Disclosure and Information pursuant to Law nr. 365/2002 regarding E-Commerce
Owner, publisher and producer: OMV Petrom SA
Main office: Petrom City, Coralilor Street, nr. 22, sector 1, postal code 013329, Telephone: +4 021 40 22201
Fiscal Code: R 159 0082
Trade Register Number: J40/8302/1997
Share capital: 5.664.410.833,50 RON
Company managed in a dualist system
You acknowledge to be legally bound by the following by visiting this website.
The term OMV Petrom includes OMV Petrom SA as well as all companies or entities of which OMV Petrom holds, directly or indirectly, at least 50 %. If any of the following relates only to certain companies or entities, such companies or entities will be named.
The following does not apply if and to the extent contra-dictionary to mandatory law.
OMV Petrom has made every reasonable effort to ensure that the information provided on this website is correct and complete at the time of publication. However, there may be unintended or accidental errors for which we apologize.
OMV Petrom provides no warranty or guarantee in respect of information published on this website, including external (hyper)links or any other content that can be used either directly or indirectly via the OMV Petrom website. OMV Petrom also reserves the right to make changes or amendments to this site without prior notice. OMV Petrom disclaims any liability for errors or omissions on the OMV Petrom website. Any decisions made on the basis of information published on the OMV Petrom website are therefore the sole responsibility of the respective user. OMV Petrom disclaims any liability for direct, indirect or other losses sustained, arising for whatever reason from either the direct or indirect use of the information published on the OMV Petrom website.
OMV Petrom does not represent or warrant that the functions or services contained in the OMV Petrom website will be uninterrupted or error-free, that defects will be corrected, or that the OMV Petrom website or the server that makes it available are free of viruses or other harmful components. To the extent permitted by law, OMV Petrom shall not be liable for any damages arising from the performance or mal-performance of the OMV Petrom website or any connected service or technical device.
None of the information published on the OMV Petrom website is to constitute an invitation or inducement to purchase or trade in OMV Petrom shares (or any other securities) or American Depositary Receipts (ADRs), nor should it imply such.
Unless otherwise indicated, copyright on the pages and the contents published on this OMV Petrom website and materials used for such is solely owned by OMV Petrom. No third party shall be granted a licence or any other rights (e.g. ownership, industrial property rights or copyright). Reproduction of pages or contents from this site is only permissible for personal, informative purposes. Any other reproduction or usage is strictly prohibited. The subsequent use of distinctive OMV Petrom features (e.g. brands or logos) is expressly forbidden, irrespective of whether or not the symbol ® or ™ is used, especially the trademark OMV Petrom is registered.
The above provisions also apply to direct or indirect software downloads or usage via the OMV Petrom website. In the event that external hyperlinks provide access to third party software, the terms and conditions of such product owners shall prevail and their rights are to be observed.
We are committed to respect your privacy, by complying with all applicable data protection laws and regulations, including the General Data Protection Regulation (EU) 2016/679 (the “GDPR” ).
This policy, together with our Terms and Conditions (see link on right hand side) of this website and any other documents this policy refers to is meant to inform you on which personal data we collect from you or that you provide to us through this website and how it will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
1. Who we are
The data controller is OMV Petrom SA. As well, on our website you may identify and access other offers or information of other companies from our group, which are at their turn controllers of personal data and to which such privacy policies also apply, respectively OMV Petrom GAS SRL, OMV Petrom Marketing SRL.
2. What kind of personal data do we process, and for which purpose and on what grounds?
In the process of operating this website, the Company will collect certain information (“personal data”) relating to identified natural persons or which can identify natural persons, which are provided by the users of this website directly (e.g. name, surname, postal address, e-mail address, telephone number) or indirectly (e.g. IP address). Below, please find information with respect to certain purposes in which we process personal data, based on the legal grounds indicated for each of:
When you are visiting our website, we are using cookies to automatically collect technical information that could identify the user, such as the IP address, the type of internet browser used for navigating our website, your operating system, domain name or domain host through which the user is browsing the website.
