0%
  • Home
  • Sustainability Statement
  • Governance

Business Conduct [ESRS G1]

Double materiality assessment summary for business conduct [G1.IRO-1]

SegmentAreaGeographical regionG1
Risk, opportunity, impact
Impact (I)
Risk (R)
Opportunity (O)
Positive (+)
Negative (-)
Actual (A)
Potential (P)
Value chain
Organisation (O)
Downstream (D)
Upstream (U)
Upstream & Supply,
Downstream,
Energy
Consumer & Products
Corporate Functions
Refining,
Upstream,
Energy,
Petrochemicals,
Gas,
Retail,
Corporate Functions
GloballyCorporate culture Driving revenue growth by building stakeholder trust through promoting good market practices and setting the standard for ethical conduct OO,U
EuropeWhistleblower protectionMaintaining a strong reputation through effective prevention of breaches and misconduct OO,D,U
Political engagement and lobbying activitiesInadvertent payment of donation to unauthorised entity as a result of identification error RO,D,U
Supplier relationship management, including payment practicesFailure to meet due diligence requirements I-PO,D,U
PolandCybersecurity and data processing*Stakeholder privacy and personal data security; cybersecurity of internal platforms and infrastructureI-PO,D,U
Costs of preventing cyberattacks and remediating their impactsRO,D,U
short-termmedium-termlong-term
Corporate cultureO
Whistleblower protectionO
Political engagement and lobbying activitiesO
Prevention and detection of corruption, including trainingO
Risk of cyberattacks*R
*Additional topic.

Business conduct policies and corporate culture [G1-1]

We conduct our business in accordance with the principles of ethics and anti-corruption, exercising due diligence and ensuring full compliance with the applicable laws and regulations. Each of the policies outlined below, in the course of its implementation, is consulted with our internal stakeholders, and – in the case of the Whistleblower Protection Policy – also with the trade unions.

In 2025, the following key policies governed business conduct across the ORLEN Group:

The principal document governing compliance with standards and principles within the ORLEN Group is our ORLEN Group Code of Ethics, described below. We developed this Code at ORLEN S.A., and we have been progressively implementing it across ORLEN Group companies since 2022.

ORLEN Group Values

ORLEN Group Values

ORLEN Group Code of Ethics

Our Code of Ethics sets out clear, practical and up-to-date guidelines defining standards of conduct applicable to all employees, in alignment with the Group’s core values.

The Code also articulates our position on the ethical principles and standards governing the Group’s activities, as well as their current scale and strategic direction, expectations towards our business partners, and best practices in business ethics. As at the end of 2025, the Code of Ethics was in place at 85% of ORLEN Group companies, with rollout to further companies planned for 2026.

Our Group maintains core policies and functions designed to support responsible business conduct. These include the ORLEN Group Human Rights Policy (“Human Rights Policy”), the Whistleblower Protection Policy, the ORLEN Diversity Policy, and the Ethics Officer function, all of which are described in disclosure S1. As at the end of 2025, the Human Rights Policy was a binding document in 89% of ORLEN Group companies, with further deployments planned for 2026.

Model for reporting and analysing enquiries, concerns and violations with respect to the ORLEN Group’s core values and standards.

The model also applies to external stakeholders and can be accessed via our corporate website. To ensure compliance with ethical principles and the protection of human rights, we have implemented and maintain mechanisms for reporting enquiries, concerns and violations. The reporting procedures provide multiple voluntary channels for disclosing irregularities that have led, or may lead, to violations concerning ethics, human rights, employee relations or personal rights within the ORLEN Group. Our organisation guarantees confidentiality and security for individuals who report or disclose information on violations, while also committing itself to an effective and thorough remedial process and the implementation of corrective measures.

The ORLEN Group Code of Ethics, the ORLEN S.A. Workplace Bullying, Discrimination and Harassment Prevention Rules, and the Human Rights Policy set out mechanisms for identifying, reporting, and investigating concerns related to unlawful conduct or behaviours inconsistent with our values. In addition to the Code of Ethics, we have established the role of Ethics Officer as well as an Employee Relations Committee.

Furthermore, to maintain the highest standards, we are committed to exercising appropriate due diligence with respect to human rights throughout our business activities and relationships, including in the planning and execution of new investment projects. In 2025, no reports concerning human rights violations were recorded within the ORLEN Group.

