I. Basic provisions
The controller of personal data pursuant to Art. 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the “GDPR”) is ORLEN Unipetrol Slovakia s.r.o., registered office at Kalinčiakova 14083/33A, Bratislava, Post Code: 831 04, Entered in the commercial register maintained by the Municipal Court in Bratislava III, insert No. 20665/B, section: Sro, Company ID No: 35 777 087 (hereinafter referred to as “ORLEN Unipetrol Slovakia” or the “Controller”).
ORLEN Unipetrol Slovakia greatly emphasises the transparency of processing and securing your personal data, which are considered strictly confidential, and handles them in accordance with the GDPR, Act No. 18/2018 Coll. on the protection of personal data as amended (hereinafter referred to as „Act“) and other valid legal regulations concerning personal data protection.
To ensure seamless communication between you and ORLEN Unipetrol Slovakia, the Data Protection Officer was in accordance to § 44 (4) of the Act appointed, who is available to you in the case of questions or irregularities in personal data processing, via email at osobneudajesk@orlenunipetrol.cz, via telephone at +421 248 209 329 or via post at the mailing address ORLEN Unipetrol Slovakia, Ochrana osobných údajov, Kalinčiakova 14083/33A, 831 04 Bratislava.
ORLEN Unipetrol Slovakia values your trust and therefore, in accordance with the principle of transparency, it informs you by means of this “Privacy policy” about the processing of your personal data, which are needed for the purposes specified below.
This privacy policy applies to the website https://www.orlenunipetrol.sk (hereinafter referred to as "website") and is primarily intended for contractual partners, website visitors, job applicants, applicants / data subjects and other persons with whose personal data ORLEN Unipetrol Slovakia may come into contact.
II. Purposes of personal data processing and their legal grounds
1. Implementation and performance of the contractual relationship
ORLEN Unipetrol Slovakia is engaged in the production and sale of refinery, petrochemical and retail products and complementary services. This business activity involves the processing of personal data, primarily of customers and suppliers as natural persons and other persons.
The purpose of processing personal data is to implement and perform the contractual relationship, i.e. deliver the ordered product, ensure transport, exercise the rights and obligations arising from the contractual relationship between the partner and ORLEN Unipetrol Slovakia and other contractual obligations. The legal basis for processing personal data is Art. 6(1)(b) GDPR, i.e. processing is necessary for the performance of a contract and to implement the measures adopted before concluding the contract. We process the contact data of the natural persons who represent the partner as a legal entity, because this is necessary to perform the contract with the partner, and processing is based on the mutual legitimate interest of the partner and ORLEN Unipetrol Slovakia in the provision of the agreed services.
ORLEN Unipetrol Slovakia particularly collects the following data for the aforementioned purpose:
-
Identification data (title, name, surname, ID number, tax ID number, alternatively personal number)
Contact data (e-mail address, mailing address, telephone number, position)
Bank account number (IBAN)
Operation records (minutes from meetings, instructions, etc.)
Data about the order, delivery and payment
Necessary communication between the partner and ORLEN Unipetrol Slovakia
2. Fulfilment of legal obligations within the accounting and tax agenda
We process accounting documents, data about your payments and other information required by law for the fulfilment of our legal obligations, i.e. Art. 6(1)(c) GDPR.
3. Communication with the inquirers
If you contact ORLEN Unipetrol Slovakia via e-mail, its mailing address or other means, information about your contact will be processed only for the purpose of the established communication with you.
The legal basis for the processing of your personal data is Article 6(1)(f) of the GDPR, which is the case, where the processing is necessary for the purposes of the legitimate interests pursued by the Controller, namely the interest in the development of relations with website visitors in the given issue, the streamlining of communication, the presentation of the business name of ORLEN Unipetrol Slovakia and the protection of its reputation.
The scope of the personal data processed depends on the nature of the communication with the applicant / data subject.
4. Employee recruitment
If you want to become a member of the ORLEN Unipetrol Slovakia team and send us your curriculum vitae using the reply form, we will process your personal data for the purpose of the recruitment procedure for your chosen job position. The legal basis for processing your personal data is Art. 6(1)(b) GDPR, i.e. processing is necessary for the performance of a contract and to implement the measures adopted before concluding the contract.
In case you are taking part in the 1st round of the recruitment procedure, you may be asked for consent to process your personal data for the purpose of verifying or obtaining references from previous employers, public sources and public registries of legal and natural persons, for the verification of the accuracy of the information provided by you, and the prevention of conflicts of interest with the activities of the ORLEN Unipetrol group.
Complete information about personal data processing for this purpose is available in the opening header of the offered job position.
