Principles relating to personal data processing

In the context of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / ES (General Data Protection Regulation) and Low no. 18/2018 (About the protection of personal data), we are fulfilling the information obligation in connection with the processing of your personal data.


Please read the following information on how we process your personal data.

Who is the data controller for your personal data?

The data controller for your personal data is ENGIE Services and the other companies in The ENGIE Group as specified in the attached document.

The data controller has appointed a Responsible Person to supervise the processing of personal data, who can be contacted via e-mail at:

For what purposes do we process your personal data and what is the legal basis for such processing?

Processing under a contract and pre-contractual relations:

When offering the company’s services, goods and activities on our web pages, in the media and personal meetings, we use the personal data of contact persons – employees of legal or natural persons who have expressed an interest in cooperation and provided us with their contact data, in which case consent is not required, for the purposes of the contractual or pre-contractual relationship.
In connection with the management and operation of residential and non-residential facilities, we process personal data without consent, for the purposes of the contractual relationship and under applicable legislation.
Personal data provided via the contact form on our website are processed for the purpose of pre-contractual relations (e.g., a request for a quotation, a request for more detailed information on provided services, product information) and we are likewise entitled to process such information without consent.

Processing based on consent

A job candidate’s personal data included in their CV or personal profile sent by e-mail for the purposes of registration in our electronic database of job candidates can be processed only on the basis of voluntary consent. We obtain consent directly from the person concerned (the job candidate) or from third parties (e.g.,Profesia).
We send clients our free company newsletter to keep them up to date with our latest developments (direct marketing) only with their voluntary consent.
You can withdraw your consent for this processing of your personal data by clicking the unsubscribe link in the newsletter itself (disclaimer), or by sending a request to the e-mail address:

Who else has access to your personal data?

We use the services of external contractors, which can also process your personal data. These processors are companies that provide forwarding services, payroll processing, accounting services, occupational safety and health and fire protection, companies providing education and training for our employees, application providers, IT service providers and contractual partners that carry out commercial activities on our behalf. We verify that all our contractors comply with applicable legislation, maintain confidentiality, process your data only in the scope permitted by concluded contracts and provide adequate protection as demanded by the GDPR, international standards and other applicable regulations.

How long will your personal data be retained?

Your personal data will be stored for the duration of the contract and the statutory archiving period, for the period necessary to prove legal claims or for the time necessary to achieve its purpose.
Personal data provided by completing a contact form for purposes of pre-contractual relations or by sending a CV will be processed only for 1 year, after which the data will be deleted unless a contract is concluded.
We are entitled to process personal data obtained with your consent (address for our newsletter, photographs) until you withdraw consent.

What are the data subject’s rights in connection with personal data processing?

Right of access to personal data
You have the right to ask us for confirmation of whether or not we process your personal data.
Right to rectification of personal data:
You have the right to rectification of your personal data if they are inaccurate or incomplete.
Right to erasure (‘right to be forgotten’):
We are obliged to erase your personal data without undue delay if:

  • the personal data are not necessary for the purposes for which they were obtained or otherwise processed,
  • you withdraw your consent for their processing,
  • if there is no other legal basis for personal data processing,
  • if you object to processing and there are no legitimate reasons prevails for the processing,
  • you object to processing and the personal data have been unlawfully processed,
  • the personal data have to be erased for compliance with a legal obligation,
  • the personal data were acquired in relation to the offer of information society services.

The data controller will not implement a request for deletion if processing is necessary:

  • to enforce the right of freedom of expression and information,
  • to fulfil a legal obligation,
  • to fulfil a task carried out in the public interest,
  • for reasons of public interest in the area of public health,
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes,
  • to prove, assert or defend legal claims.

Right to restriction of personal data processing

You have the right to require the restriction of processing your personal data where one of the following applies:

  • you question the accuracy of the personal data, in which case we will restrict processing until we verify their accuracy,
  • our processing is unlawful, and you object to the deletion of the personal data and instead request the restriction of their use,
  • we no longer need your personal data, but you need them to prove, assert or defend legal claims, 
  • you have objected to processing of your personal data, in which case we will restrict processing until it is verified whether our legitimate grounds override yours.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed:

  • with your consent,
  • to prove, assert or defend legal claims,
  • for the protection of the rights of another natural or legal person
  • for reasons of important public interest.

Right to data portability
You have the right to receive the personal data that you have provided to us and you have the right to transmit those data to another controller (e.g., when changing service provider). We are obliged to provide you with your data on request in a structured, commonly used and machine-readable format (e.g., XML or CSV).

Who can you contact about the processing of your personal data?

Our company has a designated responsible person. If you have any questions or complaints regarding the processing of your personal data or if you want to exercise any of your rights, write to us at: You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your rights have been violated.