2.2. Answering your questions, requests or complaints
We will process your personal data, such as name and surname, email address, telephone number and any other information or details you may provide us with in the correspondence, in order to address and answer your queries, complaints or requests, depending on the communication channel you are contacting us, as described below.
|Answer your queries, complaints or requests by electronic correspondence (e-mail) or telephone.||The processing is based on a legitimate interest, allowing us to provide answers to your queries, complaints or requests.|
2.3. Promotional campaigns
We will process personal data collected from you by filling in participation forms on our website or similar forms to organize promotional campaigns and/or contests or to award prizes to the winners of promotional campaigns, as well as to analyse the effectiveness of our promotional campaigns. Your participation to such promotional campaigns and/or contests is voluntary. Therefore, it is your choice to decide whether to offer us personal data, by filling in participation forms on our website or similar forms as provided by the rules of the promotional campaigns or contests.
|a. Organize promotional campaigns and/or contests||Legitimate interest, executing the agreement with you, consent|
|b. Processing data of the winners of promotional campaigns for the purpose of awarding the prize||Legitimate interest, consent|
2.4. Direct marketing communications
We may process personal data to inform you about our products and services, promotional offers and for newsletter subscription. As a general rule, such personal data will be processed for direct marketing purposes only based on your consent and by using the communication channels (e.g. email, sms etc) you agreed with upon providing your consent. However, insofar you have provided us with your email address on the occasion of purchasing a product or service from us, we may use the email address, in compliance with the legal provisions in force allowing us to present you commercial communications regarding similar products or services, based on our legitimate interest in this respect; in such a case, upon obtaining the email address from you and subsequently, for each marketing message we may send you, we will provide you with the option to oppose to such utilization of the email address (unsubscribe).
|Purpose||Categories of data processed||Legal ground|
|a. Commercial communications regarding similar products or services||E-mail address, name, surname, telephone number provided on the occasion of purchasing a product or service from the Company:||Legitimate interest, consent|
|b. Other direct marketing communications||As provided by you upon expressing your consent, e.g. name and surname, e-mail address, telephone number:||consent|
We will process your personal data when you decide to participate to our surveys or market studies, customer satisfaction inquiries or when you provide feedback on our products and services. Such personal data will be processed for the above purpose only based on your consent, also having in view our legitimate interest to help us understand the customers’ needs and expectations about our products and services. Your participation to such surveys or market studies is voluntary. Therefore, it is your choice to decide whether to offer us personal data (such as name and surname, information regarding your preferences and shopping habits or other personal data that you may offer to provide), by filling in participation forms on our website or similar forms as provided by the respective surveys or studies.
|Surveys or market studies, customer satisfaction inquiries or when you provide feedback on our products and Services:||Consent, legitimate interest|
The Company processes your personal data provided in view of concluding and executing contracts with you or with the company to which you are a representative / business contact person. As well, during the contractual relationship we communicate with you to ensure the good performance of the commercial relation.
|Conclusion and performance of contracts||Performance of the contract with you (as natural person) and performance of steps at your request to conclude the contract;
Legitimate interest for accomplishing our commercial activity in respect to concluding and performing of contracts and communication with the contractual partner for this purpose, when the contractual relationship is with the company to which you are a representative/ contact person.
The personal data referred to herein are not subject to automated decision making, including profiling.
5. Who do we disclose your personal data to?
For reaching the purposes described above, the Company uses the services of various contractors.
Some of them are controllers on their own, such as Google and Facebook. Other contractors have the quality of processors in connection with your personal data.
Other contractors are third parties who are not intended to process the data but may have access to it upon fulfilling their tasks or interacting with the Company, such as technical maintenance companies, financial or legal auditors.
The personal data indicated above may also be made available or submitted to third parties in the following situations: (i) public authorities, auditors or institutions competent to exercise inspections on the Company’s business or assets, which ask the Company to provide information, by virtue of the latter’ s legal obligations. Such public authorities or institutions may be ; (ii) to comply with a legal requirement or to protect the rights and assets of our company or other entities or people, such as courts of law; (iii) to third parties acquisitors, insofar the business of the company would be (totally or partially) transferred and the data subjects’ data would be part of the assets representing the object of the transaction. Further on, for the processing purposes set out above, we may share your personal data with the companies from the OMV Petrom group, companies which will be under the Company’ s instructions in what concerns the processing of your personal data.
The persons and entities we may share personal data with are the following:
b) To answer your questions, requests or complaints, we may share your personal data to our services providers (including call centers);
c) For organizing and managing the promotional campaigns, as well as to analyse their effectiveness we may send your personal data to advertising and marketing agencies, digital and social media agencies as well as to other data processors;
d) For direct marketing communications, we may send personal data to advertising and marketing agencies performing the communication on our behalf as well as to other such processors;
e) For conducting surveys, market studies, customer satisfaction inquiries or for obtaining our customers’ feedback on our products and services, we may share personal data to providers of survey or market studies / customer inquiries services.
f) For conclusion and performance of contracts we may communicate your personal data to our processors providers of services.
The above data may be shared with third parties from above as well as in certain cases, to group companies.
