit a request for such information, based on an appropriate legal basis and in accordance with the provisions of applicable law.

The policy is reviewed on an ongoing basis and updated if necessary.
The current version of the document is effective from 01 June 2024.