for the website www.econstruction.pl

1. General Provisions

This Privacy Policy sets out the rules for the use of the website located at www.econstruction.pl (hereinafter referred to as the "Site"), in particular information about the cookies used on the Site and information about the manner and purpose of processing of personal data collected through the Site.

2. Information on cookies

1. The website uses technology that stores and accesses information on the user's terminal equipment (in particular using cookies).
2. Cookies are data, in particular text files, sent from a website server and stored by a web browser or other technological solution on a terminal device (e.g. a computer or smartphone).
3. Cookies are primarily used to make it easier for the user to use previously visited websites. If the user has used the same device and browser before, cookies allow the user's preferences to be remembered.
4. The cookies that are used on the Site are primarily used to collect statistical data about the traffic and number of users on the Site and how users use its content, without collecting any personally identifiable information.
5. Cookies used on the Site:

1. performance (collecting information about how visitors use the site, e.g. the most frequently visited pages or error messages, etc.),
2. functional (storing user settings, including language, consents given, etc.), such as:

• google-analytics.com cookies - used for statistics; the exact operation and privacy policy of Google Analytics can be found at: http://www.google.com/analytics/learn/privacy.html,
• session cookies - temporary information stored in the browser's memory until the session ends, i.e. the browser is closed.

6. The default settings of a user's web browser usually allow cookies to be placed on the end device. However, the user of the Site may specify other conditions for storing cookies on his/her terminal device by changing the "cookies" settings on his/her device. However, the restrictions introduced may affect the operation of the Site.

3. Information on processing of personal data

This information relates to the following companies that make up the ecOnstruction Elemont S.A. group, each of which has its registered office in Opole (45-920) at ul. Dobrzeńska 72B:

• ELEMONT S.A., company contact details: telephone number + 48 77 543 23 95 and email: elemont@elemont.pl
• Econstruction Sp. z o.o., company contact details: phone number +48 726 801 839 and email: biuro@econstruction.pl

The following information applies to each of the companies in the ecOnstruction Elemont S.A. group.

1. Personal data controller:

Depending on which Company you contact, enter into a contract with or conduct other business relationships with, in principle, each company in the ecOnstruction Elemont S.A. group is a separate controller ("Controller", "we") of your personal data and decides autonomously on the purposes and means of processing.

2. Type of personal data

The controller processes the following personal data:

2. 1. data of persons contacting the Administrator by e-mail or via the contact form on the website (identification data, contact details and other data provided in connection with the contact),
   2. data of persons included in the documents related to the application for a specific position and collected as part of the recruitment process (name, contact details, data on education, work experience and qualifications, other data provided as part of the recruitment).
   3. data of clients, potential clients, contractors, their representatives, employees and collaborators, as well as data of other persons provided to the Administrator in connection with the performance of contracts (identification data, contact details, data concerning professional entitlements held, job positions, other data provided in connection with cooperation).
3. Purpose of processing

The above personal data are processed for the following purposes:

• establishing business relations,
• conclusion and performance of contracts,
• settlement of contracts,
• responding to enquiries or requests and conducting further correspondence in this regard,
• compliance with legal obligations (e.g. accounting, taxation)
• defence against potential claims, and possibly for the referral of claims.

4. Basis for processing personal data:

Your personal data are processed based on:

• consensus,
• fulfilment of legal obligations,
• necessity for the performance of a contract or for pre-contractual action at the request of the data subject,
• legitimate interest of the Controller.

5. Voluntary provisioning of personal data

The provisioning of data is generally voluntary, however, it may be necessary in order to conclude or perform a contract, to respond to an enquiry or for the purpose of correspondence, including contact within the scope of ongoing recruitment.

6. Duration of processing

Personal data collected for the purpose of concluding and performing a contract will be processed for the duration of the contract or until an objection is raised to the processing based on the legitimate interest of the Controller, unless the law (e.g. tax, accounting) obliges longer processing of such data or it is kept longer in case of potential claims, for the period of their limitation period defined by the law - whichever is longer. The data provided in the course of contacting the Controller will be processed for the period necessary to reply and, if applicable, correspond with the Controller, and thereafter until the expiry of the limitation period for possible claims.

7. Recipients of personal data

• Recipients of personal data may be courier service providers, ICT service providers, companies that provide support and operation of the Controller's IT tools and systems (e.g. software service providers), advisors (e.g. law firms), companies that provide accounting services to the Controller, companies that provide auditing services (e.g. independent auditors), other entities, as well as entities that provide printing, scanning, correspondence handling, archiving and document destruction services.
• In the case of recruitment, personal data may also be transferred to entities that technically or organisationally assist the Controller with recruitment, including communication with candidates.

4. Processing of personal data in connection with recruitment

1. Type of processed personal data

We process the personal data provided to us as part of your application and collected as part of the recruitment process for the purposes necessary for the current recruitment process within the ecOnstruction Elemont S.A. group and, if you have given your consent, for future recruitment.

We may process the following personal data in connection with our recruitment process (the processing of some personal data may be subject to your consent): identification data, contact details, education data, skills and previous employment data, eligibility data and other personal data provided to us during the recruitment process.

2. Purpose and basis for processing personal data

In conenction with recruitment, personal data are processed for the following purposes:

• the consideration of your application and the implementation of the recruitment process and, if you give your consent, also for future recruitment;
• defence against potential claims, and possibly for the referral of claims.

The basis for the processing of personal data is the taking of action at your request as a data subject prior to the conclusion of a contract, the provisions of applicable law, in particular the Labour Code and implementing acts, and, to a greater extent than specified in these provisions or for future recruitment processes, your consent.

3. Duration of processing personal data:

As a general rule, personal data will be processed, for the purposes set out above, for the duration of the recruitment process or, depending on your additional voluntary consent, future recruitments or until you withdraw your consent and thereafter until the expiry of the limitation period for any claims, unless we are obliged by law to process the data for longer.

5. Rights

In any case, you have the right to access your personal data; to request the rectification and restriction of the processing of your personal data; to have your personal data erased; to have your personal data which you have provided to the controller and which is processed by automated means and the processing is based on consent or on a contract; to object to the processing of your personal data based on the ground of necessity for the purposes of the legitimate interests pursued by the controller or by a third party, including in particular the processing for marketing purposes; to lodge a complaint with the President of the Data Protection Authority.

If the processing is based on your consent, you have the right to withdraw it at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.