PRIVACY POLICY

I. Basic provisions

The controller of personal data pursuant to Art. 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the “GDPR”) is ORLEN UniCRE a.s., Registered office at Revoluční 1521/84, Post Code: 400 01 Ústí nad Labem, Entered in the commercial register kept by the Regional Court in Ústí nad Labem, File No. B 664, Company ID No: 62243136 (hereinafter “UniCRE” or the “Controller”).

UniCRE greatly emphasises the transparency of processing and securing your personal data, which are considered strictly confidential, and handles them in accordance with the GDPR and other valid legal regulations concerning personal data protection.

In the case of questions or irregularities in personal data processing, feel free to contact UniCRE via email at Kristýna Benešová or via post at the mailing address ORLEN UniCRE a.s., Revoluční 1521/84, 400 01 Ústí nad Labem, Czech Republic. To ensure problem-free communication between you and UniCRE, a Data Protection Officer was appointed, who is available to you in the case of questions or irregularities in personal data processing, via email at This email address is being protected from spambots. You need JavaScript enabled to view it. or via post at the mailing address ORLEN Unipetrol RPA s.r.o., Úsek ochrany informací (Data Protection Division), Milevská 2095/5, 140 00 Praha 4, Czech Republic.

UniCRE values your trust and therefore, in accordance with the principle of transparency, it informs you by means of this “Privacy policy” about the processing of your personal data, which are needed for the purposes specified below.

These principles apply to the website www.orlenunicre.cz (hereinafter referred to as “website”) and are primarily intended for the contractors, visitors of website, applicants for job positions, questioners and another person whose personal data could UniCRE process.

 

II. Purposes of personal data processing and their legal grounds

1. Implementation and performance of the contractual relationship

UniCRE is engaged in the production and sale of refinery, petrochemical and retail products, and complementary services. During these business activities, personal data are processed, in particular those of the partner (customer, supplier) as a natural person, as well as other persons, typically the contact persons of the partner as a legal entity.

The purpose of processing personal data is to implement and perform the contractual relationship, i.e. deliver the ordered product, ensure transport, exercise the rights and obligations arising from the contractual relationship between the partner and UniCRE and other contractual obligations. The legal basis for processing personal data is Art. 6(1)(b) GDPR, i.e. processing is necessary for the performance of a contract and to implement the measures adopted before concluding the contract. We process the contact data of the natural persons who represent the partner as a legal entity, because this is necessary to perform the contract with the partner, and processing is based on the mutual legitimate interest of the partner and UniCRE in the provision of the agreed services.

UniCRE collects the following data for the aforementioned purpose:

  • Identification data (name, surname, ID number, social security number or date of birth);
  • Contact data (e-mail address, mailing address, telephone number, position);
  • Bank account number;
  • Operation records (contracts, minutes from meetings, instructions, etc.);
  • Data about the order, delivery and payment;
  • Necessary communication between the partner and UniCRE.

 

2. Fulfilment of legal obligations within the accounting and tax agenda

We process accounting documents, data about your payments and other information required by law for the fulfilment of our legal obligations, i.e. Art. 6(1)(c) GDPR.

 

3. Communication with the inquirers

If you contact UniCRE via e-mail, its mailing address or other means, information about your contact will be processed only for the purpose of the established communication with you.

The legal basis for the collection of data aimed at fulfilling legal obligations is Article 6(1)(c) of the GDPR (developing relations with visitors of our website, efficiency in communication, presentation our business name and protection of our brand image).

UniCRE collects the following data for the aforementioned purpose:

  • Identification data (name, surname);
  • Contact data (e-mail address, mailing address, telephone number);
  • Necessary communication between you and UniCRE.

 

4. Employee recruitment

If you want to become a member of the UniCRE team and send us your curriculum vitae using the reply form, we will process your personal data for the purpose of the recruitment procedure for your chosen job position. The legal basis for processing your personal data is Art. 6(1)(b) GDPR, i.e. processing is necessary for the performance of a contract and to implement the measures adopted before concluding the contract.

In case you are taking part in the 1st round of the recruitment procedure, you may be asked for consent to process your personal data for the purpose of verifying or obtaining references from previous employers, public sources and public registries of legal and natural persons, for the verification of the accuracy of the information provided by you, and the prevention of conflicts of interest with the activities of the UniCRE.

Complete information about personal data processing for this purpose is available in the opening header of the offered job position.

