The GDPR

Information on the processing of personal data by ERBUD S.A.

Welcome to the ERBUD S.A. website. In this chapter, we explain the applicable regulations at ERBUD S.A. rules for processing all information of a personal data nature and cookies that the User may provide to us when using this website. Our goal is to protect your personal data and privacy on the Internet.

In our online offer, the User will find a description of our products and services, read our reports, learn about employment opportunities or receive the latest information and offers, without having to provide any information about yourself.

However, if the User provides us with information regarding his/her personal data, such as residential address, e-mail address, telephone numbers, demographic data and other identifying information, such information will be protected and will not be made available to unauthorized persons. The administrator of personal data provided by the User will be ERBUD S.A., which processes them in accordance with applicable regulations and in a way that ensures appropriate security of personal data. More information about the personal data processing policy of ERBUD S.A. you will find below.

In order to provide our services better, we will send a small file to the User's web browser, which will be stored on his computer and read by our Internet server ("cookie" file). A "cookie" cannot be read by any Internet server except the one has transmitted a "cookie". We use a "cookie" for a number of administrative tasks, for example to store the User's preferences regarding certain types of information. Most "cookies" only exist during the session or visit. None of them will contain information enabling other people to contact the User electronically, by e-mail or by advertising mail. The User can prepare his web browser to inform him when cookies are being sent or to prevent the sending of cookies. More information about the cookie privacy policy can be found You below.


1. Who is the administrator of your personal data?

The administrator of personal data (hereinafter "Data") processed by us in connection with running a business is ERBUD S.A. based in Warsaw at ul. Franciszka Klimczaka 1 (02-797), hereinafter referred to as the Administrator or ERBUD.

ERBUD is a member of the ERBUD Capital Group. The list of all ERBUD Group companies can be found here.

Data is processed in accordance with currently applicable regulations, including the General Data Protection Regulation (GDPR).

Data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, the economic, cultural or social identity of the individual.

2. How do we process Data?

ERBUD takes special care to protect the interests of data subjects, and in particular ensures that the collected Data is:

  • processed lawfully, fairly and in a transparent manner for the data subject;
  • collected for specific, explicit and legitimate purposes and not further processed in a way that is incompatible with those purposes;
  • adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
  • correct and updated as necessary;
  • stored in a form enabling identification of the data subject for no longer than necessary for the purposes for which the Data are processed;
  • processed in a way that ensures adequate security of the Data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, using appropriate technical or organizational measures.


3. When do we process Data?

We process data in many situations. These may be situations in which you provided us with your Data personally through various communication channels (e.g. submitting your application, sending an inquiry/offer by e-mail or telephone) or as part of our cooperation when signing or implementing a contract, but also when we obtained Your Data from other sources (e.g. from the company you cooperate with and which is our contractor/customer).

4. Data Processing in connection with business relations and contact.

a. What Data do we process in connection with business relations and contact?

As the Administrator, we process the Data of our business partners (investors, subcontractors, contractors), their employees/collaborators, Data of other persons provided to us as part of the implementation of contracts, as well as other persons contacting us via telephone or e-mail.

In connection with business relations and contact, we may process the following Data: Identification data, contact details, data regarding the job position and professional qualifications and other Data provided to us in connection with cooperation or contact.

We obtain the above Data directly from the data subjects, as well as from other persons, e.g. from their employers/principals.

b. What is the purpose and basis for Data processing in connection with business relations and contact?

In connection with business relations and contact, we process Data for the following purposes:

  • establishing cooperation;
  • conclusion and performance of the contract;
  • settlement of contracts;
  • responding to any inquiries or requests and conducting further correspondence/contact in this regard;
  • marketing and contacting you regarding other ERBUD information and services;
  • defense against potential claims, as well as for the purpose of pursuing claims.

The basis for Data processing by ERBUD is:

  • necessity to perform the contract or take action before its conclusion at the request of the data subject;
  • implementation of legal obligations imposed on the Administrator;
  • the legitimate interest of the Administrator in the form of marketing products and services of the Administrator or a third party, contact, including correspondence and defense against potential claims.
    Providing Data is voluntary, but may be necessary to conclude or perform a contract or to respond to an inquiry or to conduct correspondence.

c. How long will the Data be processed in connection with business relations and contact?

Data collected for the purposes of concluding and performing the contract will be processed for the duration of the contract and then until the expiry of the limitation period for any claims.

The data of persons who contacted ERBUD will be processed for the period necessary to respond and, if necessary, conduct correspondence, and then until the limitation period for possible claims expires.

d. Who is the recipient of the Data in connection with business relations and contacts?

