© 2025 JSC «Market operator». All rights reserved
The Joint Stock Company “Market Operator” (hereinafter – the Company), as a personal data controller, acting in accordance with the Constitution of Ukraine, the Law of Ukraine "On Personal Data Protection", and the General Data Protection Regulation (GDPR) of the European Union, respects your right to privacy and its confidentiality. Therefore, we are committed to protecting your personal data, namely: any information that directly or indirectly enables identification of you as an individual.
You, as a party to legal relations with the Company, have the right to know how and exactly which of your personal data we process. Our Privacy Policy covers the general regulation of the processing of personal data of third parties, in particular the collection, use, transfer, and storage of your personal data.
We receive your personal data through:
Personal Data Controller – the Company that determines the purpose of processing personal data, defines the scope of such data, and the procedures for their processing.
Consent of the Data Subject – a voluntary declaration of will by an individual (provided that they are informed) to authorize the processing of their personal data for the specified purpose, expressed in writing or in a form that allows for a conclusion about the provision of consent.
Processing of Personal Data – any action or a set of actions, such as collection, registration, accumulation, storage, adaptation, modification, renewal, use and dissemination (distribution, sale, transfer), depersonalization, destruction, deletion of personal data, including by means of information (automated) systems.
Personal Data – information or a set of information about an individual who is identified or can be specifically identified.
Personal Data Processor - a natural or legal person who is granted the right to process such data on behalf of the data controller by the data controller or by law.
Data Subject – an individual whose personal data is being processed by the Company
Public Authority Subject – a government body (including one without legal entity status), local government body, its official or official representative, or any other subject exercising public-authority management functions under the law, including performing delegated powers or providing administrative services.
Third Parties – any person except for the data subject, the data controller or processor, and the authorized state body for data protection, to whom the personal data is transferred by the controller or processor in accordance with the law.
Digital Services – a broad range of the Company’s online services such as: electronic commerce, cloud services, digital payments, and others, including the electronic transmission of information, including data and content, accessible or transferable via websites, software, or devices.
Cookies – small text files stored on the user’s computer that contain information about their interaction with the website. Cookies allow websites to remember certain information about the user, simplifying further interactions with the site.
To cooperate with the Company, you as a data subject may provide personal data such as: full name, actual, declared, or registered place of residence, postal address, place of work, passport details, and the taxpayer registration number (TRN) either by concluding a contract, using the Company’s digital services, interacting with the Company’s social media pages, or using telephone and postal communications (including email).Below is an explanation of the ways you may provide personal data and how we use it.
Contractual Work
Contracts may be concluded with you in accordance with the current legislation of Ukraine, for example, under the Rules of the Day-Ahead Market (hereinafter – DAM) and the Intraday Market (hereinafter – IDM), as well as the Market Rules. For this purpose, we request such information as: full name, company name, position, phone number, email address, etc.
Use of the Company’s Software Platforms XMtrade®/PXS and ETS/UA
As a participant in the electricity market, you may be granted access to the XMtrade®/PXS platforms, where electronic contracts are concluded and trading on the DAM and IDM is organized, conducted, and results determined. Access may also be granted to the ETS/UA platforms, where signing of acts and entry by DAM/IDM participants of escrow account information occurs.
To fully utilize these software platforms, we request such information as full name, company name, phone number, and email address to create your user account and enable other actions that ensure the proper quality of your interaction with XMtrade®/PXS and ETS/UA.
You may log into the XMtrade®/PXS and ETS/UA platforms via links on our website or directly via the software addresses. For this, we request that you authorize access to our services.
Other Digital Services of the Company
As a participant in the electricity market, you may be granted access to any other digital services of the Company provided under the current legislation of Ukraine and in accordance with concluded contracts.
To fully use the Company’s digital services, we request such information, including but not limited to: your full name, company name, phone number, and email address, to create your account and perform other actions that ensure proper quality of your interaction with such digital services of the Company.
Company Websites
If you use other websites of the Company, such as the Retail Energy Platform – REP, the Support Service at https://support.oree.com.ua/ or others, we may use personal data such as full name, place of work, postal address, email address, etc. This data is collected to properly fulfill our obligations to you concerning the exercise of your rights as a participant in the electricity market and for communication purposes.
Information Collected Automatically via Websites
We collect certain information automatically through the creation of web server logs. The information we collect in this manner includes the IP address you use to connect to the websites, information about actions taken on our websites, the dates and times of visits, and the pages you accessed. This data collection is aimed at ensuring the security of our information systems.
Contact Directories
Your contact details, such as full name, email address, phone number, postal address, job title, and place of work, may be recorded in our contact directories to facilitate communication with you and fulfill our obligations.
Surveys
We may conduct surveys to assess the quality of services provided or any other stakeholder opinion research regarding the functioning of the electricity market, using our contact directories. If you choose to participate in a survey, it is not mandatory to provide your name, email address, or phone number—your comments alone will suffice. Consent to process personal data for this purpose is granted by submitting the survey results to the Company.
Public Events
As a journalist, company employee, representative of a business organization, or public authority, you may be invited to and participate in events organized by us. In the preparation or conduct of such public events, we may ask you to provide information such as your full name, phone number, email address, the name and address of your company, and postal address.
During these events, we may also photograph or interview you, thus obtaining video and/or voice recordings. These materials allow us to illustrate informational content that the Company publicly disseminates online, on its own websites, social media pages, and messengers.
We use this information to promote the Company and its activities among stakeholders. Consent to process personal data for this purpose is granted during event registration.
