Privacy

As data controller Ithaca Energy (UK) Limited, registered at 13 Queen’s Road, Aberdeen AB15 4YL, and it’s affiliates (“Ithaca Energy”) is committed to protecting the privacy and security of your personal data.

This notice applies to information we collect about website users, recruitment candidates and others who choose to contact us via our website. It describes how we use your personal information, the rights you have regarding the use of such data, the measures taken to protect the security of that data, and who you can contact regarding data protection practices at Ithaca Energy.

In most instances, you can visit our website without providing any personal data to us. However, certain pages within our site may require you to share your personal data with us to provide you with a service e.g. consideration for employment. Any data shared with us, except Internet Protocol (IP) address is done so on a voluntary basis and may include;

• Contact details, such as your name, title, email address, telephone and fax numbers, and physical address
• Information about your company/organisation and job title
• Curriculum vitae including education and work history
• Internet Protocol (IP) address

In broad terms, we collect your personal data for one of following reasons:

• To serve our legitimate interests (for example, ensure the security of our website, improve web services and respond to your enquiry).
• To fulfill a legal or regulatory obligation in any relevant jurisdiction (for example, under our obligations in relation to the immigration laws and regulations of the United Kingdom)

We will use personal data only for the purposes defined below.

Website management.

We use this information to assess system performance, improve web services and website management as well as tracking the number of visitors to our site.

Employment Applications.

In connection with a job application or inquiry, you may provide us with data about yourself, including your curriculum vitae, educational background and evidence of your right to work in the UK. We may use this information throughout Ithaca Energy and its joint ventures for the purpose of employment consideration. We will keep your application on file for future consideration for a period of 12 months from the date of submission unless you advise us not to do so.

Media Enquiries.

Where you have submitted a media enquiry, we will use your personal data to respond to your request. Following our response to you, we may retain your contact details to allow us to contact you again in the future. If you do not wish us to retain your data, please inform us when submitting your enquiry.

Investor Relations Enquiry.

Where you have submitted an investor relations enquiry, we will use your personal data to respond to your request. Following our response to you, we may retain your contact details to allow us to contact you again in the future. If you do not wish us to retain your data, please inform us when submitting your enquiry or unsubscribe at any time via our website.

Web Alerts.

At your request, we will use personal data to inform you when our website had been updated with the latest press releases, financial or general reports. Each email alert sent to you will include an unsubscribe link allowing you to stop delivery of that type of communication. If you elect to unsubscribe, you will be removed from the relevant list immediately. Your request to remove you from the mailing list will be retained for a period of 90 days thereafter.

We may transfer your personal information collected via our website outside of the United Kingdom to comply with any legal or regulatory obligations incumbent on the Delek Group Ltd or any of its subsidiaries. If we transfer your personal information to recipients in other countries, we will take appropriate measures to protect that information.

We collect certain data about all visitors to our website, including your browser type, capabilities and language, your operating system, the date and time you access the site, and the website from which you linked to our site. We use this information to assess system performance, improve web services and website management as well as tracking the number of visitors to our site. Please refer to our Cookie policy for further information.

Except as described below, personal information that you provide to Ithaca Energy via our website will not be shared outside of Ithaca Energy and its joint ventures.

Disclosure to service providers. Ithaca Energy contracts with other companies to provide services on our behalf, such as hosting our website, investor relations, and analysing our websites. We provide these companies with only those elements of personal data they need to deliver those services. These companies and their employees are prohibited from using those personal data for any other purposes.

Disclosures in connection with acquisitions or divestitures. Ithaca Energy may disclose any personal information held about you to third parties if we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
Disclosure for other reasons. Ithaca Energy may disclose personal data if we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation in any relevant jurisdiction.

Ithaca Energy will only retain your personal information for as long as necessary to fulfil the purposes it was collected for, including for the purposes of satisfying any relevant legal, accounting, or reporting requirements.

The transmission of information via the internet is not completely secure however, we have put in place appropriate security measures to try to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Under certain circumstances, the following rights may apply in relation to the processing of your personal data.

• Request access to your personal data.
• Request correction of the personal information that we hold about you.
• Request erasure of your personal information.
• Object to processing of your personal information.
• Request the restriction of processing of your personal information.
• Request the transfer of your personal information to another party.
• Withdraw consent to the processing of your personal information.

If you would like to exercise your privacy rights, please contact the Data Protection Officer, at dataprivacy@ithacaenergy.com.
To help protect your privacy, we will take reasonable steps to verify your identity before granting access to your information. You can help us to keep data about you accurate by notifying us of any change to your email address, phone number or mailing address.
You will not normally have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive.

If you have a concern about the way we have handled your personal data please contact the Data Protection Officer, at dataprivacy@ithacaenergy.com. If we were unable to resolve the issue to your satisfaction you may wish to contact the Information Commissioner’s Office via https://ico.org.uk.

We keep our privacy notice under regular review. When changes occur, we will revise the ‘date of last review’ at the end of the notice.
Date of last review: May 2020