6. Transfer of personal data abroad
In the context of the operations described above, your personal data may be transferred abroad to states in the European Union (“EU”) or European Economic Area (the “EEA”) .
We hereby inform you that any transfer performed by the Company in an EU or EEA member state will observe the legal requirements laid down by the GDPR.
In the event that personal data are being transferred to states that do not provide adequate protection for the processing of personal data, contracts are concluded to ensure legal conformity.
7. For how long do we store your personal data
We will store your personal data only for the period of time necessary to achieve the processing purposes set out above, also by observing the legal requirements in force. In case the Company will ascertain that it has a legitimate interest or a legal obligation to further process your personal data for other purposes, you will be properly informed on this.
We estimate that the processing activities detailed above will require storing the personal data for the following periods:
|2. Answering to your questions, requests or complaints||afterwards, according to our archiving rules and for protecting our legal interests|
|3. Organizing and managing the promotional campaigns, the personal data||
During the campaign and afterwards, according to archiving rules and for protecting our legal interests
|4. Direct marketing communications||until you opt out|
|5. Conducting surveys, market studies, customer satisfaction inquiries or for obtaining our customers’ feedback on our products and services||During the time necessary to achieve the purpose of the survey/study, depending on the specific project|
|6. Conclusion and performance of contract||During the performance of the contract and afterwards, according to the archiving rules as well as for the statute of limitation|
8. Processing of data of children under the age of 18
All personal data processing presented herein refers exclusively to persons that are at least 18 years old. The use of the systems, as well as the results of the processing is conditioned for children between 14 and 18 years by the approval of the parents/ tutors and forbidden to children under 14 years except where the consent of their parents/tutors was attained by such persons. In case despite our reasonable efforts to prevent it, such processing occurs, we will cease it upon noticing the fact that the users are under the age mentioned above.
9. Security of data processing
The Company hereby informs you that it constantly evaluates and upgrades the security measures implemented as to ensure a secure and safe personal data processing.
10. Rights of the data subjects
Within the context of the processing of your personal data, you have the following rights:
a. The right of access to the processed personal data: you have the right to obtain a confirmation whether or not your personal data are being processed, and, if affirmative, to have access to the type of personal data and to the conditions of processing, by addressing a request in this respect to the data controller;
b. The right to request the rectification or erasure of personal data: you have the possibility to request, by sending a request in this respect to the data controller, the rectification of inaccurate personal data, the supplementation of incomplete data or the erasure of your personal data in case (i) the data are no longer needed for their original purpose (and no new lawful purpose exists), (ii) the lawful basis for the processing is the data subject's consent, the data subject withdraws that consent, and no other lawful ground exists, (iii) the data subject exercises the right to object and the controller has no overriding grounds for continuing the processing, (iv) the data have been processed unlawfully, (v) erasure is necessary for compliance with EU law or Romanian law, or (vi) the data were collected in connection with the informational society services offered to children (if the case), where specific requirements regarding consent are applicable;
c. The right to request the restriction of processing: you have the right to obtain the restriction of processing in cases where: (i) you consider that the processed personal data are inaccurate, for a period enabling the controller to verify the accuracy of the personal data; (ii) the processing is unlawful, however you don’t want us to erase your personal data, but to restrict the use of data; (iii) in case the data controller no longer needs your personal data for the above-mentioned purposes, but you are requiring the data for establishing, exercising or defending a legal claim or (iv) you have objected to processing pending the verification whether the legitimate grounds of the data controller override those of the data subject;
d. The right to withdraw your consent for processing, when the processing is based on consent, without affecting the lawfulness of processing undertaken until that moment;
e. The right to object to the data processing on grounds relating to your particular situation, when the processing is based on legitimate interest and to object at any moment to the data processing for direct marketing purposes, including profiling;
f. The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly affects the data subject in a significant manner;
g. The right to data portability, meaning the right to receive your personal data, which you provided to the data controller in a structured, commonly used and machine-readable format and the right to transfer those data to another controller, if the processing is based on your consent or the performance of a contract and is undertaken by using automatic means;
h. The right to file a complaint with the Data Protection Authority and the right to address to the competent courts of law.
The exercising of the above rights may be performed at any time. For using these rights, we encourage you to use the form provided here. Also, in case you wish to withdraw your consent given for direct marketing purposes you have the possibility to use the “ unsubscribe” option provided to you in every marketing communication.
11. Exercising the rights of data subjects
When you want to exercise your rights from (i) to (vi) above, you have to address a written request to the entity (company in this case) who you deem is processing your personal data. The request needs to identify you (you have to provide sufficient identification details to enable us to perform the related search and provide you with the relevant information) and some details about what you need as information or action from us on personal data protection side. You can formulate this in any wording you deem suitable to express your request. However, in order to ease the process, we have developed a specific form you may access by clicking ”Open form” below.