5. Sending offers of similar job positions
If you gave ORLEN Unipetrol Slovakia consent to process your personal data for the purpose of registering you as an applicant for a different suitable job position within the ORLEN Unipetrol group, your personal data will be used to send offers of similar job positions. The legal basis for processing your personal data is Art. 6(1)(a) GDPR which is your voluntary consent, which may be withdrawn at any time.
Complete information about personal data processing for this purpose is available in the lower part of the offered job position.
6. Sending commercial messages
We contact our clients at a reasonable frequency with an offer of further services or with an invitation to one of our events, or with current news in our business area, on the basis of the legitimate interest of ORLEN Unipetrol Slovakia in the development of its activities in accordance with the provisions of Section 116 (14) and (15) of Act No. 452/2021 Coll. on electronic communications, as amended.. If you do not wish to receive this information, reply to our e-mail or inform us of this fact by other means and we will accommodate your request.ORLEN Unipetrol Slovakia collects the following data for the aforementioned purpose:
On selected websites of the Controller, you also have the possibility to subscribe to newsletters by entering your e-mail address in the specified field. In order to use your e-mail address to inform you about news, upcoming events and interesting projects, we will need your consent, which is the legal basis for the processing of personal data pursuant to Article 6(1)(a) of the GDPR, which is revocable at any time. It is entirely up to your free will whether you want to keep in touch with us and be part of our projects and new challenges.
ORLEN Unipetrol Slovakia collects the following data for the aforementioned purpose:
More information is provided directly in the consent to the processing of personal data within the newsletter.
7. Operation of a camera system with continuous recording in the monitored premises and objects of ORLEN Unipetrol Slovakia
The premises and objects of ORLEN Unipetrol Slovakia are monitored by a camera system with recording in order to protect the rights and legally protected interests of ORLEN Unipetrol Slovakia or another entity (in particular, the protection of property, health, life and safety of persons located in the monitored premises) on the basis of the legitimate interest of the Controller pursuant to Article 6(1)(f) of the GDPR. The monitored premises are marked with a pictogram with additional information.
ORLEN Unipetrol Slovakia collects the following data for the aforementioned purpose:
8. Fulfilment of labour-law relationships
Our employees are informed individually about the processing of their personal data.
9. Taking photographs, audiovisual recording and online-transmission during the organised event
ORLEN Unipetrol Slovakia may take photographs and audiovisual recordings during the organised event capturing the events at the event site and the participants present. The controller may place the taken photographs and audiovisual recordings on the intranet and social networks, within which it has established a user profile. If you do not wish to be photographed or filmed, please notify the photographer or cameraman, or you may notify the Controller that you do not wish to have photographs or audiovisual recordings taken or published or otherwise disseminated.
Some of the organised events may also be broadcast online or live via websites or social networks where the Controller has set up a user profile. You are already notified of this type of transmission in the invitation to such an event.
In connection with the taking of photographs and audiovisual recordings of the event, the legal basis is the legitimate interest of the Controller pursuant to Article 6(1)(f) of the GDPR, i.e. the promotion of activities and charities carried out under the auspices of the Controller.
ORLEN Unipetrol Slovakia collects the following data for the aforementioned purpose:
III. Period of storing data processing
We process and store your personal data for the period strictly necessary to ensure all the rights and obligations arising from the respective contractual relationship, and furthermore for the period for which ORLEN Unipetrol Slovakia as the controller of personal data is obliged to store the personal data pursuant to generally binding legal regulations, or the period for which you give consent to processing. In other cases, the processing period results from the purpose of the processing or is determined by specific laws. ORLEN Unipetrol Slovakia shall dispose of the personal data after the expiry of the retention period.
The controller stores personal data:
for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller, and to apply any claims from these contractual relationships (for a period of 10 years from termination of the contractual relationship);
for a period of 6 months from the end of mutual interaction as concerns personal data processed for the purpose of answering your inquiry;
for the period stipulated by the respective laws in cases where we perform our legal obligation; until the data subject withdraws consent for the processing of personal data based on the data subject's consent or until the expiry of a specified period of time;
for 6 months after the termination of the recruitment procedure for job position;
for a maximum period of 21 days in the case of video recordings made by the camera system when monitoring the premises of ORLEN Unipetrol Slovakia.
For more information about retention periods, you can contact our Data Protection Officer (DPO), whose contact details can be found at the beginning of this policy.
IV. Handover of personal data
At ORLEN Unipetrol Slovakia, your personal data are stored under maximum security and made accessible only to authorised employees, or individual processors and controllers of personal data, only to the extent necessary to fulfil the individual purposes of processing. The security of your personal data with these recipients is ensured through their contractual obligations.
The disclosure of personal data shall always take place in compliance with the highest standard of data protection, which ensures that the rights of data subjects and the protection of privacy are properly preserved. A detailed list is available on request from the Data Protection Officer (DPO).
