PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA
In case you are providing your personal data, we as a data controller HB Reavis DE3 S.à r.l. having its registered seat at: 21, rue Glesener, L-1631, Luxembourg, ID No.: B222775 (hereinafter referred to as the “HB Reavis” or “we”), would like to inform you about the processing of your personal data and of your rights related to the said processing.
The Controller is part of the HB Reavis Group, which consists of all entities consolidated under the group holding HB Reavis Holding S.A. with its headquarters in Luxembourg due to which the reference to HB Reavis Group may be found in the Privacy Notice (hereinafter referred to as the “HB Reavis Group “).
If you are in our construction site or building, in their immediate vicinity (as a visitor, employee, contractors and subcontractor or their employees or for any other purpose) or visit websites or social media related to our building, your personal data may be processed for the following purposes:
Ensuring the safety of visitors and contractors working at the construction site as well as the protection of the building/construction site and property
- Administration of construction site notice board.
- Administration of construction log.
- Administration of control days.
- Evidence of construction visitors.
- Administration of construction phone book.
Ensuring the safety of visitors and contractors working at the construction site as well as the protection of the building and property
What is our purpose for and legitimate interest in processing your personal data?
The protection of our buildings and the safety of the people entering the construction site are the key elements and the number one priority in our business activities. For us to be able to ensure the proper level of protection and safety, we installed a video monitoring system (CCTV). When entering the construction site the CCTV might record you. If you enter the construction site we will process your personal data to produce your visual images by means of an installed CCTV camera system, which records the construction site area and part of the area outside the construction site.
What is our legal basis for the processing of your personal data?
We process your personal data based on the legitimate interests under Article 6 (1) (f) of GDPR for the protection of our rights and interests and for ensuring security at our premises.
What kind of personal data do we process?
A visual image of you.
How long do we store your personal data?
We store your personal data captured by cameras located at the construction site for 72 hours.
Administration of construction site notice board
What is our purpose for and legitimate interest in processing your personal data?
At almost every construction site there is a notice board with various information regarding the progress of the construction. In some cases, personal data may be displayed on the notice board, e.g. contact data of the person responsible for a stage in construction or other things relevant to the construction.
What is our legal basis for the processing of your personal data?
We process your personal data on the basis of legitimate interests under Article 6 (1) (f) of GDPR.
What kind of personal data do we process?
Name, surname, phone number and e-mail.
How long do we store your personal data?
As soon as we no longer need your personal data for the processing purposes for which the personal data have been collected, we will delete them unless the statute-barred period applies.
Administration of construction log
What is our purpose for and legitimate interest in processing your personal data?
Every construction has its own administration which consists of several significant documents including the construction log. Construction log also contains personal data of the persons responsible for the various stages of the construction, workers and other relevant persons.
What is our legal basis for the processing of your personal data?
We process your personal data on the basis of legitimate interests under Article 6 (1) (f) of GDPR.
What kind of personal data do we process?
Name, surname, phone number and e-mail.
How long do we store your personal data?
As soon as we no longer need your personal data for the processing purposes for which the personal data have been collected, we will delete them unless the statute-barred period applies.
Administration of control days
What is our purpose for and legitimate interest in processing your personal data?
At most of our constructions, we organize regular control days, which serve for many purposes including marketing, safety, administration and others. People attending these control days are mostly journalists, politicians, state or local controllers, general public and internal stakeholders. From each control day a control day report is created which contains personal data of the persons involved.
What is our legal basis for the processing of your personal data?
We process your personal data on the basis of legitimate interests under Article 6 (1) (f) of GDPR.
What kind of personal data do we process?
Name, surname, phone number and e-mail.
How long do we store your personal data?
As soon as we no longer need your personal data for the processing purposes for which the personal data have been collected, we will delete them unless the statute-barred period applies.
Evidence of construction visitors
What is our purpose for and legitimate interest in processing your personal data?
There are many visitors to our construction site on daily basis. Each visitor must be put into evidence so we can ensure the safety at our construction site and protect the people and the property.
