Personal data

The principles for the processing of personal data in ORLEN S.A.

Format: pdf
Size: 391 KB

THE DATA CONTROLLER

The data controller of your personal data is Polski Koncert Naftowy ORLEN S.A. with its registered office at ul. Chemików 7, Płock, Poland (hereinafter referred to as „ORLEN S.A.”). Contact phone numbers to the controller: (24) 256 00 00, (24) 365 00 00, (22) 778 00 00.

THE DATA PROTECTION OFFICER

You can contact the Data Protection Officer in ORLEN S.A. by e-mail to: daneosobowe@orlen.pl. You can also contact the Data Protection Officer in writing to the address of the registered office of ORLEN S.A., indicated in item 1, with additional information “Inspektor Ochrony Danych” (Data Protection Officer).

DATA TYPES AND PROCESSING PURPOSES

In connection with e-Receipt service we process your personal data related to making purchases, i.e .:

information about the place where the purchases were made - location,
date and time of issuing the receipt (information about the date and time of making purchases),
information purchased goods or services (quantity or number of goods or services purchased, their price, and the amount spent on individual goods and services and the total amount spent, receipt numer),
transaction and client identifier received from Powszechna Kasa Oszczędności Bank Polski (hereinafter referred to as : „PKO BP”).

We process your personal data in order to generate electronic receipts and transfer them to PKO BP, so that you can use the e-Receipt service.

LEGAL GROUNDS FOR THE PROCESSING

The legal basis for the processing by ORLEN S.A. Your personal data for the purpose indicated in item 3 above is the legitimate interest of ORLEN S.A. (in accordance with Article 6 (1) (f) of the GDPR) - participation in an innovative project consisting in generating electronic receipts, which is an added value for you and additional confirmation of the transaction between you and ORLEN S.A.

DATA RECIPIENTS

Your personal data will be disclosed by ORLEN S.A. to the entity providing the e-Receipt service, i.e. to the PKO BP.

Your personal data may be disclosed by ORLEN S.A. to entities cooperating with it (data recipients), in particular entities providing IT services, sale of goods and services, settlement of receivables

DATA RECEIVED FROM THIRD PARTIES

As part of the e-Receipt service, ORLEN S.A. receives from PKO BP an individual transaction and customer ID generated by PKO BP for you.

PERIOD OF PERSONAL DATA PROCESSING

Your personal data are processed until the mutual claims expire, not less than for the period stipulated by law.

RIGHTS RELATED TO DATA PROCESSING

In connection with the processing of personal data, you are entitled to:

the right to access the content of your data,
the right to require rectification of your personal data,
the right to request the deletion of personal data or limitation of data processing.

In order to exercise these rights, please contact us or our data protection officer (contact details in item 1 and 2 above).

THE RIGHT TO OBJECT

You have the right to object to the disclosure of your data by ORLEN S.A. to the bank PKO BP. Raising an objection means resignation from the e-Receipt service provided by PKO BP.

We kindly inform you, that the role of ORLEN S.A. in the e-Paragon service it consists solely in generating an e-Paragon and transfer e-Paragon to PKO BP.

To object to the disclosure of data by ORLEN S.A. to the PKO BP, you should resign from the e-Receipt service. To cancel e-Paragon service, check the appropriate option in the PKO BP electronic banking system. Details on resignation from the e-Receipt service can be found in the Regulations of the pilot service of the "e-Receipt for individual clients of PKO Bank Polski SA" available at www.pkobp.pl \ e-receipt. In this case, you can also call the Helpline of PKO Bank Polski.

RIGHT TO FILE A COMPLAINT WITH A SUPERVISORY AUTHORITY

You have the right to file a complaint to the President of the Personal Data Protection Office.

I Personal data controllers

The controllers of your personal data are: ORLEN S.A. with its registered office in Płock, ul. Chemików 7 and the company of ORLEN capital group or another entity of ORLEN capital group (the list of entity is annexed as Attachment No. 2 to the Regulations of the Company Social Activity)

The controllers jointly manage your personal data on the basis of the Agreement on co-administration of personal data which is available on the website www.orlen.pl in the "Responsible Business - Personal Data" tab.