Report an enquiry, concern or violation with respect to the ORLEN Group’s core values and standards

Model for reporting and analysing enquiries, concerns and violations with respect to the ORLEN Group’s core values and standards

Training and educational initiatives within the ORLEN Group conducted as part of the established policies and procedures governing ethics, human rights, diversity, and the prevention of workplace bullying, discrimination, and all forms of harassment

We carry out these initiatives at ORLEN S.A. and other Group companies in line with our established policies and procedures addressing ethics, human rights, diversity, and the prevention of workplace bullying, discrimination, and all forms of harassment. These include employee training sessions, workshops, educational briefings, competitions and awareness-raising events, mandatory training, communication campaigns, and cooperation with various business areas to promote best practices in these fields. Collectively, these initiatives play a significant role in shaping our organisational culture and fostering an environment of trust and security among our employees, particularly those from minority groups who may be at greater risk of unequal treatment or discrimination.

In 2025, we carried out the following employee training sessions and educational initiatives:

  • mandatory e-learning on the ORLEN Group Code of Ethics, completed by 81% of ORLEN S.A. employees (with a requirement for all employees to complete the training at least once every three years);
  • mandatory training on the ORLEN Group Code of Ethics, attended by a total of 68% of ORLEN Group employees (with a requirement for all employees to complete the training at least once every three years);
  • mandatory e-learning on the Human Rights Policy, completed by 95% of ORLEN S.A. employees (with a requirement for all employees to complete the training at least once every three years);
  • training on the Human Rights Policy, attended by 71% of ORLEN Group employees (with a requirement for all employees to complete the training at least once every three years);
  • mandatory training on workplace bullying prevention – completed by 82% of ORLEN S.A. employees (with a requirement for all employees to complete the training at least once every three years);
  • additional recurring training dedicated to workplace bullying prevention for ORLEN S.A. management staff;
  • ‘Introduction to AI’ training sessions, including a module on ethics, attended by 1,262 participants.

In addition, a series of preventive sessions was launched to reduce the risk of inappropriate behaviours among ORLEN S.A. employees. The initiative will be continued in subsequent years. Throughout 2025, we also organised a range of educational events at ORLEN S.A., including the Ethics Days, Diversity Festival, and webinars aimed at increasing awareness of psychological safety, inclusive communication and neurodiversity.

The Diversity Charter and the Charter on the Rights of Children in Business

On 14 December 2023, ORLEN S.A. became a signatory to the Diversity Charter – a European Commission-supported initiative promoting equality and diversity management in the workplace. It is implemented in 26 European Union countries, with the programme in Poland coordinated by the Responsible Business Forum.

The Charter is a written commitment signed by an organisation obliging it to prohibit workplace discrimination. By adopting the Diversity Charter, we explicitly demonstrate our commitment to actively fostering diversity and engaging our entire workforce, along with our business and social partners, in these efforts. Following its adoption, in 2024 we initiated strategic planning to fulfil our commitments, foster diversity, and further enhance our organisational culture. These plans will be executed over the coming years.

On 24 January 2024, we became a signatory to the Charter on the Rights of Children in Business, a new initiative in Poland developed by the Responsible Business Forum in collaboration with businesses and social organisations. By endorsing the Charter, we have committed to respecting children’s rights throughout all aspects of our corporate activities. Among other objectives, we aim to create a supportive and inclusive workplace for parents, assist our employees in balancing their parental and professional responsibilities, and promote responsible employment practices. In connection with this commitment, ORLEN has implemented initiatives focused on children’s rights in business, primarily directed at employees in their roles as parents and caregivers.

Management of relationships with suppliers [G1-2]

In performing its tasks, the ORLEN Group’s Procurement Area operates in accordance with a comprehensive framework of internal regulations, including the Procurement Policy, Procurement Guidelines, Supplier Evaluation Guidelines and Strategic Category Management Guidelines. A key pillar of our procurement processes is to build and maintain stakeholder trust. Accordingly, suppliers are required to operate in compliance with applicable laws and the highest ethical standards.

All suppliers seeking to participate in our procurement procedures are required to review and formally accept the relevant policies and regulations. This is a mandatory criterion, verified at the initial stage of each procurement process as part of the supplier’s formal eligibility assessment. Supplier evaluation is conducted in accordance with criteria defined in the applicable Code.

In addition, our contracts with suppliers include clauses addressing a range of issues, such as environmental protection, occupational health and safety, sanctions compliance, anti-corruption and beneficial ownership disclosures.

We place great importance on stakeholder trust. Accordingly, we require our suppliers to operate in line with the values, ethical standards, and legal requirements set out in the ORLEN Group Code of Conduct for Suppliers.

