Privacy Policy

We Build Value Privacy Policy

Privacy Policy pursuant to Article 13 of the GDPR

Data Controller: Webuild S.p.A. (“we”, “us” or “Webuild”), with registered office at Centro Direzionale Milanofiori, Strada 6 – Palazzo L, 20089 Rozzano (Milan); email: privacy@webuildgroup.com; Tel: +39 02 44422111.

We collect and process your personal data with the utmost care and in accordance with the GDPR (EU Regulation 2016/679) and the Privacy Code (Consolidated Legislative Decree 196/2003) (collectively, the “Privacy Laws”).

This Privacy Policy applies to the We Build Value website (https://www.webuildvalue.com/en); (hereinafter, the “Website” or “portal”).

This Privacy Policy (hereinafter, the “Policy”) explains what kind of personal information we collect, how we use it, how long we retain it, with whom we may share it, and your rights in relation to the information collected. We may also collect information about your internet browsing through cookies and other tracking technologies. Our Cookie Policy is available here.

Introduction

This Privacy Policy applies to the processing of personal data collected on the portal, which is Webuild’s digital magazine dedicated to showcasing the infrastructure and major projects carried out by the Group. When you browse the portal or use our services, including subscribing to our newsletter and using our social media channels, we collect personal data (hereinafter, the “Data”) relating to you. For this reason, in accordance with the provisions of data protection legislation, we have drawn up this Policy to describe what Data we collect, the purposes and methods of processing such Data, and the security measures we adopt to protect it. This Policy does not apply to third-party websites that may be accessed via links or banners on the Website; in such cases, we invite you to consult the relevant privacy policy.

This Policy should be read in conjunction with the Website’s Cookie Policy and the Website’s Disclaimer.

In this Policy, we will cover the following topics:

1. What data do we collect and how do we process it?
2. Why do we collect your Data and what is the legal basis for processing it?
3. How long do we retain your data?
4. Who do we share your data with?
5. How do we protect your data?
6. How can you exercise your data protection rights?
7. How can you contact Webuild?
8. The Data Protection Officer (DPO)
9. Minors.

This Privacy Notice was last updated on 10 November 2026.

Before submitting any personal data, please read this Policy carefully to understand how we process your personal data and the nature of such processing, and please consult it regularly to keep abreast of any updates to it.

By using or accessing the Website, you confirm that you have read this Privacy Policy and that you understand how your personal data is collected, processed, used and disclosed as described below. We may update this Privacy Policy from time to time. Should the text of this Privacy Policy be amended, we will inform you of such changes via a dedicated banner when you access the Website, so that you are properly informed about the processing of your personal data.

1. What data do we collect and how do we process it?

We collect your data directly from you or from other sources, as specified below.

1.1 Browsing data

The IT systems used to operate our services collect, during their normal operation, certain data about you, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected for the purpose of identifying you, but could lead to your identification if, for example, it were combined with data held by third parties. This category of data includes, for example, the IP address and domain name associated with your computer, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server, and other parameters relating to your operating system. We use this data solely for the purpose of deriving anonymous statistical information on the use of the services and to verify their correct functioning. We delete the data collected in this way immediately after processing. The data may be used to establish liability in the event of cybercrimes committed against the services.

The optional and voluntary sending of emails to the addresses listed on this Website entails the collection of the sender’s email address, which is required to respond to enquiries, as well as any other personal data included in the message.

When you visit the Website, we automatically collect information via cookies and other tracking technologies. For more specific information on the cookies and other tracking technologies we use, please refer to our Cookie Policy.

1.2 Identifying data

In certain parts of the Website, we may ask you to provide certain Data in order to respond to your enquiries. In such cases, the Data processed is solely that which you provide as a user, such as: your first name, surname, email address and any other personal data you may provide in connection with your enquiries.

More specifically, you can subscribe to our newsletter using the form provided, and we will process the following data you provide: first name, surname and email address. By subscribing once, you will receive both the We Build Value magazine newsletter and the Webuild corporate newsletter. Additional data you may provide (optional data) includes: company, country and area of interest. After registration, our system will send you an email containing an activation link, which you can use to confirm your subscription to the newsletter and verify that you are the rightful owner of the email address associated with your account for the purpose of receiving the newsletter. The newsletter will only be sent once you have confirmed the activation link. You can unsubscribe from the newsletters at any time by simply clicking on the unsubscribe link at the bottom of each newsletter.

We may also process your contact details and any other data you provide voluntarily in order to respond to your enquiries when you contact us using the contact details set out in point 7. How can you contact Webuild?

We process your data primarily using electronic means.

2. Why do we collect your data and what is the legal basis for processing it?

We process your data for the purposes set out below; for each purpose, we specify the data processed and the legal basis that legitimises our processing:

When the legal basis for processing your Data is our legitimate interest, we carry out a balancing test to ensure that your interests and your fundamental rights and freedoms are adequately protected. You may request further details by contacting us. Our legitimate interests include, for example, exercising and defending our rights, preventing misuse of the Website, ensuring IT and network security, and managing extraordinary corporate transactions.

When is it necessary to provide your personal data? Providing your data is necessary to enable us to comply with legal and regulatory obligations and to respond to your requests for information. If you do not provide your data, we will not be able to act on your requests. Where processing is based on our legitimate interest and your consent, providing your data is optional and failure to do so will have no consequences.

