Privacy policy

I. Basic provisions

The controller of personal data pursuant to Art. 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter the “GDPR”) is ORLEN Projekt Česká republika s. r. o., registered office at O. Wichterleho 809, Lobeček, 278 01 Kralupy nad Vltavou, entered in the commercial register kept by the Metropolitan Court in Prague, Section C, File No. 383715, Company ID No: 19252013 (hereinafter “ORLEN Projekt” or the “Controller”).

ORLEN Projekt greatly emphasises the transparency of processing and securing your personal data, which are considered strictly confidential, and handles them in accordance with GDPR, Act No. 110/2019 Coll. on the processing of personal data, and other legal regulations.

Controller appointed the Data Protection Officer, who is available in the case of questions or irregularities in personal data processing, via email at osobniudaje@orlenunipetrol.cz, or via post at the mailing address ORLEN Unipetrol RPA s.r.o., Úsek ochrany informací (Data Protection Division), Milevská 2095/5, 140 00 Praha 4, Czech Republic.

ORLEN Projekt values your trust and, in accordance with the principle of transparency, hereby informs you in this document, "Privacy Policy," about the processing of your personal data, which is necessary for the purposes listed below.

II. Purposes of personal data processing and their legal grounds

1. Implementation and fulfillment of the contractual relationship

ORLEN Projekt implements comprehensive projects in the fields of refineries, petrochemicals, energy, and environmental protection. Its activities include not only the preparation of documentation for licensing procedures, e.g., documentation for zoning procedures, documentation for environmental impact assessments, building permits, etc., but also the creation of construction and implementation projects, implementation, acceptance, commissioning, and obtaining permits for the use of investments implemented primarily for entities of the ORLEN Group. This business activity involves the processing of personal data, primarily of business partners (customers, suppliers) who are natural persons engaged in business, and other persons, in particular contact persons and other persons on the part of the business partner.

The purpose of processing personal data is to implement and perform the contractual relationship, i.e. deliver the ordered product, exercise the rights and obligations arising from the contractual relationship between the partner (natural person) and ORLEN Projekt and other contractual obligations. The legal basis for processing personal data is Art. 6(1)(b) GDPR, i.e. processing is necessary for the performance of a contract and to implement the measures adopted before concluding the contract. The Controller processes the contact details of natural persons representing the business partner within the scope of its legitimate interests pursuant to Article 6(1)(f) of the GDPR, as this is necessary for the performance of a contract with the business partner. Legitimate interests also include the possible enforcement of claims and obligations and the necessary processing of personal data associated with this.

ORLEN Projekt collects the following data for the aforementioned purpose:

• Identification data (name, surname, ID number, social security number or date of birth);
• Contact data (e-mail address, mailing address, telephone number, position);
• Bank account number;
• Operation records (contracts, minutes from meetings, instructions, etc.);
• Data about the order, delivery and payment;
• Necessary communication between the partner and ORLEN Projekt.

2. Fulfilment of legal obligations

ORLEN Projekt processes personal data in cases where this obligation arises from the law, either explicitly as specific processing of personal data (keeping records required by law, etc.) or as a result of legally mandated actions (e.g., the obligation to provide cooperation, etc.). The Controller also processes personal data for accounting and tax purposes. Processing based on a legal obligation is carried out by the Controller on the legal basis of Article 6(1)(c) of the GDPR.

3. Communication with the inquirers
If you contact ORLEN Projekt via e-mail, its mailing address or other means, information about your contact will be processed only for the purpose of the established communication with you. The legal basis for the processing of your personal data is Article 6(1)(f) of the GDPR, i.e. where processing is necessary for the purposes of the legitimate interests pursued by the Controller, specifically the interest in developing relationships with visitors to the website on the subject matter, streamlining communication, presenting the ORLEN Projekt brand name, and protecting its good reputation.

