Privacy Policy

I. Basic provisions

 

The controller of personal data pursuant to Art. 4 (7) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”) is ORLEN Unipetrol Hungary Kft., (registered office: 1112 Budapest, Boldizsár utca 2., company ID No.: 01-09-430162​; hereinafter referred to as “ORLEN Unipetrol Hungary” or the “Controller”).

ORLEN Unipetrol Hungary attaches great importance to the transparency of the processing and security of your personal data, which are considered strictly confide​ntial, and handles them in accordance with the GDPR and other valid legal regulations on the protection  of personal data protection.

In order to  ensure smooth communication between you and ORLEN Unipetrol Hungary, you may contact our data protection specialist, who is available to you in the case of questions or irregularities in personal data processing, by e-mail at dataprotection@orlenunipetrol.hu or by  post at the following  address 1112 Budapest, Boldizsár utca 2.  

ORLEN Unipetrol Hungary values your trust and, therefore, in accordance with the principle of transparency, informs you by means of this Privacy Policy about the processing of your personal data, which is necessary  for the purposes specified below.

These principles apply to the website www.orlenunipetrol.hu (hereinafter referred to as the “website”) and are primarily addressed for the contractors/customers, website visitors, job applicants,, enquirers and other persons whose personal data may be processed by ORLEN Unipetrol Hungary.

 

II. Purposes of the processing personal data and their legal basis 

 

1. Implementation and performance of contracts

ORLEN Unipetrol Hungary, as a registered distributor with an excise duty licence, sells motor fuels (gasoline and diesel) to resellers and final consumers.  In the course of these business activities, personal data are processed, in particular those of the partner (customer, client, supplier, purchaser) as a natural person, as well as other persons, typically the contact persons and employees of the partner as a legal entity.

The purpose of the processing personal data is the implementation and execution of the contractual relationship, i. e. the sell of the motor fuels and, as far as services are concerned, the exercise of the rights and obligations arising from the contractual relationship between the partner and ORLEN Unipetrol Hungary and other contractual obligations. In the case of partners as natural persons, the legal basis for the processing of personal data is Art. 6(1)(b) of the GDPR, i. e. the processing is necessary for the performance of a contract and for the implementation the measures taken prior to the conclusion of  the contract. In the case of contact persons and employees of partners, the legal basis for the processing of personal data is Art. 6(1)(f) GDPR, i.e. processing is necessary for the purposes of the legitimate interests pursued by the controller. The purpose of the processing is to facilitate communication with partners as legal entities in the negotiating, conclusion and performance of contracts. For this purpose, it is necessary to process the personal data of contact persons, as the purpose cannot  be fulfilled otherwise. The processing is proportionate and only the data that are strictly necessary to fulfil the purpose is being processed. The Controller has concluded that its legitimate interest is not overridden by the interests or fundamental rights and freedoms of the data subject. The personal data processed does not qualify as special category data. The Controller considers that data subjects may reasonably expect that their data will be processed for the aforementioned purposes, as  it is part of their duties as employees to communicate with business partners. The Controller cannot anticipate any harm or risk that this form of processing of personal data could cause to the data subject.

ORLEN Unipetrol Hungary collects the following data for the aforementioned purpose:

  1. Identification data (name, surname, company ID number and tax ID number);
  2. Contact data (e-mail address, mailing address, telephone number, position);
  3. Bank account number of the (potential) contractual partner;
  4. Business records (minutes of meetings, instructions, etc.);
  5. Data about the order, delivery and payment;
  6. Necessary communication between the partner and ORLEN Unipetrol Hungary.

 

2. Fulfilment of legal obligations within the accounting and tax agenda 

We process accounting documents, data concerning your payments and other information required by law for the fulfilment of our legal obligations, i.e. the obligations laid down in Act C of 2000 on accounting. The legal basis for the processing of personal data is Art. 6(1)(c) of the GDPR.

3. Communication with inquirers

If you contact ORLEN Unipetrol Hungary via e-mail, its mailing address or other means, information about your contact will be processed only for the purpose of the established communication with you.