Assistance
If you need assistance, please contact us using the phone numbers listed on our websites in the “Contacts” section. We are ready to provide you with public information about our activities, opportunities for cooperation, and assist in resolving any issues related to the operation of our web services. When contacting us, you may be asked to provide personal information such as your full name, email address, postal address, and phone number.
This information is necessary to allow us to respond to your request in the best possible way.
Call Recording and Video Surveillance
You may contact the structural units of the Company responsible for organizing electricity trading to express comments or suggestions regarding the software or to convey any other information that may improve our work. Please note that such telephone conversations may be recorded for the purpose of ensuring our security, as well as improving our operations and the quality of services provided to you.
When accessing our office as a visitor, you may also be captured by a camera installed in publicly accessible areas, such as at the entrance. This video surveillance system is intended to ensure the safety of our workplaces and personnel, as well as your safety as a visitor.
Employment
You may send us your resume for the vacancies listed on the website. In the resume, we ask you to indicate personal data such as your full name, gender, declared or registered place of residence, postal address, email address, citizenship information, contact phone number, and detailed information about your current and previous workplaces and professions, as well as your qualifications—education, and level of foreign language proficiency. We may also collect information about you from publicly available sources on the Internet and your social media accounts.
The personal data collected is processed based on legal grounds and the legitimate interests of the Company and is used solely for the purposes of recruitment. Once an employment relationship with the Company is established, your personal data is stored and protected in accordance with the requirements of the current legislation of Ukraine and our internal documents. In case of rejection of a candidate, personal data is retained by the Company for 12 months and then deleted.
We do not disclose your personal information in any way, except in cases described in this Policy. In particular, we do not transfer your personal data to third parties without the existence of legal grounds as established by applicable legislation. We provide information to public authorities and judicial bodies in accordance with the requirements of Ukrainian legislation, as necessary for them to perform legally established functions and powers, following prescribed procedures and based on specific, justified requests.
Information is also disclosed to business entities or their authorized representatives assigned specific functions or obligations under the DAM/IDM Rules and Market Rules (e.g., transmission system operator, authorized bank, auditors, etc.), according to the procedures and scopes established by such Rules and other legal acts. Public authorities are not authorized by us to use or disclose information, except when necessary to provide services on our behalf or to comply with legal requirements.
TRANSFER OF PERSONAL DATA TO OTHER COUNTRIES
We do not transfer your personal data to third parties whose location differs from the country in which you provided such data. The only exception is access by our service provider that technically supports the operation of the Company’s software. In such cases, we comply with applicable legal requirements to ensure adequate protection of such access.
We have implemented an information security management system and modern cybersecurity tools that ensure a high level of data protection, confidentiality, integrity, and availability of all information assets, and the reliability of our information infrastructure and systems, including the XMtrade®/PXS and ETS/UA platforms.
Access to the Company’s information resources, including those containing personal data, is regulated by internal documents and granted only to the extent necessary for the performance of official duties. Secure authorization and authentication methods are applied, including two-factor authentication.
Our office is under security. Access to the workplace is only possible through checkpoint control.
The processing period for your personal data depends on the purposes for which such processing is carried out and is established by the applicable legislation of Ukraine and the internal documents of the Company.
Regarding the services we provide, your data will be processed during the period those services are rendered, and sometimes even after their termination—but only if allowed or required by applicable law. In such cases, the data will be processed only for the duration necessary to achieve such purposes.
You have the right to access your personal data held by the Company, as well as the right to rectify, delete, erase, or object to the processing of your personal data. If processing is based on your consent, you have the right to withdraw it at any time.
You have the right to access your personal data held by the Company, as well as the right to rectify, delete, erase, or object to the processing of your personal data. If processing is based on your consent, you have the right to withdraw it at any time. If you wish to obtain additional information regarding the processing of your personal data or exercise any of the rights listed above, you may contact us via email at privacy@oree.com.ua or submit a request using the support service at https://support.oree.com.ua.
Supervision over compliance with personal data protection laws, within the scope of authority provided by Ukrainian legislation, is exercised by the Ukrainian Parliament Commissioner for Human Rights. If you believe that your request has not been satisfactorily fulfilled or that your data protection rights are being violated by the Company’s data processing, we remind you of your right to contact the Commissioner.
We do not use cookies on this website for marketing purposes but solely to improve and update our website, as well as to measure activity on the site—such as which sections and information are most in demand.
Our website uses:
Essential Cookies. These cookies are necessary for you to securely navigate the website and use all its features. Typically, these cookies remain in your browser only during your browsing session and are deleted once you close the browser. This category of cookies should not be disabled. If you use your browser settings to block these essential cookies, we cannot guarantee your security or predict how our website will perform during your visit.
Performance Cookies. These cookies collect general information on how our website is used, generating usage reports that help us improve user interaction and the quality of our site and services. This analysis is performed by Google Analytics, and these are considered third-party cookies. They collect aggregated information about the user's location and IP address. These cookies are often stored permanently in your browser unless you choose to delete them.
Functional Cookies. These cookies allow us to provide you with a personalized browsing experience. They enable websites to remember user choices and preferences. This means the website can automatically set user preferences, such as interface language. The information collected by functional cookies can be anonymized and will not be linked to information on how visitors use other websites.
The Company’s Privacy Policy is publicly available and may be updated from time to time. We will inform you about any changes to our Privacy Policy by updating the revision date in the legal upper right corner of this webpage.
If you have any questions or comments regarding this Privacy Policy, or if you would like us to update any information about you that we process, please contact us by email at: privacy@oree.com.ua or by phone at: +38(044) 205-01-61.