Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR), HOCHTIEF Polska S.A. provides the necessary information concerning the processing of personal data. 1
Personal Data Controller
The controller of your personal data is HOCHTIEF Polska S.A., ul. Żwirki i Wigury 14, 02-092 Warsaw, Poland, entered into the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw, 14th Commercial Division of the National Court Register, KRS no.: 0000345087, REGON: 012127116, NIP: 5261442389.
The Controller can be contacted by e‑mail: info@hochtief.pl or in writing at the registered office address with the note “Data Protection”.
Contact Regarding Personal Data Processing
You may contact the Data Protection Officer, Ms Anna Drabik, via e‑mail: iod@hochtief.pl.
If you have any doubts concerning the processing of personal data, please contact the Controller or the Data Protection Officer first (by e‑mail).
Purposes and Legal Grounds for the Processing of Personal Data
Your personal data will be processed for the following purposes:
- responding to an enquiry submitted via the contact form, i.e. on the basis of the Controller’s legitimate interest in communicating with website users (Article 6(1)(f) GDPR);
- establishment, investigate or defence of legal claims (Article 6(1)(f) GDPR);
- carrying out activities based on consent to the processing of personal data (Article 6(1)(a) GDPR), where applicable.
For the above purposes, your personal data will not be subject to automated decision‑making, including profiling.
Providing personal data is voluntary; however, it is necessary in order to receive a response to an enquiry submitted via the contact form.
Data Recipients
Your personal data will not be transferred to other entities, except entities providing services to the Company (including IT services) on the basis of data‑processing agreements, or public authorities authorised by law to access such data.
Your data will not be transferred to a third country or an international organisation unless you expressly consent to it or such transfer is required by applicable law.
Data Retention Period
Personal data will be processed for the period necessary to handle your enquiry and maintain contact — for the duration of the given matter. Additionally, data may be processed for the period necessary to establish or defend claims, or until an objection is raised or consent is withdrawn (if consent was granted).
Your Rights
Depending on the legal basis of processing, you are entitled to the following rights:
When processing is based on consent (Article 6(1)(a) GDPR):
- right of access to data,
- right to rectification,
- right to erasure (“right to be forgotten”),
- right to restriction of processing,
- right to data portability.
Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out prior to withdrawal. Consent can be withdrawn by contacting: iod@hochtief.pl.
When processing is based on legitimate interest (Article 6(1)(f) GDPR):
- right of access to data,
- right to rectification,
- right to erasure,
- right to restriction of processing,
- right to object to processing.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) if you believe that the processing of your personal data violates data protection regulations. More information is available at: https://uodo.gov.pl/pl/526/2464
Transfer of Data to Third Countries
As a rule, personal data will not be transferred outside the European Economic Area. In certain cases, due to cooperation with service providers, personal data may be transferred to countries outside the EEA. In such cases, the Controller ensures appropriate safeguards, including the use of standard contractual clauses approved by the European Commission (EU).
