Privacy Policy – Kraus-Anderson
Last Updated and Effective: November 6, 2026
This is the Privacy Policy of Kraus-Anderson (“Kraus-Anderson,” “we,” “us,” or “our”). We are committed to respecting your privacy. This Privacy Policy (“Privacy Policy”) describes how we collect, process, secure, and disclose your Personal Data (defined below). We also describe your rights and choices with respect to your Personal Data and other important information regarding our privacy practices. Please read this Privacy Policy carefully.
Scope of This Privacy Policy
This Privacy Policy applies to data relating to identified or identifiable individuals and households (“Personal Data”) that we (or our third-party providers acting on our behalf) collect and process from anyone who accesses our website located at https://www.krausanderson.com/ (including all subpages and subdomains, the “Website”) and related construction and realty & leasing services and trade partner prequalification process (collectively, the “Services”). This Privacy Policy does not apply to our insurance brokerage, Kraus-Anderson Insurance. You can find the Kraus-Anderson Insurance privacy policy here: https://www.kainsurance.com/privacy-policy/.
Third Party Links and Services: Our Services may contain links to other websites, applications, and services maintained by third parties. The information practices of other services are governed by their privacy policies, which you should review to better understand their data privacy practices.
HR Privacy: This Privacy Policy does not apply to Personal Data collected in the context of your application for employment or engagement as an employee or contractor for Kraus-Anderson, or your service as an employee or contractor.
Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at:
Our Website Contact Form: https://www.krausanderson.com/contact/general-inquiries/
Phone: (612) 332-7281
Email: legal@krausanderson.com
Mail: Kraus-Anderson, ATTN: Legal, 525 South Eighth Street, Minneapolis, MN 55404
Categories and Sources of Personal Data
Categories of Personal Data We Process
We collect and process the following categories of Personal Data (note, specific Personal Data elements are examples and may change):
Contact Data
: Identity Data that enables us to contact or communicate with you such as email, telephone number, or physical address.
Device / Network Data
: Personal Data relating to your device, browser, or application e.g. device identifiers, identifiers from cookies, session history and website navigation metadata, and other data generated through applications and browsers, including via cookies and similar technologies.
General Location Data
: Non-precise location data, e.g. location information derived from IP addresses.
Identity Data
: Personal Data about you and your identity, such as your name, Contact Data, or IP address.
Inference Data
: Personal Data we create or use as part of a profile reflecting your preferences, characteristics, market segments, or your interests.
Transaction Data
: Information about the Services we provide to you, the transactions you make with us, and similar information.
User Content
: Personal Data included in content provided by users of the Services in any free-form or unstructured format, such as a text in a “contact us” box, in a file or document, or any other message to us. Please do not submit any Sensitive Personal Data to us through these methods.
Sources of Personal Data We Process
We collect Personal Data from various sources based on the context in which the Personal Data will be processed.
Directly from You. We collect Personal Data from you directly, for example, when you fill out a form, submit a subcontractor bid, or otherwise contact us.
Automatic Collection. We may collect certain Personal Data automatically. For example, we collect Device/Network Data automatically using cookies and similar technologies when you use our Website or when you open our Marketing Communications.
Service Providers. We receive Personal Data from service providers performing services on our behalf, including payment processors, web hosting service providers, marketing partners, or our delivery and installation partners.
Data We Create or Infer. We, certain partners, and third parties operating on our behalf create and infer Personal Data such as Inference Data based on our observations of your interactions with the Services or analysis of other Personal Data processed under this Privacy Policy, and we may correlate this data with other data we process about you.
Advertisers and Social Media Companies. We receive Personal Data from advertising partners and social media companies when you interact with that social media company on or in connection with our Website, e.g. as part of Targeted Advertising activities or clicking on the social media links on our Website.
Data Processing Contexts / Notice at Collection
In this Section, we describe the different contexts by which you can interact with us where we may collect and process your Personal Data. In addition to the processing described below, we may process any Personal Data collected through these contexts generally for our Business Purposes. Please see the “Business Purposes” section below for more information.
We may also process your Personal Data for Commercial Purposes, where appropriate, and with your consent, if required. Please note that certain processing of Personal Data for Commercial Purposes may include the sale or sharing of Personal Data, such as for Targeted Advertising.
