BAM Privacy Statement

This is the privacy statement of Royal BAM Group NV and its subsidiaries (hereinafter: BAM or we). This statement describes how BAM handles the personal data of our customers, suppliers and partners. This privacy statement may be changed from time to time. The most recent version is published on our website.

2. Contact details

Koninklijke BAM Groep NV Runnenburg 9
3981 AZ Bunnik The Netherlands +31 (0)30 659 8988 https://www.bam.com

Walter Swinkels is BAM’s Group Privacy Officer. He can be reached at safety@bam.com. 3. Personal data processed by us

Personal data mean all data that can provide information about an identifiable natural person. BAM processes your personal data because you are using our services and/or because you have provided us with this information.

Below is an overview of the personal data we process:

• -  First and last name

• -  E-mail address

• -  IP address

• -  Photographs

• -  Other personal data you have actively provided. For example, by creating a profile on this website, in correspondence and by telephone.

4. Purposes and principles

BAM processes your personal data for the following purposes:

• -  To send our newsletter and other publications.

• -  To call or e-mail you if this is required for the performance of our services.

• -  To develop and improve our services.

• -  To promote safety, security, health and integrity.

• -  BAM analyses your website behaviour in order to improve the website and to tailor the range of products and services to your preferences.

- BAM also processes personal data if we are legally obliged to do so, such as information that we need for our tax return.

The principles for the processing of your personal data depend, on a case-by-case basis, on the necessity to process them in order to conclude and execute our agreement with you, to comply with a legal obligation, to protect your vital interests or those of some other natural person or to safeguard the interests of BAM or our partners, unless these are outweighed by your interests, fundamental rights or fundamental liberties.

5. Retention periods

BAM will keep your personal data only for as long as is necessary in order to fulfil the purposes for which your data are collected, to represent the legitimate interests of BAM and as long as we are legally obliged to do so.

If we process your personal data to answer a question posed by you, we will retain the data for four weeks so that we can also answer a possible follow-up question or complaint.

If we process your personal data within a game, competition or offer, we will retain the data up to one year afterwards.

6. Sharing personal data with third parties

BAM will share your personal data with several third parties if this is necessary for the execution of the agreement and to comply with any legal obligation. These parties may include banks, insurers, IT service providers, accountants, consultants and subcontractors. We enter into a data-processing agreement with companies that process your data on our behalf to ensure the same level of security and confidentiality of your data. BAM remains responsible for these processing operations. In addition, BAM provides your personal data to third parties. We do so only with your express consent.

7. Cookies and similar techniques

BAM uses functional and analytical cookies. A cookie is a small text file which is saved in the browser of your computer or tablet or smartphone when you first visit this website. BAM uses cookies with a pure technical functionality. These ensure that the website works properly and that, for example, your preferred settings are remembered. These cookies are also used to make the website work well and to optimise it.

In addition, we place cookies that keep track of your browsing habits so that we can offer customised content and advertisements.

You can opt out of cookies by setting your browser to deactivate the saving of cookies. In addition, you can delete all previously saved information in your browser settings.

For an explanation (in Dutch), please visit: https://veiliginternetten.nl/themes/situatie/cookies-wat-zijn- het-en-wat-doe-ik- ermee/.

Cookies are also placed on this website by third parties (Vimeo, Google Analytics).
For more information, please refer to our cookie policy: https://www.bam.com/en/cookies

8. View, modify or delete data

You have the right to view, modify or delete your personal data. In addition, you have the right to withdraw your previously given consent to the data processing, if any, or object to the processing of your personal data by BAM, and you have the right to transfer your data. This means that you can submit a request to us to transfer the personal data that we have from you in a computer file to an organisation designated by you.

Please send your request for the review, correction, deletion or transfer of your personal data or a request for withdrawal of your consent or objection to the processing of your personal data to safety@bam.com.

To ensure that the request has actually been made by you, we may ask that you include a copy of your ID. We will respond to your request as soon as possible, and in any case within four weeks.

The removal of your personal data is possible only when the data are no longer relevant.

9. Complaints procedures

If you have a complaint about compliance with this privacy statement, or about a violation of your rights pursuant to the law, please contact the Data Protection Officer.

In addition, you have the option to submit a complaint to the national supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). For this, use the following link (in Dutch): https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons.

10. Security

BAM takes the protection of your data seriously and takes the appropriate technical, physical and organisational measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised changes. We do this, for example, by means of the IT security policy, training our employees and by using secure storage and connections.

If you have the impression that your data are not secure or if you have evidence of abuse, please contact our customer service or send an e-mail to safety@bam.com.

11. Worldwide BAM Safety Day 2018

To offer a personal touch and to visualise what ‘Jouw Veiligheid is Mijn Veiligheid’ (‘Your Safety is My Safety’) means on a day-to-day basis, we will organise a so-called Safie campaign. As of 9 October, you will all be encouraged to take a picture (or a brief 10–20 second video) of, for example, employees who have made great contributions to security, good examples of a safe situation or lessons learnt. The pictures / videos can be uploaded onto www.bamsafety.com through the website and the rebranded BAM Safety App. These will further enliven and enrich our safety narrative.

Pictures and videos uploaded to the bamsafety.com website through ‘Add Safie’ will be displayed as long as the Worldwide BAM Safety Day 2018 competition is ongoing. You may ask BAM to have the picture or video removed from www.bamsafety.com.

12. BAMSafety.com

BAMSafety.com is accessible to the public to ensure that everyone employed by BAM (employees of both BAM and subcontractors, with or without BAM e-mail addresses) has access to the information on www.bamsafety.com.

Bunnik, 9 October 2018