Please note that all form’s fields are mandatory to be filled in by choosing one or more drop down options or with detailed information, as the case. In case the information you provided to us is not enough to identify you or to fulfil your request, we will contact you via the e-mail address you provide us to ask for information we need. Please make sure you provide only your information and not information about other persons. Please provide a valid e-mail address that is yours and not of others. By submitting this information to us, we reasonably assume the information is yours and you are entitled to provide it to us.
We will process the information you provide to us via your request – we mean the company to which you file the request and who acts in this context as a data controller (for personal data such as identification data, contact data, signature, labor data, picture etc., as per the case) as well as the information comprising personal data we deliver to you in accordance with your request, for the purposes to:
- Address your request/s related to processing of personal data (based on our legal obligation to address data subject’s requests)
- Archiving of the request/s, according to applicable legal provisions and internal procedures (based on our legal obligations – as applicable to retain evidence of such requests and on our legitimate interest to protect our rights and interests in this field, normally not longer than the applicable statute of limitation in personal data protection field investigations).
After the elapse of the archiving period, we will erase/ irrevocably anonymize your data.
The source of such personal data is direct (from you) and indirect (from data records we may have, documentation, etc. depending on the relationship you are in regard to the company from our group you are addressing your request).
Your personal data could usually be forwarded to different entities which assist / support the respective company acting as a data controller in performing the processing (they are called processors – like IT system providers) or to other third parties (e.g.: relevant authorities, courts of law, lawyers) based on justified reasons (for example, if the supervisory authority or the court requests us to evidence your request).
Please note that we may provide copies of personal data processed (when you exercise your right to access) only with due observance of the legal conditions in this context as well as while ensuring data protection, adequate protection of business data and information and related protection of the rights and freedoms of other persons, within the boundaries of reasonable efforts.
According to the General Data Protection Regulation No. 679/2016 (GDPR) a data subject’s request must be fulfilled by the controller in one month time, as maximum. However, this period of time could be extended taking into account justified circumstances, as set forth under the applicable rules. As well, if the information you actually provide is not sufficient to identify you or we need for you to better specify your request, the deadline will start running from when we have performed these initial steps. In any case, we will let you know as soon as possible from registering you request if we need any such information. Please note that if you do not provide us with the information to enable us to address your request, while we will do reasonable endeavors in accordance with applicable rules, we will not file your request as valid and we will assume in good faith you have renounced to your request.
Thank you very much for your collaboration,
The Data Protection Officer
You may address any question regarding this topics to the Data Protection Officer, who may be contacted using the following contact details:
Data Protection Officer, Petrom City, 22 Coralilor Street, 1st district, code 013329, Bucharest, Romania, firstname.lastname@example.org
6.1. What are Cookies?
a. ensure the functioning of the website and improve its performance;
b. to evaluate user behavior
6.3. How to control Cookies?
6.4. What cookies do we use on this Website?
6.4.1. Strictly necessary cookies that are needed for the proper functioning and operation of our website. These include, for example, cookies that allow you to log into secure areas of our website.
6.4.2. Analysis cookies, which enable us to recognize and count the number of visitors and see how visitors navigate on our website. These types of cookies help us improve users' navigation experience on our website so that they are able to find the information they are looking for more easily.
Description of the purpose
Cookies absolutely necessary for operation
|JSESSIONID||This cookie is essential to our site and helps us operate this site. The cookie expires as soon as you leave our website.||When your browser session ends||These cookie cannot be deactivated.|
|X-Oracle-BMC-LBS-Route||This cookie is essential for our site and helps us operate this website. The cookie expires as soon as you leave our website.|
Analytical / performance cookies
|1P_JAR||This cookie is set by Google Inc. and is necessary for the evaluation of this website.||90 days||This cookie cannot be deactivated. OMV uses this service on an anonymous basis only.|
|This cookie is set by Google Inc. and is required for the evaluation of this website.|
Please note that embedded content from third-party providers (e.g. YouTube, Twitter, ...) may also set cookies. These companies are responsible for handling your data in compliance with data protection regulations.
Data protection is important to us
We are committed to respect your privacy, by complying with all applicable data protection laws and regulations, including the General Data Protection Regulation (EU) 2016/679 (the "GDPR").
You may also find important information regarding the rights you benefit from, including the right to access, request rectification or erasure, request the restriction of processing, withdrawal of consent, objection, not to be subject to an automated decision including profiling, data portability and right to file a complaint to the data protection authorities.