We require all suppliers participating in our procurement processes to familiarise themselves with and accept the ORLEN Group Code of Conduct for Suppliers, the Human Rights Policy, and our anticorruption regulations. These represent formal criteria applied in the procurement processes. The criteria detailed in the Code address key environmental, social, and corporate governance (ESG) considerations. Our suppliers are evaluated based on these criteria.

Payment practices [G1-6]

We have established internal policies governing payment practices at ORLEN Group companies, including standard payment terms aligned with market norms relevant to each of our business segments. To ensure the timely settlement of liabilities, general policies have also been implemented to govern our accounts payable process, supported by detailed operational procedures and guidelines.

There is no standard payment term across the ORLEN Group. In 2025, standard payment terms across the ORLEN Group ranged from 7 to 90 days. This variation reflects the scale and diversity of the Group’s operations, as part of which it works with suppliers across multiple countries, sectors and industries. Payment terms are also influenced by the legal and regulatory environments of individual markets. They are determined on a case-by-case basis, taking into account the nature of the goods and services provided, as well as the specific requirements and contractual arrangements.

The information presented below on payment practices at the ORLEN Group, calculated as the weighted average of payments meeting the standard in a representative sample of four companies, covering approximately 78% of total payments across the Group.

Percentage of payments aligned with standard payment terms at representative Group companies

Number of the undertaking’s paymentsNumber of payments aligned with standard payment termsPercentage of payments aligned with standard payment terms Average time the undertaking takes to pay an invoice from the date when the contractual or statutory term of payment starts to be calculated
ORLEN Group2,428,5221,482,82861.06%30.87

There is no data regarding payment practices for the ORLEN Group for 2024.

In 2025, the ORLEN Group was involved in 36 court proceedings related to late payments.

With regard to payment practices, we do not differentiate between small and medium-sized enterprises (SMEs) and other suppliers. Information on payment terms and the settlement of liabilities is therefore presented on an aggregated basis for all suppliers.

Prevention and detection of corruption and bribery [G1-3]

We structure our anti-corruption process at the ORLEN Group as a cycle of interconnected activities comprising four stages: prevention, identification, verification or investigation, and calibration. Establishing anti-corruption awareness is a fundamental component of this framework. This awareness underpins the identification of misconduct, which occurs via two principal channels: stakeholder reports submitted through whistleblowing or other grievance mechanisms, and systemgenerated alerts from our corporate applications. Following initial assessment, identified cases are directed either to verification or to formal investigation as part of follow-up actions.

Investigative processes aim not only to confirm or exclude instances of misconduct, but also to identify patterns and methods (modus operandi) associated with corruption and fraud. These insights are subsequently integrated into our systemic controls through calibration of the corporate applications. The Anti-Corruption Policy is designed both to prevent incidents and to mitigate their potential negative impacts. Contractors and participants in our procurement processes are required to declare the absence of any conflicts of interest and affiliations with other contractors involved that could compromise the integrity of the procurement procedure. The inclusion of anti-corruption clauses in contracts facilitates ongoing monitoring of contractors, enabling potential corruption incidents to be promptly detected and addressed. The application of anti-corruption clauses is recommended across the entire ORLEN Group.

The ORLEN Group Whistleblower Protection Policy and internal reporting regulations ensure the independent investigation of reports and appropriate follow-up actions. Where reports involve the activities of our Management Board at ORLEN S.A. or the Management Board of another ORLEN Group company, follow-up actions are carried out under the supervision of the respective Supervisory Board.

The Rules of Procedure for the Supervisory Board set out the responsibilities of the Security Committee, which include receiving reports on the implementation of the ORLEN Group Anti- Corruption and Fraud Prevention Policy. Our Group companies maintain internal regulations that govern reporting to administrative, management, and supervisory bodies, and report annually to ORLEN S.A. regarding their implementation of the Anti-Corruption Policy.

The ORLEN Group Conflict of Interest Management Policy defines a list of positions subject to a conflict-of-interest assessment, which also correspond to roles with the highest corruption risk. Individuals occupying such positions are required to disclose any relationships that may give rise to conflicts of interest, enabling appropriate oversight and management by their superiors.

We provide mandatory anti-corruption training to all Group employees. Within the Control and Security Area, designated employees receive training in the handling of whistleblowing reports and the protection of whistleblowers.

Incidents of corruption or bribery [G1-4]

To address potential violations, we operate a comprehensive anti-corruption framework based on the policies outlined in disclosure G1-1. In addition, to strengthen awareness of anti-corruption and fraud prevention, our employees are required to complete mandatory, recurring training programmes. Relevant policies are also made publicly available to our external stakeholders via the ORLEN website.

