Privacy Policy

This English version is a translation for convenience. The German version is legally binding.

Building Infrastructure Construction AG – Privacy Policy

Introduction

This privacy policy sets out the approach of Building Infrastructure Construction AG (“we”, “our”, or “the Company”) regarding data collected from users who access our website at www.biconag.com (“Website”) or otherwise provide us with personal data (collectively, “Users”).

User Rights

You have the following rights: - Request confirmation as to whether and to what extent your personal data is used and processed, as well as access to the personal data stored about you and additional information - Request a copy of the personal data you have voluntarily provided to us in a structured, commonly used, and machine-readable format - Request correction of the personal data we have stored about you - Request the deletion of your personal data - Object to our processing of your personal data - Request restriction of our processing of your personal data - Lodge a complaint with a supervisory authority Please note, however, that these rights are not unlimited but are subject to our own legitimate interests as well as regulatory requirements. If you would like to exercise any of the rights listed here or would like further information, please contact our data protection officer at: Contact.

Retention

We retain your personal data for as long as is necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our policies. Retention periods depend on the type of data collected and the purpose for which it was collected, taking into account both case-specific circumstances and the need to delete outdated, unused information as soon as possible. We store records containing customers’ personal data, account-setup documents, communications, and other data in accordance with applicable laws and regulations. We may, at any time and at our sole discretion, correct, complete, or remove incomplete or inaccurate data.

Basis for Data Collection

The processing of your personal data (i.e. any data that could reasonably be used to identify you; “personal data”) is necessary for us to fulfill our contractual obligations to you and to provide you with our services, protect our legitimate interests, and comply with the legal and financial regulatory obligations to which we are subject. By using this website, you consent to the collection, storage, use, disclosure, and other processing of your personal data as described in this privacy policy. Please read this privacy policy carefully before making any decisions.

What Data Is Collected?

We collect two types of data and information from Users. The first category includes non-identifying and non-identifiable user data that is provided or collected through use of the website (“non-personal data”). We do not know the identity of the user from whom non-personal data was collected. Non-personal data that may be collected includes aggregated usage data and technical data transmitted by your device, including certain information about software and hardware (e.g., the browser and operating system used on the device, language settings, access times, etc.). We use this data to improve the functionality of our website. We may also collect data about your activity on the website (e.g., pages visited, browsing behavior, clicks, actions, etc.). The second category includes personal data , i.e., data that identifies an individual or can identify an individual through reasonable means. Such data includes: - Device data: We collect personal data from your device. Such data includes geolocation data, IP address, unique identifiers (e.g., MAC address and UUID), and other data resulting from your activity on the website.

How Do We Obtain Data About You?

We obtain your personal data from various sources: - You provide us with such data voluntarily, for example when registering on our website. - We receive such data when you use our website or access it in connection with one of our services. - We receive such data from other providers, services, and public registers (for example, from data-traffic analytics providers). How Is the Data Used? To Whom Is the Data Disclosed? We do not disclose User data to third parties except as described in this privacy policy.

We Use Data for the Following Purposes:

- To communicate with you (sending notices regarding our services, providing technical information, and, where applicable, handling customer service requests) - To inform you about new updates and services In addition to the various purposes listed above, we may also disclose personal data to our subsidiaries, affiliated companies, and subcontractors. In addition to the purposes listed in this privacy policy, we may pass on personal data to our trusted external providers, who are based in various jurisdictions around the world, for the following reasons: - Hosting and operating our website We may also disclose data when we believe in good faith that it is helpful or appropriate to: (i) comply with applicable laws, regulations, legal proceedings, or governmental requests; (ii) enforce our policies (including our agreement) and, where applicable, investigate any potential violations thereof; (iii) investigate, detect, prevent, or take action against illegal activities or other misconduct, suspected fraud, or security issues; (iv) assert or enforce our own legal claims or defend ourselves against claims made by others; (v) protect the rights, property, or safety of us, our Users, you, or third parties; or (vi) cooperate with law enforcement authorities and/or protect intellectual property or other legal claims.

