Processing of personal data

Your privacy is important to us and we strive for a high level of protection in all processing of personal data. Within the EU/EEA, the General Data Protection Regulation (GDPR) applies from May 20181.

In accordance with applicable data protection legislation, Skanska Property Romania S.R.L., or the company otherwise specified as the data controller is the data controller for the processing of the personal data because it determines the why and how the data is processed.

If you have any questions about this information, or if you wish to exercise any of your rights as set out below, please contact 

Skanska via the contact details listed under Contact information below.

Skanska’s website and these terms and conditions of use are provided in accordance with Romanian law. By accessing this website, you agree to the following terms. If you do not agree with them, you may not use this website and should exit.

1Regulation (EU) 2016/679 of the European Parliament of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

Collection and processing of personal data

The term ‘personal data’ refers to such information which, directly or indirectly, may refer to you as an individual. Examples of such data are identification details (such as name and sure name, image, personal ID number, address, contact person or work phone number, title/function, employer, and/or other identification details), competition and/or survey entries, selections made, behavior or IP address. Personal data processing refers to any action that we or a third party that we have engaged take with the personal data, such as, but not limited to, collection, registration, correction, storage, and erasure. 

The purpose of processing personal data

Personal data may only be processed for specified and explicitly stated purposes and may not be subsequently processed for any purpose that goes beyond these purposes. At Skanska, we process personal data that you have given us for the sole purpose of administering inquiries and agreements from/with you, as well as providing information and services in connection with such inquiries and agreements.  For example, this concerns recruitment, registration of interest for leasing offices spaces in our development projects, or subscriptions to our newsletters which you have ordered, sending links to surveys, conducting tender/procurement processes, paying invoices, archiving documents, or providing information to public institutions/authorities, according to applicable laws.

Images of yourself will be processed when you enter Skanska premises, with the purpose of ensuring the security of our goods and personnel, according to applicable legislation. Also, name and contact details will be processed in case it is mentioned as contact details for emergencies by our employees.

If you are a worker/visitor in our construction sites, your personal data will be processed when you enter it (images, name, sure name, details from ID), report a health and safety breach (phone number), or when you are subject of an internal/external investigation following a health and safety norms breach.

Your personal data will also be used, among others, for sending information and materials regarding our products and services and follow-up. In the event that you do not wish to receive information and materials and/or any offers, please contact us via the contact details listed under the Contact information below. We will use personal data also when you will submit one of our surveys or questionnaires.

 

When being in a business relationship with us or under negotiation process, representing us in front of public authorities or public institutions and, more generally, when acting as an intermediary to third parties for Skanska, your personal data will be processed in order for Skanska to conduct ethics due-diligences. Furthermore, if you are the beneficial owner of a company, Skanska will process your personal data (name and sure name and date of birth, if the name and sure name are not enough) for the purpose of complying with any anti-money laundering and anti-corruption national and international laws.

If necessary, we will process your personal data for settling disputes: this involves making claims and defenses before courts or other public authorities or dispute resolution entities.

More, personal data will be processed during the investment or divestment processes of our projects and/or assets, for performing due diligences and risk assessments for the purpose of acquiring or selling assets or shares.

We also process your personal data for improving our visitors’ browsing experience on our website: retain user preferences and browsing habits to provide relevant information for subsequent site visits; adapting the website to visitor’s device analyzing and solving problems the visitor’s device encounters when accessing the website.

Finally, personal data is also processed for statistical purposes to see how users use the website and to analyze search behavior, as well as to display content customized for you. 

When using features on our website that allow you to post information or other material on it, please note that such information may also contain personal data. In the event that your information contains data about other individuals, you may only post such data which you have received their consent to provide.

We use a server-side tracking setup based on Google Tag Manager to manage analytics and measurement. To protect your privacy, this means that data from your browser is first sent to our own controlled server environment, where it is processed before being forwarded to services such as Google Analytics.

While our server technically receives the request to establish a connection, your personal identifiers and IP address are stripped or masked in real-time. This ensures that your data remains anonymous and that no identifiable IP addresses are stored or shared with external partners. This processing only takes place with your consent, and any data shared with Google may be transferred to countries outside the EU/EEA in accordance with applicable data protection laws.

About cookies

Cookies are small data files stored on your device that contain information such as page settings, language preferences, or login details. They are sent by the website server to your browser and can be either session cookies, which expire when you close your browser, or persistent cookies, which remain until their expiry date or until deleted by you.

We use cookies to remember your preferences, analyze how our websites are used, and improve user experience. These include first‑party cookies set by us and third‑party cookies set by other domains for advertising, web statistics, and marketing purposes.

To fully access our websites and enable a more personalized experience, we recommend accepting optional cookies that support certain functions and improve usability.

Please note that cookie settings must be updated separately for each browser and device, and that you can delete cookies from your device at any time. Read more about the Cookies we use and adjust your Cookie preferences [here].

Legal basis for processing personal data

Also, for the transmission of communications about our products and services (marketing), we process the data based on your consent.

We can also process data for the fulfillment of obligations imposed by law, such as archiving obligations and on-demand communication of certain information to public authorities.

If we were to process your personal data for any purpose which, according to applicable legislation, requires your consent, we will obtain your consent before commencing with such processing.

