Privacy policy

I. Name and address of data controller The data controller, within the meaning of the EU GDPR and other national data protection laws of the member states as well as other data protection regulations, is: Sonja Müllner CML Construction Services GmbH Donau-City-Straße 9 1220 Wien Österreich Tel. +43 1 22422-1083 sonja.muellner@bauholding.com II. General information on data processing 1. Scope of the processing of the personal data In principle, we process the personal data of our users only insofar as this is necessary for the maintenance of a functional website and the provision of our content and services. The processing of our users’ personal data generally occurs only following receipt of the user’s consent. An exception is made in cases where it is not possible to obtain consent in advance for practical reasons and where the processing of the data is permitted by statutory regulations. This privacy policy only covers the data processing operations described below. In addition, further processing of the personal data of the users can take place, especially by group companies of the STRABAG Group as the sole data protection officer. In this respect, the special data protection declarations made available for the respective data processing by STRABAG SE or Group companies apply. 2. Legal basis for the processing of personal data Insofar as we obtain consent from the data subject for the processing of personal data, Art. 6 (1) a of the EU’s General Data Protection Regulation (GDPR) shall serve as the legal basis. Where the processing of personal data is required for the fulfilment of a contract to which the data subject is party, Art. 6 (1) b of the GDPR shall serve as the legal basis. This shall also apply to all processing operations required for the performance of pre-contractual measures. Insofar as the processing of personal data is required for the fulfilment of a legal obligation (statutory conditions) to which our company is bound, Art. 6 (1) c of the GDPR shall serve as the legal basis. If processing is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6 (1) d of the GDPR shall serve as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or of a third party, and the interests, basic rights and fundamental freedoms of the data subject do not outweigh the aforementioned legitimate interest, Art. 6 (1) f of the GDPR shall serve as the legal basis for processing. 3. Deletion of data and storage duration The personal data of the data subject are deleted or blocked as soon as the purpose for their storage no longer applies. Storage beyond this point may take place if this is provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject. Data will also be blocked or deleted once the storage period prescribed by the aforementioned standards expires unless further storage of the data is necessary for the conclusion or fulfilment of a contract. III. Provision of the website and creation of log files 1. Description and scope of data processing Each time this website is accessed, our system records data and information from the computer system of the calling computer by means of an automated system. The following data are collected as part of this process:

• Information about the browser type and version used

• The user’s operating system

• The user’s Internet service provider

• The user’s IP address

• Date and time of access

• Websites from which the user’s system has come to our website

• Websites accessed by the user’s system via our website

These data are also stored in our system’s log files. These data are not stored together with other personal data of the user. 2. Legal basis for data processing The legal basis for the temporary storage of data and log files is Art. 6 (1) f of the GDPR. 3. Purpose of data processing The system temporarily stores the user’s IP address in order to make the website available on the user’s computer. To do this, the user’s IP address must be stored for the duration of the session. The storage in log files is carried out to ensure the functional capability of the website. The data also help us to optimise the website and ensure the security of our IT systems. No data are evaluated for marketing purposes in this context. This is also the reasoning behind our legitimate interest in data processing under Art. 6 (1) f of the GDPR. 4. Storage duration The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. When data are collected in order to make the website available, this is the case when the respective session ends. When data are stored in log files, this is the case after 180 days at the latest. 5. Possibility of objection and elimination The collection of data for the provision of the website and the storage of data in log files is necessary for operating the website. Therefore, there is no possibility for the user to object. IV. Use of cookies 1. Description and scope of data processing Our website uses cookies. Cookies are text files that are stored in the user’s web browser or on the user’s computer system by the web browser. When a user visits a website, a cookie is stored on the user’s operating system. This cookie contains a characteristic string, enabling the unique identification of the browser when a user revisits the website. We use cookies to make our websites more user-friendly. Some elements of our website require the calling browser to be able to be identified even after a page change. The cookies store and transfer the following information:

