M. A. Mortenson Company Privacy Policy and Notice

Last Updated: January 1, 2024

M. A. Mortenson Company (“Mortenson”, “we,” “us,” or “our,”) respects the privacy of our team members, customers, trade partners, suppliers, and website users (“you” or “your”). This privacy policy (“Privacy Policy”) governs the websites we and our affiliates and related entities operate. We have provided the information below to help you understand how your personal data may be collected, used and disclosed by Mortenson, and how to exercise your choices with respect to your personal data.

Information We Collect

We may collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“personal information”). In particular, we have collected and/or disclosed the following categories of personal information from consumers within the last twelve (12) months:

Category	Example(s)	Source(s)
Identifiers	Full name, birth date, postal address, IP address, email address, phone or fax number, account name, social security number, driver’s license number, passport number, signature, bank account numbers or other similar identifiers	Directly from the consumer
Customer/Trade Partner Records	Name, signature, credit card number, bank account number, background check information, other financial information	Directly from the consumer, indirectly from service providers and government entities
Protected Classifications	Race, national origin, gender, marital status, medical condition, disability, military or veteran status, request for family care leave, request for leave for an employee’s own serious health condition, request for pregnancy disability leave, age, etc.	Directly from the consumer
Commercial Information	Personal property, products/services purchased, purchasing histories/tendencies	Directly from the consumer
Biometric Information	Fingerprints, COVID-19 related health data (e.g. daily temperature, symptoms, vaccination status)	Directly from the consumer
Internet/ Network Activity	Browsing history, search history, application access location and information, information on a consumer’s interaction with an internet website, application or advertisement, time and geolocation data related to use of an internet website, application or physical access to a Mortenson office location, etc.	Directly from the consumer, indirectly from service providers
Geolocation Data	Physical location, movement	Directly from the consumer, indirectly from service providers
Audio, electronic, visual, etc. information	Information captured from video, audio, systems, or other forms of monitoring or surveillance, etc.	Directly from the consumer, indirectly from service providers
Professional/ Employment Information	Current or past job history, an employment contract, a contractor agreement, a performance review, a disciplinary record, photos, information from employee expenses, payroll and benefits related data, internal and external contact information, etc.	Directly from the consumer, indirectly from the employer
Non-publicly available education information	Information about a consumer’s educational background, such as education records and transcripts that are not publicly available and any additional information included in a resume.	Directly from the consumer, indirectly from the educational institution
Inferences	Any information drawn from any of the personal information categories referenced above to create a profile about an employee reflecting the employee’s characteristics, psychological trends, preferences, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes	Directly from the consumer, indirectly from service providers

Disclosure of Personal Information for a Business Purpose

We may use or disclose the following categories of your personal information for the following business purposes:

Mortenson may share this information with:

• Other entities controlled by or under common control with Mortenson
• Vendors
• Service providers
• Contractors or sub-contractors
• Our customers and their agents, lawyers, auditors, and/or consultants
• Our lawyers, auditors, and/or consultants
• Federal, state, and local governments (as required by law)
• Third parties with whom you direct us to share your Personal Information
• Other third parties such as consumer reporting agencies when we perform employee background screenings

We primarily use the information we collect from and about you:

• To improve website functionality, understand website interaction trends, gather demographic insights about our website user base, personalize your experience on our website, and otherwise administer and improve our website and services.
• To execute business activities, including completing our services.
• To conduct marketing and promotional activities, including responding to inquiries about Mortenson’s services.
• To recruit employees, including to conduct employment-related background screening and checks.
• To administer benefits, such as medical, dental, vision, and retirement benefits.
• To pay and reimburse for expenses, including salary administration, payroll management, payment of expenses, and to administer other compensation-related payments.
• To assist you in case of emergency, including maintenance of contact details for you and your dependents in case of personal or business emergency.
• To monitor employees’ eligibility to work in the U.S.
• To a facilitate better working environment, including providing senior management information about other employees and conducting training.
• To ensure a safe and efficient working environment, which includes Mortenson’s actions relating to disciplinary actions and code of conduct processes and investigations.
• To maintain security on Mortenson’s websites and other internet connected assets, which includes hosting and maintenance of computer systems and infrastructure, management of Mortenson’s software and hardware computer assets, systems testing, such as development of new systems and end-user testing of computer systems, training, and monitoring email and Internet access.
• To comply with applicable law or regulatory requirements, such as state and federal legal obligations and internal company reporting obligations, including headcount, management information, demographic and Health, Safety, Security and Environmental reporting.

Any third-party that receives personal information from Mortenson may only process the information in accordance with applicable data processing agreements or contract terms.

Sale of Personal Information

We do not sell your personal information.

Your Privacy Rights

You may have the right to request to:

• Access the personal data we have about you;
• Receive an electronic copy of the personal data we have about you;
• Rectify any errors in your personal data;
• Delete your personal data; and
• Restrict or object to how we process personal data about you.

Contact Us

If you have any comments, requests, or questions, or to exercise the rights described above, please submit a verifiable consumer request to us by either calling the toll-free number below or submitting a written request via the email address or the street address below.

Toll-free Number:
833.363.1074

Email:
privacy@mortenson.com

Street Address:
ATTN: Legal Department Mortenson Construction 700 Meadow Lane North Minneapolis, MN 55422

We may require you to provide certain personal information to allow us to verify your identity, such as your email address, phone number, billing zip code, etc. or by requesting you submit your request via your customer account if one exists. If we cannot comply with a request, we will explain the reasons in our response. You also have the right to lodge a complaint with a supervisory authority.

Use of an Authorized Agent

You may designate, in writing or through a power of attorney, an authorized agent to make these privacy requests on your behalf to exercise these rights in accordance with California law. If this occurs, we will require the agent to provide proof that you have authorized it to act on your behalf and may require you to verify your own identity with us directly before we accept a request.

Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights.

Your Nevada Privacy Rights

We do not sell your personal information. Nevertheless, if you are a resident of the state of Nevada and would like to opt-out of the sale of your personal information, request to us by submitting a written request via the email address or the street address below.

Email:
privacy@mortenson.com

Street Address:
ATTN: Legal Department Mortenson Construction 700 Meadow Lane North Minneapolis, MN 55422

You must write “Your Nevada Privacy Rights” at the top of your request. We will maintain this request and honor it should we begin selling personal information in the future.

Changes to Our Privacy Notice

We reserve the right to amend the Privacy Policy at any time and for any reason, without notice to you, other than the posting of the amended Privacy Policy. Users should check the website to see the current Privacy Policy that is in effect and any changes that may have been made to it. The provisions contained herein supersede all previous notices or statements regarding our privacy practices and the terms and conditions that govern them. Your continued use of our website or interaction with us through other methods following the posting of changes and/or our directing you to the updated Privacy Notice constitutes your acknowledgment of such changes.

Questions

If you have questions regarding our Privacy Policy or your privacy rights as described above, please contact us at:

Toll-free Number:
833.363.1074

Email:
privacy@mortenson.com