Our Website
Generally
We automatically collect and process Device/Network Data, Identity Data, and General Location Data when you access and use our Website.
We use this Personal Data as necessary to operate our Website, including to deliver pages and content. We also use it to pursue our legitimate interests, including securing the Website and related technology systems; analyzing Website usage; improving the Website and its content; and creating aggregated information regarding users’ content-viewing and usage patterns.
Cookies and Other Tracking Technologies
When you access our Website, we automatically collect and process Identity Data, Device/Network Data, Contact Data, Inference Data, and General Location Data via cookies and similar technologies. We and our authorized third parties may use cookies and similar technologies to process such data for the following purposes:
- for “essential” purposes necessary for our Website to operate, including maintaining user sessions, delivering content, ensuring the security of the Services, and the like;
- for “functional” purposes, such as to remember user preferences and settings in order to enable certain Website features and to enhance your browsing experience and the performance of the Website;
- for “analytics” purposes and to improve our Website, such as to analyze the traffic to and on our Services (for example, we can count how many people have looked at a specific page, or see how users navigate the Website when they use it, to distinguish unique visits/visitors, and what websites users visited prior to visiting our Website, and we use this information to understand user behaviors to improve the design and functionality of the Website);
- for “Targeted Advertising” or other advertising and marketing purposes, including technologies that process Inference Data and other data so that we can deliver, buy, or target advertisements which are more likely to be of interest to you (see the “Targeted Advertising” section below for more details); and
- for “social media” integrations e.g. via third-party social media cookies when you use pages on our Website that integrate with social media websites and services.
Please see the Your Rights & Choices section for information regarding opt-out rights for cookies and similar technologies.
Contacting Us
We process Identity Data, Contact Data, Device/Network Data, and any Personal Data contained within any User Content when you contact us, such as through our Contact Us page on the Website or when you call us for support. If you call us via phone, we may collect Audio/Visual Data from any call recordings.
We process this Personal Data as necessary to communicate with you about the subject matter of your request and related matters.
Trade Partner Prequalification
Kraus-Anderson relies on a pre-qualification process to assess potential trade partners. Subcontractors and suppliers provide business credentials such as insurance, bonding, safety records, financial stability, and past project performance. We may process your Identity Data, Contact Data, and any Personal Data provided in User Content to evaluate the qualifications of our potential vendors.
Submitting Bids
We may process Identity Data, Contact Data, and any Personal Data provided in User Content in relation to receiving and evaluating bids for subcontracting and supplier work from our vendors.
Feedback and Surveys
We process Identity Data, Contact Data, and User Content collected in connection with your feedback and responses to customer surveys or questionnaires. We process this Personal Data as necessary to respond to customer requests or concerns, and other legitimate interests, such as analyzing customer satisfaction and improving our Services.
Marketing Communications
We process Device/Network Data, Contact Data, and Identity Data, in connection with marketing emails, and similar communications, including when you open or interact with those communications (“Marketing Communications”). We use Marketing Communications to send you information about services we offer in which we believe you may be interested, such as to let you know when new properties in your interest area(s) have been listed on the Website, among other services. You may receive marketing communications if you consent.
We process this Personal Data to personalize Marketing Communications based on Personal Data we create or infer. If consent is required by law, we will seek your consent. See Your Rights & Choices to limit or opt out of this processing.
Processing Purposes
Business Purposes
In addition to the processing described above, we generally process Personal Data for several common purposes in connection with our business. Please see below for more information regarding the purposes for which we process your Personal Data (“Business Purposes”).
Operate our Services and Fulfill Obligations
We process any Personal Data as is necessary to provide the Services, and as otherwise necessary to fulfill our obligations to you, e.g. to provide you with the information, features, and services you request and to communicate with you about the status of bids, vendor prequalification, and other Services.
Internal Processing and Service Improvement
We may use any Personal Data we process through our Services as necessary in connection with our improvement of the design of our Services, understanding how the Services are used, for customer service purposes, in connection with the creation and analysis of logs and metadata relating to Services use, and for ensuring the security and stability of the Services. Additionally, we may use Personal Data to understand what parts of our Services are most relevant to users, how users interact with various aspects of our Services, how our Services perform or fail to perform, etc., or we may analyze use of the Services to determine if there are specific activities that might indicate an information security risk to the Services or our users.
