Privacy Policy Management

Privacy Policy Management

Enel Energia's processing of your personal data


Enel Energia and the management of your privacy

If you give us theauthorisation to process your contact details, you will always be informed about new business offers from Enel Energia and its partners.
You can manage your privacy by granting and / or modifying the consent to the use of your details at any time:

  • By accessing the Customer Area if you are already an Enel Energia customer
  • If you are not registered for the Customer Area, register now.

Read more information on the Privacy Policy and consult our cookie policy.

Details

What is GDPR?

The GDPR is the EU Regulation no. 2016/679 on the protection of personal data ("General Data Protection Regulation") which will be directly applicable from 25 May 2018 and reinforces the rights of individuals with regard to their personal data and aims to unify the data protection laws of the various European countries.

Who is the DPO?

The GDPR introduces a new figure to protect the rights of the data subject in the processing of personal data: the figure of the DPO ("Data Protection Officer").

In order to offer you an easy point of contact, Enel Energia has appointed its own Data Protection Officer ("DPO"), who can be contacted at the email address: dpo.enelenergia@enel.com, for all matters relating to the processing of your personal data and the exercising of your rights.

What is meant by personal data and processing of personal data?

Personal data is any information concerning an identified or natural person

An identifiable  person (so-called "data subject"); An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location Data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person Personal data are, for example, identification, contact, consumption and payment data.

Processing of personal data means any operation, or set of operations, which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Disclosure to the data subject

The data controller is the person responsible for decisions regarding the purposes and methods of the personal data processing, including the security profile.

For Enel Energia, the data controller is Enel Energia S.p.A., with registered office at Viale Regina Margherita, 125-00198 Rome.

The data processor is the phisical or juridical person, the public administration or any other body, association or body appointed by the owner to process personal data.

Processing of personal data: mandatory consent and optional consent

The legal basis of the processing is constituted by the contract that you have concluded and its execution, as well as by the express consent to the processing of the data expressed by you during the signing of the contract itself and / or access to the online services displayed on the websites of the Data Controller.

 

You may withdraw your consent at any time and exercise your rights pursuant to articles 15 - 22 of EU Regulation 2016/679 ("GDPR"), by sending a request to the dedicated email privacy.enelenergia@enel.com.

The consent of the data subject is not necessary in the event that the processing of their personal data is connected to the provision of the services requested from Enel Energia or if necessary to fulfil an obligation required by law or to fulfil obligations arising from a contract to which the data subject is a party or also to fulfil specific requests of the latter, before the conclusion of the contract.

 

The consent of the data subject is optional for the promotion of business / promotional offers by Enel Energia and / or third party companies or for the collection of data relating to consumption preferences by Enel Energia. In this case, processing may only be performed if the consent has been granted and is free, informed, specific and unequivocal.

Who are the Data Controller and the Data Processor?

The Data Controller is the subject responsible for decisions regarding the purposes and methods of processing personal data, including the security profile. For Enel Energia, the Data Controller is Enel Energia SpA, with registered office in Via Luigi Boccherini 15 - 00198 Rome.

Data Processor:shall mean any natural or legal person, public administration, body, association or other agency that processes personal data on the controller’s behalf.

What rights can the data subject exercise?

Pursuant to articles 15-22 of the GDPR, in relation to your Personal Data, you have the right to:

  • Access and request a copy
  • Request its correction;
  • Request its deletion;
  • Obtain a processing restriction
  • Object to data processing
  • Receive data in a format that is structured, commonly used and readable by an automatic device
  • Not be subjected to a decision based solely on automated processing.

To exercise your rights and withdraw your consent, please send a message to the dedicated email: privacy.enelenergia@enel.com

Is it possible to withdraw consent to receive business communications?

You may withdraw your previously granted consent to receive business material, from Enel Energia and from third-party companies, as follows:

Public register of objections

Should the customer not wish to receive promotional communications on the phone, they may register their telephone number in the "Register of Objections". More information on www.registrodelleopposizioni.it.