Effective Date: January 1, 2024
Last Updated: December 27, 2023

This California Notice at Collection and Privacy Policy for Applicants and Employees (“California Workforce Disclosure”) explains how Vulcan Materials Company and its subsidiaries and affiliates (“Vulcan,” “ we,” “us,” or “our”) collects, uses, discloses, and retains personal information (“Information Practices”) subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”).

This California Workforce Disclosure applies solely to California residents who interact with us as a job applicant (“Applicants”), and employees, independent contractor, or in an employment related context (collectively, “ Employees”). For ease of reading, “you” refers to both Applicants and Employees.

The following table includes disclosures for the preceding 12 months of: categories of personal information we have collected about you, the categories we have disclosed for a business purpose, and categories of third parties with whom we shared the personal information during that period.

GENERAL PERSONAL INFORMATION

Categories of Personal Information

Business/Commercial Purposes for Collection and Disclosure

Categories of Third Parties Receiving Personal Information

Identifiers: For example, a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.

Personal Information Categories from Cal. Civ. Code § 1798.80(e): For example, name, Social Security number, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, medical information, or health insurance information.

Characteristics of CA or Federal Protected Classifications: For example, race, religion, national origin), age (40 and over), gender, medical condition, familial status, disability, or veteran status.

Commercial Information: For example, records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Internet or Other Similar Network Activity: For example, browsing history, search history, and information regarding your interaction with an Internet Web site or application.

Geolocation Data: For example, a device’s physical location.

Sensory or Surveillance Data: For example, video, electronic, or audio surveillance and monitoring for security purposes. This would include call recordings and monitoring security badge use or IT login access.

Professional or Employment-Related Information: For example, compensation, evaluations, performance reviews, personnel files, and current and past job history.

Education Information: For example, student records or directory information (as defined in the Family Education Rights and Privacy Act).

Profile Data: For example, information about your behavior and aptitudes for hiring, retention, and promotion purposes.

Comply with all applicable laws and regulations.
Recruit and evaluate job applicants and candidates for employment.
Conduct background and reference checks.
Manage your employment relationship with us, including onboarding, timekeeping, payroll, employee benefits, training and development, job performance, emergency contacts, workers compensation, reviews, promotions, discipline, termination, online employee accounts, and other HR purposes.
Administer employment benefits such as retirement, health, and other benefit programs, services, or products for employees and their dependents or beneficiaries.
Manage and monitor employee access to company facilities, equipment, and systems.
Conduct internal audits and workplace investigations.
Investigate and enforce compliance with Vulcan policies and procedures.
Maintain commercial insurance policies and coverages, including workers’ compensation and other liability insurance.
Perform workforce analytics, data analytics, and benchmarking.
Administer and maintain Vulcan operations, including safety, logistics, planning, and product quality purposes.
Promote our products/services and employee subject matter expertise.
Exercise or defend the legitimate business interests and legal rights of Vulcan and its employees.

Service Providers: Vulcan uses service providers to assist with

Applicant selection and recruitment processes
Onboarding for new employees, including the collection, processing, and validation of personal information
Services relating to employment, including payment processing for direct deposits and processing an employee’s benefits or expenses
Services relating to operations and employment, including web hosting, email, legal, and information technology services
We do not allow third-party service providers to use your data for their own purposes. They may only process it per our instructions and must keep it confidential
Law enforcement or other legal authorities
Government entities
Service providers assisting our business in operations, including cloud storage, cybersecurity, logistics, planning, operations, safety, and product quality providers

SENSITIVE PERSONAL INFORMATION

We do not use or disclose the below sensitive personal information for purposes other than those business purposes specifically enumerated under CCPA. As a result, we do not offer a right to limit our use or disclosure of these categories of sensitive personal information.

Categories of Personal Information

Business/Commercial Purposes for Collection and Disclosure

Categories of Third Parties Receiving Personal Information

Social Security Number, Driver’s License, State Identification Card, or Passport Number

Account log-in, financial account, debit card, or credit card number when provided with any required security or access code, password, or credentials allowing access to an account

Precise geolocation

Racial or ethnic origin, religious or philosophical beliefs, or union membership

Contents of a consumer’s mail, email, and text messages (unless we are the intended recipient of the communication)

Citizenship or immigration status

Genetic data

Health information

Information concerning sex life or sexual orientation

Comply with all applicable laws, regulations, and legal process
Conducting background and reference checks
To assess your eligibility for employment and otherwise manage your employment relationship with us, including, for example: onboarding, payroll, and/or other human resource purposes.
To administer employment benefits such as retirement, health, and other benefit programs, services, or products to which employees and their dependents or their beneficiaries receive access to through us.
Manage and monitor employee access to company facilities, equipment, and systems.
To facilitate and provide reasonable accommodations
Perform workforce analytics, data analytics, and benchmarking.
Exercise or defend the legitimate business interests and legal rights of Vulcan and its employees.
Other business purposes specifically enumerated under CCPA.

Service Providers: Vulcan uses third-party service providers to assist with the administration of benefits and the recruitment process, including the collection, processing, and validation of Sensitive Personal Information. For example, payment processing for direct deposits and processing an employee’s benefits or expenses. Vulcan may also share this information with Service providers who assist our business in operations, including but not limited to cloud storage providers, cybersecurity providers, logistics and planning providers, operations and safety providers, product quality providers, operating and management companies. We do not allow our third-party service providers to use your data for their own purposes. We only permit them to process it for specified purposes and in accordance with our instructions, and they are required to keep it confidential.