Data processed by us in connection with business relations and contacts may be transferred to other companies from the ERBUD Group, our business partners (e.g. investors and subcontractors as part of cooperation on a given project / investment) and our other contractors supporting us in the organization of work and IT services and marketing.

5. Data Processing in connection with recruitment.

a. What Data do we process in connection with recruitment?

As the Administrator, we process the Data of job applicants submitted through all available recruitment channels, in particular we process all Data provided to us as part of the application and collected as part of the recruitment process.

In connection with recruitment, we may process the following Data (the processing of some Data may depend on your consent): Identification data, Contact details, Education data, Data regarding skills and previous employment, Data regarding rights and other Data provided to us during the recruitment process .

b. What is the purpose and basis for Data processing in connection with recruitment?

In connection with recruitment, we process Data for the following purposes:

  • considering the candidacy and implementing the recruitment process, and if consent is granted, also for the purposes of future recruitment or recruitment within the ERBUD Group;
  • efense against potential claims, as well as for the purpose of pursuing claims.


The basis for Data processing by the Administrator are the provisions of applicable law, in particular the Labor Code and implementing acts, and to a broader extent than specified in these provisions and in the scope of future recruitment, your consent.

Providing Data is voluntary, but necessary to carry out the recruitment process and establish possible further cooperation.

c. How long will the Data be processed in connection with recruitment?

The data will be processed for the purposes specified above for the duration of the recruitment process or future recruitments, and then until the expiry of the limitation period for any claims.

d. Who is the recipient of the Data in connection with recruitment?

The data processed by us in connection with recruitment may be transferred to other companies from the ERBUD Group and entities supporting us in the recruitment process and providing IT services to us.

6. Does your data go outside the European Economic Area (EEA)?

Your Data does not go outside the European Economic Area, and if in the future there would be a transfer to a place outside the EEA, ERBUD takes appropriate steps to ensure Data protection, in particular by:

  • the use of specific contractual clauses called "standard contractual clauses" that have been approved by the European Commission;
  • or transfer to countries for which the European Commission has issued a decision confirming an adequate level of protection.

In such a case, you have the right to obtain a copy of the appropriate security measures.

7. What rights do you have?

Under the terms set out in applicable regulations, you have the right to:

  • access to the Data, including the right to obtain a copy thereof;
  • request their rectification, deletion or restriction of processing;
    object to processing;
  • transferring them to another administrator (to the extent that the basis for their processing is the necessity to perform the contract or your consent).

If the processing of Data is based on consent, you have the right to withdraw it at any time without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal.

You always have the right to lodge a complaint with the President of the Personal Data Protection Office.

8. Contact:

You can contact the Data Protection Inspector - Mr. Mariusz Moczydłowski at iod@erbud.pl.

Information on the processing of personal data by Erbud S.A.

1. Who is the administrator of your personal data?
The administrator of personal data (hereinafter referred to as the "Data") processed by us in connection with running a business is ERBUD S.A. with its registered office in Warsaw at ul. Franciszka Klimczaka 1 (02-797), hereinafter referred to as the Administrator or ERBUD.

ERBUD is a member of ERBUD Capital Group. A list of all companies from Erbud Group can be found here [link].

The data are processed in accordance with the current regulations, including the General Regulation on the Protection of Personal Data (GDPR).

Any information regarding an identified or identifiable natural person is considered to be data. A person identifiable is a person whose identity can be identified directly or indirectly, in particular on the basis of an identifier such as name, identification number, location data, internet identifier or one or more specific factors determining physical, physiological, genetic, psychological, economic, cultural or social identity of a natural person.

2. How do we process the data?
ERBUD makes special care to protect the interests of people to whom the Data apply, and in particular ensures that the collected Data are:

  • processed in accordance with the law, fairly and transparently for the data subject;
  • collected for specific, explicit and legitimate purposes and not further processed in a manner inconsistent with these purposes;
  • adequate, relevant and limited to what is necessary for the purposes for which they are processed;
  • corrected and updated as necessary;
  • kept in a form that permits the identification of the data subject for no longer than is necessary for the purposes for which the Data are processed;
  • processed in a manner that ensures appropriate data protection, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by appropriate technical or organizational measures.

3. When do we process the Data?
We process the data in many situations. These may involve the situations in which you have provided your Data in person through various communication channels (e.g. submitting your application, sending an inquiry/offer via e-mail or telephone) or as part of our cooperation when signing or executing a contract, but also when we acquired your data from other sources (e.g. from a company with which you cooperate and which is our contractor/customer).

