Privacy policy

Welcome to the ERBUD S.A. Internet service.

In this chapter we explain the rules applicable at ERBUD S.A. for the processing of all information of the nature of personal data and cookies that the user can provide us when using this website.

Our goal is to protect the personal data and privacy of the user on the Internet.

On our website the user will find the description of our products and services, can read our reports, find out about job opportunities or receive current information and offers without the need to provide any personal information.

However, if the User provides us with the information regarding his/her personal data, such as residential address, email address, telephone numbers, demographic data and other identifying information, such information will be protected and will not be disclosed to unauthorized persons.

The administrator of the personal data provided by the User is ERBUD S.A., which processes them in accordance with the applicable regulations and in a manner that ensures adequate security of the personal data. This Privacy Policy governs the collection, processing and storage of personal data necessary for the provision of electronic services through the website in the domain www.erbud.pl (hereinafter: the ‘Service’).

More information about ERBUD S.A.'s personal data processing policy can be found below.

To better provide our services, we transfer a small file to the user's web browser that is stored on their computer and read by our Internet server ("cookie" file).
A "cookie" cannot be read by any Internet server other than the one that sent the "cookie".

We use a "cookie" for a number of administrative tasks, such as storing the user's preferences regarding certain types of information.
Most "cookies" last only for the duration of a session or visit. None of them contain information that allows others to contact the user electronically, by email or by commercial mail.

The user can configure his web browser to inform him when cookies are being sent or to prevent cookies from being sent.

For more information about the cookie privacy policy, please see the Cookie Policy below.

1. Who is the administrator of your personal data?

The administrator of personal data processed by us in connection with conducting business activities (hereinafter "Data") is ERBUD S.A. with its registered office in Warsaw, ul. Franciszka Klimczaka 1 (02-797), hereinafter referred to as the Administrator or ERBUD.

ERBUD is a member of the ERBUD capital group.

A list of all ERBUD Group companies can be found here.

Data processing is carried out in accordance with the currently applicable regulations, including the General Data Protection Regulation (GDPR).

Data is all information relating to an identified or identifiable natural person.

An identifiable natural person is a natural person who can be identified, directly or indirectly, in particular on the basis of an identifier such as a name, an identification number, location data, an internet identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of a natural person.

2. How do we process data?

ERBUD pays particular attention to protecting the interests of the persons to whom the data refer and, in particular, ensures that the data collected:

• are processed lawfully, reliably and transparently for the person to whom the data refer;
• are collected for specific, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes;
• are adequate, relevant and limited to what is necessary for the purposes for which they are processed;
• are accurate and updated when necessary;
• are stored in a form that allows identification of the person to whom the data refer, for no longer than is necessary for the purposes for which the data are processed;
• are processed in a manner that ensures appropriate data security, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage, using appropriate technical or organisational measures.

3. When do we process data?

We process data in many situations.

These may be situations where you have provided us with your data personally through various communication channels (e.g. submitting your application, sending an inquiry/offer by email or telephone) or as part of our cooperation when signing or executing a contract, but also when we have received your data from other sources (e.g. from the company you work with and which is our contractor/customer).

4. Processing of Data in connection with the use of the Service.

As the Administrator, we process the Data necessary for the provision and development of the services offered available through the Service and its various functionalities. The Data will be processed for the following purposes:

1. for the purpose of providing services electronically, by providing Users with access to the content on the Website (Article 6(1)(b) of the RODO);
2. for analytical and statistical purposes on the basis of the Administrator's legitimate interest consisting in conducting a verification of the Users' activities and preferences for the purpose of optimising the services and products as well as the Services‘ functionalities used (Article 6(1)(f) RODO);
3. the possible establishment, assertion or defence of claims on the basis of the Administrator's legitimate interest in protecting its rights (Article 6(1)(f) RODO).

The Data will be stored for the period during which the person remains an active User of the Service, after which time it may be stored for the period necessary to comply with the law, to assert or defend against possible claims.

The provision of Data is voluntary, but may be necessary for the use of the Service.

Data processed by us in connection with the use of the Service may be transferred to other companies of the ERBUD Group, our contractors supporting us in the organisation of work, IT services and marketing.