Security and Incident Detection
We may process Personal Data to ensure that our Services are secure, identify and prevent crime, prevent fraud, and verify or authenticate users/individuals, and ensure the safety of our customers and guests. Similarly, we process Personal Data as necessary to detect security incidents, protect against, and respond to malicious, deceptive, fraudulent, or illegal activity. We may analyze network traffic, device usage patterns and characteristics, maintain and analyze logs and process similar Personal Data in connection with our information security operations and related processes.
Compliance, Health Safety, Public Interest
We may process Personal Data as necessary to comply with our legal obligations, including responding to requests to exercise data-protection rights and lawful requests from government or law-enforcement officials. We may also process Personal Data to establish, exercise, or defend legal claims; meet national-security or law-enforcement requirements; prevent illegal activity; protect individuals’ vital interests; or pursue public-interest purposes, in each case to the extent permitted by applicable law. Please see the How We Disclose Personal Data section for more information about how we disclose Personal Data in extraordinary circumstances.
Aggregate Data
We process Personal Data as necessary in connection with our creation of aggregate analytics relating to how our Services are used, the pages and content users view, and to create other reports regarding the use and performance of our Services, and other similar information and metrics. The resulting aggregate data will not contain information from which an individual may be reasonably reidentified using the information available to us.
Other Business Purposes
If we process Personal Data in connection with our Services in a way not described in this Privacy Policy, this Privacy Policy will still apply generally (e.g., with respect to your rights and choices) unless otherwise stated at collection. We will process such information in accordance with the notice provided at the time of collection or in a manner that is necessary and proportionate to achieve the operational purpose for which the Personal Data was collected or processed or for another operational purpose that is compatible with the context in which the Personal Data was collected.
Commercial Purposes
We and certain third parties process Personal Data to further our commercial or economic interests (“Commercial Purposes”), depending on the context of collection and your consent, as described below.
Please Note – We may require your consent, or we may not engage in processing of Personal Data for Commercial Purposes in some jurisdictions, in accordance with applicable law. Some of this processing may involve sales of Personal Data as defined by the privacy laws of certain jurisdictions. See the “U.S. State Supplement” section below for more information.
Personalized Marketing Communications and Market Research
Our Marketing Communications may be personalized based on certain Inference Data that we create in certain contexts, as described above. In those contexts, we may also process your Personal Data to conduct marketing research, advertise to you, provide personalized information about us on and off our Website, and to provide other personalized content based upon your activities and interests.
Targeted Advertising
We and our third-party advertising providers may use cookies and similar technologies to collect and process your Personal Data to provide you with personalized marketing and advertising on our Services and third-party websites based on your interests (“Targeted Advertising”). The profiles and interests used for Targeted Advertising may be inferred or derived from Personal Data that we or those third parties obtain or infer from your activities across non-affiliated websites, applications, or services. Note that Targeted Advertising includes various parties and service providers, including third party data controllers, engaged in the processing of Personal Data in connection with Targeted Advertising. These parties may be able to identify you across websites, devices, and over time. In some cases, these third parties may build or augment user profiles using your Personal Data, and may track whether you view, interact with, or how often you have seen an advertisement, or whether you purchased advertised goods or services. For information on your rights and choices with respect to Targeted Advertising, including information on how to opt out, if applicable, please see the “Your Rights & Choices” section below.
How We Disclose Personal Data
Personal Data we collect may be disclosed to a variety of parties, depending upon the purposes for and contexts in which that information was provided to us. We generally disclose Personal Data to the categories of recipients, or in connection with the specific purposes described below.
Affiliates
We may disclose your Personal Data within the Kraus-Anderson Companies, Inc. umbrella of companies and with their current or future parents, subsidiaries, and other affiliated entities of Kraus-Anderson in order to streamline certain business operations.
Service Providers
We may disclose Personal Data with service providers or subprocessors who provide certain services to us, or process data on our behalf in connection with our general business operations, product improvements, and other lawful business interests. For example, we may use third parties who provide services such as IT and system administration and hosting, credit card processing, research and analytics, marketing, and customer support.
