Introduction

Mubadala Energy is a leading international energy company. We manage assets and operations spanning 11 countries, with a primary geographic focus on the Middle East and North Africa, Russia and Southeast Asia.

This privacy notice highlights our commitment towards protecting your personal data. We at Mubadala Energy, our subsidiaries and affiliated entities (hereinafter, “We” or “Us”), ensure that your personal data is protected to the best possible extent when you use our website, use our services or contact us for relevant requests.

This privacy notice outlines the personal data we process, the activities for which we process personal data, the lawful basis for such processing, the measure we take to ensure security and your rights protected under applicable regulation.

Personal Data that we collect about you

Personal data means any data, regardless of its source or form, that may lead to identifying you specifically, or that may directly or indirectly make it possible to identify you, including your name, address, contact number, CV, passport, biometric data, license, bank details and any other personal data based on your relationship with us as: an employee or applicant; customer or potential customer; a partner; user of our website; a recipient of any communication between Mubadala Energy and you, including responding to your inquiry.

We will collect your personal information when you visit our offices or branches, you are under employment with our company, use our website, and interact with us via email.

We may also collect and process personal data about you as received from third parties.

We will notify you when your personal data is required to achieve the purposes outlined below. In all other cases, providing your personal data is optional. Please note that if you choose not to provide the required personal data, it may impact our ability to deliver services to you.

We will process your personal data based on:

The performance of your contract or to enter into the contract and to take action on your requests. For example, to provide a response to your queries.

1. Compliance with a mandatory legal obligation, including for example accounting and tax requirements and regulations in relation to electronic communications and financial services, which are subject to strict internal policies (such as retention periods), procedures, and your right to restrict usage of your data.
2. Public interest, for example, to assist with detecting and preventing fraud, tax evasion and financial crime, or to safeguard the economic well-being of certain individuals.
3. Consent, for example, to provide you with details about our products or services in your email. Consent may be withdrawn at any time.

How long do we keep your personal data for?

We will keep your personal data for no longer than is necessary for the purpose for which your personal data is being processed. The data shall be retained as per the applicable regulatory or legal requirements.

After the expiry of the applicable data retention periods, we will delete it securely, or in some cases remove or modify the information so that individuals cannot be identified.

How do we share your Personal Data?

We may share your personal data with processors (acting on our behalf and upon our instructions) who provide necessary services, such as:

• Group companies for IT systems, tools, licenses, maintenance, and hosting.
• Third-party providers for IT systems, tools, marketing initiatives, and customer surveys.

Your personal data may also be shared with other entities acting as independent controllers, i.e.:

• any legal or government authorities or agencies, or third parties such as law firms and courts, in connection with claims, disputes, litigations or investigations;
• third parties, such as the police and regulatory authorities, to protect our rights, property, or the safety of our customers, staff and assets;
• any other third party pursuant to your express consent.

We do not sell your personal data to third parties, and we only allow third parties to send you marketing information where we have your consent to do so.

What Rights you can exercise with us?

You can request access, correction, objection or erasure of your personal data that Mubadala Energy processes at any time by sending an email to dpo[at]mubadalalenergy[dot]com. We may need to verify your identity as a part of this process for which we may ask additional information. We shall respond to you within the timeline stipulated in the applicable data protection laws.

We will not charge a fee to respond to your request unless the request may be deemed as manifestly unfounded or excessive.

How we keep your Personal Data secure?

We have implemented adequate technical and organizational safeguards to ensure confidentiality of your data, which includes access controls, physical controls, technical controls and administrative safeguards. We protect your data from unauthorized access, theft, breaches, accidental loss, damage, alteration and unlawful processing of your data.

We have specialized security teams who constantly review and improve our measures to protect your personal information from unauthorized access, accidental loss, disclosure or destruction. We shall not be responsible for any unauthorized access or loss of personal information that is beyond our control.

We will never ask for your secure personal or account information by an unsolicited means of communication. You are responsible for keeping your personal and account information secure and not sharing it with others.

Our website may provide links to third-party websites. We shall not be responsible for the security and content of such third-party websites. You should make sure that you read the company’s privacy and cookies policies before using or putting your personal information on third-party websites.

How will we inform you of changes to this privacy notice?

We may update this Privacy Notice from time to time. It is your responsibility to review the most current version on our website.

We are committed to protecting and respecting your privacy and will continue to do so in any future changes we make to this Privacy Notice.

How to get in touch with us and your right to complain to our supervisory authority?

If you want to exercise any of your rights, or if you have any questions about this notice or our use of your personal data, please contact the Data Protection Officer.

The Data Protection Officer for Mubadala Energy can be contacted by email at dpo[at]mubadalalenergy[dot]com.