List of categories of recipients of personal data:
State and public authorities;
Insurance companies, banks and branches of foreign banks;
ORLEN S.A. holding company which provides IT support to the system for processing personal data;
Statistical Office in anonymised form;
External auditors, lawyers, official translators and interpreters;
Providers of various types of services (service organizations, marketing, IT, operations, payroll, etc.).
Under certain conditions, ORLEN Unipetrol Slovakia is authorised to hand over some of your personal data based on valid legal regulations, e.g. to prosecuting authorities or other public authorities.
ORLEN Unipetrol Slovakia, as a member of the ORLEN Group, consolidates IT systems and your personal data are stored on servers in Poland, which is a country ensuring an adequate level of protection of personal data as it is a member of the European Union.
ORLEN Unipetrol Slovakia does not provide personal data outside of the EU, the EEA or to international organisations, with the exception of trade unions and associations with the same subject of activity as ORLEN Unipetrol Slovakia (e.g. SAPPO, ČESMAD, etc.).
V. Your rights
You have the following rights in connection to personal data processing:
1. Right of access to the personal data
In connection to the processing of personal data, you have the right to the provision of information and provision of a copy of your processed personal data based on your request. In the case of a repeated request, ORLEN Unipetrol Slovakia is authorised to bill a reasonable fee for the copy of the provided personal data. We will inform you of such procedure.
2. Right to rectification
If you believe that your personal data, which we process, are inaccurate, outdated or otherwise incorrect, contact us and we will rectify them. We will perform rectification without undue delay, but always with respect to technical capacities.
3. Right to erasure
If the personal data are no longer required to ensure the stipulated purpose, or if you withdraw your consent to processing, we shall erase these personal data at your request. In some cases, however, your right may be restricted. For instance, the personal data we process based on our legal obligations cannot be erased before the passing of the lawfully stipulated archiving periods. As for personal data related to the provision of services, these cannot be erased before the passing of the deadlines for potential application of the related claims (compensation of damages, claims, etc.).
4. Right to restriction of processing
You have the right to restriction of processing if:
the personal data which we process is inaccurate;
the processing is illegal;
the personal data are no longer required, but you need them do determine, exercise or defend a legal claim;
you object to processing.
Your personal data will only be stored with us during the restriction period and no operations will be performed with them without your consent. Restriction of processing lasts for the period for which one of the above situations lasts. You will be informed about the potential termination of restriction.
5. Right to object
You may file a justified objection to processing based on a legitimate interest and for direct marketing. The justification of the objection will be assessed and you will be informed of the decision via your chosen contact channel.
6. Right to data portability
If you want ORLEN Unipetrol Slovakia to hand over your personal data to a third party, you may exercise your right to personal data portability. If the rights and freedoms of third parties were to be affected by the exercising of this right, ORLEN Unipetrol Slovakia will not be able to accommodate your request.
7. Right to withdraw consent to personal data processing
If personal data is processed based on your consent, you may withdraw this consent at any time. If you wish to do so, contact us with your request via the contact details of the Data Protection Office specified below.
8. Right not to be subject to automated decision-making, including profiling with legal effects
We do not use automated decision-making or profiling, which would have legal effects for data subjects, in our activities.
9. Right to complain to the supervisory authority
If you feel that your personal data are not handled pursuant to the law, you have the right to direct your justified complaint to the Personal Data Protection Office, registered office at Hraničná 12, 820 07 Bratislava 27, Slovak Republic.
When exercising your rights, contact us using the contact details of the Data Protection Officer via e-mail at osobneudajesk@orlenunipetrol.cz, or at the mailing address ORLEN Unipetrol Slovakia, Ochrana osobných údajov, Kalinčiakova 14083/33A, Post Code 831 04 Bratislava.
ORLEN Unipetrol Slovakia reserves the right to reasonably verify the identity of the data subject applying the above rights.
VI. Cookies
In order for a website to function properly, it is sometimes necessary to place small data files, known as cookies, on your device. We have prepared the different types of cookies and other information for you clearly in a banner (window), which you can pull up at any time via this link.
For some types of cookies your consent is required, which you can change or revoke at any time by setting your preferences in the banner (window), which you can pull up at any time via this link I want to change my cookie consent.
If you give your consent to the use of all types of cookies, your consent will be valid for 12 months, unless you change it sooner. If you do not give your consent, your choice will be stored for 14 days and then offered again when you visit our website.
If you have any questions, our Data Protection Officer is available to you at osobneudajesk@orlenunipetrol.cz or at the delivery address ORLEN Unipetrol Slovakia, Kalinčiakova 14083/33A, Pot Code 831 04 Bratislava.
This privacy policy was updated on 16 October 2023.