ORLEN Projekt collects the following data for the aforementioned purpose:

• Identification data (name, surname);
• Contact data (e-mail address, mailing address, telephone number);
• Necessary communication between you and ORLEN Projekt.

4. Employee recruitment
If you want to become a member of the ORLEN Projekt team and send us your curriculum vitae using the reply form, we will process your personal data for the purpose of the recruitment procedure for your chosen job position. The legal basis for processing your personal data is Art. 6(1)(b) GDPR, i.e. processing is necessary for the performance of a contract and to implement the measures adopted before concluding the contract. At the same time, the legal basis for the processing of your personal data is Article 6(1)(f) of the GDPR, i.e. the legitimate interests of the Controller, which consist in the Controller's interest in selecting the best candidate for the position in question. If you participate in the selection procedure, you may be asked to consent to the processing of personal data for the purpose of verifying or obtaining references from previous employers, from public sources and in public registers of legal entities and individuals in order to verify the veracity of the information provided by you and to prevent conflicts of interest with the activities of the ORLEN Unipetrol Group. Complete information about personal data processing for this purpose is available in the opening header of the offered job position.

5. Sending similar job offers
If you have given your consent to ORLEN Projekt to process your personal data for the purpose of registering you as a candidate for another suitable job within the ORLEN Unipetrol Group, your personal data will be processed for the purpose of sending you similar job offers. The legal basis for the processing of your personal data is Article 6(1)(a) GDPR, or your voluntary consent, which can be withdrawn at any time.

You can find complete information about the processing of personal data for this purpose at the bottom of each job offer.

6. Operation of camera system with a permanent record (monitored areas of ORLEN Projekt)
Places and property of ORLEN Projekt are monitored by camera system with record for the purpose of protecting the rights and legally protected interests of ORLEN Projekt The specific purposes are, in particular, the protection of property, health, life, and safety of persons located in monitored areas based on the legitimate interest of the Controller pursuant to Article 6(1)(f) of the GDPR. The monitored areas are indicated with pictograms and additional information.

For the purpose specified above, ORLEN Projekt collects the following data in particular:

• video records by a natural person;
• vehicle registration number.

7. Fulfilment of labour-law relationships
Our employees are informed individually about the processing of their personal data.

8. Taking photos, audio-visual records and online-transmissions during organized event
ORLEN Projekt may take pictures and audio-visual records during organised events (pictures of visitors and their behaviour during this event). ORLEN Projekt may place this photographs and audio-visual records on the Intranet and social networks on which it has an account. If you do not want to be photographed or recorded, inform about that photographer / cameraman or Controller. From some events may ORLEN Projekt stream online transmission and use for that web sites or social networks on which it has user profile. You will be informed about that on the invitation to the organized event. In connection with the taking of photographs and audiovisual recordings of the event, the legal basis is the legitimate interest of the Controller pursuant to Article 6(1)(f) of the GDPR, i.e. the promotion of activities and charity work carried out under the auspices of the Controller. For the above-mentioned purpose processes ORLEN Projekt this data:

• Photo and audio-visual recordings

III. Period of storing data processing

ORLEN Projekt processes your personal data for the time necessary to achieve the purposes for which they were collected or for the period stipulated by legal regulation. After the passing of the storage period, ORLEN Projekt liquidates the personal data.

The Controller stores personal data:

• for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Controller, and to apply any claims from these contractual relationships (for a period of 10 years from termination of the contractual relationship);
• for a period of 6 months from the end of mutual interaction as concerns personal data processed for the purpose of answering your inquiry;
• for the period stipulated by the respective laws in cases where we perform our legal obligation; in the case of accounting management, this period may be up to 10 years;
• until the withdrawal of consent by the data subject as concerns personal data processing based on consent from the data subject, or until expiry of the specified period;
• for 6 months after the termination of the recruitment procedure for job position;
• for a maximum of 7 days for video recordings made by a camera system.

For more information about the retention period, you can contact our data protection officer, whose contact details can be found in the introduction to this policy.

