logo

Select Sidearea

Populate the sidearea with useful widgets. It’s simple to add images, categories, latest post, social media icon links, tag clouds, and more.
|    info@southeastenergypetro.com

Personal data protection policy

POLICY OF S.C. South East Energy Petroleum Company RELATING TO THE PROTECTION OF PERSONAL DATA

 

S.C. South East Energy Petroleum Company process personal data legally, fairly and transparently against the data subjects and ensure their confidentiality, in compliance with the provisions of the Regulation (EU) No. 679 dated 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and with the applicable requirements in force on the protection of personal data.

The processing of personal data is achieved by mixed means (manual and automatic), in compliance with the legal and regulatory applicable requirements in force and under conditions that ensure the security, confidentiality and respect of the rights of the data subjects.

S.C. South East Energy Petroleum Company S.A will ensure the protection and security of the personal data of its employees, its partners, its clients and of its suppliers of products and services by:

 

APPLICATION OF Principles relating to processing of personal data

Lawfulness, fairness and transparency: Data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.

Purpose limitation: Data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

Data minimisation: Data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

Accuracy: Data shall be accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.

Storage limitation: Data shall be kept in a form which allows identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.

Integrity and confidentiality: Data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

 

Respect for THE RIGHTS OF THE data subject

  • The right of access and information;
  • The right to rectification / updating;
  • The right to erasure or right to be forgotten„;
  • The right to restriction of processing;
  • The right to withdraw the consent;
  • The right to data portability;
  • The right to object and automated individual decision-making process;
  • The right to register a complaint with the national supervisory authority for the processing of personal data;
  • The right to appeal to justice.

 

ESTABLISHING THE PURPOSES OF PERSONAL DATA PROCESSING

Personal data are processed by S.C. South East Energy Petroleum Company, for the following purposes: the observance of the legal, contractual obligations of S.C. South East Energy Petroleum Company, the obligations to conclude a contract, to prepare the prequalification documentation, the bids, to obtain the attestations, the authorizations, the personnel and the S.C. South East Energy Petroleum Company certifications, to ensure the physical security of persons, by guarding and video surveillance and GPS tracking, only when traveling with South East Energy Petroleum Company vehicles. Data may be disclosed to recipients / third parties based on the stated, explicit and legitimate purposes outlined above.

 

Ensuring OF PERSONAL DATA SECURITY

S.C. South East Energy Petroleum Company ensure a level of security appropriate to the risks to the rights and freedoms of the data subjects, by implementing the technical and organizational measures associated with the risks, as follows:

  • processing of personal data in compliance with GDPR;
  • implementing specific procedures for data protection and security;
  • informing the data subjects and exercising the rights of the data subjects provided by the GDPR;
  • processing only the data that is necessary for each specific purpose of the processing and only by the persons authorized by South East Energy Petroleum Company;
  • the obligation to keep confidentiality and integrity of personal data by the persons authorized by South East Energy Petroleum Company;
  • prohibiting the use of personal data for private purposes and by unauthorized persons;
  • the insertion of personal data protection clauses in contracts with our clients, partners and suppliers;
  • maintaning personal data only for the purposes for which they were collected and for the duration stipulated in the legislation, contracts and applicable regulations;
  • personal data shall not be transferred to a third country or an international organization unless the requirements of the GDPR are met;
  • ensuring the confidentiality, integrity and availability of personal data and access to them in the event of a physical or technical incident;
  • periodic evaluation of the effectiveness of implemented measures through control and audit;
  • notifying the national supervisory authority and the data subject in the event of personal data security breaches.

 

SC South East Energy Petroleum Company undertakes to comply with applicable legal and regulatory provisions on the protection of natural persons with regard to the processing of personal data of their employees, customers and suppliers of South East Energy Petroleum Company, external auditors and partners  interacting with South East Energy Petroleum Company and whose relationships require the protection of personal data.