During the reporting period, no convictions were recorded for violation of anti-corruption and antibribery laws.

Political influence and lobbying activities [G1-5]

Our representatives engage in consultations regarding proposed measures at both national and EU levels, either directly or through industry associations. Positions developed by ORLEN experts are publicly available under Our positions.

In line with our Compliance Policy, the Executive Director for Regulatory Affairs and Compliance oversees lobbying activities conducted by ORLEN S.A. and supervises such activities within the ORLEN Group.

Pursuant to Section 3.5.4 and 3.5.5 of the ORLEN Charitable Policy, the provision of direct support for political purposes is strictly prohibited. We do not review requests for donations from trade unions, professional self-governments, employer organisations, commercial-law companies other than those specified in Section 3.4.6 (i.e. entities established by public finance sector units), political parties, or foundations and associations established by political parties.

In 2025, no donations to political parties, politicians, or institutions of a similar nature were identified. At the Group level, a related framework – Organisational Standard for Delivery of the Charitable Policy by Companies of the ORLEN Group – is in place, under which all entities conduct their charitable activities in accordance with the ORLEN Charitable Policy, as described in disclosure S3.

ORLEN Group entities operate across the oil and gas, energy generation and energy services, chemicals and biofuels sectors. Within these areas, our Group maintains an ongoing and transparent dialogue with a range of external stakeholders, including governmental authorities, European Union institutions, and other third parties. We are an active member of industry organisations and associations engaged in public policy advocacy on climate change and other areas, aiming to shape a comprehensive policy and regulatory framework relevant to ORLEN’s operations. Key organisations include: CO2Value Europe, Hydrogen Europe, the European Fuels Manufacturers Association, the International Association of Oil and Gas Producers, the European Chemical Industry Council (CEFIC), the European Fuels Manufacturers Association, the Polish New Mobility Association, POPiHN – the Polish Oil Industry and Trade Organisation, and the Polish Chamber of Chemical Industry. Our representatives participate in these organisations as subject-matter experts, contributing to consultations and providing input on proposed regulatory solutions.

In the EU transparency register, ORLEN is registered under number 105450620110-21.

Key topics addressed through lobbying activities and ORLEN’s principal positions in this regard are presented below.

Additional entity-specific topic

Cybersecurity at ORLEN S.A. and the ORLEN Group in 2025

Our key document governing cybersecurity is the ORLEN Group ICT Security Policy, established to define the rules and requirements necessary to maintain the desired level of cybersecurity across the ORLEN Group. The document sets out the standards for cybersecurity management, introducing both general cybersecurity rules and detailed requirements and responsibilities relating to IT and OT assets.

Oversight of compliance with the Policy rests with Head of the Control and Security Office and Executive Director for IT, in line with their respective areas of responsibility. The Policy is distributed through an internal IT platform that enables users to confirm that they have read and understood the document. All ORLEN S.A. employees with access to ORLEN S.A.’s information and communications assets were required to complete an e-learning course covering the requirements and obligations assigned to them under the Policy. At the same time, all users of ORLEN S.A.’s information and communications assets were required to comply with the Policy.

Cybersecurity measures are designed to maintain the target level of cybersecurity. This is achieved not only by ensuring compliance with external legal requirements, but also through proactive threat identification, ongoing analysis, and responsive action to prevent and mitigate threats.

ORLEN SA. delivers cybersecurity services both internally and to other Group companies under a centralised operating model, based on an integrated approach combining regulatory requirements, technical solutions, processes and people. At the operational level, specialised roles and structures are in place, including CERT ORLEN S.A., responsible for incident response coordination, monitoring, and operational support for Group entities. Our cybersecurity efforts extend beyond defence and incident response, with a strong emphasis on proactive measures aimed at identifying threats and strengthening resilience before any incidents occur.

We coordinate cybersecurity activities in a manner that supports the delivery of business objectives, while ensuring resilience and continuity of our critical processes and services. This is achieved in particular through the analysis and mitigation of cybersecurity risks and the safeguarding of IT/OT system continuity. These activities include the continuous identification of threats, risks and incidents, their management, and systematic enhancement of protective, organisational and technical measures in place, supported by ongoing evaluation of security controls, readiness exercises, and organisational lessons learned.

Management Report

on the activities of the ORLEN Group and ORLEN S.A. for 2025.

Download PDF