Current or former Shell employee, contractor or dependent

Every individual who is part of the Shell group of companies ("Shell" or "we") is responsible for protecting their own personal data, as well as the data of our customers, business partners and suppliers.

This Privacy Policy provides information about the personal data processed by Shell in relation to individuals who are or have been employees, interns or individual contractors, as well as dependents of Shell employees ("Shell Employees").

For individual retail customers, Shell loyalty program members, visitors to Shell websites, or users of Shell applications, please see the Privacy Policy https://www.shell.co.mz/privacy/b2c-notice.html.

For individuals applying to work or attending a recruitment event or undergoing an assessment, please see the Shell Group Privacy Policy – Recruitment at https://www.shell.co.mz/privacy/job-applicant-notice.html.

Like this Privacy Policy, personalized and supplemental privacy policy statements and notices may also contain information about how we process your personal data in relation to specific HR processes (such as the Open Resourcing, OneHealth IT, and International Mobility programs). In such cases, you will be notified of such privacy policies separately.

Like this Privacy Policy, personalized and supplemental privacy policy statements and notices may also contain information about how we process your personal data in relation to specific HR processes (such as the Open Resourcing, OneHealth IT, and International Mobility programs). In such cases, you will be notified of such privacy policies separately.

We process personal data necessary to manage employment relationships, hire contractors and interns, and provide benefits to certain dependents of Shell employees.

This includes personal residential contact information, date of birth, marital status, payslip and bank account information, salary and benefits information, including beneficiary information, emergency contacts, job performance information, information necessary to ensure that you can work in the country(ies) where you are located, and other information necessary for the management of employment relations,  hiring contractors and providing benefits to certain dependants of Shell employees (such as dependents accompanying Shell employees during an expatriate designation process).

We process your personal data:

• in order to comply with local laws and regulations;
• for legitimate business interests (e.g., performance management to ensure the qualification and competence of our personnel or for health, safety and security purposes, so that only authorized personnel have access to certain locations or assets, litigation and defense of claims); or
• when there is your explicit consent.

As a general principle, Shell does not request or rely on the consent of Shell employees for the processing of personal data. However, there are particular circumstances in which consent is required, such as in cases required by applicable local law.

The personal data requested from Shell Employees represents the minimum necessary in order to comply with legal and/or contractual requirements and to provide opportunities to participate in programs or provide a benefit. Failure to provide the requested information may adversely affect your chances of remaining in employment, internship, or being hired as a contractor, participating in a program, or receiving a benefit.

The personal data requested from Shell Employees represents the minimum necessary in order to comply with legal and/or contractual requirements and to provide opportunities to participate in programs or provide a benefit. Failure to provide the requested information may adversely affect your chances of remaining in employment, internship, or being hired as a contractor, participating in a program, or receiving a benefit.

We process personal data covered by this Privacy Notice for the following purposes:

• Human Resources, personnel management, business process execution, internal management, management reports, analysis and organizational development - budgetary, financial and organizational planning, administration, compensation, performance management;
  
• Health, safety and security – protection of the life or health of Shell Employees, occupational health and safety, protection of Shell assets, authentication of the status and access rights of Shell Employees; or
  
• Legal and/or regulatory compliance – compliance with legal or regulatory requirements.
  

We may also process your personal data for a secondary purpose, where it is directly related, such as:

• storage, deletion or confidentiality of your personal data;
• audits, investigations, fraud prevention, dispute resolution, insurance issues, litigation, and claims defense; or
• statistical, historical, or scientific research.

Your personal data is processed exclusively for the purposes referred to above and will be shared only when strictly necessary for the purposes of knowing with:

• Other companies in the Shell group of companies, including those that may be outside your location;
• Shell's authorised third-party agents, service providers, external auditors and/or subcontractors, in particular authorised third parties who carry out reference and background checks on Shell's behalf;
• Competent public authority, government, regulatory or tax agency where it is necessary to comply with a legal or regulatory obligation to which the Shell company(ies) is subject or as permitted by applicable law; or
• Any person to whom Shell intends to assign any of its rights and/or duties.