3. How long do we retain your data?

Your data is retained for the time strictly required to fulfil the purpose for which it was collected, and in accordance with the data retention limitation principles set out in data protection legislation. With regard to your subscription to our newsletter, we retain your data for two years from the date of your unsubscribe request or from the date of any withdrawal of consent, whichever is earlier.

4. Who do we share your Data with?

4.1 Internal and external disclosure of your data

Your Data is processed within Webuild by our duly authorised staff, as required. Your data is also shared with our suppliers for technical and organisational services necessary for the processing purposes set out in point 2. Why do we collect your data and what is the legal basis for processing it? above. Examples include suppliers of technical support services for the Website and suppliers of services for sending our newsletter. These parties act as our data processors on the basis of our instructions and in accordance with the terms of the contracts signed with us.

We may disclose your Data to authorities, public bodies and other legitimate recipients as required by law. In such cases, the recipients act as independent data controllers for their respective institutional purposes.

In the event of extraordinary corporate transactions such as reorganisations, acquisitions or disposals of Webuild or parts thereof, or other extraordinary transactions, we may disclose your Data to third parties involved in the transaction, in accordance with data protection laws and applicable regulations.

To receive an up-to-date list of the recipients of your Data and our data processors, you may send us an email to the following address: privacy@webuildgroup.com or you may contact Webuild or our Data Protection Officer using the contact details provided in sections 7. How can you contact Webuild? and 8. The Data Protection Officer (DPO).

4.2 Transfer of data abroad

In the event of a transfer of your Data to third countries, i.e. countries that do not guarantee the same level of data protection as recognised by data protection laws, we will ensure that the transfer takes place in accordance with the provisions of those laws. At present, your Data is not subject to transfer to third countries.

5. How do we protect your data?

We adopt – and require our service providers to adopt – appropriate technical and organisational security measures to prevent the loss or destruction (including accidental loss or destruction) of Data, unlawful or improper use, and unauthorised access to Data, in accordance with applicable legislation. Furthermore, our IT systems are configured in such a way that personal and identifying data are used only when necessary to achieve the specific processing purposes pursued in each case. Please note that the electronic transmission or storage of information is not 100% secure and therefore, despite the security measures we have put in place to protect your Data, we cannot guarantee that loss, misuse or alteration of data will not occur. We do not use automated individual decision-making processes that could produce legal effects on you or, similarly, could significantly affect you personally.

6. How can you exercise your data protection rights?

You may contact Webuild or our Data Protection Officer at any time using the contact details provided in sections 7. How can you contact Webuild? and 8. The Data Protection Officer (DPO) to exercise your rights under data protection legislation, including:

• Request for access to your Data: you have the right to obtain confirmation from Webuild as to whether or not your Data is being processed and, if so, to access it. Access entails being provided with certain information, including the purposes of the processing, the categories of Data processed and the recipients to whom the Data are disclosed. However, there is no absolute right of access, and the interests of other individuals may limit your right of access. You also have the right to obtain a copy of the Data being processed. A fee may be charged for additional copies.
• Rectification of your Data: you have the right to have inaccurate Data rectified, as well as to have incomplete Data completed.
• Erasure of your Data: you have the right to have your Data erased without undue delay.
• Restriction of the processing of your Data: in certain circumstances, including where the accuracy of the Data is contested, you have the right to request that the processing of your personal Data be restricted.
• Data portability: you have the right to receive the Data you have provided to Webuild in a structured, commonly used and machine-readable format, in accordance with the procedures set out in the data protection legislation.
• Right to object to the processing of your Data: you have the right to object to the processing of your Data for marketing purposes and, where a specific situation so requires, you may object to the processing of your Data carried out on the basis of Webuild’s legitimate interests, unless Webuild can demonstrate compelling legitimate grounds for the processing that override your interests (e.g. the exercise or defence of a legal claim).

You may also lodge a complaint with the relevant supervisory authority (the Italian Data Protection Authority – www.garanteprivacy.it).

7. How can you contact Webuild?

If you have any questions or comments regarding this Policy or our privacy practices, or if you wish to exercise your privacy rights, if you wish to receive an up-to-date list of our data processors and third parties to whom your Data may be disclosed, or if you wish to receive further information on the balancing test carried out when we rely on our legitimate interest for the processing of Data, you may contact our Data Protection Officer using the contact details provided in point 8. The Data Protection Officer (DPO) below, or you may contact Webuild as follows:

Webuild S.p.A., Centro Direzionale Milanofiori Strada 6 – Palazzo L – 20089 Rozzano (Milan), email: privacy@webuildgroup.com.

8. The Data Protection Officer (DPO)

The Data Protection Officer (DPO) at Webuild S.p.A. can be contacted at the following email address: DPO@webuildgroup.com.

9. Minors

The Website is not designed to attract children, in particular those under the age of 14. Webuild does not knowingly collect personal data from children under the age of 14, who should not use the Website without the permission of their parents or guardians. If you are the parent or guardian of a child under the age of 14, please contact us if you are aware that the child has used the Website. We will promptly delete the child’s personal information within a reasonable timeframe.