Public company ORLEN Lietuva
Privacy Policy
Important information on how we collect, use and store your personal information
Date of last revision: 2024-10-10
Public
Company ORLEN Lietuva (hereinafter Company or us) processes information
concerning you and your privacy. When collecting, using and storing information
on you, we comply with the European Union General Data Protection Regulation
(or GDPR),
Law on Legal Protection of Personal Data of the Republic of Lithuania and other
legislation.
1.
What will I find in this
Policy?
In this Policy you will find
answers to the most important questions on how we collect, use or store
information related to you. This
is very important for you – please read carefully the information provided in
this document. This Policy can be
amended or updated. Please visit from
time to time the Company website
www.orlenlietuva.lt for an updated version of this
Policy.
2.
Who is responsible for the
security of my personal information?
Public Company ORLEN Lietuva
Our company code: 166451720
Our office address: Mažeikių St. 75,
Juodeikiai Vill., 89453 Mažeikiai Distr. Municipality
Our e-mail address: post@orlenlietuva.lt
Our telephone number: +370 443 92121
3.
How can your Data Protection
Officer help me?
If you
want to file a request, complain or question, our Data Protection Officer is
ready to help you. Please contact him by email post@orlenlietuva.lt or by post to the address
Mažeikių St. 75, Juodeikiai Vill., 89453 Mažeikiai Distr. Municipality.
4. Why and what information do you collect on me?
We
collect, use and store information on you that is required to:
Ensure
public order and protection of the property and employees of the Company as
well as other persons staying at the Company's territory – when you are present
in the territory and buildings under video monitoring, when you call the
Company to report incidents and enter the Company's territory and buildings;
- To perform properly petroleum product
sales contracts concluded with you;
- To
perform properly services or supply contracts or other agreements concluded
with you;
- To
maintain relationships with natural and legal persons represented by you;
- To
ensure safe and smooth functioning of the Company's website.
For
more detailed information please refer to the Company’s Description of Processed
Data.
5. Does your website leave cookies in my computer or other devices?
Yes. We use cookies in accordance with the Company's Cookies Policy.
6. What information do I have to provide to you?
Please
refer to the Description of Processed Data – you must present personal
information that is necessary to conclude or execute contracts with you, that
we are legally obliged to collect or that is required to ensure public order
and to protect you, Company's employees and other individuals present in the
Company's territory as well as the Company's property, or to investigate
incidents. If you do not provide this
information, we will not be able to conclude and perform the said contracts,
you will not be able to enter the Company's territory and buildings, if
telephone conversions are not recorded as required by law, you will not be able
to contact us.
7. Where do you get information from?
8. What are the legal grounds for collecting information on me?
We have your consent (GDPR Article 6 (1) (a))
We conclude and perform contracts with you (GDPR Article 6 (1) (b))
We have a legal obligation to collect information (GDPR Article 6 (1) (c))
We protect the vital interests of you and other natural persons (GDPR Article 6 (1) (d) and Article 9 (2) (c))
We have legitimate interests to do so (GDPR Article 6 (1) (f))
Legal proceedings (GDPR Article 9 (2) (f))
For more detailed information please refer to the Description of Processed Data.
9. Who do you transfer my personal information to?
To the extent permitted by law and for reasons specified in the answer to question 3, we disclose your personal information to:
UAB ORLEN Apsauga;
UAB Medikvita;
;
Attorneys, auditors, consultants, suppliers of IT support services and electronic communications services, insurance companies, suppliers or archiving and other services;
Would it be necessary – enterprises that intend or are interested in taking over the Company’s business;
Would it be necessary – to persons who will be assigned (for payment or for free) the rights, obligations, debts, etc. under contracts concluded with you.
We normally process and store your
personal data within the European Union (EU) or the European Economic Area
(EEA), but we may transfer your personal data outside the EU / EEA, for example
when necessary for the conclusion and performance of a contract or if you have
consented to such transfer. We will transfer your personal data outside the EU
/ EEA if at least one of the following measures is implemented:
- The European Commission has recognized
that the State to which the data are transferred ensures an adequate level of
protection of personal data;
- the contract is concluded in accordance
with the Standard Contractual Clauses (SCC) approved by the European
Commission;
- compliance with codes of conduct or
other safeguards under the GDPR.
10. For how long do you keep my personal information?
To the extent necessary to achieve the objectives and to the extent permitted by law. For more detailed information please refer to the Description of Processed Data.
11. What security measures does
the Company apply to protect your personal data?
The Company’s information security
management system complies with the ISO / IEC 27001: 2013 standard. This
standard confirms that we make every effort to create security barriers to
protect information. Data processing agreements are signed with Data
Processors, which contain obligations for them to comply with all possible
security measures and legal requirements to ensure the protection of personal
data. Confidentiality agreements / confidentiality obligations have been concluded
with the employees of the Company, where sanctions are provided for illegal
disclosure of personal data and information.