Evaluation

In order to comply with legal and regulatory obligations, protect Shell's assets and employees/contractors, and specifically to ensure that Shell can comply with trade control, anti-money laundering and/or anti-bribery and corruption laws and other regulatory requirements, we periodically conduct the assessment of all employees and contractors. This assessment is carried out against publicly available or government-issued sanctions lists and media sources, and is compared with information about you retained by Shell (e.g. from the Conflict of Interest register).

Your personal data is processed exclusively for the purposes referred to above and will be shared only when strictly necessary for the purposes of knowing with:

• Other companies in the Shell group of companies, including those that may be outside your location;
• Shell's authorised third-party agents, service providers, external auditors and/or subcontractors; and
• Competent public authority, government, regulatory or tax agency where it is necessary to comply with a legal or regulatory obligation to which the Shell company(ies) is subject or as permitted by applicable law; or
• Any person to whom Shell intends to assign any of its rights and/or duties.

With appropriate safeguards, your personal data may be transmitted outside of your country.

Transmission of your personal data to other countries

When your personal data is transmitted to companies that are part of the Shell group and/or authorised third parties located outside your country, we take organisational, contractual and legal measures to ensure that it is processed solely for the purposes mentioned above, and that adequate levels of protection have been put in place to preserve it. Among these measures are the Binding Corporate Rules for transfers between the Shell group and, for Shell companies in the European Union, transfer mechanisms approved by the European Commission for transfers to third parties, as well as any other local legal requirements. You can find a copy of Shell's Binding Corporate Rules by contacting us at privacy-office-SI@shell.com.

We have implemented technologies and policies for the purpose of protecting your privacy from unauthorized access and misuse, and we will update these measures as new technologies become available, where appropriate.

All information, including personal data, is managed in accordance with the Shell group's standards for Information Management and Records, and will be securely deleted once it is no longer needed for the legitimate business purpose or for legal/regulatory purposes.

Some exceptions required to comply with local legal requirements are:

• information contained within employee files will be retained for a maximum of 10 years after the end of the employment relationship;
• information regarding retirement benefits will be retained for a maximum of 99 years from the beginning of the employment relationship;
• any personal data collected as part of the assessment process from publicly available or government-issued sanctions lists and from media sources will be retained for no more than 15 years after it was first obtained;
• names, dates, times and access points of all individuals entering Shell premises will be retained for 3 years from each access;
• in the event that an individual has been terminated or has their contract terminated due to serious misconduct, including breach of the Shell Life-Saving Rules or the Shell Code of Conduct, this information will be retained for a maximum of 30 years after dismissal.

In all cases, information may be retained for either (a) a longer period of time, where there is a legal or regulatory reason to do so (in which case, it will be deleted after it has served its legal or regulatory purpose) or (b) a shorter period, where you disapprove of the processing of your personal data and there is no longer a legitimate business purpose for retaining it.

• access to your personal data;
• correction or deletion of your personal data (but only where it is no longer needed for a legitimate business purpose);
• that the processing of your personal data is restricted; and/or
• the receipt of the personal data you have provided to Shell, in a structured and digital form, in order to transmit this data to a third party, if this is technically feasible.
• For individuals with access to HR Online, it is possible to access their personal data through the address hronline.shell.com/.

You can also contact your local HR consultant. If you are a contractor, you need to speak with your company/external hiring/employment agency. For former employees or dependents, please contact us at privacy-office-SI@shell.com.

This Privacy Policy is updated periodically.

Who can you contact if you have any questions, concerns, or complaints about your personal data?

If you have any problems, questions or complaints regarding the processing of your personal data, please contact us at Privacy-Office-SI@shell.com

You may also contact the Shell Group Data Protection Officer by post to Shell International B.V. The Hague, The Netherlands - Companies Register No. 27155369, P.O. Box 162, 2501 AN, The Hague.

This Privacy Policy may be amended from time to time. We advise you to regularly review this Privacy Policy to check for any changes. This Privacy Policy was last updated in June 2021.