New European rules for data protection

“Personal data” means any information relating to an identified or identifiable natural person. The natural person to whom the personal data refer is defined as the “data subject”. A person is considered identifiable when they can be identified, directly or indirectly, through an identifier such as a name, identification number, location data, an online identifier, or one or more elements specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

Examples of personal data include: identification data (name, surname, tax code, address), contact details (email, phone number), consumption or payment data.
Processing of personal data includes any operation or set of operations, whether automated or not, performed on personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

The Privacy Notice must always be provided to the data subject, either verbally or in writing, at the time of data collection. It informs the subject about the purposes and methods of processing, whether the provision of data is mandatory or optional and the consequences of not providing it, the data controller’s details, the data protection officer’s contact info, recipients of the data, and the subject’s rights.

On our website, in the Privacy section, you’ll find the full Privacy Notice pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR) and a separate notice on cookies.

The legal basis for processing your data is the contract you have signed and its execution, as well as any consent you have explicitly provided when signing the contract or subscribing to Enel Energia services.

Consent is not required when the data processing is necessary for the provision of services requested from Enel Energia, to fulfill contractual obligations, or to meet legal requirements.

Consent is required for promotional activities or profiling (e.g., analyzing consumption preferences). In such cases, data processing is only allowed if consent is freely, specifically, and unambiguously given.

You may withdraw your consent at any time by emailing privacy.enelenergia@enel.com or by accessing your reserved area.

The data controller is the entity that determines the purposes and means of processing personal data and is responsible for implementing appropriate technical and organizational measures to ensure data protection. At Enel Energia, the data controller is Enel Energia S.p.A., headquartered at Via Luigi Boccherini 15 – 00198 Rome.
A data processor is a person or entity processing personal data on behalf of the controller.

The GDPR enhances the rights of individuals regarding their personal data. In particular, individuals have the right to:

• Access their data and request a copy
• Request rectification
• Request erasure
• Restrict processing
• Object to processing
• Receive their data in a structured, commonly used, machine-readable format
• Not be subject to decisions based solely on automated processing
  
  

To exercise your rights under the GDPR, you may email: privacy.enelenergia@enel.com

The GDPR introduced the role of the Data Protection Officer (DPO) to safeguard the rights of data subjects. Enel Energia has appointed a DPO who can be contacted at: dpo.enelenergia@enel.com for any matters concerning your personal data or exercising your rights.

The Data Protection Authority is an independent administrative body established to ensure the protection of fundamental rights and freedoms in the processing of personal data.

It monitors compliance with data protection laws and may require controllers or processors to take corrective action.

You may lodge a complaint with the Data Protection Authority using the following methods:

• Registered mail: Garante per la protezione dei dati personali, Piazza di Monte Citorio, 121, 00186 Rome;
• Email: garante@gpdp.it or protocollo@pec.gpdp.it;
  
• Upload your documents directly online.