Skip to main content
Portuguese
Mozambique

Business customer, supplier, partner or investor

Information for people connected with our business (B2B) customers, suppliers, business partners, stakeholders and/or investors.

Privacy Policy - Business Customers, Suppliers and Business Partners

This policy sets out what personal data we collect, for what purposes, and what your rights are.

What does this Privacy Policy cover?

This Privacy Policy provides information about the personal data processed by company(ies) that is part of the Shell group ("Shell" or "we") in relation to (i) individuals working for or on behalf of or who are shareholders of our business customers ("Business Customers"), (ii) contractors or suppliers ("Suppliers"), (iii) business partners, including joint ventures not operated by Shell, as well as investors and shareholders ("Business Partners").

This Privacy Policy provides information about the personal data processed by company(ies) that is part of the Shell group ("Shell" or "we") in relation to (i) individuals working for or on behalf of or who are shareholders of our business customers ("Business Customers"), (ii) contractors or suppliers ("Suppliers"), (iii) business partners, including joint ventures not operated by Shell, as well as investors and shareholders ("Business Partners").

For individual retail customers, members of Shell's loyalty program, visitors to Shell websites or users of Shell applications, please see the Privacy Policy https://www.shell.co.mz/privacy/b2c-notice.html.

For individuals applying to work or attending a recruitment event or undergoing an assessment, please see the Shell Group Privacy Policy - Recruitment at https://www.shell.co.mz/privacy/job-applicant-notice.html.

These policies are also available on Shell websites in the various locations where we operate, in their respective languages, and set out local requirements

Supplemental personalised privacy policy statements and notices may also contain information about how Shell processes your personal data. In such cases, you will be notified of such privacy policies separately. These privacy policies may vary between the countries where we operate to reflect local practices and applicable legal requirements.

If personal data of children is gathered this requires consent of the parent or guardian.

Special Notice - if you are under 18 years of age. Processing of children's personal data

Except for educational events organised by Shell that are designed specifically for children, we do not knowingly collect personal data from individuals under 18 years of age. If you are under 18 years of age, please do not submit your personal data, such as name, address and e-mail address. If you wish to contact Shell and this requires us to submit your personal data (such as for education or innovation events), please ask your parent or guardian to do this on your behalf.

The categories of personal data we collect about you.

What personal data do we process? Information Collection

We process personal data of or relating to individuals who work for or on behalf of or who are shareholders of our Business Customers, Suppliers, Business Partners in the following categories:

  • Private contact information (such as name, mailing or email address, and telephone number) only if necessary; or
  • Business or other contact information (such as job title, department, name of the organisation and your business with Shell done on behalf of you or the Business Customer, Supplier, Business Partner).

Evaluation

In order to comply with legal and regulatory obligations, protect Shell's assets and employees/contractors, and specifically to ensure that Shell can comply with business control, anti-money laundering and/or anti-bribery and corruption laws and other regulatory requirements, we have developed an assessment (prior to engagement and periodically after engagement) of partners, shareholders and directors of our Business Customers, Suppliers and Business Partners. This assessment is carried out with publicly available sanctions lists or issued by governments and with media sources.

Evaluation does not involve profiling or automated decision-making regarding counterparties or potential counterparties.

For what purposes do we process your personal data?

Who is responsible for any personal data collected?

DISA LUSITANIA, S.A., which is part of the "DISA GROUP" whose energy division is controlled by the company "DISA HOLDING Energético, SLU", with registered office at Calle Álvaro Rodriguez Lopes, Santa Cruz de Tenerife, 38003, Spain, will be responsible for processing your personal data, either unilaterally or jointly with its affiliates within the Shell business group.

For what purposes do we process your personal data?

We process the personal data covered in this Privacy Policy for the following purposes:

  • Commercial execution - research, development and improvement of products or services; conclusion and execution of contracts with Commercial Customers, Suppliers and Business Partners; registration and relocation of services, products and materials to a company or from a Shell company; management of relationships and marketing activities, such as maintaining and promoting contact with current and potential customers, account management, customer service, as well as developing, executing and analyzing market research and marketing strategies;
  • Organization and management of the business - financial management, asset management, mergers, spin-offs, acquisitions and disposals, implementation of controls, issuance of management reports, analysis, internal audits and investigations;
  • Health, safety and security – protection of an individual's life or health, occupational health and safety, protection of Shell companies and employees, authentication of individual status and access rights; or
  • Legal and/or regulatory compliance – compliance with legal or regulatory requirements or for a secondary purpose, in which they are directly related, such as:

We may also process your personal data for a secondary purpose where it is closely related, such as:

  • storage, deletion or confidentiality of personal data;
  • audits, investigations, fraud prevention, dispute resolution, insurance issues, litigation, and claims defense; or
  • statistical, historical, or scientific research.

Communication and marketing

You may receive offers on behalf of Business Customers, Vendors or Business Partners. You will always be able to use the unsubscribe functionality through the various digital channels we use to interact with you.

We will process your personal data only when legally permitted.

Why do we process your personal data?

The personal data discussed in this Privacy Policy is only processed:

  • to take action, at the request of an individual, prior to entering into a contract;
  • when necessary to comply with a legal or regulatory obligation to which the Shell company(ies) is subject;
  • where necessary for the purposes of the legitimate interests of the Shell company(ies), unless the interests or rights of freedom and fundamental rights of the individual(s) outweigh such interests; or
  • (only where required by law) with the explicit consent of the individual.

Where processing is based on consent and subject to applicable local law, which may provide otherwise, you have the right to withdraw your consent at any time. This will not affect the validity of the processing before the withdrawal of consent.