• Search behaviour

We also use cookies on our website that allow for the analysis of user browsing habits. The following information can be stored in this way:

• Search terms entered

• Frequency of page views

• Use of website functions

Technical measures are employed to pseudonymise user data which are collected in this manner. As a result, it is not possible to assign data to an inquirer. The data will not be stored together with other personal data of the user. When visiting our website, a banner appears informing the user about the use of cookies for analysis purposes and the user is referred to this data protection statement. The user is also informed in this context of how to prevent the collection of cookies in the browser settings. When visiting our website, the user is informed about the use of cookies for the purposes of analysis. The user’s consent to the processing of personal data is also obtained in this context. The user is also referred to the data protection statement at this point. 2. Legal basis for data processing The legal basis for the processing of personal data using cookies that are technically necessary is Art. 6 (1) f of the GDPR. The legal basis for the processing of personal data using cookies for analysis purposes, with relevant user consent, is Art. 6 (1) an of the GDPR. 3. Purpose of data processing Cookies that are technically necessary are used to simplify website use for users. Some of our website’s functions cannot be offered without the use of cookies. These services require the browser to be recognised again following a page change. We require cookies for the following applications: (1) Remembering search terms The user data collected by technically necessary cookies will not be used to create user profiles. Analysis cookies are used to improve the quality of our website and its content. Such cookies enable us to learn how the website is used so that we can continually improve our offer. This is also the reasoning behind our legitimate interest in data processing under Art. 6 (1) f of the GDPR. 4. Storage duration, the possibility of objection and elimination Cookies are stored on the user’s computer, which will transmit them to our website. This will grant you as the user complete control over the usage of cookies. You can deactivate or restrict the transmission of cookies by changing your web browser’s settings. Previously stored cookies can be deleted at any time. Cookies can also be deleted automatically. In the event that cookies are deactivated for our website, certain features of our website may no longer be available. The transmission of Flash cookies cannot be restricted via the browser settings. This is done by changing the settings of the Flash player.

Strictly Necessary Cookies These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.    You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Functional Cookies These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages.    If you do not allow these cookies then some or all of these services may not function properly.

www.strabag-real-estate.com BALANCEID 1st Party Sitzung strabag-real-estate.com OptanonAlertBoxClosed | eupubconsent | OptanonConsent 1st Party 90 tage, 2914251 tage, 90 tage mobile.strabag.com PHPSESSID 3rd Party Sitzung www.strabag.com BALANCEID 3rd Party Sitzung cookielaw.org __cfduid 3rd Party 30 tage strabag-cdn.net __cfduid 3rd Party 30 tage

Cookies from US provider We use cookies for web analyses, marketing purposes and performance cookies, which are also operated by Google LLC. These may transfer the collected data to another country, especially the USA, which does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes, without you possibly having any legal remedies. Furthermore, it is expressly pointed out that Google LLC may link this data with other data about you, such as search history, personal accounts or usage data. The possibility of an early revocation by adjusting the "Cookie Settings" in our Data Protection Statement remains unaffected.

www.strabag-real-estate.com _ga, _gid, _gat_UA- 1st Party 730 days, 1 days, 0 days