12. What are my rights?
GDPR and other laws grant you certain rights and define the cases these rights can be and cannot be exercised by you as well as the procedures to be followed by you. To the extent permitted by law you may:
File an inquiry on whether the Company processes your personal data and if so request access to the processed data and associated information;
File a request to rectify the inaccurate or incorrect information or to supplement incomplete information;
File a request to erase personal information if unlawfully used by us;
File a request to restrict the processing of your personal information – when you contest the accuracy of data or object to the processing of data or to erasure of unlawfully processed data or need data for the establishment, exercise or defense of legal claims;
Express your objection to data processing – when we do this in the lawful interests of the Company and/or interests of third parties;
File a request to transfer (receive) the data that you provided to us under contract or by your consent and that are processed by us using automatic means, in the commonly accepted electronic format;
Object to automated decision-making, including profiling, if such decision could have legal consequences or similar significant effects on you;
Revoke your consent to the use of your personal information – when we use your data for which you have given your consent;
File a complaint to the Data Protection Authority (see
www.ada.lt).
13. What principles we follow
when processing your personal data?
We follow the following principles when
collecting and using the personal data:
- Your personal data is processed in a
lawful, fair and transparent manner (principle of lawfulness, fairness and
transparency) (Article 5 (1) (a) of the GDPR);
- Your personal data is collected for
specified, explicit and legitimate purposes and not further processed in a way
incompatible with those purposes (purpose limitation principle) (Article 5 (1)
(b) of the GDPR);
- Your personal data are adequate,
relevant and only necessary for the purposes for which they are processed
(principle of data minimisation) (Article 5 (1) (c) of the GDPR);
- the personal data processed are accurate
and, where necessary, kept up to date (principle of accuracy) (Article 5 (1)
(d) of the GDPR);
- Your personal data are kept in a form
that allows for the identification of the person for no longer than is
necessary for the purposes for which your personal data are processed
(principle of storage limitation) (Article 5 (1) (e) of the GDPR);
- Your personal data is processed in such
a way as to ensure adequate security of personal data through appropriate
technical or organizational measures, including protection against unauthorized
or unlawful processing of data and against accidental loss, destruction or
damage (principle of integrity and confidentiality) (Article 5 (1) (f) of the
GDPR).
Describtion of the Processed Data
In order to ensure public order and to protect you, Company's employees and other individuals present in the Company's territory as well as the Company's property, or to investigate incidents. |
Telephone number, records of phone conversions and data provided during conversions. |
We have legitimate interest (ensure public order and public security, collect evidence in case of dispute if any) (GDPR Article 6 (1) (f))
We protect your other natural persons' vital interests (GDPR Article 6 (1) (d) and Article 9 (2) (c))
|
For 60 days or until the end of investigation (if any conducted in accordance with established procedures) |
Video content |
For 30 days or until the end of investigation (if any conducted in accordance with established procedures) |
Name, surname, signature, date of birth, or personal ID, personal vehicle registration (license plate) number, personal vehicle make and model, photo (photo would be used if requested by you) |
You consent to the use of your personal information by us (GDPR Article 6 (1) (a) We have legitimate interest (ensure public order and public security, collect evidence in case of dispute if any) (GDPR Article 6 (1) (f)) |
5 years |
Information about security, OHS, information security incidents, breaches, offences that occurred in the Company's territory or were committed in respect of the Company. |
We have legitimate interest (ensure public order and public security, collect evidence in case of dispute if any) (GDPR Article 6 (1) (f)) Legal proceedings (GDPR Article 9 (2) (f)) |
For 10 years or until the end of investigation (if any conducted in accordance with established procedures) |
Because we conclude and perform petroleum product sales contracts with you |
Name, surname, signature, date of birth, personal ID, address, email address, phone number, bank account number, VAT number (if a VAT payer), payment information, identification document copy, contract, date, number and place of conclusion of contract, contract performance information, communication, description and quantity of goods, place, time and terms of delivery, copies of authorizations, copies of purchase record cards, amount and expiry of your trade credit, copies of performance guarantees, provided documents, information concerning the contract and its performance. |
We conclude and perform a petroleum products sales contract with you (GDPR Article 6 (1) (b)) We have a legal obligation to collect information (GDPR Article 6 (1) (c))
|
During the term of contract and 10 years after the completion of transaction with you |
Because we conclude and perform works, services and other contracts with you |
Name and surname, signature, date of birth, personal ID, address, email address, telephone number, VAT number (if a VAT payer), bank account number, payment information, copy of identification document, contract, number, date and place of conclusion of contract, contract performance information, communication, provided documents, number of self-employment certificate, information concerning the contract and its performance. |
We conclude and perform a works, services or other contract with you (GDPR Article 6 (1) (b)) We have a legal obligation to collect information (GDPR Article 6 (1) (c))
|
During the term of contract and 10 years after the completion of transaction with you |
We maintain relationships with natural and legal persons represented by you |
Name, surname, personal ID, address, authorization and its validity, signature, relationship with the represented person, represented person, job title, telephone number, email address, communication with the Company, information about the person represented by you, etc. |
We have legitimate interests (to maintain relationships with persons represented by you) (GDPR Article 6 (1) (f)) |
During the term of contract and 10 years after the completion of transaction with you |
We ensure safe and smooth functioning of the Company's website. |
IP address, information on the use by you of our website and related services, information about computer from which our website has been accessed |
You consent to the use of your personal information by us (GDPR Article 6 (1) (a) We have legitimate interests (to ensure the security of our website) (GDPR Article 6 (1) (f))