Shell is committed to protecting your personal data.

Security of your personal data

We have implemented technologies and policies with the goal of protecting your privacy from unauthorized access and misuse. We may use encryption, in particular, for some of our services and apply an authentication and verification process for access to Shell services, and we will regularly test and evaluate the effectiveness of our security measures.

Who do we share your personal data with?

Who may we share your personal data with?

The personal data discussed in this Privacy Policy is processed exclusively for the purposes referred to above and will be shared only when strictly necessary for the purposes of knowledge with:

  • Other companies in the Shell group of companies;
  • Shell's authorised third-party agents, service providers, external auditors and/or subcontractors; or
  • Competent public authority, government, regulatory or tax agency when it is necessary to comply with a legal or regulatory obligation to which the Shell company(ies) is subject or as permitted by applicable local law.

Interaction with Shell through social media

If you choose to interact with Shell through a social network managed by Shell ("Shell Social Network"), such as Facebook, Instagram, Twitter or LinkedIn, your personal data (name, profile picture and your interest in Shell), depending on the privacy settings set on the social media platform, will be visible to everyone who visits your personal page and also to Shell. You may delete at any time any information made available on these sites in your social media platform account. Shell does not monitor your activity on the different social networks you use. If you send a message to Shell via a social network messaging service, that message will be retained for a maximum of one month after it is received. Please contact Shell if you are unable to take action in relation to the Shell Social Network - see the section below.

With appropriate safeguards, your personal data may be transmitted outside of your country.

Transmission of your personal data to other countries

When your personal data is transmitted to companies that are part of the Shell group and/or authorised third parties located outside your country, we take organisational, contractual and legal measures to ensure that it is processed solely for the purposes mentioned above, and that adequate levels of protection have been put in place to preserve it. Among these measures are the Binding Corporate Rules for transfers between the Shell group and, for Shell companies in the European Union, transfer mechanisms approved by the European Commission for transfers to third parties, as well as any other local legal requirements.

What are the consequences of not providing your personal data?

Personal data gathered by Shell for these processes either directly or indirectly are required in order to:

  • Fulfil legal requirements and/or which is required for entering into a contract with a counter-party and continuing to contract with that counter-party; or
  • Maintain contact with Business Customers, Suppliers and Business Partners.

Failure to provide us with the information required will negatively affect our ability to communicate with you, or our ability to enter into a contract with a counter-party or continue to contract with a counter-party.

What are the consequences of not providing personal data?

The personal data collected by Shell for these processes, whether directly or indirectly, is necessary to:

  • Satisfy legal and/or necessary requirements to enter into a contract with a counterparty and continue to enter into contracts with that counterparty; or
  • Maintain contact with Commercial Customers, Suppliers and Business Partners.
 
Failure to provide the requested information will adversely affect our ability to communicate with you or enter into or continue to enter into contracts with a counterparty.
 

Shell will only retain your personal data for a set period.

How long do we retain your personal data?

With the exception of a few cases explained in the supplemental privacy policy statements, any personal data that is necessary for the purpose of concluding and entering into contracts with Business Customers, Suppliers and Business Partners, or for consideration of bids or offers, will be retained for the duration of the contractual relationship and up to 15 years thereafter. For contracts with a term of more than five years and for the purposes set forth above, these contracts will be retained for 35 years, starting from the beginning of the term of the contract.

In all other cases for the purposes set out above, including personal data collected as part of any unsuccessful bids for Shell or that relates to assessments with publicly available or government-issued sanctions lists and with media sources, such personal data will be retained for a maximum of 15 years after it was first obtained.

In all cases, information may be retained for either (a) a longer period of time, where there is a legal or regulatory reason to do so (in which case, it will be deleted after it has served its legal or regulatory purpose) or (b) a shorter period, where the individual disapproves of the processing of his or her personal data and there is no longer a legitimate business purpose for retaining it.
 

Your rights in relation to your personal data

Our goal is to keep our information as accurate as possible. You can request:

  • access to your personal data;
  • correction or deletion of the personal data (but only where it is no longer necessary for a legitimate business purpose);
  • that you stop receiving marketing communications on behalf of the Business Customer, Supplier or Business Partner;
  • that the processing of your personal data is restricted; and/or
  • the receipt of the personal data you have provided to Shell, in a structured and digital form, in order to transmit this data to a third party, if this is technically feasible.

To make these requests, please contact us at privacy-office-SI@shell.com.

Who can you contact if you have a question, concern or complaint about your personal data?

If you have any problems, questions or complaints regarding the processing of your personal data, please refer to Shell's privacy policy in your location or contact us at Privacy-Office-SI@shell.com.

You may also contact the Shell Group Data Protection Officer by post to Shell International B.V. The Hague, The Netherlands - Companies Register No. 27155369, P.O. Box 162, 2501 AN, The Hague.

We use cookies on our websites to provide you with the best possible user experience.

Cookies and similar technologies

Shell may use cookies and similar technologies that assist in the collection and storage of information when you visit a Shell website. The purpose is to enable Shell to identify your internet browser and collect data about your use of our website, which pages you visit, the duration of your visits, and to identify them when you return, so that we can improve your experience when visiting our websites. You can control and manage your cookie preferences by adjusting your browser settings or by using Shell's cookie preference tool on Shell websites - for more information, please see Shell's Cookie Policy at http://www.shell.co.mz/cookie-policy.html.

This Privacy Policy is updated periodically.

Changes to this Privacy Policy

This Privacy Policy may be amended from time to time. We advise you to regularly review this Privacy Policy to check for any changes. This Privacy Policy was last updated in August 2019.