We may also disclose your personal information to the following categories of third parties:

At Your Direction:
- We may disclose your personal information to any third party with your consent or at your direction.
Business Transfers or Assignments:
- We may disclose your personal information to other entities as reasonably necessary to facilitate a merger, sale, joint venture or collaboration, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
Legal and Regulatory:
- We may disclose your personal information to government authorities, including regulatory agencies and courts, as reasonably necessary for our business operational purposes, to assert and defend legal claims, and otherwise as permitted or required by law.

The categories identified as collected in the tables above were collected from the following categories of sources:

Information from you that you directly provide to us.
Information from you that you provide passively from your use of employer owned devices or on personal devices in the course and scope of your employment with us.
Information about you from third party sources:
- Internet service providers
- Data analytics providers
- Public record sources
- Government entities
- Operating systems, and platforms
- Social media networks and platforms
- Professional Organizations
- Recruitment Organizations or Firms
- Benefits providers
- Credit Reporting Agencies or Resellers
- Corporate merger and acquisition activity
- Service Providers who assist in our business operations

Notice of Sale and/or Share: We have not and do not sell any of your personal information or share with third parties for cross-context behavioral advertising (including any sensitive personal information). Therefore, we do not offer consumers the right to opt-out. We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age.

RETENTION PERIODS

Records containing personal information shall be retained if a valid business reason exists or as required by applicable law. Personal information will only be retained as long as it is reasonably necessary and proportionate for the purposes for which personal information is processed. Valid business reasons include the effective operation of our business, to manage your employment with us, to administer payroll and benefits, to comply with legal and regulatory obligations, and legal retention requirements, which may be pertinent to ongoing or reasonably foreseeable litigation, legal hold, or government investigation.

YOUR RIGHT TO KNOW

You have the right to request any of the following:

the categories of personal information we have collected about you
the categories of sources from which the personal information is collected
the business or commercial purpose for collecting your personal information
the categories of third parties to whom we disclose personal information
the specific pieces of personal information we have collected about you

You can do this through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

YOUR RIGHT TO REQUEST CORRECTION OF INACCURATE PERSONAL INFORMATION

You have the right to request correction of inaccurate personal information maintained by us. We may request documentation from you to determine the accuracy of the information. If you provide us documentation either upon our request or through your own initiative, that documentation will only be used for the purpose of correcting your personal information and complying with our recordkeeping requirements. We may deny your request if we have previously denied your same request to correct an alleged inaccuracy in the past six (6) months unless you provide new or additional documentation that the information at issue is inaccurate.

As an alternative to correction, we may delete the inaccurate information if it does not negatively impact you or if you consent to this deletion. We reserve the right to deny this request if allowed under law, or if we determine that the contested information is more likely than not accurate, based on the totality of circumstances. You can submit a correction request through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

YOUR RIGHT TO REQUEST DELETION OF YOUR PERSONAL INFORMATION

You have the right to request that we delete any of your personal information collected by us, subject to certain exceptions. You can do this through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

There may be scenarios where we deny your deletion request. If that occurs, we will provide you with an explanation as to why we could not delete all or some of your personal information.

SUBMITTING A VERIFIED CONSUMER REQUEST

You have the right to submit verified consumer requests to know information, to correct information, or for deletion.

The response to a request to know will provide all personal information collected and maintained about you in accordance with the law, unless doing so proves impossible or would involve disproportionate effort. Please note that we are not required to provide personal information to you more than twice in a 12-month period. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

You can submit a verified consumer request through our webform or by calling our toll-free number at 1-800-873-4898. In order to verify your identity, we will ask you to provide us with information we can match with our own records. If you call us, you will be asked to provide the same information requested in the webform. If you submit a request that is not through one of these designated methods or is deficient in some manner unrelated to verification, we will provide you with information on how to submit the request or remedy any deficiencies. Once we receive your verifiable consumer request, we will confirm receipt of the request within 10 business days describing our verification process. We will respond to your request within 45 calendar days, if we are able to verify your identity. Requests for deletion will require a separate confirmation that you want your information deleted.

Requests to Know or Delete for Child Under the Age of 13: We do not knowingly collect information of minors under the age of 13.

USING AN AUTHORIZED AGENT TO SUBMIT A REQUEST

Only you, a person registered with the California Secretary of State, or a person you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. If you use an authorized agent, you may provide a power of attorney executed pursuant to California Probate Code sections 4000 to 4465. If a power of attorney that meets those provisions is not submitted, you will be required to verify your identity directly with us, and directly confirm with us that you provided the authorized agent permission to submit the request here.

YOUR RIGHT TO NON-DISCRIMINATION FOR THE EXCERCISE OF A PRIVACY RIGHT

We will not discriminate or retaliate against you for exercising any of your CCPA rights.

CHANGES TO OUR PRIVACY NOTICE

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on this page and update the notice’s effective date.

CONTACT FOR MORE INFORMATION

If you have questions or concerns about this privacy policy and our privacy practices, contact us at: webmaster@vmcmail.com. If you would like to request that this notice be provided in an alternative format in order to accommodate a disability, please contact us at community@vmcmail.com or call us at (205) 298-3220.

California Workforce Notice at Collection and Privacy Policy