V. Newsletter 1. Description and scope of data processing On our website, users may subscribe to our newsletter free of charge. The data entered in the input template when subscribing to the newsletter are transmitted to us. Additionally, the following data will be collected during your registration: (1) IP address of the calling computer (2) Date and time of the registration To process the data, your consent is obtained during the registration process and you will be referred to this data protection statement. No data that are processed for the purpose of sending our newsletters are disclosed to third parties. The data are used exclusively for the purpose of sending the newsletter. 2. Legal basis for data processing The legal basis for the processing of data with the user’s consent following registration by the user to receive the newsletter is Art. 6 (1) a of the GDPR. 3. Purpose of data processing The purpose of collecting the e-mail address of the user is to send the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the service or of the e-mail address used. 4. Storage duration The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. The user’s e-mail address is stored as long as the subscription to the newsletter is active. Other personal data collected during the registration process are as a rule deleted after a period of seven days. 5. Possibility of objection and elimination The subscription to the newsletter can be cancelled by the respective user at any time. A corresponding link can be found in every issue of the newsletter. This also allows you to withdraw your consent to the storage of personal data collected during the registration process. VI. Contact form and e-mail contact 1. Description and scope of data processing A contact form is provided on our website which may be used to make contact electronically. Should a user contact us via the contact form, the data entered in the input template are transferred to us and then stored. These data are: Additionally, the following data are stored when the message is sent: (1) The IP address of the user (2) Date and time of the registration To process the data, your consent is obtained during this process and you will be referred to this data protection statement. As an alternative, it is also possible to contact us using the e-mail address provided. In this case, personal data of the user which is transmitted along with the e-mail will be stored. No data will be disclosed to third parties in this context. Data will be used exclusively for the purposes of correspondence. 2. Legal basis for data processing The legal basis for the processing of data with the user’s consent is Art. 6 (1) a of the GDPR. The legal basis for the processing of data that are transmitted by e-mail is Art. 6 (1) f of the GDPR. If the purpose of making e-mail contact is to conclude a contract, then an additional legal basis for the processing of the data is Art. 6 (1) b of the GDPR. 3. Purpose of data processing We only process personal data taken from the input template of the contact form for the purposes of making contact. If we are contacted by e-mail, we also have a necessary legitimate interest to process data. Other personal data processed during this process serve to prevent misuse of the contact form and to guarantee the security of our IT systems. 4. Storage duration The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. For personal data taken from the input template of the contact form and sent by e-mail, data are deleted when the respective correspondence with the user has ended. Correspondence concludes when it can be inferred from the circumstances that the matter in question has been conclusively resolved. The additional personal data that are collected in this process are deleted after a period of seven days at the latest. 5. Possibility of objection and elimination The user can withdraw his/her consent for the processing of personal data at any time. Users can contact us by e-mail at any time to withdraw their consent for storing the personal data. In this case, correspondence cannot be continued. If you wish to make use of your right to object, please write us an e-mail at real-estate.at@bauholding.com. In this case, all personal data stored at the time of making contact will be deleted. VII. Google Analytics Data protection statement for the use of Google Analytics This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will usually be transmitted to and stored by Google on servers in the United States. IP anonymizing is activated on this website, which means that your IP address is masked by Google within member states of the European Union or other member states of the European Economic Area prior to transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and masked there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the transmission of data (incl. your IP address) generated by the cookie on your usage of this website to Google by downloading and installing a browser plugin available under the following link: Link to Google Optout. In addition, you can prevent registration by Google Analytics by clicking on the link below. This sets an opt-out cookie and prevents the future collection of your data when you visit this website: deactivate Google Analytics. For more information on terms of use and privacy, please visit https://www.google.com/analytics/terms/gb.html or https://policies.google.com/. We also point out that on this website Google Analytics has been extended by the code “anonymizeIp” in order to ensure an anonymous detection of IP addresses (so-called IP masking). VIII. Third-party cookies We point out that we use third-party cookies. The legal basis for their use is Art. 6 (1) f of the GDPR We use the cookies to display content from Euroland.com. The following categories of personal data are processed in this context: (1) Information about the browser type and version used (2) The user’s operating system (3) The user’s Internet service provider (4) The user’s IP address (5) Date and time of access (6) Websites from which the user’s system has come to our website (7) Websites accessed by the user’s system via our website The data collected via third-party cookies are deleted after 180 days. You can prevent the use of third-party cookies in your browser settings. IX. Rights of the data subject If personal data is processed by you, you are the data subject or affected party within the meaning of the GDPR and you are entitled to the following rights vis-à-vis the person responsible or the jointly responsible parties: 1. Right of access 2. Right to rectification 3. Right to restriction of processing 4. Right to erasure 5. Right to be informed 6. Right to data portability 7. Right to object 8. Right to withdraw the declaration of consent 9. Automated individual decision-making, including profiling 10. Right to lodge a complaint with a supervisory authority You can object to the processing of personal data for advertising purposes, including the analysis of user data or the transfer to third parties for advertising purposes at any time without giving reasons. In addition, every data subject has a general right of objection (cf. Art. 21 (1) GDPR). In this case, the objection to data processing must be justified. If the data processing is based on consent, your consent may be revoked at any time with effect for the future. Revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. To exercise the rights to which you are entitled and if you wish to make a complaint in connection with the processing of personal data, you are welcome to contact our Privacy Department at sonja.muellner@bauholding.com. XII. Status / Update We adapt the privacy policy to changed functionalities or changed legal situations. We therefore recommend that you read the data protection declaration at regular intervals. If your consent is required, the changes will only be made with your consent.