 

5. Sending offers of similar job positions

If you gave UniCRE consent to process your personal data for the purpose of registering you as an applicant for a different suitable job position within the ORLEN Unipetrol Group, your personal data will be used to send offers of similar job positions. The legal basis for processing your personal data is Art. 6(1)(a) GDPR which is your voluntary consent, which may be withdrawn at any time.

Complete information about personal data processing for this purpose is available in the lower part of the offered job position.

 

6. Fulfilment of labour-law relationships

Our employees are informed individually about the processing of their personal data.

 

7. Taking photos, audio-visual records and online-transmissions during organized event

UniCRE may take pictures and audio-visual records during organised events (pictures of visitors and their behaviour during this event). UniCRE may place this data on the Intranet and social networks on which it has an account. If you do not want to be photographed or recorded, inform about that photographer / cameraman or Controller.

From some events may UniCRE stream online transmission and use for that web sites or social networks on which it has user profile. You will be informed about that on the invitation to the organized event.

Photos and audio-visual records from charity events and promotional activities of UniCRE are processed on the basis of legitimate interest of Controller according to Article 6(1)(f) of the GDPR) (i.e. publicise the activities and charity events of Controller).

For the above-mentioned purpose processes UniCRE this data:

  • Photo and audio-visual recording of natural person.

 

III. Period of storing data processing

UniCRE processes your personal data for the time necessary to achieve the purposes for which they were collected or for the period stipulated by legal regulation. After the passing of the storage period, UniCRE liquidates the personal data.

The Controller stores personal data:

  • for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Controller, and to apply any claims from these contractual relationships (for a period of 10 years from termination of the contractual relationship);
  • for a period of 6 months from the end of mutual interaction as concerns personal data processed for the purpose of answering your inquiry;
  • for the period stipulated by the respective laws in cases where we perform our legal obligation; in the case of accounting management, this period may be up to 10 years;
  • until the withdrawal of consent by the data subject as concerns personal data processing based on consent from the data subject, or until expiry of the specified period;
  • for 6 months after the termination of the recruitment procedure for job position.

For more information about the retention period, you can contact the Data Protection Officer.

 

IV. Handover of personal data

At UniCRE, your personal data are stored under maximum security and made accessible only to authorised employees, or individual processors and controllers of personal data, only to the extent necessary to fulfil the individual purposes of processing. The security of your personal data with these recipients is ensured through their contractual obligations.

In connection with handover of your personal data, we are paying attention to upholding the highest standard of protection this kind of data (rights of data subjects and protection of privacy). You can obtain a detailed list of recipients from the Data Protection Officer.

Non‐exhaustive list of categories of recipients of personal data:

  • State administrative bodies: e.g. financial bureau, social security administration;
  • Insurance companies;
  • ORLEN holding company which provides IT support to the system for processing personal data;
  • Service providers (service organisation, marketing, IT etc.);
  • External auditors.

Under certain conditions, UniCRE is authorised to hand over some of your personal data based on valid legal regulations, e.g. to prosecuting authorities or other public authorities.

UniCRE as a member of the ORLEN Group, consolidates IT systems and your personal data may be stored on servers in Poland.

UniCRE does not provide personal data outside of the EU, the EEA or to international organisations.

 

V. Your rights

You have the following rights in connection to personal data processing:

1. Right of access to the personal data

In connection to the processing of personal data, you have the right to the provision of information and provision of a copy of your processed personal data based on your request. In the case of a repeated request, UniCRE is authorised to bill a reasonable fee for the copy of the provided personal data. We will inform you of such procedure.

2. Right to rectification

If you believe that your personal data, which we process, are inaccurate, outdated or otherwise incorrect, contact us and we will rectify them. We will perform rectification without undue delay, but always with respect to technical capacities.

3. Right to erasure

If the personal data are no longer required to ensure the stipulated purpose, or if you withdraw your consent to processing, we shall erase these personal data at your request. In some cases, however, your right may be restricted. For instance, the personal data we process based on our legal obligations cannot be erased before the passing of the lawfully stipulated archiving periods. As for personal data related to the provision of services, these cannot be erased before the passing of the deadlines for potential application of the related claims (compensation of damages, claims, etc.).

4. Right to restriction of processing

You have the right to restriction of processing if:

  • the personal data which we process is inaccurate;
  • the processing is illegal;
  • the personal data are no longer required, but you need them do determine, exercise or defend a legal claim;
  • you object to processing.

Your personal data will only be stored with us during the restriction period and no operations will be performed with them without your consent. Restriction of processing lasts for the period for which one of the above situations lasts. You will be informed about the potential termination of restriction.