What is our legal basis for the processing of your personal data?
We process your personal data on the basis of legitimate interests under Article 6 (1) (f) of GDPR.
What kind of personal data do we process?
Name, surname, phone number and e-mail.
How long do we store your personal data?
As soon as we no longer need your personal data for the processing purposes for which the personal data have been collected, we will delete them unless the statute-barred period applies.
Administration of construction phone book
What is our purpose for and legitimate interest in processing your personal data?
As we have numerous contractors working at our construction site, we need to keep contact details to ensure effective communication. For this purpose, we have created a phone book filled with contact details of all contractors that had worked at any of our previous constructions or that are working for any of our present constructions.
What is our legal basis for the processing of your personal data?
We process your personal data on the basis of legitimate interests under Article 6 (1) (f) of GDPR.
What kind of personal data do we process?
Name, surname, phone number, e-mail and contact details of the contractor.
How long do we store your personal data?
As soon as we no longer need your personal data for the processing purposes for which the personal data have been collected, we will delete them unless the statute-barred period applies.
Once we no longer need your personal data for the purposes for which we processed it, we will delete your personal data or archive it for the period of time specified by law or the archiving plan.
With whom do we share your personal data?
We may also share your personal data with companies within the HB Reavis Group. We may also be obliged to disclose your personal data to state authorities and public authorities, (courts and law enforcement authorities i.e. (police and prosecutor), and only to the extent necessary as required by applicable and effective law to exercise their power.
Based on several agreements with third parties, which act as our intermediaries or independent operators, we may provide your personal data, to these companies, to the extent necessary to ensure the provision of services specified for individual companies. In addition to these companies, we use the following categories of intermediaries: data centres, hosting – marketing tools – analysis and tracking tools – business operations / management tools – task management and communication tools.
We may share your personal data within the companies in HB Reavis Group. We also may be obliged to provide your personal data to public authorities, in particular courts and law enforcement agencies (police and prosecutors) only to the extent necessary and within the limits of the law.
From whom do we get the personal data?
We get the personal data from you, your employer or third party.
Do we use automated individual decision-making?
No, we do not use automated individual decision-making.
Do we transfer your personal data to third countries?
Your personal data are processed within the territory of Germany and other states of the European Union. Your personal data can be processed by a country outside of European Union if this third country has been confirmed by the European Commission as a country with adequate level of data protection or if other appropriate data protection safeguards exist (for example, binding corporate privacy rules or EU standard data protection clauses).
What are your rights?
Your rights as a data subject are stated below. Please note that the exact conditions to exercise these rights are set out in detail in Chapter III of GDPR, while in a particular circumstance not all rights may be exercised. You have following rights:
Access to personal data we process about you
Rectification of incorrect or inaccurate personal data and add incomplete personal data
Restriction, i.e. blocking of processing of your personal data
The deletion of personal data in case the purpose absence or unauthorized data processing
Submission of an objection to the processing of personal data if you believe that our data processing is not justified
Be excluded from automated decision-making
Listing of personal data in a structured and machine-readable format or for another controller
Revocation of consent to the processing of personal data
To lodge a complaint with the supervisory authority
How can you exercise your rights?
Electronically: dataprivacy@hbreavis.com
In writing to the address: HB Reavis Germany GmbH, Hermann-Blankenstein-Straße 5, 10249, Berlin, Germany, at hands of: legal department, or to HB Reavis Group a. s., at hands of: compliance department Mlynské nivy 5, 821 09 Bratislava, Slovak Republic
We strive to protect your privacy as much as possible and therefore we process your personal data in compliance with GDPR and all other relevant laws. However, if you disagree with the way we handle your personal data, you can exercise your rights via our Data Protection Officer at: HB Reavis Group a. s., Mlynské nivy 5, 821 09 Bratislava, Slovak Republic, email: dataprivacy@hbreavis.com
Or you can file a complaint in supervising authority regarding the processing of your personal data. Your local supervisory authority may be found at: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
