Privacy Policy

Public company ORLEN Lietuva


Privacy Policy


Important information on how we collect, use and store your personal information

Date of last revision: 2021-12-29

Public Company ORLEN Lietuva (hereinafter Company or us) processes information concerning you and your privacy. When collecting, using and storing information on you, we comply with the European Union General Data Protection Regulation (or GDPR)[1], Law on Legal Protection of Personal Data of the Republic of Lithuania and other legislation.

 

1.         What will I find in this Policy? 

In this Policy you will find answers to the most important questions on how we collect, use or store information related to you. This is very important for you – please read carefully the information provided in this document.  This Policy can be amended or updated.  Please visit from time to time the Company website www.orlenlietuva.lt  for an updated version of this Policy.

 

2.         Who is responsible for the security of my personal information?

Public Company ORLEN Lietuva

Our company code: 166451720

Our office address: Mažeikių St. 75, Juodeikiai Vill., 89453 Mažeikiai Distr. Municipality

Our e-mail address: post@orlenlietuva.lt   

Our telephone number: +370 443 92121

 

3.         How can your Data Protection Officer help me?

If you want to file a request, complain or question, our Data Protection Officer is ready to help you. Please contact him by email post@orlenlietuva.lt or by post to the address Mažeikių St. 75, Juodeikiai Vill., 89453 Mažeikiai Distr. Municipality.

 ​

4. Why and what information do you collect on me?

We collect, use and store information on you that is required to:

  • Ensure public order and protection of the property and employees of the Company as well as other persons staying at the Company's territory – when you are present in the territory and buildings under video monitoring, when you call the Company to report incidents and enter the Company's territory and buildings;

  • To perform properly petroleum product sales contracts concluded with you;
  • To perform properly services or supply contracts or other agreements concluded with you;
  • To maintain relationships with natural and legal persons represented by you;
  • To ensure safe and smooth functioning of the Company's website.

For more detailed information please refer to the Company’s Description of Processed Data. ​ 


5. Does your website leave cookies in my computer or other devices?

Yes. We use cookies in accordance with the Company's Cookies Policy.


6. What information do I have to provide to you?

Please refer to the Description of Processed Data – you must present personal information that is necessary to conclude or execute contracts with you, that we are legally obliged to collect or that is required to ensure public order and to protect you, Company's employees and other individuals present in the Company's territory as well as the Company's property, or to investigate incidents.  If you do not provide this information, we will not be able to conclude and perform the said contracts, you will not be able to enter the Company's territory and buildings, if telephone conversions are not recorded as required by law, you will not be able to contact us.

7. Where do you get information from?

  • From you;
  • From your represenatives, employers;
  • UAB ORLEN Apsauga.

8. What are the legal grounds for collecting information on me?

  • We have your consent (GDPR Article 6 (1) (a))
  • We conclude and perform contracts with you (GDPR Article 6 (1) (b))
  • We have a legal obligation to collect information  (GDPR Article 6 (1) (c)) 
  • We protect the vital interests of you and other natural persons (GDPR Article 6 (1) (d) and Article 9 (2) (c))
  • We have legitimate interests to do so (GDPR Article 6 (1) (f))
  • Legal proceedings (GDPR Article 9 (2) (f))

For more detailed information please refer to the Description of Processed Data.

9. Who do you transfer my personal information to?

To the extent permitted by law and for reasons specified in the answer to question 3, we disclose your personal information to:

  • UAB ORLEN Apsauga;
  • UAB Medikvita;
  • Mažeikiai Fire and Rescue Board for Protection of Facilities;
  • Police, prosecutor, courts, bailiffs, notaries, Special Investigation Service and other law enforcement authorities.
  • Attorneys, auditors, consultants, suppliers of IT support services and electronic communications services, insurance companies, suppliers or archiving and other services;
  • Would it be necessary – enterprises that intend or are interested in taking over the Company’s business;
  • Would it be necessary – to persons who will be assigned (for payment or for free) the rights, obligations, debts, etc. under contracts concluded with you.

We normally process and store your personal data within the European Union (EU) or the European Economic Area (EEA), but we may transfer your personal data outside the EU / EEA, for example when necessary for the conclusion and performance of a contract or if you have consented to such transfer. We will transfer your personal data outside the EU / EEA if at least one of the following measures is implemented:

  • The European Commission has recognized that the State to which the data are transferred ensures an adequate level of protection of personal data;
  • the contract is concluded in accordance with the Standard Contractual Clauses (SCC) approved by the European Commission;
  • compliance with codes of conduct or other safeguards under the GDPR.​


10. For how long do you keep my personal information?

To the extent necessary to achieve the objectives and to the extent permitted by law.  For more detailed information please refer to the Description of Processed Data.

