We are committed to ensuring that when we collect and use information about visitors on our websites, we do so in accordance with the EU General Data Protection Regulation (“GDPR”) as well as with other legislation applicable in jurisdictions where our offices are located.
For the purpose of the GDPR, the data controller is VTTI B.V., K.P. van der Mandelelaan 130, 3062 MB Rotterdam, The Netherlands.
1. Information we may collect from you
We may collect and process the following data about you:
1. Information you give us
You may give us information by filling in forms on our websites (https://www.vtti.com, https://careers.vtti.com, http://www.vttisafety.com or https://vtteye.vtti.com) /or any one of the websites of our terminals and companies within the VTTI Group (our website) or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when:
- access our website;
- you make any enquiry or query or comment on our website (by filling in a form or otherwise) or when you report a problem with our website; or
- you apply for a job or vacancy.
The information you give us may include (without limitation) your name, gender, age, identity document number, address, e-mail address, phone number, personal description, photograph, skills, qualifications, education history, employment history, accreditations, location.
Your job application via website or otherwise will constitute your express consent to our use of your personal information, to access your application and to allow us to carry out any reference checking and other related activities as may be required of us under the applicable law, of the jurisdiction in which our offices or related companies may be based, as an employer.
We may also collect other types of your personal information such as references and employment objectives during the course of dealing with you, for example if you are considered for a particular employment position. Where practical, the purpose for which we collect personal information and the consequences of not providing it will be made clear at the time of collection.
2. Information we collect about you
With regard to each of your visits to our website we may automatically collect the following information:
- technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
- information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our website (including date and time); products or services you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.
When you visit our website, we will record your visit only and will not collect any personally identifiable information (i.e. information that is associated with you as an individual) from you unless otherwise stated.
Cookies used (if any) in any part of our website will not be deployed for collecting personally identifiable information. For your information, Cookies are small pieces of data that can be stored in users’ devices for the purposes of obtaining configuration information and analysing users’ viewing habits. They are commonly used to track your preferences in relation to the subject matter of the web website and make your online experience easier and more personalized.
2. For what purpose do we process information?
We use information held about you in the following ways:
1. Information you give to us
We will use this information:
- to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information and services that you request from us;
- marketing of goods and/or services by us, our agents or our subsidiaries, in relation to the services and marketing of any goods and/or service by any company within the VTTI Group;
- to enable you to submit your curriculum vitae generally or to apply for specific jobs;
- to assist us in finding a position that is most suitable for you;
- to answer your inquiry and to provide feedback;
- operation and service surveys;
- we may also release personal information to regulatory or law enforcement authorities, if they require us to do so; and
- to ensure that content from our website is presented in the most effective manner to you and on your devices.
2. Information we collect about you
We will use this information:
- to administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- to improve our website to ensure that content is presented in the most effective manner to you and on your devices; and
- as part of our efforts to keep our website safe and secure.
3. Sharing and disclosure of your information
Your personal data is exclusively processed for the purposes referred to above (or for a secondary purpose where it is closely related, for example such as storing it) and will only be shared on a strict need to know basis:
- with other companies within the VTTI Group, including to those which may be located outside of your location and/or the Economic European Area (“EEA”); and
- with authorized third party agents, service providers and/or subcontractors of VTTI, and, for job applicants in particular, authorised third parties who carry out reference and background checks on behalf of VTTI;
- with a competent public authority, government, regulatory or fiscal agency where it is necessary to comply with a legal or regulatory obligation to which the relevant VTTI company/companies is subject to or as permitted by applicable local law.
- if VTTI or any of its related companies or substantially all of its assets are acquired by a third party, the personal data held by it about its customers will remain with the transferred assets.
- if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce any contract between us and other parties; or to protect the rights, property, or safety of VTTI, our employees, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
4. How we deal with your cv, if you are a job applicant
Submitting your CV and/or applying for jobs and vacancies:
- you may submit your CV to us via our website, either for general consideration by our HR department for positions as they arise or to apply for a specific advertised job.
- once submitted, your CV may be sent to the relevant HR department and/or to the department in which a position is open who will review your details and may contact you directly.
Personal data of job applicants is only processed:
- in order to take steps at the request of the applicant prior to entering into a contract;
- where it is necessary to comply with a legal obligation to which the relevant VTTI company/companies is subject to ensure compliance with local employment, social security laws and regulations;
- where it is necessary for the legitimate interests of VTTI (such as ensuring compliance with legal obligations other than those related to employment or social security, the protection of VTTI assets, reputation and VTTI employees and contractors) except where such interests are overridden by the interests or fundamental rights and freedoms of the applicant; or
- (only if legally required) with the explicit consent of the applicant.
You can update your CV at any time, simply by following the same procedure to submit a new CV via our website or by email.
We hold personal data of unsuccessful applicants for no longer than one year after the recruitment process or assessment has been completed.
5. Where we store your personal data
Given the global nature of the VTTI Group your personal data may be transferred to countries outside of your location which may include countries outside of the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Where that happens, we take steps to ensure that your privacy rights continue to be protected in line with VTTI internal rules and applicable law. Only if required by local law we will seek your consent to such transfer.
We have implemented technology and policies with the objective of protecting your privacy from unauthorized access and improper use and will update these measures as new technology becomes available, as appropriate.
6. Your rights
Under applicable data protection laws, you have data protection rights when we process your personal data. In brief, your data protection rights are:
Right of access
You may have access to your personal data processed by us and you may request us to confirm whether or not we process any other personal data that relates to you. You may ask us to provide you with a copy of the personal data we process of you insofar as required by applicable data protection laws.
Right to rectification and erasure
You may request us to correct any inaccurate personal data we process of you. Also, you may ask us to erase the personal data that relate to you if they are no longer necessary for the purposes for which we processed them, if you have withdrawn your consent and we do not have another legal ground for processing your personal data, if your personal data have been unlawfully processed, if your personal data have to be erased following applicable EU or EU member state laws.
Right to restrict processing
You may restrict the processing of your personal data if you have contested the accuracy thereof or if the processing is unlawful. You may also request restriction over erasure, in the event we no longer need your personal data for a purpose but you need them for the establishment, exercise or defence of legal claims, or while your exercised right to object is being reviewed.
Right to data portability
If we processed your personal data based on your consent or to execute a contract with you, you may receive the personal data that concerns you in a structured commonly used and machine-readable format to transmit them to another party.
Right to object
You may object to our processing of your personal data based on our legitimate interest. We will then no longer process your personal data for this purpose, unless we have an overriding legitimate interest to do so.
If you have provided consent for the processing of your data you to have the right (in certain circumstances) to withdraw that consent at any time which will not affect the lawfulness of the processing before your consent was withdrawn.
For more information on how you can exercise your rights and practical guidance to assist you in this, please send an email to email@example.com.