5. Right to object

You may file a justified objection to processing based on a legitimate interest and for direct marketing. The justification of the objection will be assessed and you will be informed of the decision via your chosen contact channel.

6. Right to data portability

If you want UniCRE to hand over your personal data to a third party, you may exercise your right to personal data portability. If the rights and freedoms of third parties were to be affected by the exercising of this right, UniCRE will not be able to accommodate your request.

7. Right to withdraw consent to personal data processing

If personal data is processed based on your consent, you may withdraw this consent at any time. If you wish to do so, contact us with your request via the contact details of the Data Protection Office specified below.

8. Right to be exempted from automated decision-making including profiling

We do not conduct automated decision-making including profiling without our activity.

9. Right to complain to the supervisory authority

If you feel that your personal data are not handled pursuant to the law, you have the right to direct your justified complaint to The Office for Personal Data Protection, registered office at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.

When exercising your rights, contact us using the contact details of the Data Protection Officer via e-mail at This email address is being protected from spambots. You need JavaScript enabled to view it., or at the mailing address ORLEN Unipetrol RPA s.r.o., Úsek ochrany informací (Data Protection Division), Milevská 2095/5, 140 00 Praha 4, Czech Republic. UniCRE reserves the right to reasonably verify the identity of the data subject applying the above rights.

 

VI. Social networks

Our website does not uses social plugins of social networks. UniCRE uses social media profiles that may contain photos and videos from social events.
Information on the purpose and scope of data collection and processing of this data by social network providers, information about your rights and configuration options with respect to the protection of your privacy you can find directly on social networks.

Information about personal data processing by Facebook:
http://www.facebook.com/policy.php

Information about personal data processing by YouTube:
https://support.google.com/youtube/answer/2801895?hl=cs

 

VII. Cookies

In order for a website to function properly, it is sometimes necessary to place small data files, known as cookies, on your device. UniCRE uses only technically technical cookies which are strictly necessary for our website to function properly.

 

VIII. Final provisions

We will update this Privacy policy to reflect changes to our information practices. In the case of changes, we will update the date of changes (in the footer). We will keep you informed about significant changes (web notification).

We recommend you continuously monitor this website and keep track of all changes related to the Privacy policy.

This Privacy policy was updated on 18 September 2023.

Information on processing and protection of personal data at UniCRE

1. Preambule

In accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – (hereinafter referred to as “GDPR”) Unipetrol Centre for Research and Education informs the Data Subjects on the conditions under which personal data are processed.

2. Personal Data Controller

The Personal Data Controller is Unipetrol Centre for Research and Education (Unipetrol výzkumně vzdělávací centrum, a.s.), having its registered office at Revoluční 1521/84, 400 01 Ústí nad Labem, company registration number: 62243136, VAT No.: CZ62243136 (hereinafter referred to as “UniCRE”).

3. Principles of personal data processing in UniCRE

UniCRE considers the personal data protection to be important and pays close attention to it. We process your personal data only to extent necessary for the Company's operation. We protect personal data in maximum extent and in compliance with applicable law. Principles and rules for personal data processing in UniCRE are governed by the Internal Directive SR-VÚ-01-18 Privacy Policy of Unipetrol Centre for Research and Education. The Directive applies principles arising from the GDPR:

  1)  The principle of legality that obligates us to process your personal data in compliance with legal regulations and under at least one legal title.
  2)  The principle of correctness and transparency that obligates us to process your personal data openly and transparently, and to provide you with information on how they are processed and also information to whom they will be forwarded. This also includes our obligation to inform you in the case of a serious security breach or personal data leakage.
  3)  The principle of purpose limitation that allows us to collect your personal data only for clearly defined purposes.
  4)  The principle of data minimization that obligates us to process only such personal data which are necessary, relevant and proportionate to the purpose of processing.
  5)  The principle of accuracy that obligates us to take all reasonable measures that enable us to ensure regular updating or correction of your personal data.
  6)  The principle of storage limitation that obligates us to store your personal information only for a time necessary for specific purpose of processing. Once the processing time or purpose has passed, your personal data will be deleted or anonymized, i.e. we will modify them so that they cannot be connected or related to your person.
  7)  The principle of integrity and confidentiality, undeniability and availability that obligates us to secure and protect your personal data from unauthorized or unlawful processing, loss or destruction. For these reasons, we take numerous technical and organizational measures to protect your personal data. At the same time, we take care to that only authorized employees have access to your personal data.
  8)  The principle of responsibility that obligates us to be able to prove compliance with all the conditions listed above.