Storage of your personal data

The data we collect in accordance with the above is deleted when the purposes of the processing have been completed or when the applicable legislation allows it to.

Security for the protection of personal data

Skanska continuously tries to ensure the highest level of protection for your personal data and safeguards your personal data with a high level of security and has to this end taken appropriate technical and organizational security measures to protect your personal data from unauthorized access, amendment, dissemination, or destruction. We are constantly working on improving our security measures.

Such security measures include: adopting dedicated policies; minimize processing; restricting access to data; testing and auditing our systems; backing up; training our staff; introducing provisions in our contracts with suppliers to force them to ensure a high level of protection of personal data that we provide access to, etc.

Disclosure and transfer of personal data

As a rule, we will not divulge your data to other companies or individuals in any state (including Hungary). In certain situations, however, it is necessary to do so, as described below.

We may appoint external partners to perform tasks on our behalf, such as providing IT and archiving services or helping with marketing, events organizers, payroll, HR and medical services providers, travel agencies, CCTV surveillance, administration of press releases, and other communication on our websites and social media channels, data analysis or statistics.

The performance of these services may mean that our partners, both within and outside the EU/EEA, are able to gain access to your personal data. Companies that process personal data on our behalf must always sign an agreement with us so that we are able to ensure a high level of protection of your personal data even with our partners.

Special safeguards are taken with regard to partners outside the EU/EEA, such as signing agreements that include the standardized model clauses for data transfers adopted by the EU Commission 

 

and which are available on the EU Commission’s website or complying with any other applicable legal requirements.

Skanska may also disclose your personal data to third parties, for example the police or other public authorities, if it concerns criminal investigations or if we are otherwise required to disclose such data by law or public authority decision.

We may also disclose data to accountants, auditors, lawyers and other external consultants, under confidentiality, for example for due diligence or audits (internal or external). Also, your personal data may be disclosed to possible investors or sellers in the market, for the purpose of acquiring or selling assets. We may disclose to individuals, agents, or courts in Romania or in another State - for the establishment, exercise, or defenses of a right of ours or of another person in court. If we transfer all or part of our shares or our assets or our business, we can divulge your data to (potential) purchasers.

Skanska will not disclose or transfer your personal data to any extent other than described in this section.

When is this information notice applicable

This information about the processing of personal data applies to data about you that Skanska processes within the scope of our website and is also a general information notice for our partners, collaborators, consultants, suppliers, subcontractors, official authorities, and employees/collaborators of such.

Our website may sometimes contain links to external websites or services that we do not control.

When you interact with us as an employee, supplier, consultant or otherwise than a visitor to our site, we will provide you with the

relevant notice before we begin processing your data in that quality.

If you follow a link to an external website, you are encouraged to review the principles for processing personal data and information about cookies that apply to the website in question. This information notice does not cover data processing by other companies, individuals, authorities, or institutions that we refer to on our site or to companies and individuals advertising our services and products through cookies or other technologies.

Your rights and how you can exercise them

Under the applicable data protection legislation you are entitled to access the personal data that is processed about you, to have erroneous personal data corrected, to request that Skanska shall stop processing and delete your personal data, to request that the processing of your personal data is restricted, to exercise your right to data portability, to withdraw consent to particular processing (where such consent has been obtained)

You have the right to object to the processing of your personal data that is necessary for the performance of a task which is of public interest, results from the exercise of public authority with which we are invested or necessary for our legitimate interests or that of a third party. You also have the right to object to the processing for the purpose of direct marketing. You also have the right to object to your processing for scientific or historical research purposes or for statistical purposes, unless that processing is necessary for the performance of a task carried out for reasons of public interest. You can exercise this right in the ways listed below.

 

To the extent that you have given your consent for a processing activity, you may also withdraw your consent at any time, which will not affect the lawfulness of processing before such withdrawal.

In order to exercise any of the above rights, please contact Skanska using the contact details below. You may use the same contact details to ask us questions about your rights or other information in this notice or any other matter concerning your processing of data by us.

You are also entitled, at any time, to lodge a complaint with the relevant supervisory authority, namely the National Supervisory Authority for Personal Data Processing, if you consider that your personal data has been processed in contravention of applicable data protection legislation. Contact information of the supervisory authority can be found on this link. You may also lodge a complaint with a supervisory authority operating out of the country in which your habitual residence or place of work exists, or where the alleged infringement of your personal data processing took place.

Contact details

Skanska Property Romania S.R.L. is independent data controllers for the processing of your data.

If you have any questions about how Skanska processes your personal data, please contact us by e-mail or by post.

Skanska Property Romania S.R.L.
Equilibrium

2 Gara Herastrau Street, Building 1, 3rd Floor
RO-020334, Bucharest
 
Data Protection Manager: datepersonale@skanska.ro

No automated decision-making process

We carefully handle our data through our specialist staff. Under the current circumstances, you will not be subject to our sole decision based on the automatic processing of your data (including the

creation of profiles) that will have legal effects on you or affect you in a similar way to a significant extent.

Date of publication

This statement about our processing of personal data may be updated from time to time as a result of required developments. Please check the Date of publication to see when this statement was updated. 

Date of publication: 25 May 2026

Privacy & cookies