5. Data processing in connection with business relationships and contact.

1. What data do we process in connection with business relationships and contact?
   As an administrator, we process the data of our business partners (investors, subcontractors, contractors), their employees/collaborators, data of other persons that are sent to us as part of the contract execution, as well as other persons who contact us by phone or e-mail.
   In connection with the business relationship and contact, we can process the following data: identification data, contact details, data on professional position and professional qualifications, as well as other data that is made available to us in connection with the cooperation or contact.
   We receive the above data directly from persons to whom the data refers, but also from other persons, e.g. from their employers/clients.
2. What is the purpose and basis of data processing in connection with business relationships and contact?
   In connection with business relationships and contact, we process data for the following purposes:

• Establishing cooperation;
• Concluding and fulfilling contracts;
• Settling contracts,
• Accounting or fulfilling tax obligations;
• To answer any submitted inquiries or applications and to conduct further correspondence or contacts in this regard;
• Marketing and contact with other ERBUD information and services;
• Defending against potential claims, as well as for the purpose of possibly asserting claims.

The basis for data processing by ERBUD is:

• the need to perform the contract or take steps prior to its conclusion at the request of the person to whom the data refers;
• implementation of legal obligations imposed on the Administrator;
• the legally legitimate interest of the Administrator in the form of marketing of the products and services of the Administrator or a third party, contact, including conducting correspondence and defence against potential claims.

The provision of data is voluntary, but may be necessary to conclude or perform a contract or to fulfill a legal obligation or to respond to a directed request or to conduct correspondence.

c. How long will the data be stored in connection with business relations and contacts?

The data collected for the purpose of concluding and fulfilling the contract will be stored for the duration of the contract and subsequently until the expiry of the limitation period for any claims and, in the event of initiation of proceedings, until its legally binding conclusion.

In case of data processing to fulfil legal obligations – for the period specified in the relevant legal regulations (e.g. tax regulations).

The data of persons who have contacted ERBUD will be processed for the period necessary to answer and possibly conduct correspondence, and subsequently until the expiry of the limitation period for possible claims (or until the legally binding termination of the proceedings, if they are initiated).

d. Who is the recipient of the data related to business relations and contacts?

The data we process in connection with business relations and contacts may be transferred to other companies of the ERBUD Group, our business partners (e.g. investors and subcontractors within the framework of cooperation on a specific project/investment) and our other contractors who assist us in organizing work, IT services and marketing.

6. Data processing in connection with recruitment.

a. What data do we process in connection with recruitment?
As an administrator, we process data of applicants submitted through all available recruitment channels, in particular we process all data provided to us as part of the application and collected as part of the recruitment process.
In connection with recruitment, we may process the following data (the processing of some data may depend on your consent):
Identification data, contact data, education data, data on skills and previous employment, data on qualifications and other data provided to us during the recruitment process.

b. What is the purpose and basis of data processing in connection with recruitment?
In connection with recruitment, we process data for the following purposes:

• to consider the candidacy and carry out the recruitment process, and in case of consent also for the purposes of future recruitment or recruitment within the ERBUD Group;
• to defend against potential claims, as well as for the purpose of asserting claims.

In case of planned employment on the basis of an employment contract, the basis for data processing by the Administrator are the provisions of applicable law, in particular the Labor Code and implementing acts, and to a wider extent than specified in these provisions, your consent.

In case of planned employment under another type of contract - the basis for data processing is the need to take action at the request of the person to whom the data relates before concluding the contract.

The basis for data processing in the field of future recruitment is your consent.

The basis for data processing is also the implementation of the legally legitimate interests of the Administrator, such as:

• enabling the identification of the candidate in the recruitment system or defense against potential claims or possible assertion of claims.
• providing the data is voluntary, but necessary for conducting the recruitment process and starting possible further cooperation
• providing the data referred to in Article 221 of the Labor Code is required by law,
• providing an e-mail address is necessary for identification in the system, providing other data such as a photo or interests in the resume [CV] is voluntary.

c. How long will the data be stored in connection with recruitment?
The data will be processed for the purposes stated above for the duration of the recruitment process or future recruitment processes and thereafter until the expiry of the limitation period for any claims (or until the final conclusion of the dispute/proceedings).

d. Who is the recipient of the data related to recruitment?
The data we process in connection with recruitment may be transferred to other companies in the ERBUD Group and to companies that support us in the recruitment process and provide IT services to us.

7. Data processing related to maintaining profiles on social media.

1. What data do we process in connection with profile maintenance?
   As part of conducting information activities related to the activity carried out, the Administrator has created profiles of his organization on social media, in which he can process data related to the exercise of an interaction by a person visiting a particular profile - e.g. in a situation of liking a profile, adding a comment or reacting to a post.
   This data includes in particular the username of the social network and his photo/avatar.
   