11. What security measures does the Company apply to protect your personal data?

The Company’s information security management system complies with the ISO / IEC 27001: 2013 standard. This standard confirms that we make every effort to create security barriers to protect information. Data processing agreements are signed with Data Processors, which contain obligations for them to comply with all possible security measures and legal requirements to ensure the protection of personal data. Confidentiality agreements / confidentiality obligations have been concluded with the employees of the Company, where sanctions are provided for illegal disclosure of personal data and information.

12. What are my rights?

GDPR and other laws grant you certain rights and define the cases these rights can be and cannot be exercised by you as well as the procedures to be followed by you. To the extent permitted by law you may:

  • File an inquiry on whether the Company processes your personal data and if so request access to the processed data and associated information; 
  • File a request to rectify the inaccurate or incorrect information or to supplement incomplete information; 
  • File a request to erase personal information if unlawfully used by us; 
  • File a request to restrict the processing of your personal information – when you contest the accuracy of data or object to the processing of data or to erasure of unlawfully processed data or need data for the establishment, exercise or defense of legal claims;  
  • Express your objection to data processing  – when we do this in the lawful interests of the Company and/or interests of third parties; 
  • File a request to transfer (receive) the data that you provided to us under contract or by your consent and that are processed by us using automatic means, in the commonly accepted electronic format; 
  • Object to automated decision-making, including profiling, if such decision could have legal consequences or similar significant effects on you;  
  • Revoke your consent to the use of your personal information – when we use your data for which you have given your consent; 
  • File a complaint to the Data Protection Authority (see www.ada.lt).

13.   What principles we follow when processing your personal data?

We follow the following principles when collecting and using the personal data:

  • Your personal data is processed in a lawful, fair and transparent manner (principle of lawfulness, fairness and transparency) (Article 5 (1) (a) of the GDPR);
  • Your personal data is collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes (purpose limitation principle) (Article 5 (1) (b) of the GDPR);
  • Your personal data are adequate, relevant and only necessary for the purposes for which they are processed (principle of data minimisation) (Article 5 (1) (c) of the GDPR);
  • the personal data processed are accurate and, where necessary, kept up to date (principle of accuracy) (Article 5 (1) (d) of the GDPR);
  • Your personal data are kept in a form that allows for the identification of the person for no longer than is necessary for the purposes for which your personal data are processed (principle of storage limitation) (Article 5 (1) (e) of the GDPR);
  • Your personal data is processed in such a way as to ensure adequate security of personal data through appropriate technical or organizational measures, including protection against unauthorized or unlawful processing of data and against accidental loss, destruction or damage (principle of integrity and confidentiality) (Article 5 (1) (f) of the GDPR).


Describtion of the Processed Data

Why do you collect my personal information?​ What information do you collect on me?​ What is the legal ground for collecting information on me?​ For how long do you keep my personal information?​
​In order to ensure public order and to protect you, Company's employees and other individuals present in the Company's territory  as well as the Company's property, or to investigate incidents. ​ ​ ​ ​Telephone number, records of phone conversions and data provided during conversions.

​We have legitimate interest (ensure public order and public security, collect evidence in case of dispute if any) (GDPR Article 6 (1) (f))

We protect your other natural persons' vital interests (GDPR Article 6 (1) (d) and Article 9 (2) (c))

​For 60 days or until the end of investigation (if any conducted in accordance with established procedures)
​Video content ​For 30 days or until the end of investigation (if any conducted in accordance with established procedures)
​Name, surname, signature, date of birth, or personal ID, personal vehicle registration (license plate) number, personal vehicle make and model, photo (photo would be used if requested by you) ​You consent to the use of your personal information by us (GDPR Article 6 (1) (a)
We have legitimate interest (ensure public order and public security, collect evidence in case of dispute if any) (GDPR Article 6 (1) (f))
​5 years
​Information about security, OHS, information security incidents, breaches, offences that occurred in the Company's territory or were committed in respect of the Company. ​We have legitimate interest (ensure public order and public security, collect evidence in case of dispute if any) (GDPR Article 6 (1) (f))
Legal proceedings (GDPR Article 9 (2) (f))
​For 10 years or until the end of investigation (if any conducted in accordance with established procedures)
​Because we conclude and perform petroleum product sales contracts with you ​Name, surname, signature, date of birth, personal ID, address, email address, phone number, bank account number, VAT number (if a VAT payer), payment information, identification document copy, contract, date, number and place of conclusion of contract, contract performance information, communication, description and quantity of goods, place, time and terms of delivery, copies of authorizations, copies of purchase record cards, amount and expiry of your trade credit, copies of performance guarantees, provided documents, information concerning the contract and its performance.  ​We conclude and perform a petroleum products sales contract with you (GDPR Article 6 (1) (b))
We have a legal obligation to collect information  (GDPR Article 6 (1) (c))
​During the term of contract and 10 years after the completion of transaction with you
​Because we conclude and perform works, services and other contracts  with you ​Name and surname, signature, date of birth, personal ID, address, email address, telephone number, VAT number (if a VAT payer), bank account number, payment information, copy of identification document,  contract, number, date and place of conclusion of contract, contract performance information, communication, provided documents, number of self-employment certificate, information concerning the contract and its performance.  ​We conclude and perform a works, services or other contract with you (GDPR Article 6 (1) (b))
We have a legal obligation to collect information  (GDPR Article 6 (1) (c))
​During the term of contract and 10 years after the completion of transaction with you
​We maintain relationships with natural and legal persons represented by you ​Name, surname, personal ID, address, authorization and its validity, signature, relationship with the represented person, represented person, job title, telephone number, email address, communication with the Company, information about the person represented by you, etc. ​We have legitimate interests (to maintain relationships with persons represented by you) (GDPR Article 6 (1) (f)) ​During the term of contract and 10 years after the completion of transaction with you
We ensure safe and smooth functioning of the Company's website.​ ​IP address, information on the use by you of our website and related services, information about computer from which our website has been accessed ​You consent to the use of your personal information by us (GDPR Article 6 (1) (a)
We have legitimate interests (to ensure the security of our website) (GDPR Article 6 (1) (f))
​1 year after your last visit