II Common arrangements between controllers

Under Agreement on co-administration of personal data, the controllers have jointly agreed on the responsibilities for fulfilling the obligations arising from GDPR, in particular:

a) Each Administrator, at the time of collecting your personal data for purposes related to the Social Benefits Fund, is responsible for the fulfillment information obligation regarding the processing of your personal data,

b) Each Administrator, in terms of collecting personal data, is responsible for enabling you to exercise your rights related to the processing of your personal data,

c) Regardless of the arrangements in point b above, you may submit the right to request access to your personal data to ORLEN S.A. In this case, ORLEN S.A. will provide your request to the competent Controller who will implement it

III Contact point

Each of the Controller has appointed Data Protection Officer or GDPR Coordinator. The Controllers have established a common contact point, through which you can contact us regarding the protection of your personal data:

a) e-mail address: daneosobowe.sgk@orlen.pl,

b) postal address: ORLEN S.A., Data Protection Officer (Inspektor Ochrony Danych), ul. Chemików 7, 09-411 Płock,

c) ORLEN S.A. undertakes to service the above-mentioned contact points, which does not exclude the right to contact the competent Controller.

IV Purposes of processing

Your personal data are processed for the following purposes:

a) You benefit from social benefits or loan guarantees offered by the Social Benefits Fund at ORLEN S.A. and entities that have concluded the Agreement on joint social activity,

b) Archives which are the implementation of the law,

c) Handle, pursue and defence of claims,

d) Satisfaction survey of people using the benefits of the Social Benefits Fund, determining the quality of service and the level of satisfaction with the benefits offered.

V The legal grounds for the processing

The legal grounds for processing by the Controllers of your personal data for the purposes defined in paragraph IV above include:

a) fulfilment of legal obligations (in compliance Article 6(1)(c) of the GDPR), in connection with your use of social benefits offered by the Social Benefits Fund at ORLEN S.A. and the companies of ORLEN capital group under the Act on Employee Benefit Fund (on condition of using these benefits),

b) fulfilment of legal obligations (in compliance Article 6(1)(c) of the GDPR), for archiving purposes,

c) implement the legitimate interest (in compliance Article 6(1)(f) of the GDPR) for the purpose of handling, investigating and defending in the event of mutual claims,

d) implement the legitimate interest (in compliance Article 6(1)(f) of the GDPR) for the purpose of testing the satisfaction of people using the benefits of the Company Social Benefits Fund,

e) the data of the guarantors will be processed in order to guarantee the loan taken by the borrower, in compliance Article 6(1)(b) of the GDPR and Article 6(1)(c) of the GDPR in connection with a loan agreement concluded in accordance with the applicable Regulations of the Company Social Activity.

VI Period of personal data processing

Your personal data will be processed for the period of using the benefits from the Social Benefits Fund or the period required by law in connection with the guarantee and for the period stipulated by law, not less than until the expiry of mutual claims.

VII Data recipients

Your personal data may be disclosed by Controllers to entities cooperating with them (data recipients), in particular:

a) entities and bodies authorized to process this data on the basis of legal provisions,

b) entities processing personal data at the request of the Controller, for the purpose of handling correspondence as well as the implementation and service of social benefits in ORLEN and entities that have concluded the Agreement on joint social activity,

c) members of the Social Committee referred to the Regulations of the Company Social Activity in the scope of its operation and decision-making,

d) The Senior Club, authorized Members of the Senior Club Councils - in terms of activities carried out by them, i.e. organization of meetings and trips

VIII Information Information on the requirement to provide data

The obligation to provide personal data results in particular from the provisions of law, i.e. the Act on company social benefits fund.

IX Rights of data subjects

In connection with the processing of personal data, you are entitled to:

a) the right to access the content of your data,

b) the right to require rectification of your personal data,

c) the right to require erasure of your personal data,

d) the right to limit processing,

e) the right to object due to a special situation - in cases where the data are processed on the basis of a legitimate interest,

f) the right to data portability, i.e. the right to receive from Controller your personal data in a structured, commonly used and machine-readable format. You may send the received data to another controller or request Controller to send your data to another controller. However, this request may only be met by Controller where technically feasible. The right to data portability may be only exercised with regard to the data processed under an agreement concluded with you,

You may file a complaint to the President of the Personal Data Protection Office.