Korzystamy z oprogramowania do analizy stron internetowych Matomo (www.matomo.org) w celu prowadzenia statystyk dostępu, analizy ogólnych zachowań użytkowników naszej strony internetowej oraz optymalizacji naszej strony internetowej. Podstawą prawną tego przetwarzania jest Art. 6 (1) f) GDPR. Skonfigurowaliśmy Matomo w taki sposób, że: - na Twoim urządzeniu końcowym nie są umieszczane żadne pliki cookie; - adres IP jest skracany o dwa ostatnie bajty i w ten sposób anonimizowany; - oprócz otwieranych stron, rejestrowane są tylko dane przekazywane przez Twoją przeglądarkę podczas dostępu do strony internetowej / to rejestrowanie danych jest ograniczone do odpowiedniego czasu trwania sesji; - przy otwieraniu strony internetowej Państwa dane przekazywane przez przeglądarkę oraz zanonimizowany adres IP są nieodwołalnie zastępowane na podstawie sesji przez pseudonim ID, tak aby nie można było ich zidentyfikować, a tym samym ustalić osobistego odniesienia, przy czym ten pseudonim ID jest również usuwany po maksymalnie 24 godzinach. Korzystamy z własnej instancji Matomo na serwerach naszej firmy w Europejskim Obszarze Gospodarczym, dzięki czemu żadne dane nie są przekazywane do Matomo lub innych osób trzecich. Ponadto masz możliwość aktywowania w swojej przeglądarce opcji "Nie śledzić". W tym przypadku Matomo nie przechowuje ani nie przetwarza żadnych danych z Twojej wizyty na stronie. Jeśli nie aktywowałeś opcji "Nie śledzić" i nie zgadzasz się na gromadzenie i analizę wyżej wymienionych danych, możesz w każdej chwili wyrazić sprzeciw wobec tego przetwarzania na naszej stronie internetowej. W tym celu udostępniamy Państwu poniżej specjalną ramkę, która jest połączona z naszym systemem Matomo. Poprzez dezaktywację pola wyboru [opt- out (rezygnacja)], na Państwa urządzeniu końcowym zapisywany jest plik cookie, który uniemożliwia gromadzenie i przetwarzanie wszelkich danych sesyjnych na naszej stronie internetowej przez Matomo. Należy pamiętać, że usunięcie plików cookie spowoduje również usunięcie tego pliku cookie i może być konieczne jego ponowne aktywowanie.

If you would like to receive information about the property, one or more specifically selected properties in the project in question:

By providing my above-mentioned personal data, I expressly agree that STRABAG Real Estate GmbH (FN 226332t; 1220 Vienna, Donau-City-Straße 1; "SRE") may process this data as well as the additional personal data collected during the sending process (IP address and date and time of registration/enquiry) in accordance with the General Data Protection Regulation.

