Privacy Policy and Cookie Policy

I. General Information
This website is administered by Budimex S.A., with its registered office at ul. Siedmiogrodzka 9, 01-204 Warsaw (hereinafter referred to as the “Controller” or “we”), who is the Controller of your personal data.
We are committed to protecting your privacy and personal data. This Privacy Policy outlines how we protect your personal information and your rights related to its processing. Within the online environment, we use cookies which may collect certain information about you. The exact use of cookies is described below.
For all matters related to the protection of your personal data, you may contact us via email: dane.osobowe@budimex.pl
The purposes, legal bases, and retention periods for the processing of personal data are specified separately for each processing activity, explaining how we use personal data collected via the website.

II. Purposes and Legal Bases for Data Processing Related to Website Use

a) Website Use
We process the personal data of all users of this website, including IP addresses, time spent on the website, other identifiers, and information collected via cookies. These may be recorded in system logs—specialized software that stores chronological records of events and actions related to the IT system through which we provide our services.
The data in the logs is processed primarily to provide services available through our website, but also for technical, administrative, and IT security purposes, as well as for analytical and statistical needs.

Personal data is processed for the purpose of:

• Providing electronic services, including access to website content, and for technical configuration purposes—legal basis: performance of a contract (Art. 6(1)(b) of Regulation (EU) 2016/679 – “GDPR”).
• Conducting analytical and statistical research—legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in analyzing your activity and preferences to improve the functionalities and services offered.
• Establishing, exercising, or defending legal claims—legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in protecting our rights.

Your personal data will be stored:

• For the provision of electronic services—for as long as you use the website or for the duration of cookie storage (see cookie banner for specific durations).
• Where the legal basis is our legitimate interest—until you successfully object to the processing.

b) Contact
You may contact us via the email address budimex@sandex.pl. Your personal data will be processed to respond to your inquiries. Using the contact form requires you to provide personal data necessary to establish communication.

Personal data is processed for the purpose of:

• Handling your inquiry and defending against or pursuing claims—legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

Your data will be processed:

• For the duration necessary to handle your inquiry, and if applicable, for a period of six years (limitation of claims) or until you successfully object to the processing.

c) Newsletter
If you give your consent, we will send you a newsletter with marketing communications and offers to the email address provided by you. Providing data is voluntary, but required to receive the newsletter.

Personal data is processed for the purpose of:

• Sending you informational and promotional materials, including commercial information—legal basis: your consent (Art. 6(1)(a) GDPR).

Your data will be processed until:

• You withdraw your consent or the newsletter service is discontinued.

d) User Account
We process personal data to create and manage your user account. This is part of the electronic service enabling you to use account functionalities.

Personal data is processed for the purpose of:

• Managing your user account—legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Your personal data will be stored:

• As long as your user account remains active.

e) Orders
You can place product orders via the website. Your data will be processed to execute the agreement, issue invoices, comply with accounting requirements, for archiving and statistical purposes, and for direct marketing of our own products and services.

Personal data is processed for the purpose of:

• Executing the purchase contract (Art. 6(1)(b) GDPR), issuing invoices (Art. 6(1)(c) GDPR), and possible defense or pursuit of claims (Art. 6(1)(f) GDPR).

Your data will be stored:

• For as long as needed to fulfill the order and until any potential legal claims expire or until you object to the processing.

f) Complaints and Withdrawal from the Agreement
If you submit a complaint regarding purchased goods, we will process your data to handle the complaint procedure.

Personal data is processed for the purpose of:

• Handling complaints—legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).

Your personal data will be stored:

• For as long as necessary to complete the complaint procedure.

III. Cookies and Similar Technologies

a) Cookie Consent
Upon your first visit to our website, you are shown a message about the use of cookies. Through a dedicated tool displayed during your initial visit, you can manage cookie settings. By clicking on the message and selecting the "+" icon, you can review descriptions of cookies.
You may change cookie settings at any time by clicking the circular blue "Cookie Settings" button in the bottom left corner of the website. Additionally, you may delete cookies through your browser. Each browser manages cookie settings differently—please refer to your browser’s help section for guidance.

IV. Your Rights Regarding Personal Data Processing
You have the right to access your data, request rectification, erasure, or restriction of processing, data portability, and the right to lodge a complaint with a supervisory authority— in Poland, this is the Personal Data Protection Office.
Where your data is processed on the basis of our legitimate interest, you have the right to object by contacting us via: dane.osobowe@budimex.pl
Where processing is based on consent, you may withdraw your consent at any time by contacting us via the above email. Withdrawal of consent does not affect the legality of processing prior to withdrawal.

V. Data Security
We regularly perform risk analyses to ensure personal data is processed securely, with access granted only to authorized individuals to the extent necessary for their tasks. We ensure all data operations are logged and conducted solely by authorized personnel.
We also require our subcontractors and partners to implement appropriate safeguards when processing data on our behalf.

VI. Server Logs
Using our website involves sending requests to the server that hosts it. Each request is recorded in server logs, which include your IP address, server time and date, browser details, and operating system information.
Data stored in server logs is not associated with specific individuals and is not used for visitor identification. Server logs are solely support materials used for website administration, accessible only to authorized server administrators.

VII. Changes to the Privacy and Cookie Policy
This Policy is regularly reviewed and updated as necessary.
The current version is effective as of April 11, 2025.