Privacy Policy

Brunes Construction sh.p.k. is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store and protect personal data in accordance with Law No. 124/2024 “On the Protection of Personal Data” and applicable legislation.

1. Data Controller

The Data Controller is Brunes Construction sh.p.k., with its registered office at the address registered with the National Business Center (QKB), Republic of Albania.

For any privacy-related request, you may contact us at info@brunesconstruction.al.

2. Personal Data We Process

Depending on your relationship with us, we may process personal data relating to:

• clients and their representatives;
• employees and job applicants;
• suppliers, subcontractors and business partners;
• shareholders/partners;
• visitors to our offices and construction sites;
• visitors to our website and social media pages.

The personal data processed may include identification and contact details, ID/passport information, tax identification data (NIPT), contractual documentation, CVs and professional information, financial and banking details, photographs, CCTV recordings, biometric data for employee attendance/access purposes, and website-related technical data such as IP addresses and cookies.

3. Why We Process Personal Data

Personal data is processed where necessary for:

• entering into and performing contracts;
• managing employment and recruitment;
• managing relationships with clients, suppliers, subcontractors and business partners;
• complying with legal, regulatory, fiscal and other applicable obligations;
• responding to requests, inquiries and communications;
• ensuring the security of our premises, construction sites, personnel and property;
• managing employee attendance and access.

Processing is based, as applicable, on the performance of a contract, compliance with legal obligations, consent, legitimate interests, or other legal grounds provided by applicable law.

4. CCTV and Biometric Data

CCTV surveillance systems are used at the Company’s offices and construction sites for security and safety purposes. Appropriate notices are displayed where CCTV surveillance is in operation.

Biometric data may be processed for employee attendance and access management purposes. Access to CCTV recordings and biometric data is restricted to authorized personnel.

5. Sharing and Retention of Personal Data

Personal data may be accessed by authorized Company personnel and, where necessary, disclosed to competent public authorities, banks, professional advisers, service providers or other parties where required for the purposes described above or by law.

Personal data is retained only for as long as necessary for the purpose for which it was collected and in accordance with applicable legal and contractual retention requirements. After the applicable retention period, data is securely deleted or destroyed.

6. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss or misuse. Electronic documentation and communications are managed through secure systems, including Microsoft 365, with access restricted to authorized personnel.

7. Your Rights

Subject to the conditions established by applicable law, you have the right to request access to, rectification or erasure of your personal data, restriction of processing, data portability, and to object to certain processing activities. Where processing is based on consent, you may withdraw your consent at any time.

You also have the right to lodge a complaint with the competent Albanian data protection authority.

To exercise your rights or request further information regarding the processing of your personal data, please contact:

Brunes Construction sh.p.k.
Email: info@brunesconstruction.al

8. Updates

This Privacy Policy may be updated periodically to reflect changes in legislation or in our processing activities. The latest version will be made available on the Company’s website.