Privacy policy

General information

This website is administered by BXF Energia Ltd. with its registered office at Siedmiogrodzka 9, 01-204 Warsaw (hereinafter “Administrator” or “we”), which is the controller of your personal data.

Administrator attaches importance to the protection of privacy and personal data. The Privacy Policy defines the way in which we take care of your personal data and your rights related to its processing. In the online environment, we use cookies that may collect certain information about you. The exact use of cookies is described below.

In all matters related to the protection of your personal data, you can contact us via the following e-mail address: gdpr@budimex.pl.

The purposes, legal bases and period of personal data processing are indicated separately for each purpose of data processing together with the explanation how we use personal data that we collect through the website.

 

Purposes and legal bases for data processing related to the use of the website.

1.  Use of the website.

We process personal data of all persons using this website, including IP address, time spent on the website or other identifiers and information collected through cookies. It may be recorded in system logs. It is a special software that is used to store a chronological record containing information about events and activities that relate to the IT system used to provide our services. The information collected in the logs is processed primarily for purposes related to the provision of services available on our website. We also process it for technical and administrative purposes, to ensure the security of the IT system and to manage this system, as well as for analytical and statistical purposes.

Personal data is processed to:

  • provide services electronically in terms of providing access to content collected on the website, among others, in the case of personal data processed in cookies used for technical configuration purposes – the legal basis for processing is necessary for the performance of the contract – Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter “GDPR”).
  • perform analytical and statistical research – then the legal basis for processing is our legitimate interest – Article 6(1)(f) of the GDPR, consisting in conducting analyses of your activity, as well as preferences, to improve the functionalities used and services provided.
  • definition and pursuit of claims or defense against them – the legal basis for processing is our legitimate interest – Article 6 (1) (f) of the GDPR, consisting in the protection of our rights.

Your personal data retention period:

  • in the scope of providing services by electronic means – for the duration of use of the website or for the duration of the cookie saved. Information on the duration of storage of individual cookies is available on the cookie board.
  • where the basis for processing is our legitimate interest – also until submission an effective objection to the processing of data.

2. Contact forms.

We provide the opportunity to contact us using the electronic contact form. Your personal data will be processed by Administrator for the purpose of correspondence in connection with questions concerning, among others: (a) invoices and payments, (b) information for the media, (c) corporate responsibility (CSR), (d) offers, (e) work, (f) advertising and promotion, (g) investor relations, (h) internships, (i) other scope specified in the content of your inquiry.

Using the form requires providing personal data necessary to contact and respond to your inquiry. You can also provide additional data to facilitate contact with us or to manage your inquiry.
Providing the data listed in the form as mandatory is required to accept and manage the inquiry, and failure to provide it results in the inability to address it. Providing other data is voluntary.

Personal data is processed for the purpose of:

  • managing your inquiry sent via contact form, and for the purpose of making claims and protection against them: the legal basis for processing is our legitimate interest – Article 6 (1) (f) GDPR.

Your data will be processed for the duration of managing your inquiry and for the period of limitation of claims, i.e., six years or until you raise an effective objection to the processing of your data.

3. Social media.

We process personal data of visitors to our social media profiles (Facebook, YouTube, Instagram, Twitter, LinkedIn). This data is processed only in connection with running a profile, including to inform about our activities and promote diverse types of events and services offered by Administrator.

Personal data is processed for the purpose of:

  • maintaining our profile in social networks and promote our own brand, which is our legitimate interest – Article 6 (1) (f) of the GDPR.

Your personal data will be processed for the period of our maintaining active profiles on social networks or until you raise an effective objection.

4. Application for a particular job offer in the recruitment form.

If you are interested in our job offers, you have the option of applying for a given position on our website via the recruitment form.

Personal data is processed for the following purposes:

  • conduct the recruitment process, and if you grant consent, also in order to carry out future recruitment processes – the legal basis of Article 6 (1) (c) of the GDPR, in the scope of data required by the Polish Labour Code and Article 6 (1) (a) of the GDPR in the scope of additional information contained in the application and in the case of consent to participate in subsequent recruitments,
  • conduct recruitment marketing activities, if you grant consent – the legal basis of Article (6) (1) (a) of the GDPR,
  • use complex application documents for the purpose of conducting research in terms of satisfaction of the recruitment process or employment – legal basis of Article 6 (1) (f) of the GDPR – legitimate interest, i.e. testing satisfaction with the recruitment process by conducting research over employment,
  • draw up an employment contract or a civil law contract, in the event of a positive recruitment result – legal basis of Article 6 (1) (b) of the GDPR.

