Those whom this Privacy Policy is addressed to include but not Limited to:

Recruitment Candidates,
Vendors,
Customers
Visitors,
CCTV Data,
CSR Beneficiaries,
Website Visitors,
Recipients of electronic or other communications which contain or refer to this Privacy Policy

Information from Children

NNPC Limited does not seek through the Site to gather Personal Data from or about minors (as this term is defined by applicable law), nor does NNPC Limited share the personal information of minors without affirmative authorization.

NNPC’s compliance with data protection Laws

NNPC Limited is committed to collecting and using personal data in a lawful manner. NNPC Limited will ensure that, when it collects or uses personal data, such collection or use is allowed under applicable data protection law, including, for example, the Nigeria Data Protection Act.

Individuals may object to the processing of their personal data and we will consider such objections carefully where required by law. For more information about your rights with respect to how we process your personal data, please contact us via data.privacy@nnpcgroup.com

Personal Data Collected & How It Is Used

We obtain information about you through the mediums defined below. In addition to the purposes set out below, we may use all or a combination of this information to defend our legal rights and comply with the law and regulatory requirements.
When NNPC Limited relies on its legitimate interest as a legal basis to process personal data, NNPC Limited will ensure that these interests do not disproportionately and adversely impact your rights and freedoms. When NNPC Limited relies on your consent as a legal basis to process personal data, you can withdraw your consent at any time. Data Subjects wishing to withdraw their consent should notify us at data.privacy@nnpcgroup.com and we will stop the processing of your personal data as soon as reasonably possible.

Categories of Data Subjects	Personal Data Processed	Business/Commercial Purpose for Processing	Lawful Basis for Processing
Recruitment Candidates	Name, phone number, email address, tax identification number, bank details.	To conduct recruitment exercises to identify qualified candidates to fill job openings (i.e., communicating with applicants during the recruitment process and making decisions on their suitability for roles applied)	Consent
Vendors (NNPC Vendors, NipeX Vendors)	Name, address, telephone number, email, passport photograph, CV/ resume, academic qualifications and certifications, employment history.	To establish correspondence and to facilitate the provision of the goods and services for which the vendors are contracted.	Necessary step prior to entering into a contract or for the performance of a contract
Pensioner	Pensioner’s Name, House Address, Phone Number, Retired Saving Account Number, Fingerprint, Next of Kin.	To onboard new pensioners, production of Identification cards, pensioner relations, and pensioner verification.	Legitimate interest
HMO Enrollees	Enrollee’s Name, Phone Number, Email Address, Date of Birth, Gender, Location, dependant’s data, and Staff ID (for NNPC Limited Staff), Medical records.	For payroll functions and terminal benefits. To onboard Enrollees, Issuance of Identification Cards, Enrollee Relationship Management.	Legal Obligation, Performance of a Contract
Customers (academy clients, marketers, dealers, properties etc)	Name, phone number, email address, area of specialization	To contact prospective academy clients and NNPC Academy Partners	Necessary step prior to entering a contract or for the performance of a contract
Visitors	Name, phone number, email address, bank details	For customer onboarding. To provide products and services	Necessary step prior to entering into a contract or for the performance of a contract, Consent
Journalists	Name of Applicant, DOB, Staff ID, Grade level, Designation, Department, SBU, Phone number, Email address, contact address, Permanent address, Name/Phone number of Next of Kin, NNPC society memberships, ever taken loan from NNPC corporate society and how much, Vendor, building type, location, price, Bank, Account number, and declaration.	Electronic marketing communications via any means (including via email, telephone). To determine what rental offerings a customer can access	Necessary step prior to entering into a contract or for the performance of a contract, Consent
Government Resource Person	Name, Company Name, Residential Address, email address, Phone, Gender, Photograph, Signature, ID number, and laptop serial number	For proper visitor access management and issuance of ID cards	Legitimate Interest
CCTV	Name, email address, phone number, location, and designation	To facilitate correspondence	Legitimate Interest
CSR Beneficiaries	Names, email addresses, and phone numbers	To send congratulatory messages on milestone dates. To manage relationships with key government stakeholders	Legitimate Interest
Website Visitors	Physical appearance of individuals captured on video footage	This monitoring is conducted in the public interest to ensure a secure environment	Public interest
	Name, email, telephone number, bank account details?	To identify and communicate with successful applicants/beneficiaries.	Consent
	Name, number, email, location.	To address requests contained within the forms.	Consent
	Unique ID, IP address	To generate statistics on website usage. To improve and customize site experience	Legitimate Interest

*Note: Data Elements we have identified in the table above is not an exhaustive list.*