Cookie Policy

Date of last revision: 2021-12-29

1. What are cookies?

Cookies are small text files stored on the bowser of your device (e.g., computer, mobile phone or tablet PC) while the user navigates a website.   Other technologies, including data kept in your browser or device, identifiers related to your device or other software can be used for similar purposes.  Cookies are widely used for a better, more efficient functioning of websites.  All technologies referred to in this Policy are called cookies. 

2. Why do you use cookies?

We use cookies:

  • To ensure a proper functioning of our website;
  • To save your choices made during or between your visits;
  • To improve the speed and safety of our website;
  • To ensure that when connected to the website you can customize it to your needs in order get the required information more quickly;
  • For continuous improvement of our website to make it more attractive to you.

3. How can I control the cookies?

Strictly necessary cookies and analytical cookies are mandatory for the users of our website.   If you reject, disable or block these types of cookies, we will not be able to ensure the proper operation of our website.

You can control the use of functional, targeting or advertising cookies by changing the settings of your browser.

Please note that if you delete or disable the cookies, certain parts or functions of our website can become inaccessible.  If you change cookie settings, this may affect other websites navigated by you.

You can configure your browser to reject some or all cookies or to ask for your prior authorization to use cookies.  Please note that if you delete or disable the cookies, certain parts or functions of our website can become inaccessible. If you need more information on how to change your browser's settings, please visit www.aboutcookies.org or www.allaboutcookies.org.

If you connect to our Platform from several devices (e.g., cell phone, tablet PC, computer, etc.), you must make sure that the browser of each device is adapted to your cookie settings.  If you change cookie settings, this may affect other websites navigated by you.

If you would like to get more information about the policy of third-party cookies and their control, please refer to the cookies policy of third parties. 

4. What are the types of cookies?

(a) Necessary cookies

These cookies are essential in order to enable the user to move around the website and use its features, e.g., to save the entered information when the user moves from one page to another during a browsing session. Without these cookies certain functions of the website would not be available and the website would not run as properly as it should.  These cookies do not collect any information for marketing purposes and do not retain any information about your visit.

(b) Statistics cookies

Statistics cookies are used to collect information on the use of the website and to help to improve its functioning.  For instance, these cookies can be used to show which pages visitors go to most often, help to register website errors or track the success of advertising campaigns on the website.  Statistics cookies do not collect any personal information of users – all information collected by these cookies is general and anonymous.

(c) Functional cookies

Functional cookies allow the website to remember choices you make and to provide enhanced, more personal features.  Functional cookies can also be used to remember changes you have made, e.g. website personalization, also in cases when you watch a video or leave a comment on our website.  Functional cookies do not track your activities on other websites.

(d) Targeting, advertising or marketing cookies

These cookies are used to deliver adverts more relevant to you and your interests, also used to limit the number of times you see an advertisement. These cookies are also used to help measure the effectiveness of the advertising campaign.  These cookies can be used to remember the pages that you looked at as you browsed the website. 

      (e)  Other or unclassified cookies

These are cookies that we classify with individual cookie providers.

5. What cookies do you use?

​Cookie ​Name ​Purpose ​Storage term
​Statistical _utma
_utmb
_utmc

_utmz
_utmt
_utm.gif[x2]
These cookies are used to collect 
​statistical information to determine how many visitors use the website. Collected data are used to compile reports and to help improve the website.
2 years
1 day
Until the website is closed
6 months
1 day
Until the website is closed
​Marketing
 Not currently in use
​Functional ​orlent_pl_fontsize ​To ensure the functionality of the website by improving the user's experience (to remember, e.g., the changes made to the font size) ​6 days 
Necessary​
ASP.NET_Sessionld
TS#
​CookieConsent​
​These cookies are necessary for us to function properly in order to provide information about the site. Until the website is closed
Until the website is closed
1 year
​Other ​​Not currently in use​ 
​​​​​
 
 
 

ORLEN Group brands