Cookies

We and our partners use cookies to provide the corresponding services. This also applies when you visit our website or access our services. A “cookie” is a small data packet assigned to your device by a website when you visit it. Cookies are useful and can be used for various purposes. These include, for example, easier navigation between different pages, automatic activation of certain functions, saving your settings, and optimized access to our services. The use of cookies also allows us to display advertising relevant to your interests and to collect statistical information about your use of our services. This website uses the following types of cookies: a. “Session cookies” , which ensure normal system use. Session cookies are stored only for a limited time during a session and are deleted from your device as soon as you close your browser. b. “Persistent cookies”, which are read only by the website and are not deleted when the browser window is closed, but are instead stored on your computer for a certain period of time. This type of cookie allows us to identify you on your next visit and, for example, to save your settings. c. “Third-party cookies” , which are set by other online services that are represented with their own content on the page you are visiting. These may, for example, be external web analytics companies that record and analyze access to our website. Cookies do not contain personal data that identifies you, but the personal data we store may be linked by us to the data contained in the cookies. You can remove cookies via your device’s settings. Please follow the corresponding instructions. Please note that disabling cookies may restrict certain functions when using our website. The tool we use is based on technology from Snowplow Analytics . The data we collect on the use of our website includes, for example, how often users visit the website or which areas are accessed. The tool we use does not collect any personal data and is used by our web hosting provider and service provider exclusively to improve their own offering.

Use of Script Libraries (Google Web Fonts)

To ensure that our content is displayed correctly and attractively in every browser, we use script and font libraries such as Google Web Fonts (https://www.google.com/webfonts) for this website. Google Web Fonts are transferred to your browser’s cache so that they only need to be loaded once. If your browser does not support Google Web Fonts or denies access, the content will be displayed in a default font. - When script or font libraries are called, a connection to the library’s operator is automatically established. This theoretically gives the operator the possibility of collecting data. It is currently not known whether, or for what purpose, the operators of the respective libraries actually collect data. - You can find the privacy policy of the operator of the Google library here: https://www.google.com/policies/privacy.

Collection of Data by Third Parties

This policy only addresses the use and disclosure of data that we collect from you. If you publish data on other websites or disclose it to third parties on the internet, different provisions may apply. You should therefore always read the general terms and conditions and privacy policies carefully whenever you disclose data. This privacy policy does not apply to the business practices of companies that we do not own or control, or to persons other than our employees and staff, including third parties to whom we disclose this data as described in this privacy policy.

How Do We Protect Your Data?

We implement security measures on the website with great care and protect your data. We use industry-standard procedures and policies to ensure the protection of collected and stored data and to prevent unauthorized use of such data. Although we take reasonable steps to protect data, we cannot be held responsible for the actions of those who have gained unauthorized access to our website or misuse it, and we make no express or implied warranty that we can prevent such access.

Transfer of Data Outside the European Economic Area

Please note that some recipients may not be based in the European Economic Area. If this is the case, we will only transfer your data to countries with an adequate level of data protection approved by the European Commission, or we will ensure an adequate level of data protection through a legal agreement.

Advertising

You can opt out of numerous third-party advertising networks, including networks operated by members of the Network Advertising Initiative (“NAI”) and the Digital Advertising Alliance (“DAA”). Information about the practices of NAI and DAA members, about the options you have regarding these companies’ use of such data, and about how to opt out of third-party advertising networks operated by NAI and DAA members can be found on their respective websites: http://optout.networkadvertising.org/#!/ and http://optout.aboutads.info/#!/.

Marketing

We may use your personal data, such as your name, email address, phone number, etc., ourselves, or pass it on to an external subcontractor, in order to provide you with promotional materials about our services that may be of interest to you. We respect your right to privacy. That is why these marketing materials always give you the option to unsubscribe from further mailings. If you unsubscribe, your email address or phone number will be removed from our marketing distribution lists. Please note that even after unsubscribing from our marketing emails, we will continue to send you emails containing important information that do not include an unsubscribe option. These include maintenance notices or administrative notifications.

Corporate Transaction

We may disclose data in the event of a corporate transaction (e.g., the sale of significant parts of the company, a merger, a consolidation, or an asset sale). Should any of the above occur, the acquirer or relevant company will assume the rights and obligations set out in this privacy policy.

Minors

Protecting children’s data is especially important online. The website is not designed for children and is not directed at them. Use of our services by minors is only permitted with the prior consent or authorization of a parent or legal guardian. We do not knowingly collect personal data from minors. If a parent or legal guardian becomes aware that their child has provided us with personal data without their consent, they can contact us via Contact .

Updates or Changes to This Privacy Policy

We reserve the right to change or review this privacy policy from time to time. You can find the date of the current version under “Last updated on”. Your continued use of the platform after we announce such changes on our website constitutes your acceptance of those changes to the privacy policy and is deemed your agreement to be bound by the amended provisions.

How to Reach Us

If you have general questions about the website, the data we collect about you, or the use of this data, please get in touch with us via Contact . Building Infrastructure Construction AG Am Kloßberg 1 64367 Mühltal Germany Phone: 06151 – 2734670 Fax: 06151 – 2734679 Email: info@biconag.com Last updated on December 19, 2025