X Exercise of your rights

To use the above rights, please contact the Administrator in the manner indicated in paragraph IV above.

Statement

I hereby declare that:

a) I refer the information clause for of people benefiting from Social benefit fund offered as part of the joint social activity of ORLEN S.A. and entities that have concluded the Agreement on joint social activity,

b) I undertake to immediately provide the content of the information clause to persons / family members whose personal data I provided in order to use the benefits offered under the ORLEN S.A. Social Benefit Fund and entities that concluded the Agreement on joint social activity.

SEE THE LIST OF ENTITIES WHO HAVE SIGNED THE AGREEMENT ON THE COOPERATING OF PERSONAL DATA

READ THE COOPERATING OF PERSONAL DATA STATEMENT

In the document, ORLEN S.A. shall communicates to you information about the principles of personal data processing as part of business cooperation, in accordance with the obligations resulting from the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as „GDPR”)

I THE DATA CONTROLLER

1. The data controller of your personal data is Polski Koncert Naftowy ORLEN S.A. with its registered office at ul. Chemików 7, Płock, Poland (hereinafter referred to as „ORLEN S.A.”). . Contact phone numbers to the controller: (24) 256 00 00, (24) 365 00 00, (22) 778 00 00. You can contact the Data Controller:

in writing to the address: Chemików 7, 09-411 Płock;
by e-mail: daneosobowe@orlen.pl.

II THE JOINT CONTROLLERS

2. Due to ownership changes, ENERGA-OBRÓT S.A. with its registered office at ul. Grunwaldzka 472, 80-309 Gdańsk and other companies from our capital group also participates in the processing of your personal data. The joint processing of your personal data takes place for the purposes specified in point 6. The companies belonging to our capital group are joint controllers. The processing of your personal data are based on appropriate arrangements, which specify the principles of achieving common processing purposes and principles of cooperation, which ensure the possibility of effective implementation of your rights and protection of your interests. Detailed information about Joint Controllers can be found at www.orlen.pl in the "Personal Data" tab.

III THE DATA PROTECTION OFFICER

3. The Data Protection Officer was appointed in ORLEN S.A. Detailed information about the Data Protection Officer can be found at www.orlen.pl „Contact” tab. You can contact the Data Protection Officer in ORLEN S.A. by e-mail to: daneosobowe@orlen.pl. You can also contact the Data Protection Officer in writing to the address of the registered office of ORLEN S.A., indicated in item 1 above, with additional information “Inspektor Ochrony Danych” (Data Protection Officer).

4. Information about Data Protection Officers appointed by other Joint Controllers can be found at www.orlen.pl in the "Personal Data" tab.

IV OBJECTIVES AND LEGAL GROUNDS FOR THE PROCESSING

ORLEN S.A. processes your personal data for the purposes and on the basis of the following provisions:

a) For sole proprietorship and representatives or attorneys of commercial law companies and business entities operating in other legal forms - in order to take measures relating to the conclusion and implementation of the relevant economic Agreement (in compliance with Article 6(1)(b) of the GDPR),

b) fulfilment of the legal obligations of ORLEN S.A. under the legal provisions, in particular the obligations under tax and accounting law, the obligations of the obliged institution under the Prevention of Money Laundering and Financing, the obligations related to prevent fraud and irregularities related to anti-corruption laws and prevent abuses and conflicts of interest in business processes (in compliance with Article 6(1)(c) of the GDPR),

c) implement the legitimate interest of ORLEN S.A. in the scope of conducting business in accordance with high ethical standards (in compliance with Article 6(1)(f) of the GDPR),

d) implement the legitimate interest of ORLEN S.A. in scope of establishing or maintaining business relationships, including appropriate correspondence or telephone contact;

e) implement the legitimate interest of ORLEN S.A. in the field of conducting internal business analyzes related to customer service, the conditions of ongoing business cooperation or the possibility of its development (in compliance with Article 6 (1) (f) of the GDPR),

f) direct marketing of ORLEN S.A and our capital group own products or services, to the extent that results from the content of the consents for communication (in compliance with Article 6 (1) (f) of the GDPR),

g) implement the legitimate interest of ORLEN S.A in the form of establishing, investigating and defending against claims (in compliance with Article 6 (1) (f) of the GDPR).