4. Data Processing in terms of business relations and contact.

a. What Data do we process in terms of business relations and contact?
As the Administrator, we process the Data of our business partners (investors, subcontractors, contractors), their employees/co-workers, the Data of other people provided to us as part of contracts, as well as other people who contact us via telephone or email. In connection with business relations and contact, we may process the following Data: Identification data, Contact details, Workplace details and professional rights, and other data provided to us in connection with cooperation or contact.

We collect the above Data directly from the data subjects as well as from other people, e.g. from their employers/customers.

b. What is the purpose and basis of the Data processing in terms of business relations and contact?
In connection with business relations and contact, we process the Data for the following purposes:

  • establishing cooperation;
  • conclusion and performance of a contract;
  • settlement of contracts;
  • answer any questions or requests addressed and to conduct further correspondence/contact in this regard;
  • korespondencji/kontaktu w tym zakresie;
  • marketing and contact regarding other ERBUD information and services;
  • defense against potential claims, as well as for the purpose of claim management.

The basis for the data processing by ERBUD is:

  • indispensability to perform a contract or take action before conclusion a contract at the request of the data subject;
  • implementation of legal obligations imposed on the Administrator;
  • the legitimate interest of the Administrator in the form of marketing of products and services of the Administrator or a third party, contact, including correspondence and defense against potential claims.

Providing the Data is voluntary, but it may be necessary to conclude or perform a contract or to respond to a directed inquiry or to conduct correspondence.

c. How long will the Data be processed in terms of business relations and contact?
The Data collected for the purposes of the conclusion and performance of a contract will be processed for the duration of a contract, and then until the expiration of the possible claims.

The Data of people who have contacted ERBUD will be processed for the period necessary to answer and possibly conduct correspondence, and then until the expiry of the period of limitation of possible claims.

d. Who is the recipient of the Data in terms of business relations and contact?
The Data processed by us in connection with business relations and contact may be transferred to other companies from Erbud Group, to our business partners (e.g. investors and subcontractors as part of cooperation in a given project/investment) and other our partners supporting us in the organization of work, IT services and marketing.

5. Data Processing in connection with recruitment.

a. What Data do we process in connection with recruitment?
As the Administrator, we process the Data of people applying for employment provided by any available recruitment channels, in particular we process all Data provided to us as part of the application and collected as part of the recruitment process.

In connection with recruitment, we may process the following Data (processing of some Data may depend on your consent): Identification data, Contact details, Education data, Data on skills and previous employment, Data on entitlements and other data provided to us during the recruitment process.

b. What is the purpose and basis of the Data processing in connection with recruitment?
In connection with recruitment, we process the Data for the following purposes:

  • consideration of the candidacy and implementation of the recruitment process, and in the case of consent, also for the purposes of future recruitment or recruitment within Erbud Group;
  • defense against potential claims, as well as for the purpose of claim management.

The basis for the processing of the Data by the Administrator are the provisions of the applicable law, in particular the Labour Code and executive acts, and your consent in the range further than specified in these regulations and in the scope of future recruitment.

Providing the Data is voluntary, but necessary to carry out the recruitment process and to establish possible further cooperation.

c. How long will the Data be processed in connection with recruitment?
The Data will be processed for the purposes set out above for the duration of the recruitment process or future recruitment, and then until the expiration of the possible claims.

d. Who is the recipient of the Data in connection with recruitment?
The Data processed by us in connection with recruitment may be transferred to other companies from Erbud Group as well as to entities supporting us in the recruitment process and providing IT services to us.

6. Are your Data transferred beyond the European Economic Area (EEA)?
Your Data are not transferred beyond the European Economic Area, and if a transfer to a place outside the EEA takes place in the future, ERBUD will take appropriate measures to ensure the Data protection, in particular by:

  • the use of specific contractual clauses called "standard contractual clauses" that have been approved by the European Commission; or
  • transfer to countries for which the European Commission has issued a decision stating the appropriate level of protection.

In this case, you have the right to obtain a copy of the appropriate protections.

7. What rights do you have?
Under the terms of the applicable regulations, you have the right to:

  • access to the Data, including the right to obtain a copy;
  • demand rectification, deletion or limitation of the Data processing;
  • object to the Data processing;
  • transfer the Data to another administrator (to the extent that the basis for their processing involves indispensability to perform a contract or your consent).

If the Data are processed on the basis of a consent, you will have the right to revoke it at any time without affecting the legality of the processing which was made on the basis of consent before its withdrawal.

You are also always entitled to file a complaint to the President of the Office for the Protection of Personal Data.

8. Contact:
You can contact ERBUD S.A. at the e-mail address: iod@erbud.pl.

Download information in PDF format