Professional Advisers
In individual instances, we may disclose your Personal Data to professional advisers acting as service providers, processors, or independent controllers – including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance and accounting services, and to the extent we are legally obliged to share your Personal Data.
Advertisers and Social Media Platforms
We may share certain Personal Data with social media platforms, advertisers, ad exchanges, data management platforms, and the like in support of Targeted Advertising and our Commercial Purposes. We may allow these third parties to operate on or through our Website as described above. These parties may be third party controllers and may have their own privacy policies, and their processing is not subject to this Privacy Policy. We may allow these third parties to operate through our Services, such as through a social media icon links on our Website. We do not share Contact Data collected in connection with our Marketing Communications with these parties.
Parties to Business Transactions
We may disclose Personal Data if we go through a business transition, such as a merger, acquisition, liquidation, or sale of all or a portion of our assets. For example, Personal Data may be part of the assets transferred or may be disclosed (subject to confidentiality restrictions) during the due diligence process for a potential transaction.
Lawful Recipients
In limited circumstances, we may, without notice or your consent, access and disclose your Personal Data, any communications sent or received by you, and any other information that we may have about you to the extent we believe such disclosure is legally required, to prevent or respond to a crime, in the vital interests of us or any person, or in such other circumstances as may be required or permitted by law. These disclosures may be made to governments that do not ensure the same degree of protection of your Personal Data as your home jurisdiction. We may, in our sole discretion (but without any obligation), object to the disclosure of your Personal Data to such parties.
Your Rights & Choices
You may have certain rights and choices regarding the Personal Data we process. Please note, these rights may vary based on the country or state where you reside, and our obligations under applicable law. All users may exercise the rights described in this section. See the U.S. State Supplement for more information regarding your rights and choices in certain states.
Verification of Rights Requests
If you submit a request, we may need to verify your identity to ensure that you have the right to make that request, reduce fraud, ensure the security of Personal Data, and comply with applicable law. For example, we may require that you match Personal Data we have on file in order to adequately verify your identity. We may not grant access to certain Personal Data to you if we are required to or may withhold such data under applicable law.
Your Choices
You may have the following choices regarding the Personal Data we process, to the extent required or allowed under applicable law:
Marketing Communications
If you no longer wish to receive email Marketing Communications, you can withdraw your consent by clicking on the “unsubscribe” link in an email or by contacting us using the information in the “Contact Us” section above. We will remove you from our distribution list within a reasonable time of your unsubscribe request, until you request to receive email Marketing Communications in the future. Please note that you may still receive email Marketing Communications until your unsubscribe request is completed. To opt-out of the collection of information relating to email opens, configure your email so that it does not load images in our emails.
Withdrawing Your Consent/Opt-Out
If we rely on your consent to process Personal Data, you may withdraw your consent at any time. You may withdraw your consent by contacting us using any of the methods listed in the “Contact Us” section. The consequence of withdrawing consent might be that we cannot perform certain services for you that are conditioned on your consent.
Cookies and Similar Technologies
If you do not want information collected through the use of cookies, you can manage/deny cookies (and certain technologies) using your browser’s settings menu. You may need to opt out of third-party services directly via the third party. For example, to opt-out of Google’s analytic and marketing services, visit Google Analytics Terms of Use, the Google Policy, or Google Analytics Opt-out.
Targeted Advertising
In some cases, you may be able to opt-out by submitting requests to third party partners, including via the following platforms or services:
- Digital Advertising Alliance’s opt-out
- Network Advertising Initiative opt-out
- Google Ads
- Meta Pixel
- LinkedIn Ads
- Bing Ads
Global Privacy Control (GPC)
Our Services support certain automated opt-out controls, such as Global Privacy Control (“GPC”). GPC is a specification designed to allow Internet users to notify businesses of their privacy preferences, such as opting out of Targeted Advertising or the sale of Personal Data. To activate GPC, users must enable a setting or use an extension in the user’s browser or mobile device. Please review your browser or device settings for more information regarding how to enable GPC.
Please note: GPC signals are browser and device. specific. We may not be able to link GPC signals to other Personal Data in our systems, and as a result, some sales of your Personal Data may occur even if GPC is active. See the “U.S. State Supplement” section below for more information regarding other opt-out rights.