4. Purpose of personal data processing

When accomplishing its mission, UniCRE processes personal data for the following purposes:

  1)  Educational activities
  2)  Research activities (research projects, organization of seminars / conferences, publishing activities)
  3)  Administration and operation of the company (HR processes and wages, business administration and accounting, property management, operational agendas, information systems)
  4)  Property protection and security (access to secured premises, security monitoring of computer network operation)
  5)  Information and promotional activities (web, marketing and promotion)

5. Categories of Data Subjects

UniCRE processes personal data of the following categories of persons (Data Subjects):

  1)  employee of the company,
  2)  job/study seeker,
  3)  student or trainee,
  4)  business partner (supplier, customer),
  5)  external co-operator (e.g. supervisor, co-researcher, publication co-author),
  6)  visitor or participant of events organized by UniCRE,
  7)  other person.

6. Categories of processed personal data

UniCRE processes both personal data provided directly by individual natural persons (on the basis of consent or other legal grounds) and other personal data generated by processing activities and necessary for their arrangement. This may include the following categories of personal data:

  1)  Address and identification data (name, surname, date and place of birth, marital status, personal identification number, title, nationality, address (including electronic), telephone number, ID number, digital identifier, signature, etc.)
  2)  Descriptive data (education, knowledge of foreign languages, professional qualifications, knowledge and skills, number of children, portrait photographs, video / audio record on the person, military service, previous employment, health insurance, membership in hobbies organizations, clean criminal record)
  3)  Study data (records on study and study activities)
  4)  Economic data (bank contacts, wages, bonuses, fees, liabilities and receivables, orders, purchases, taxes, etc.)
  5)  Job data (job and work records, employer, workplace, job and position, job evaluation, job awards etc.)
  6)  Operational and location data (these are typical data from electronic systems relating to a specific Data Subject – e.g. data on information systems use, traffic and electronic communications data, telephone use data, access to various premises, etc.)
  7)  Data on the Data Subject activities (publication activity, data on professional activities, participation in conferences, participation in projects, data on business or study trips, etc.)
  8)  Information about another person (address and identification data on a family members, husband/wife, children, partner, etc.)
  9)  Special categories of personal data (sensitive personal data on health information, membership in trade unions, etc.)

7. Legal reasons for personal data processing

The personal data processing within the above mentioned activities is based on appropriate legal grounds, such as:

  1)  Compliance with legal obligations applied to the Controller:
We need to process your personal data in order to meet our statutory duty of the Controller. This is in particular Act No. 130/2002 Coll., on support of research and development from public funds; Act No. 262/2006 Coll., Labour Code; Act No. 563/1991 Coll., on accounting; Act No. 127/2005 Coll., on electronic communications; Act No. 134/2016 Coll., on Public Contract Procurement; Act No. 480/2004 Coll. on certain information society services; Act No. 181/2014 Coll. on cyber security; and more.
  2)  Performance of a contract:
We need your personal data for purpose of a contract formation and its fulfilment or in order to take steps prior to entering into a contract.
  3)  Data Subject Consent:
The consent you have given us to process your personal data for one or more specific purposes.
  4)  The Controller’s legitimate interest, consisting in particular of:
  • property protection and fraud prevention,
  • transfer of personal data within the company for internal administrative and operational purposes,
  • ensuring security of the computer network and information,
  • marketing purposes (such as a web presentation and a newsletter).

8. Transmission of personal data

In order to comply with legal obligations UniCRE can provide authorized entities (such as public authorities or administrative bodies performing audit) with particular personal data. This stands equally for cases where provision of personal data outside UniCRE is based on individual consent of the Data Subjects.

9. Storage period of personal data

The data shall be stored only for time necessary for the personal data processing and shall be erased or archived in accordance with Archiving Code. The personal data processed by your consent are retained only for the duration of purpose for which the consent was granted.

10. Rights of the Data Subjects

The right to information on personal data processing

The Data Subject has the right to know whether the Controller processes his/ her personal data and how.

Right of access to personal data

If the Controller processes personal data of the Data Subject, the Data Subject has the right to obtain a copy if he/she proves his/her identity sufficiently.

Right to rectification

If the Controller processes incorrect or outdated personal data it is obligated to correct them on request of the Data Subject.

Right to erasure (“Right to be forgotten”)

If the consent for processing has been granted and there is no other legal reason or if the Data Subject considers that the Controller no longer needs his/her personal data (because the purpose for processing has passed), the Data Subject has the right to request termination of the processing and deletion of his/her personal data.