Your personal data retention period:

  • in the case of consent to the processing of personal data in future recruitment processes – until the withdrawal of this consent or for a period of five years from the date of consent,
  • in the case of consent to the processing of data for the purposes of recruitment marketing – until the withdrawal of this consent or the decision to cease conducting recruitment marketing activities,
  • in order to use the submitted application documents for the purposes of the survey in terms of satisfaction with the recruitment process or employment, personal data are stored for a period of one year from applying for a given job offer, or until you submit an effective objection to the processing of personal data;
  • in the case of conducting the recruitment process and in the case of drawing up an employment contract or a civil law contract, for the time that the applicable law requires the storage of data.

Cookies and similar technologies

1. Cookie consent.

When you first visit our website, information about our use of cookies is displayed. As part of a dedicated tool that is displayed during your first visit to the website, you have the option of managing cookies. In addition, you can always change your cookie settings from the website by clicking on the lower corner of the circular box “Cookie settings”. In addition, you can also delete cookies from your browser. Browsers manage cookie settings in different ways. In the auxiliary menu of your web browser, you will find explanations regarding the change of cookie settings.

2. Necessary cookies.

We use necessary cookies to ensure proper functioning of the website and proper use of its functionalities.

3. Third party cookies.

Our website uses functions provided by third parties, which involves the use of cookies from third parties. The use of these cookies is described below.

Social media tools.

Budimex and our partners, i.e. social networks, such as: Facebook, LinkedIn, Twitter, Google, YouTube use various solutions and tools used for analytical and marketing purposes. Below you will find basic information about these tools. Detailed information in this respect can be found in the privacy policy of the respective partner.

  • Google Analytics

Google Analytics cookies are files applied to analyze the user’s use of the website, to create statistics and reports on its functioning. Google does not use the collected data to identify the user of the website nor combines this information to enable identification. Detailed information about the scope and principles of data collection in connection with this service can be found at the link: https://www.google.com/intl/pl/policies/privacy/partners

  • Social media plug-ins

Our website uses social media plug-ins (Facebook, Google+, Twitter, YouTube). Plugins allow the user to share the content published on the selected social network. The use of plug-ins on the website means that the given social network receives information about your use of our website and can assign it to the user profile created on the respective social network. Budimex has no knowledge of the purpose and scope of data collection by social networks. Detailed information on this subject can be found at the following links:

  • Facebook: https://www.facebook.com/policy.php
  • Google: https://privacy.google.com/take-control.html?categories_activeEl=sign-in
  • Twitter: https://twitter.com/en/privacy
  • YouTube: https://policies.google.com/privacy?hl=pl
  • LinkedIn: https://pl.linkedin.com/legal/privacy-policy
  • Google tools:
    • Google reCAPTCHA
      This function is responsible for verifying whether the data in the contact form has been entered by a human or by an automaton. For this purpose, the user’s behaviour on the page is analysed. This analysis starts automatically as soon as the page is accessed. As part of the analysis, which takes place in the background, Google reCAPTCHA analyses information such as the IP address and the time spent on the website. The data collected as part of the analysis is sent to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Detailed information on the use of this tool can be found at: https://policies.google.com/privacy
    • Google Maps
      We use the Google Maps service for an interactive presentation of our locations to enable you to use the map function conveniently. In order to use the Google Maps functions, it is necessary to store your IP address. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you use our website while logged into your own Google account, information about your visit to our website will be assigned to your Google profile. Detailed information on the use of this tool can be found at the following link: https://policies.google.com/privacy

Your rights concerning the processing of your personal data

You have the right of access to the data and request their rectification, erasure (right to be forgotten), restriction of processing, the right to data portability, as well as the right to file a complaint to the supervisory body, in Poland it is the Office for Personal Data Protection.

In case we process your data based on our legitimate interest you have the right to object to the processing. You can do this by contacting us via the e-mail address: gdpr@budimex.pl.

To the extent that your data is processed based on consent, you can withdraw this consent at any time by contacting us via the e-mail address: gdpr@budimex.pl. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Personal data security

We conduct risk analysis on an ongoing basis to ensure that personal data is processed in a secure manner, only authorized persons have access to the data and only to the extent that it is necessary due to the tasks performed by them. We make sure that all operations on personal data are recorded and carried out only by authorized employees and associates.

Administrator takes all necessary actions to ensure that its subcontractors and other cooperating entities also guarantee the application of appropriate security measures every time when they process personal data on our behalf.

Server logs

The use of the website involves sending queries to the server on which the website is stored. Each query addressed to the server is saved in the server logs. Logs include, among other things, your IP address, the date and time of the server, information about your web browser and the operating system you are using. Logs are saved and stored on the server. The data stored in the server logs are not combined with specific people using the website and are not used by Administrator to identify visitors to the website.
Server logs are only auxiliary material used to manage the site, and their content is disclosed only to persons authorized to manage the server.

Changes in the privacy and cookies policy

The policy is constantly reviewed and updated if necessary.
The current version of the document is valid from 01.04.2023.