   
2. What is the purpose and basis of data processing in connection with profile maintenance?
   The data is processed for the purpose of carrying out activities to promote the activity of the Administrator and to carry out information activities. The basis for processing this data is the implementation of the legally justified interests of the Administrator.
   
   
3. How long are the data stored in connection with profile maintenance?
   The data processed for this purpose are processed for the duration of the maintenance of a specific profile, unless the portal user deletes his profile or his reaction (e.g. deletes a reaction, comment on a post).
   
   
4. Who is the recipient of the data as part of data processing in the context of profile maintenance?
   The recipient of the data can be anyone who visits a specific profile and learns about a specific reaction from a portal user (e.g. reads a comment posted by him).
   Data recipients are also data providers of social networks - detailed rules for the processing of personal data by providers of social network services are contained in the privacy policies of the individual services.

8. Does your data go outside the European Economic Area (EEA)?

Your data will not be stored outside the European Economic Area and if it is transferred to a location outside the EEA in the future, ERBUD will take appropriate measures to ensure data protection, in particular by:

• the use of specific contractual clauses, so-called “standard contractual clauses” approved by the European Commission; or
• transfer to countries for which the European Commission has issued a decision confirming the adequate level of protection.

In such a case, you have the right to receive a copy of the relevant security measures.

9. What rights do you have?

In accordance with the rules established by the applicable regulations, you have the right to:

• Access to the data, including the right to receive a copy of it;
• Request its rectification, erasure or restriction of processing;
• Initiate an objection to the processing;
• Transfer them to another administrator (if the basis for their processing is the need to perform a contract or your consent).

If the data processing is carried out on the basis of consent, you have the right to withdraw it at any time, without affecting the compliance with the law of processing carried out on the basis of consent before its withdrawal.

You have the right to lodge a complaint with the President of the Office for Personal Data Protection at any time.

10. Do we profile data?

The data is not subject to automated decision-making, including profiling (according to Article 22 of the GDPR).

11. Contact regarding data processing:

You can contact the Data Protection Inspector – Mr. Mariusz Moczydłowski – at iod@erbud.pl.

12. Final provisions

The Administrator reserves the right to introduce changes to the present Privacy Policy and at the same time ensures that the Users' rights under this document shall not be restricted. Any changes to the Privacy Policy shall be notified to the User by means of a notice available in the Service.

COOKIES

1. Cookie files (so-called “cookies”) are a piece of computer data, most often text files, which are kept on the Service User’s device and are intended for communication with the Service’s websites. Cookies usually contain the website’s address, their expiration date and a unique number.
2. The subject responsible for sending cookie files to the Service User’s device and gaining access to them is the Service’s operator: Erbud S.A., ul. Franciszka Klimczaka 1, 02-797 Warszawa.
3. Cookie files are used in order to:
   1. customise content of the Service’s websites and optimise their use according to the User’s preferences; in particular, these files help recognise the Service User’s device and display a website in a way best suited to the User’s individual needs;
   2. create statistics that help understand how the Service Users use websites, which allows to improve their structure and content;
   3. maintain the Service User’s session (after logging in) so that the User does not have to enter login and password again on the Service’s sub-sites;
4. The two major types of cookie files are used as part of the Service: “session” (session cookies) and “permanent” (persistent cookies). Session cookies are temporary files kept on the User’s device until logging out, leaving a website or turning off the software (web browser). Persistent cookies are kept on the User’s device until their expiry date (a time specified in cookie files parameters) or until the User deletes them.
5. The following types of cookie files are used as part of the Service:
   1. “essential” cookie files, which enable to use services available within the Service, for example authentication cookie files utilised by services that require authentication within the Service;
   2. cookie files used to ensure safety, for example, ones that detect abuses in terms of authentication within the Service;
   3. “efficiency” cookie files enabling the collection of information concerning the manner of using the Service’s websites;
   4. “functional” cookie files, which enable to “remember” the settings chosen by the User and to personalise the User’s interface, for example the chosen language or the region that the User comes from, font size, appearance of a website etc.;
6. In many cases, the software used for browsing websites (web browser) allows to store cookie files on the User’s device by default. The Service Users can change cookie files settings at any time. These settings can be changed in web browser settings by blocking automatic handling of cookie files or by informing the Service User about every cookie file. Detailed information on the possibility and ways of operating cookie files is available in software (web browser)
7. The Service operator wishes to inform that restricted use of cookie files can affect some functionalities available on the Service’s websites.
8. Cookie files stored on the Service User’s device can also be used by the operator’s co partners.
9. More information about cookie files is available in the “Help” section of the browser’s menu.