The legal basis for the collection of personal data is the legitimate interest of the Controller pursuant to Article 6(1)(f) of the GDPR. It means that ORLEN Unipetrol Hungary uses the personal data of the inquirers in order to develop relations with the web visitors, to improve the efficiency of communication, to present its business name and to protect its brand image. For this purpose, it is necessary to process the personal data of the inquirers, as  the purpose cannot be fulfilled otherwise. The processing is proportionate and only the data is strictly necessary to fulfil the purpose is processed. The Controller has concluded that its legitimate interest is not overridden by the interests or fundamental rights and freedoms of the data subject. The personal data processed does not qualify as special category data. The Controller believes that inquirers could reasonably expect that their data will be processed for the aforementioned purpose, since they actively contact ORLEN Unipetrol Hungary in order to communicate. The Controller cannot anticipate any harm or risk that this form of processing of personal data could cause to the individual.

ORLEN Unipetrol Hungary collects the following data for the aforementioned purpose:

  1. Identification data (name, surname);
  2. Contact data (e-mail address, mailing address, telephone number);
  3. Necessary communication between you and ORLEN Unipetrol Hungary.

 

4. Employee recruitment

If you wish to become a member of the ORLEN Unipetrol Hungary team and send us your CV, we will process your personal data for the purpose of the recruitment process for the position you have chosen. The legal basis for the processing your personal data is Art. 6(1)(b) GDPR, i.e. the processing is necessary in order to take steps at the request of the data subject prior to the conclusion of  a contract.

ORLEN Unipetrol Hungary collects the following data for the aforementioned purpose:

  1. Identification data (name, surname, title);
  2. Contact data (e-mail address, mailing address, telephone number);
  3. Data concerning CV (previous work experience, study experience, skills);
  4. Necessary communication between you and ORLEN Unipetrol Hungary.

In case you are participating in the 1st round of the recruitment process, and you have provided the Controller with data that must be verified for the success of the recruitment process, the Controller is entitled to verify or obtain references from previous employers, public sources and public registers of legal and natural persons in order to verify the accuracy of the information provided by you and to prevent  conflicts of interest with the activities of the ORLEN Unipetrol Group.

5. Fulfilment of labour-law relationships

Our employees are informed about the processing of their personal data on an individual basis.

 

III. Period of storing personal data

 

ORLEN Unipetrol Hungary processes and stores your personal data for the period of time strictly necessary to ensure all the rights and obligations arising from the respective contractual relationship, and furthermore for the period of time for which ORLEN Unipetrol Hungary, as the Controller of the personal data is obliged to store the personal data pursuant to generally binding legal regulations. In general, personal data shall be processed only for the time strictly necessary to achieve the purposes of the processing. After the expiry of the storage period, the Controller erases all personal data.

The Controller stores personal data:

  1. for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Controller, and to apply any claims from such contractual relationships within the limitation period of such claims;
  2. for a period of 1 year from the end of the mutual interaction as concerns personal data processed for the purpose of answering your inquiry, for quality assurance purposes;
  3. for the period stipulated by the respective laws in cases where we are fulfilling  our legal obligations, in the case of accounting management, this period may be up to 10 years;
  4. for 6 months after the termination of the recruitment process for work position, in order to be able to contact the applicant later in case the position re-opens.

For more information about the retention period, you can contact the data protection specialist. 

 

IV. Handover of personal data

 

At ORLEN Unipetrol Hungary, your personal data are stored under maximum security and made available only to authorised employees, or individual processors and controllers of personal data, and only to the extent necessary to fulfil the individual purposes of processing. The security of your personal data with these recipients is ensured through their contractual obligations.

In connection with the transfer of your personal data, we will ensure that  the highest standard of protection for this type of data  is maintained(data subject rights and privacy). You can obtain a detailed list of recipients from the data protection specialist.

Non‐exhaustive list of categories of recipients of personal data:

  1. State administrative bodies: e.g. tax office, social security administration;
  2. Insurance companies;
  3. PKN ORLEN holding company which provides IT support for the personal data processing system;
  4. Service providers (service organisation, marketing, HR, IT, legal services etc.);
  5. External auditors

ORLEN Unipetrol Hungary forwards the telephone numbers of the contact persons of its contractual partners to BitMessaging Kft. as a data processor in order to inform its contractual partners via their contact persons about the products distributed by ORLEN Unipetrol Hungary by SMS message.

Under certain conditions, ORLEN Unipetrol Hungary is authorised to disclose  some of your personal data to law enforcement agencies or other public authorities on the basis of applicable legal regulations.

