Privacy Notice - Visitors

What is the purpose of this document?

We place great value on honesty and integrity. We are committed to protecting, safeguarding, and respecting your privacy.

This privacy notice references “we”, “us” and “our” which means Essar Oil UK Limited (trading as “EET Fuels”) and its group of subsidiary companies (referred to as the “group” below).

This privacy notice describes how we collect and use personal information about you before, during and after your visit with us in accordance with the UK General Protection Regulation (UK GDPR).

We are the data "controller". This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice.

We may update this notice at any time.

Who does it apply to and the source of the information?

This privacy notice applies to all individuals who are current and former visitors to our sites where you have provided us with your personal data or it has been provided by an employee or business partner to facilitate your attendance on site as a visitor.

It is important that you read this notice, with any other policies mentioned within this privacy notice, so you understand how we are processing your information and the procedures we take to protect your personal data.

Data Protection Principles

We will comply with data protection law, which says that the personal information we hold about you must be:

  • Used lawfully, fairly and in a transparent way.
  • Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
  • Relevant to the purposes we have told you about and limited only to those purposes.
  • Accurate and kept up to date.
  • Kept only as long as necessary for the purposes we have told you about.
  • Kept securely in a manner to ensure appropriate security of the personal data

including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage

We as the controller shall be responsible for and be able to demonstrate compliance with the Data protection Principles.

Type of information we hold and process about you, and the purpose for collecting it

We process data relating to those attending as a visitor to any of our sites.  Personal data that we may collect, process, hold, share (where appropriate) about you includes:

Category of Data

Data that may be collected

Lawful basis for processing

Identification

·       Name and contact information (telephone number)

·       Photo identification

·       Company

 

Legitimate Interests

Legal Obligation

Health

·       Medication

·       Injuries

·       Results data from drugs and alcohol testing

Explicit Consent

Vehicle Data

·         Vehicle registration mark

Legitimate Interests

CCTV Footage

·       Video and still images

Legitimate Interests

Why do we process your personal data

  • to issue you with a visitor badge for access at our sites
  • to carry out necessary administration functions to allow visitors and contractors on site
  • to verify your identity
  • to maintain public safety
  • to protect the security and integrity of individuals, their belongings and managed buildings
  • to assist with the health and safety of individuals and other serious occurrences

The legal basis for our processing

Our legal basis for processing your personal data is:

  • that we have a legitimate interest (or those of a third party) in processing your information and your rights and freedoms do not override those interests
  • that it is necessary to meet a legal obligation (such as health and safety legislation)

Our basis for processing special category data (sensitive personal information) is:

  • when you have provided us with your explicit consent (such as in relation to being present on site when a maintenance event or health and safety incident is taking place. *Our Drugs and Alcohol Policy provides further detailed information in relation to this )

Who we will share the personal data with

The personal data covered by this Privacy notice are exclusively processed for the purposes referred to above and will only be shared on a strict need to know basis.

Personal data may be shared with specific departments or individuals within the Group where there is justification (in relation to your visit), or where it is necessary to protect the health, safety and welfare of employees and other people under the Health and Safety at Work etc act 1974. The purpose of sharing is to make it safe for those who work or visit our sites and to effectively identify and control risk of injury or health that could arise.

We will share your data to a competent public authority, government, regulatory or fiscal agency where it is necessary to comply with a legal or regulatory obligation to which the relevant Essar company/companies is subject or as permitted by applicable law – for example, by court order or to prevent fraud or other crime.

The process for sharing personal data will be consistent with the guiding principles and statutory requirements of the UK GDPR and the DPA.

Transfers of your personal data to other countries

Where your personal data is transferred to companies within the Essar Group and/or to third parties located outside of your country (including outside of the European Economic Area and the UK) we take organisational, contractual and legal measures to ensure that your personal data are exclusively processed for the purposes mentioned above and that adequate levels of protection have been implemented in order to safeguard your personal data. 

Data Security

We have implemented technology and policies with the objective of protecting your privacy from unauthorised access and improper use and will update these measures as new technology becomes available, as appropriate.

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Additionally, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality. 

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Retention of data

We will only retain your personal data for as long as it is needed for the purposes set out in this document or for as long as the law requires us to.

Where the processing of your data relates to a health and safety incident the data will be retained as per the HSSE statutory legislation for retention.

Your rights in relation to your personal data

Under certain circumstances, by law you have the right to:

Request access to your personal information (commonly known as a data subject access request). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.

Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected

Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.

Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it.

The right of erasure and the right to object to processing of personal data do not apply where personal data is processed for the performance of a legal obligation. This will be considered on a case-by-case basis and depends on what personal data is involved and the risks further processing of that data could pose to you.

Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.

Please be aware there are a number of limitations to these rights and there may be circumstances where we are not able to comply with your request. 

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party (this right does not apply under lawful basis of legitimate interests), please contact the DPO in writing.

Please contact DPO@eetfuels.com

Data Protection Officer ( DPO )

We have appointed a DPO to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal information, please contact the DPO. You can do this by email via DPO@eetfuels.com or in writing to Essar Oil (UK) Limited, 5th Floor, The Administration Building, Stanlow Manufacturing Complex, Ellesmere Port, Cheshire, CH65 4HB United Kingdom.

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO) with respect to data protection issues. 

Contact details 

Information Commissioner's Office

Wycliffe House Water Lane

Wilmslow Cheshire United Kingdom

SK9 5AF Website: www.ico.org.uk Phone: 0303 123 1113 (local rate) or 01625 545 745 (national rate)

Changes to this Privacy Notice

We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information. 

This privacy notice was last updated on 29 January 2025.

If you have any questions about this privacy notice, please contact the DPO by sending an email to DPO@eetfuels.com.