Do-Not-Track
Our Website does not respond to your browser’s do-not-track request.
International Transfers of Personal Data
If you are located outside the U.S., we may transfer or process your Personal Data in the U.S. and other jurisdictions where Kraus-Anderson or our service providers operate. Where required by local law, we ensure your data remains protected in connection with any international transfers.
Third-Party Links
The Services may contain links to third party websites and services. Inclusion of third-party links on the Services does not constitute our endorsement of such third parties or their privacy practices. The information practices of such other services, or of social media services that host our branded social media pages, are governed by their privacy policies, which you should review to better understand their privacy practices. Such information practices are not governed by this Privacy Policy.
Data Security
We implement and maintain reasonable security measures to safeguard the Personal Data you provide us. We do not warrant perfect security, and we do not provide any guarantee that your Personal Data or any other information you provide us will remain secure.
Children
Our Services are neither directed at nor intended for use by persons under the age of 18. We do not knowingly collect Personal Data from such individuals. If we learn that we have inadvertently done so, we will promptly delete such Personal Data if required by law. Do not access or use the Services if you are not of the age of majority in your jurisdiction.
Data Retention
We retain Personal Data for so long as it is reasonably necessary to achieve the relevant processing purposes described in this Privacy Policy, or for so long as required by law. What is necessary may vary depending on the context and purpose of processing. In determining retention periods, we generally consider (without limitation):
- Retention periods established under applicable law;
- Industry best practices;
- Whether the purpose of processing is reasonably likely to justify further processing;
- Risks to individual privacy in continued processing;
- Applicable data protection impact assessments;
- IT systems design considerations/limitations; and
- The costs associated with continued processing, retention, and deletion.
We will review retention periods periodically and may pseudonymize or anonymize data held for longer periods.
Changes to Our Privacy Policy
We may change this Privacy Policy from time to time. Changes will be effective immediately upon posting to the Website, except as required by applicable law. Notice of material changes will be conspicuously posted on the Website or otherwise communicated to you. Your use of the Services following notice of any changes indicates your acknowledgment of such changes. Please visit our Website and this Privacy Policy regularly so that you are aware of the latest version of this Privacy Policy and our data privacy practices.
U.S. State Supplement
Applicable U.S. State Privacy Rights
Under applicable U.S. state consumer privacy laws, residents of certain U.S. states may have the following rights, subject to regional requirements, exceptions, and limitations:
Confirm/Access
: The right to confirm whether we process your Personal Data and to access such data.
Portability
: The right to request that we provide certain Personal Data in a common, portable format.
Deletion
: The right to delete certain Personal Data that we hold about you.
Correction
: The right to correct certain Personal Data that we hold about you.
Opt-Out: (sales, targeted advertising, profiling).
You may have the right to opt out of the following:
- If we engage in sales of data (as defined by applicable law), you may direct us to stop selling Personal Data.
- If we engage in targeted advertising, you may opt out of such processing.
If we engage in certain forms of “profiling” (e.g. profiling that has legal or similarly significant effects), you may opt out of such processing, and you may have the right to question certain profiling results, receive the reason and potentially different actions that may have resulted in a different result, review data used, correct inaccurate data, and obtain reevaluation. List of Third Parties: Minnesota consumers have the right to obtain a list of the specific third parties to which Kraus-Anderson has disclosed the consumer’s personal data.
Submission of Requests; Appeals
You may submit requests, including requests to opt out of targeted advertising, by emailing us at legal@krausanderson.com. Before submitting a request, please review our verification requirements in the Your Rights & Choices section of this Privacy Policy. Except as otherwise described below, you may only make a U.S. state consumer privacy rights request on your own behalf. Certain laws allow authorized agents to submit requests to exercise the right to opt out on your behalf. Where allowed by law, we reserve the right to verify the identity of the agent and the agent’s authority to act on your behalf.
Please note that our processing of Personal Data may be subject to exceptions, and we may not be able to fulfill your request. If we deny your request, we will respond with a detailed explanation. If you have any questions or wish to appeal any refusal to take action in response to a U.S. state consumer privacy rights request, contact us at legal@krausanderson.com. We will respond to your rights requests, including any appeals, within the period required by law.