Right to restriction of personal data processing

This is restriction of processing to mere storing of the personal data if the Data Subject denies accuracy of the personal data and the Controller needs more time to verify it or the Data Subject has objections to processing which is based on the legitimate interest of the Controller.

Right to data portability

The Controller provides the personal data in a structured commonly used electronic format directly to the Data Subject. The Controller may only provide another Controller with the Data Subject's personal data if it is an automated processing based on consent or a contract and it is technically feasible.

Right to object

The Data Subject may object to the processing of personal data related to him/her only in case of processing that is carried out in public interest or in legitimate interest of the Controller.

Right to review automated decisions

If the Data Subject is a subject to decision based solely on automated processing, he or she has right to review this decision and to eventual human intervention by the Controller.

Right to Complaint or Protection

The Data Subject has the right to file a complaint for processing of his or her personal data to the supervisory body (in the Czech Republic it is the Office for Personal Data Protection) or to apply for judicial protection against the supervisory body, the Controller or the processor.

11. Assertion of the Data Subject's claims

The Data Subject has the right to assert his/her claims arising from the GDPR from 25 May 2018. The Data Subject has to assert his/her claims towards the Controller by sending his/her application via e-mail to This email address is being protected from spambots. You need JavaScript enabled to view it. or personally or with written request addressed to the company’s registered office. Before processing the application UniCRE has the right and duty to identify the applicant.

12. Use of cookies

What are cookies?

For these Principles purposes, cookies are files and other similar technologies (such as pixels, web signals or device identifiers) which can automatically collect data when visiting a website.

Cookies are small content files in your browser or mobile app that store and receive identifiers and other information about computers, phones and other devices you use to access our websites. They help us to provide, protect and improve our services.

What is their purpose?

Cookies enable recording information about your visit of our websites and mobile apps, so that your next visit will be easier and faster.

In particular, cookies:

  • help effectively navigate on websites or apps, personalize, store preferences and generally improve user experience from websites;
  • enable to distinguish whether a particular user has already visited the website in past or he/she is a new visitor.

Do I have to give my consent to cookies?

This website stores only the cookies required for operation of the website and provides functions necessary for use of the website. No user consent is required to use these essential cookies.

UniCRE does not use third-party cookies.

How long will cookies stay in my computer?

We use relational cookies (session cookies) on our website. These cookies are temporary. They save to your browser's cookie only until you quit your browser. These cookies are necessary for proper functioning of websites or associated applications.

Can I reject cookies?

You can disable cookies in your browser settings or you can set using only some selected ones. However, if you do not allow the UniCRE to use cookies, some features of the website may not work properly.

You can find privacy settings in your browser's menu. There you can reject or disable cookies.

More Articles ...

Mission and Goals

Unipetrol Centre for Research and Education, a.s. is an independent legal entity whose primary mission is to research activities and provide support to the chemical industry in areas which are defined in our research program.

The main goals of UniCRE include:

  • Obtaining grants at the national level for the individual research programs in the priority areas of research UniCRE.
  • Integration into European structures, promotion of science, research and development and win support for priority projects of individual research areas UniCRE.
  • Deepening cooperation with academic institutions such as The University of Jan Evangelista Purkyně in Ústí nad Labem, Pardubice University or The Institute of Chemical Process Fundamentals of the Czech Academy of Science, v.v..
  • Active involvement in organizations supporting applied research and collaboration with industry, both within the region and at the national and European level.

Offer of Collaboration with Industry

UniCRE company offers quality knowledge and instrumental platform for refinery-petrochemical industry, as well as for implementation of new technologies in area of renewable energy sources and environmental protection, including perfectly equipped experimental centre and highly qualified analytical hinterland.

Offer of Collaboration with Research Institutions

UniCRE centre collaborates and offers collaboration with other research institutes at handling of projects in the framework of national and international grants and contracts.

 

 

Offer of Collaboration with Students

UniCRE company offers bilaterally profitable collaboration with czech and foreign students of master and postgradual degree. Currently it collaborates with universities (for example Institute of Chemical Technology in Prague, University of Pardubice) and with prominent workplaces of Academy of Sciences in Czech Republic (UCHP, UFCH JH).

Offer of Renting Conference RoomsOffer of Renting Conference Rooms

UniCRE company offers to rent the conference rooms in Chempark Záluží and Ústí nad Labem locations. All rooms are equipped with the presentation equipment. Arrangement of tables and chairs in the individual rooms can be changed according to customer needs. We will arrange a flipchart or presenter on request.