On the basis of this consent, SRE may contact me by e-mail and/or telephone (and/or if necessary by letter) in order to inform me about the requested property. Furthermore, SRE may ask me about my satisfaction with services that SRE and/or its group companies have provided to me in this context. The purpose of providing my postal code is to evaluate the places of residence of potential SRE customers so that SRE can target its advertising measures more effectively.

My personal data will be processed exclusively for the stated purposes and will not be passed on to other third parties.

My consent is voluntary and I can revoke it at any time without giving reasons (e.g. by email to vertrieb@strabag-real-estate.com). My revocation does not affect the lawfulness of the processing carried out on the basis of this consent until revocation.

My data will be stored until the sale of the requested property, but in any case only until I withdraw my consent. I have a right of disclosure by SRE of the personal data concerning me, of rectification or erasure, of restriction of processing, of objection to processing, and of data portability (i.e. the right to receive the personal data concerning me, which I have provided to SRE, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from SRE). I have the right to file a complaint with the data protection authority.

If you would like to receive information about real estate offers and services from STRABAG Real Estate as well as related events:

By providing my above-mentioned personal data, I expressly agree that STRABAG Real Estate GmbH (FN 226332t; 1220 Vienna, Donau-City-Straße 1; "SRE") may process this data as well as the additional personal data collected during the sending process (IP address and date and time of registration/enquiry) in accordance with the General Data Protection Regulation.

On the basis of this consent, SRE may contact me by email to inform me about real estate offers and services from the real estate sector, from SRE and/or its other group companies, as well as about related events. Furthermore, SRE may ask me about my satisfaction with services that SRE and/or its other group companies have provided to me.

My personal data will be processed exclusively for the stated purposes and will not be passed on to other third parties.

My consent is voluntary and I can revoke it at any time without giving reasons (e.g. by email to vertrieb@strabag-real-estate.com). My revocation does not affect the lawfulness of the processing carried out on the basis of this consent until revocation.

My data will be stored for the duration of SRE's activities in the real estate sector, but in any case only until I withdraw my consent. I have a right of disclosure to SRE about the personal data concerning me, a right to rectification or erasure, a right to restriction of processing, a right to object to processing and a right to data portability (i.e. the right to receive the personal data concerning me that I have provided to SRE in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from SRE).

I have the right to file a complaint with the data protection authority. I can therefore assert my rights against each of the two controllers with effect for both controllers. The responsible party against whom I assert one or more rights will ensure that the other responsible party is also informed immediately.

Those responsible will work together to ensure that my requests are fulfilled on time, completely and correctly. When processing the data, SRE will use a database that you can fill, edit and delete in equal measure.

The cooperation between SRE as joint controllers in this regard is governed by a separate agreement (within the meaning of Article 26 of the General Data Protection Regulation).

By providing my above-mentioned personal data, I expressly agree that STRABAG Real Estate GmbH (FN 226332t; 1220 Vienna, Donau-City-Straße 1; "SRE") may process this data as well as the additional personal data collected during the sending process (IP address and date and time of registration/enquiry) in accordance with the General Data Protection Regulation.

On the basis of this consent, SRE may contact me by email to inform me about real estate offers and services from the real estate sector, in each case from SRE and/or its group companies, as well as about other current topics from the construction and real estate sector and related events. Furthermore, SRE may ask me about my satisfaction with services that SRE and/or its group companies have provided to me. My personal data will be processed exclusively for the stated purposes and will not be passed on to other third parties.

My consent is voluntary and I can revoke it at any time without giving reasons (e.g. by email to marketing.sre@strabag.com). My revocation does not affect the lawfulness of the processing carried out on the basis of this consent until revocation.

My data will be stored for the duration of SRE's activities in the real estate sector, but in any case only until I withdraw my consent. I have a right of disclosure by SRE of the personal data concerning me, of rectification or erasure, of restriction of processing, of objection to processing, and of data portability (i.e. the right to receive the personal data concerning me, which I have provided to SRE, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from SRE). I have the right to file a complaint with the data protection authority.