|
1 year after your last visit |
---|
Cookie Policy
Date of last revision: 2021-12-29
1. What are cookies?
Cookies are small text files stored on the bowser of your device (e.g., computer, mobile phone or tablet PC) while the user navigates a website. Other technologies, including data kept in your browser or device, identifiers related to your device or other software can be used for similar purposes. Cookies are widely used for a better, more efficient functioning of websites. All technologies referred to in this Policy are called cookies.
2. Why do you use cookies?
We use cookies:
To ensure a proper functioning of our website;
To save your choices made during or between your visits;
To improve the speed and safety of our website;
To ensure that when connected to the website you can customize it to your needs in order get the required information more quickly;
For continuous improvement of our website to make it more attractive to you.
3. How can I control the cookies?
Strictly necessary cookies and analytical cookies are mandatory for the users of our website. If you reject, disable or block these types of cookies, we will not be able to ensure the proper operation of our website.
You can control the use of functional, targeting or advertising cookies by changing the settings of your browser.
Please note that if you delete or disable the cookies, certain parts or functions of our website can become inaccessible. If you change cookie settings, this may affect other websites navigated by you.
You can configure your browser to reject some or all cookies or to ask for your prior authorization to use cookies. Please note that if you delete or disable the cookies, certain parts or functions of our website can become inaccessible. If you need more information on how to change your browser's settings, please visit www.aboutcookies.org or www.allaboutcookies.org.
If you connect to our Platform from several devices (e.g., cell phone, tablet PC, computer, etc.), you must make sure that the browser of each device is adapted to your cookie settings. If you change cookie settings, this may affect other websites navigated by you.
If you would like to get more information about the policy of third-party cookies and their control, please refer to the cookies policy of third parties.
4. What are the types of cookies?
(a) Necessary cookies
These cookies are essential in order to enable the user to move around the website and use its features, e.g., to save the entered information when the user moves from one page to another during a browsing session. Without these cookies certain functions of the website would not be available and the website would not run as properly as it should. These cookies do not collect any information for marketing purposes and do not retain any information about your visit.
(b) Statistics cookies
Statistics cookies are used to collect information on the use of the website and to help to improve its functioning. For instance, these cookies can be used to show which pages visitors go to most often, help to register website errors or track the success of advertising campaigns on the website. Statistics cookies do not collect any personal information of users – all information collected by these cookies is general and anonymous.
(c) Functional cookies
Functional cookies allow the website to remember choices you make and to provide enhanced, more personal features. Functional cookies can also be used to remember changes you have made, e.g. website personalization, also in cases when you watch a video or leave a comment on our website. Functional cookies do not track your activities on other websites.
(d) Targeting, advertising or marketing cookies
These cookies are used to deliver adverts more relevant to
you and your interests, also used to limit the number of times you see an advertisement.
These cookies are also used to help measure the effectiveness of the
advertising campaign. These cookies can
be used to remember the pages that you looked at as you browsed the website.
(e) Other or unclassified cookies
These are cookies that we classify with
individual cookie providers.
5. What cookies do you use?
Statistical |
_utma _utmb _utmc
_utmz _utmt _utm.gif[x2]
|
These cookies are used to collect
statistical information to determine how many visitors use the website. Collected data are used to compile reports and to help improve the website. |
2 years 1 day Until the website is closed 6 months 1 day Until the website is closed |
Marketing |
Not currently in use |
Functional |
orlent_pl_fontsize |
To ensure the functionality of the website by improving the user's experience (to remember, e.g., the changes made to the font size) |
6 days |
N |
ecessary
|
ASP. | NET_Sessionld TS# CookieConsent |
These
cookies are necessary for us to function properly in order to provide
information about the site. |
Until the website is closed Until the website is closed 1 year |