IV. Handover of personal data

At ORLEN Projekt, your personal data are stored under maximum security and made accessible only to authorised employees, or individual processors and controllers of personal data, only to the extent necessary to fulfil the individual purposes of processing. The security of your personal data with these recipients is ensured through their contractual obligations. In connection with handover of your personal data, we are paying attention to upholding the highest standard of protection this kind of data (rights of data subjects and protection of privacy). You can obtain a detailed list of recipients from the Data Protection Officer.

Non‐exhaustive list of categories of recipients of personal data:

• State administrative bodies: e.g. financial bureau, social security administration;
• Insurance companies;
• ORLEN S.A. holding company which provides IT support to the system for processing personal data;
• Service providers (service organisation, marketing, IT etc.);
• External auditors.

Under certain conditions, ORLEN Projekt is authorised to hand over some of your personal data based on valid legal regulations, e.g. to prosecuting authorities or other public authorities.

ORLEN Projekt as a member of the ORLEN Group, consolidates IT systems and your personal data may be stored on servers in Poland. ORLEN Proejtk does not provide personal data outside of the EU, the EEA or to international organisations.

V. Your rights

You have the following rights in connection to personal data processing:

1. Right of access to the personal data
In connection to the processing of personal data, you have the right to the provision of information and provision of a copy of your processed personal data based on your request. In the case of a repeated request, ORLEN Projekt is authorised to bill a reasonable fee for the copy of the provided personal data. We will inform you of such procedure.

2. Right to rectification
If you believe that your personal data, which we process, are inaccurate, outdated or otherwise incorrect, contact us and we will rectify them. We will perform rectification without undue delay, but always with respect to technical capacities.

3. Right to erasure
If the personal data are no longer required to ensure the stipulated purpose, or if you withdraw your consent to processing, we shall erase these personal data at your request. In some cases, however, your right may be restricted. For instance, the personal data we process based on our legal obligations cannot be erased before the passing of the lawfully stipulated archiving periods. As for personal data related to the provision of services, these cannot be erased before the passing of the deadlines for potential application of the related claims (compensation of damages, claims, etc.).

4. Right to restriction of processing
You have the right to restriction of processing if:

• the personal data which we process is inaccurate;
• the processing is illegal;
• the personal data are no longer required, but you need them do determine, exercise or defend a legal claim;
• you object to processing.

Your personal data will only be stored with us during the restriction period and no operations will be performed with them without your consent. Restriction of processing lasts for the period for which one of the above situations lasts. You will be informed about the potential termination of restriction.

5. Right to object
You may file a justified objection to processing based on a legitimate interest and for direct marketing. The justification of the objection will be assessed and you will be informed of the decision via your chosen contact channel.

6. Right to data portability
If you want ORLEN Projekt to transfer your personal data to a third party, you can exercise your right to personal data portability if the conditions for such transfer set out in the GDPR are met.

7. Right to withdraw consent to personal data processing
If personal data is processed based on your consent, you may withdraw this consent at any time. If you wish to do so, contact us with your request via the contact details of the Data Protection Office specified below.

8. Right to be exempted from automated decision-making including profiling
We do not conduct automated decision-making including profiling without our activity.

9. Right to complain to the supervisory authority
If you feel that your personal data are not handled pursuant to the law, you have the right to direct your justified complaint to The Office for Personal Data Protection, registered office at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.
When exercising your rights, contact us using the contact details of the Data Protection Officer via e-mail at osobniudaje@orlenunipetrol.cz, or at the mailing address ORLEN Unipetrol RPA s.r.o., Úsek ochrany informací (Data Protection Division), Milevská 2095/5, 140 00 Praha 4, Czech Republic. ORLEN Projekt reserves the right to reasonably verify the identity of the data subject applying the above rights.

VI. Social medias

We want to stay connected and share our activities with you through profiles on social networks such as LinkedIn.
Our website use social plug-ins.