ORLEN Unipetrol Hungary, as a member of the ORLEN Group, consolidates IT systems and your personal data may be stored on servers in Poland.

ORLEN Unipetrol Hungary does not transfer personal data outside of the EU, the EEA or to international organisations.

 

V. Your rights as a data subject

 

You have the following rights in connection with personal data processing.

1. Right of access to the personal data

In connection with the processing of personal data, you have the right to obtain  information and a copy of the personal data processed about you, upon based on your request. In the case of a repeated request for a copy, ORLEN Unipetrol Hungary is entitled to charge a reasonable fee for the additional copy of the provided personal data. We will inform you about this procedure. 

2. Right to rectification

If you believe that any of the your personal data  we process, is inaccurate, outdated or otherwise incorrect, please contact us so that and we can  rectify it. We will rectify the data without undue delay, subject to technical feasibility.

3. Right to erasure

If the personal data is no longer needed to fulfil the stipulated purpose for which it was collected, or if you withdraw your consent to the processing and there is no other lawful basis for the processing, we will erase the personal data upon your request. In some cases, however, your right may be limited. For example, the personal data that we process on the basis of our legal obligations cannot be erased if the processing is necessary for archiving in the public interest, for scientific or historical research or for statistical purposes. As for personal data related to the provision of services, they cannot be erased if they are necessary for the possible application of the related claims (compensation of damages, claims, legal defence, etc.).

4. Right to restriction of processing

You have the right to restrict of processing if:

• the personal data which we process is inaccurate;

• the processing is  unlawful;

• the personal data is no longer required, but you need them do determine, exercise or defend a legal claim;

• you object to the processing.

Your personal data will only be stored by us for period of the restriction and will not be processed without your consent. The restriction on processing will last for as long as one of the above situations lasts. You will be informed of any termination of the restriction.

5. Right to object

You may object  to the processing on legitimate interest. The justification of the objection will be assessed and you will be informed of the decision via your chosen contact channel.

6. Right to data portability

If you wish ORLEN Unipetrol Hungary to transfer  your personal data to a third party, you may exercise your right to personal data portability. If the rights and freedoms of third parties would be affected by the exercise of this right, ORLEN Unipetrol Hungary will not be able to comply with your request.

7. Right to withdraw consent to personal data processing

Where personal data is processed on the basis of your consent, you may withdraw your  consent at any time. If you wish to do so, please contact us using the contact details of the data protection specialist.

8. Right to be exempted from automated decision-making including profiling

We do not conduct automated decision-making, including profiling, as part of our business.

9. Right to complain to the supervisory authority

If you are of the opinion that your personal data has not been handled pursuant to the law, you have the right to submit a  justified complaint to the Hungarian National Authority for Data Protection and Freedom of Information (registered office at Falk Miksa utca 9-11., 1055 Budapest, Hungary).

In order to exercise your rights, please contact us using the contact details of the data protection specialist via e-mail or at the mailing address of ORLEN Unipetrol Hungary Kft. (1112 Budapest, Boldizsár utca 2., Hungary). The Controller reserves the right to reasonably verify the identity of the data subject exercising the abovementioned rights.

 

VI. Social networks

 

ORLEN Unipetrol Hungary does not make use of any electronic social networking sites.

 

VII. Cookies

 

In order for the website to function properly, it is sometimes necessary to place small data files, known as cookies, on your device. We have set out the different types of cookies and other information in  a banner (window), which you can view at any time by clicking on this link.

Some types of cookies require your consent, which you can change or revoke at any time by setting your preferences in the banner (window), that which you can access at any time via the link I want to change my cookie consent.

If you consent to the use of all types of cookies, your consent will be valid for 12 months unless you change it earlier. If you do not give your consent, your choice will be stored for 14 days and will be offered again the next time you visit our website.

If you have any questions, please contact our Data protection specialist is available to you at dataprotection@orlenunipetrol.hu or at the delivery address ORLEN Unipetrol Hungary Kft., 1112 Budapest, Boldizsár utca 2., Hungary.

 

VIII. Final provisions

 

We will update this Privacy policy to reflect changes in our information practices. In the case of any changes, we will update the date of the changes. We will notify you of any significant changes.

We encourage you to visit this website periodically to review any changes to the privacy policy.

This privacy policy was updated on 10 January 2025.