6. ORLEN S.A. and other companies from our capital group are joint controllers and process your personal data for the purposes and on the basis of the following provisions:

a) implement the legitimate interest of ORLEN S.A resulting from intra-group Agreements in the field of customer service, including to provide customer service by a company responsible for a specific segment or group of entrepreneurs (in compliance with Article 6 (1) (f) of the GDPR),

b) implement the legitimate interest of our capital group in the field of conducting internal business analyzes related to customer service, the conditions of ongoing business cooperation or the possibility of its development (in compliance with Article 6 (1) (f) of the GDPR),

c) direct marketing of our capital group own products or services to the extent that results from the content of the consents for communication (in compliance with Article 6 (1) (f) of the GDPR),

d) implement the legitimate interest in the form of establishing, investigating and defending against claims (in compliance with Article 6 (1) (f) of the GDPR).

VII PERIOD OF PERSONAL DATA PROCESSING

9. Your personal data will be processed for the duration of the economic Agreement and the period stipulated by law, not less than until the expiry of mutual claims under the Agreement. Providing personal data are voluntary, but necessary for the conclusion and performance of the Agreement. If the processing of your personal data are based on the consent, personal data are processed until its withdrawal.

VIII RIGHTS

10. In connection with the processing of personal data, you are entitled to:

a) the right to access the content of your data,

b) the right to require rectification of your personal data,

c) the right to require erasure of your personal data,

d) the right to limit processing,

e) the right to transfer data,

f) the right to object, in the event your personal data are processed by ORLEN S.A. or Joint Controllers on the basis of its legitimate interest;

You can also withdraw your consent to marketing communications. Withdrawal of consent is possible during telephone contact with representatives of the ORLEN S.A. sales office conducting marketing communication. The consent may also be withdrawn by sending an e-mail to the address of the relevant ORLEN sales office. Current contact details of our sales offices can be found on the website www.orlen.pl and in the content of the contact forms used to obtain consents for marketing communication.

11. If you want to exercise your rights, please contact ORLEN S.A. or the Data Protection Officer, in accordance with the contact details indicated in item 1 and 3. The provided contact details also enable the direct implementation of the rights resulting from the applicable personal data protection regulations in the field of processing operations carried out jointly by ORLEN S.A. and each of the Joint Controllers.

12. In matters related to the processing of personal data, you may file a complaint to the President of the Personal Data Protection Office.

1. The data controller of your personal data is Polski Koncert Naftowy ORLEN S.A. with its registered office at ul. Chemików 7, Płock, Poland (hereinafter referred to as „ORLEN S.A.”). `Contact phone numbers to the controller: (24) 256 00 00, (24) 365 00 00, (22) 778 00 00. You can also contact the data controller:

in writing to the address: Chemików 7, 09-411 Płock;
by e-mail to: daneosobowe@orlen.pl.

2. Due to ownership changes, ENERGA-OBRÓT S.A. with its registered office at ul. Grunwaldzka 472, 80-309 Gdańsk and other companies from our capital group also participates in the processing of your personal data. The joint processing of your personal data takes place for the purposes specified in point 6. The companies belonging to our capital group are joint controllers. The processing of your personal data are based on appropriate arrangements, which specify the principles of achieving common processing purposes and principles of cooperation, which ensure the possibility of effective implementation of your rights and protection of your interests. Detailed information about Joint Controllers can be found at www.orlen.pl in the "Personal Data" tab.

3. The Data Protection Officer was appointed in ORLEN S.A. Detailed information about the Data Protection Officer can be found at www.orlen.pl „Contact” tab. You can contact the Data Protection Officer in ORLEN S.A. by e-mail to: daneosobowe@orlen.pl. You can also contact the Data Protection Officer in writing to the address of the registered office of ORLEN S.A., indicated in item 1 above, with additional information “Inspektor Ochrony Danych” (Data Protection Officer).

4. Information about Data Protection Officers appointed by other Joint Controllers can be found at www.orlen.pl in the "Personal Data" tab.

5. ORLEN S.A. processes your personal data for the purposes and on the basis of the following provisions: