Privacy Policy | Enel Energia

Consumers

Quick links

Privacy

The "enel.it" website integrates the world of commercial services, offered by the companies Enel Energia SpA, Enel X Way Italia S.r.l., Enel X S.r.l. and Enel X Italia S.r.l. with the corporate contents promoted by Enel Italia SpA, which talk about the Enel Group's activities in Italy, such as the stories of the territory, innovation, sustainability and circular economy projects.

The aforementioned companies, in their capacity as autonomous data controllers, process personal data in full compliance with the provisions in force - in particular, Regulation (EU) 2016/679 (“GDPR”) and the Privacy Code (Legislative Decree. 196/2003 as amended by Legislative Decree 101/2018) and according to the purposes and in the manner set out in the respective Privacy Notices below.

Specifically, for processing purposes related to commercial and marketing activities, please refer to the Policy Statement of:

Enel Energia Spa, sells energy and gas to supply the Free Market and also Fibre connectivity services
Enel X Way Italia S.r.l. and Enel X S.r.l. offer e-mobility products and services, both for domestic and public use
Enel X Italia S.r.l., which offers a wide range of energy and sustainability products and services for business and public administration

For processing purposes related to corporate content, please see the Enel Italia Spa Policy.

Enel Energia Spa

Enel Italia Spa

Enel X Way Italia S.r.l.

Enel X Italia S.r.l.

Enel Energia privacy statement pursuant to Article 13 of EU Regulation 2016/679 (“GDPR”)

1.1. Enel Energia S.p.A., with registered office in Via Luigi Boccherini 15, 00198, Rome, Group VAT number 15844561009 (hereinafter ‘Enel Energia’ or ‘Data Controller’), as Data Controller, will process your personal data provided by you or otherwise collected through the websites (each of them referred to below as the ‘Website’) and the Enel Energia App (hereinafter the ‘App’) and personal data that may be subject to the contractual relationship with Enel Energia S.p.A. in accordance with the provisions of applicable legislation on the protection of personal data and this Policy.

2.1 Enel Energia has appointed a Data Protection Officer (DPO) who can be contacted at the following email address: dpo.enelenergia@enel.com.

3.1. Enel Enel Energia will process the personal data provided by the Customer or otherwise legitimately collected (‘Personal Data’) for the purposes for which they were provided, as applicable. In particular, the following Personal Data may be processed:

3.1.1. Identification Data: data that allows direct identification, such as personal details (e.g. name, surname, tax code, VAT number, address, etc.), provided to the Data Controller and processed for the purposes of signing and managing the contract.

3.1.2. Consumption data: data relating to the supply and recorded consumption levels, collected and processed during the term of the contract.

3.1.3. Economic and Financial Data: data necessary for payments (e.g. IBAN) or proving the execution of payments (payment identification details) and any other data relating to the Customer's solvency and punctuality.

3.1.4. Contact data: contact information such as telephone numbers, landline and mobile, email address, etc., provided to the Data Controller at the time of subscription or during the term of the contract or acquired by the Data Controller itself, which allows the Customer to be contacted for the purposes of managing the contractual relationship and/or providing services tailored to their needs.

3.1.5. Data from the Enel Energia reserved area/APP (hereinafter referred to as the APP): access to the reserved area of the Enel Energia website enel.it (hereinafter referred to as the Website) and to the APP is only permitted to customers registered via the Enel Single Profile Account. When creating an Enel Single Profile Account, certain Personal Data is required, such as: name, surname, email address, mobile phone number and tax code and/or VAT number - known as ‘registration data’ - which is necessary to successfully complete the registration process, access your reserved area and use the services offered by the individual companies of the Enel Group participating in the Single Profile Account. Registration data, like any data already available to the Data Controller because it was collected as part of other existing contractual relationships with the Data Controller, will not be transferred to other Enel Group companies under any circumstances. Only registration data is also processed by Enel Group companies that provide the authentication service, which have been specifically appointed as data processors for this purpose (Enel Italia S.p.A. and Enel Global Services S.r.l.). For details on the Single Profile Account, see the dedicated paragraph below.

3.1.6. Browsing data: the IT and telematic systems and software procedures used to operate and use the Website and/or App, made available by Enel Energia, acquire certain data during their operation (e.g. the date and time of access, the pages visited on the Website, the name of the Internet Service Provider and the Internet Protocol (IP) address through which the Internet is accessed, the Internet address from which the Website is accessed, etc.), the transmission of which is implicit in the use of web communication protocols or is useful for the better management and optimisation of the system. More information on the procedures used to collect information provided while browsing the Website through cookies and/or other monitoring technologies is available in the cookie policy on the Website itself.

3.1.7. Data acquired by Customer Service: data provided during interactions with Enel Energia's Customer Service. In the event of telephone contact with Customer Service, calls are recorded, subject to an information message, both for quality purposes and in cases where recording is required by law.

3.1.8. Data relating to electronic communications

3.1.8 a) Electronic traffic data: any data processed for the purpose of transmitting a communication over an electronic communications network and for the purpose of billing;

3.1.8 b) Location data: any data processed in an electronic communications network indicating the geographical location of the terminal equipment of a user of a publicly available electronic communications service

3.2. For the purposes of this policy, the processing of Personal Data means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, restriction, erasure or destruction.

3.3. Such Personal Data will be processed manually and/or with the aid of computerised or telematic means.

3.4 The Data Controller has adopted technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR, aimed at preventing and combating the loss of Personal Data, as well as unlawful or incorrect use and unauthorised access.

4.1. Enel Energia will process its Personal Data for the achievement of precise purposes, of which you will be informed from time to time, and only when there is a specific legal basis provided by the applicable law on data protection. Specifically, Enel Energia will process its Personal Data only when one or more of the following legal bases apply:

You have given your free, specific, informed, unequivocal and express consent to the processing
The processing is necessary for the performance of a contract to which you are a party or for the performance of pre-contractual measures taken at your request
In the presence of a legitimate interest of Enel Energia, provided that the interests or fundamental rights and freedoms of the data subject which require the protection of personal data do not prevail
By virtue of a legal obligation.

4.2. In the table lists the purposes for which your Personal Data is processed by Enel Energia and the legal basis of such processing.

4.3. The provision of your Personal Data is necessary in all cases where the processing takes place on the basis of a legal obligation or to execute a contract or to fulfill pre-contractual obligations. In the latter cases, your refusal could make it impossible for Enel Energia to process your requests and the inability to provide you with the requested services.

4.4. The provision of your Personal Data is instead voluntary for the pursuit of further purposes indicated in the table and failure to consent in relation to them will in any case have no consequence on the conclusion and management of the contract. Consent for these purposes is always optional and, where given, may be revoked at any time, in the manner described in the "Rights of the interested party" section of this policy.

5.1. The restricted area can only be accessed through the Enel Single Profile. Even users already registered for the digital services of the Enel Group companies adhering to the Unique Profile service, in order to continue to access the reserved area, must accept the Terms and Conditions for creating the Unique Profile.

It is not possible to access the service with the previous access credentials generated before 9 September 2019, the date on which the Unique Profile was introduced.

5.2. First Registration : Personal registration data are collected when the Unique Profile is created at one of the web portals or App. of the Unique Profile allows you to access, using a single username and password, the reserved area of the web portals and the mobile App of the Enel Group companies enabled.

Users who were already registered to the digital services of the Enel Group companies adhering to the Unique Profile service before creating the Unique Profile itself, in order to continue to access the reserved area, must accept the Terms and Conditions for creating the Profile Unique.

We inform you that it is not possible to access the service with access credentials generated before 9 September 2019, the date on which the Unique Profile was introduced.

5.3. Access after Registration : You can access the reserved area only through the Enel Unique Profile.

For authentication purposes, the Unique Profile system receives the encrypted credentials entered by the user for their verification and validation. Your Personal Data will therefore be processed for the sole purpose of verifying these credentials and allowing you to access them easily and without further charges from any country in which an authorized Enel Group company is present. It is understood that such data, for the purpose of accessing the reserved area, are in no case made available to other Enel Group companies enabled for the Single Profile.

5.4. Access to the reserved area is allowed in the following ways:

a) through the web portal or mobile app of the Enel Group companies enabled for the Single Profile.

b) through the use of credentials chosen for the identity created on a social network (so-called "social login"), in particular the identities created on AppleId, Facebook and Google+. Following acceptance of the terms and conditions of the Unique Profile service, a Unique Profile will still be associated with the user.

In the event that you decide to access the reserved area using the credentials of a social network , Enel Energia will have to acquire some of your Personal Data (Name, Surname, Email) in compliance to the authorizations issued by you to the social network of reference. You are therefore required to check the settings provided by the social network of reference, as well as to carefully read the related privacy policies, you may in any case, at any time, update or modify any information acquired. through the social login. Enel Energia will keep the identification code associated with its account at the service of the social network of reference when it is used for the login to Enel Energia or to share content hosted by the Site; storage will take place for as long as necessary to provide the requested services. In any case, Enel Energia will not be aware of the credentials you use on the social network.

5.5 It is always possible to delete the Profilo Unico Account by choosing one of the following options:

in the Customer Area, in the “Account - Single Profile” section, selecting “Manage Single Profile” and clicking on “Delete Single Profile”;
in the Enel Energia App, in the "Profile" section, selecting "your account" and clicking on "Delete now".

6.1. For anything not included in the previous article 6.1, through the appropriate forms made available on the Site and in the reserved area of the Site, you can freely decide whether to consent to the use of your Personal, personal and contact data, also for searches of market, direct sales, including telephone, for the placement of products or services, for commercial communications or marketing activities, relating to the products and/or services offered by Enel Energia or by other companies of the Enel Group from time to time specifically identified in the forms of data collection. Subject to your free and specific consent, for the purposes indicated above, your Personal Data may be processed by the Enel Group Companies identified, directly, as independent data controllers and/or by Enel Energia, as Data Processor, on their behalf.

6.2. The prior acquisition of your consent for the marketing purposes described above is not required when contact is made through telephone numbers (landline and / or mobile) and paper mail addresses belonging to subjects present in public telephone directories, in relation to which is in fact applicable the discipline on the subject of the Public Register of Oppositions which allows the processing of such contact data in respect of those who have not exercised the right of opposition.
It is possible to register your telephone number, both landline and mobile, in this register, by filling out a special electronic form on the website www.registrodelleopposizioni.it, or by calling 800 957 766 for fixed users and 06 42986411 for mobile phones, or by sending a special digital form by e-mail to iscrizione@registrodelleopposizioni.it.

6.3. The acquisition of your consent for "profiling" purposes allows Enel Energia to process your data for profiling activities based on your consumption preferences and on the data and information acquired by the Data Controller through the purchase of its products or services also in order to receive offers specifically suited to your needs.
For the study of better services and products corresponding to its needs, Enel Energia will be able to make use of partnerships with selected companies that integrate, on a statistical basis, census-type information and which are related to: personal preferences and interests, consumption, economic and family situation, location or movement of the natural person. In no case will your personal data be shared with third parties for profiling purposes.

6.4. Your personal and contact data may also be processed by Enel Energia to carry out, on the basis of the legitimate interest of the Data Controller and having first checked in relation to each individual initiative that the interests, rights or fundamental freedoms of the interested party do not prevail through a specific balancing test (Legitimate Interest Assessment), promotion of services and products offered by the Owner.

6.5. The processing of Personal Data for marketing purposes may be carried out using "traditional" methods (by way of example: paper mail and/or calls from an operator), or through "automated" contact systems (by way of example, SMS and/or MMS , telephone calls without operator intervention, e-mails, faxes, interactive applications).

6.6. The consent you have given for marketing purposes will be deemed to have been given for both of the methods indicated, however, without prejudice to your right to object, even partially, in relation to the different communication channels with which the marketing purposes are carried out, in the manner indicated. in paragraph 10 of this policy.

6.7. Consent for marketing and profiling purposes is optional and does not prevent the possibility of using the products or services offered by Enel Energia: any consent given can be revoked at any time by sending a written communication to the e-mail address indicated, in the manner described in the "Rights of the interested party" section of this policy.

7.1. For the pursuit of the purposes referred to in paragraph 4, Enel Energia may need to communicate, in Italy and abroad, including countries outside the European Union, your Personal Data to third parties, to implement the Contract, in fulfillment of legal obligations or for the performance of activities instrumental to the provision of the requested services.

Your Personal Data may be made accessible, for the purposes mentioned above:

a) to employees and collaborators of Enel Energia, specifically appointed as Authorized Persons for processing;

b) to the companies of the Enel Group present in the territory of the European Union as independent data controllers or data processors as well as to their employees and collaborators specifically appointed as Authorized Persons for processing;

c) to third-party companies or other subjects who carry out some outsourcing activities on behalf of Enel Energia, in their capacity as data processors, as well as their employees and collaborators specifically appointed as Authorized Persons for processing. These subjects will process your Personal Data, for example, in the context of:

billing and credit protection services;
customer communication management activities;
customer care services;
market research, direct sales, including telephone, for the placement of products or services, for commercial communications or marketing and / or profiling activities by Enel Energia (if you have freely consented);
wholesale services or other services connected to the electronic communications sector, other services such as those carried out by banking institutions, credit institutions, professional firms and consultancy and assistance companies, including legal ones;
Other services such as those provided by banks, credit institutions, professional firms, and consulting and assistance companies, including legal support.

d) entities, public and private authorities and supervisory and control bodies, when this is necessary for the granting of grants, contributions, subsidies and facilitations of any kind, connected to the supply of products and / or provision of services by Enel Energy, or when required by specific legislative, regulatory and authorization provisions;

e) external companies, including foreign companies, operating in the insurance sector and in the granting of loans, including deferred payments, when permitted by current legislation, for the purposes of preventing and controlling the risk of insolvency, fraud control and protection of credit, as well as subjects operating in the field of out-of-court and judicial credit recovery (Companies and / or Law Firms), Banking Institutions or Factoring Companies, in case of credit assignment;

f) to the Joint Data Controllers, where present, which jointly determine the purposes and means of the processing with Enel Energia.

The subjects belonging to the above categories will process the data as independent Data Controllers or as Data Processors or Authorized Persons, specifically designated by Enel Energia.

Enel Energia will give adequate instructions to the Managers and Authorized Persons for processing, possibly designated, with the aim of adopting adequate security measures, in order to guarantee the confidentiality, security and integrity of the data. .

8.1. Your Personal Data will be processed within the European Union and stored on servers located within the European Union. The same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, recognized by a specific adequacy decision of the European Commission.

8.2 Any transfers of Personal Data to non-EU countries, in the absence of an adequacy decision by the European Commission, will be possible only if adequate guarantees of a contractual or contractual nature are provided by the Controllers and Managers involved, including binding corporate rules ("Binding Corporate Rules ") and standard contractual clauses of data protection. The transfer of your Personal Data to third countries outside the European Union, in the absence of an adequacy decision or other adequate measures as described above, will be carried out only if you have explicitly consented to it or in the cases provided for by the GDPR and will be treated in your interest. In these cases, we inform you that, although the Enel Group adopts operating instructions common to all the countries in which it operates, the transfer of your Personal Data could be exposed to risks associated with the peculiarities of local legislation on the processing of Personal Data.

9.1. The Personal Data processed for the aforementioned purposes will be kept in compliance with the principles of proportionality and necessity, and in any case until the purposes of the processing have been pursued and in compliance with any legal obligations envisaged.

9.2. If there is a contractual relationship with the Data Controller, your Personal Data will be stored and processed for the entire duration of the same and in any case for a period of 10 years from the termination of the contractual relationship, after which they will be deleted, without prejudice to further conservation. of the same where necessary to fulfill specific legal obligations, to provisions of the Authority, for the collection of residual credits and for the management of disputes, complaints and judicial actions.

9.3. Data relating to electronic traffic will be processed:
9.3.1. for a period not exceeding six months for invoicing purposes, without prejudice to the further specific conservation necessary as a result of a dispute, including in court;
9.3.2. for a period of twelve months from the date of communication for the purposes of investigating and suppressing crimes;
9.3.3. for a period of seventy-two months for the purposes of ascertaining and repressing the crimes referred to in articles 51, paragraph 3-quater, and 407, paragraph 2, letter a), of the criminal procedure code.

9.4. Your free and specific consent is required to process your Personal, personal and contact data, for market research, direct sales, including telephone, for the placement of products or services, for commercial communications or marketing activities, relating to products and / or services offered by Enel Energia or by other Enel Group companies from time to time specifically identified in the data collection forms. If you consent to it, your data will be processed until the consent given is revoked.

10.1 Pursuant to art. 15 - 22 of the GDPR, in relation to the Personal Data processed, you have the right, where applicable, to:

a) Access and request a copy;
b) Request rectification;
c) Request cancellation;
d) Obtain the limitation of processing;
e) oppose the treatment;
f) Receive their data in a structured format, commonly used and readable by an automatic device and to transmit such data without hindrance to another data controller; where technically feasible.

10.2 You also have the right not to be subjected to a decision based solely on automated processing unless the decision is necessary: a) for the conclusion or execution of a contract with the Data Controller; b) is authorized by law or c) is based on explicit consent. In cases a) and c) the interested party has the right to express their opinion, contest the decision and obtain human intervention from the Data Controller.

10.3 We inform you that you still have the right to object at any time to the processing of your Personal Data that may be carried out on the basis of Enel Energia's legitimate interest. In this case, the Data Controller will refrain from further processing his Personal Data, unless he demonstrates the existence of compelling legitimate reasons to proceed with the processing, or to ascertain, exercise or defend a right in court.

10.4. We also inform you that you still have the right to object at any time to the processing of your Personal Data for direct marketing purposes, including profiling, to the extent that it is connected to such direct marketing. The right to object to such processing carried out through automated means of contact also extends to the processing of Personal Data through traditional means of contact, unless you wish to object only in part.

10.5. To exercise his rights, the Customer may send a communication to the dedicated e-mail address: privacy.enelenergia@enel.com. To revoke your consent(s), you can contact Enel Energia at any time at the Enel Energia Customer Service according to the alternatives proposed in the Support section (“Contact us”) on the enel.it website and via live chat or access the private area of the enel.it website, by changing the previous setting, or send a communication to the dedicated e-mail address: privacy.enelenergia@enel.com.

10.6. For more information relating to your Personal Data, you can contact the Personal Data Protection Officer, who can be reached at the following dedicated e-mail address: dpo.enelenergia@enel.com.

10.7. We remind you that it is your right to lodge a complaint with the Guarantor for the Protection of Personal Data, by:

a) registered letter with return receipt addressed to the Guarantor for the protection of personal data, Piazza Venezia, 11, 00187 Rome;
b) e-mail to the address: protocollo@gpdp.it, protocollo@pec.gpdp.it;
c) fax to the number: 06/69677.3785.

11. See also the Cookie policy by Enel Energia.

Information updated in November 2023

Enel Italia privacy statement pursuant to Article 13 of EU Regulation 2016/679 (“GDPR”)

1.1. The Data Controller, Enel Italia S.p.A., which has its legal headquarters at Viale Regina Margherita no. 125, 00198, Rome, Gruppo IVA Enel VAT 15844561009, TAX CODE 06377691008, (hereafter referred to as “Enel” or the “Controller”) will process the personal data you provided through the www.enel.it website (hereafter the “Website”) in compliance with applicable current privacy and personal data protection legislation, and this privacy policy.

1.2. When you subscribe to the various services or to gain access to the aforementioned, you will be given the names of any further Data Controllers or Data Processors.

The Data Controller has appointed a Data Protection Officer (DPO) who can be contacted at the following email address dpoenelitalia@enel.com.

1.1. Enel will process the personal information you provide us or which has been legitimately collected by the Controller (“Personal Data”). The following Personal Data in particular will be processed:

Contact information: name, surname, email address, telephone number and content of the message sent by you and other Personal Data that you may have provided during the communication. We will process this Personal Data in the case in which you make enquiries, request information or send us communications of any type.
You send us this Personal Data at the moment in which you contact us. The processing of this Personal Data is necessary for us to provide a response to the communications received from you or to the requests that you have made. The provision of any further Personal Data by you is completely voluntary.
Navigation data: the IT and electronic communications systems and software procedures put in place to allow the Website to function, will, in the course of their normal work, collect certain data (e.g. access date and time, pages visited, name of the Internet Service Provider and Internet Protocol (IP) address you use to access the internet, the internet address from which you connect to our Website, etc.), the transmission of which is implicit in the use of web communications protocols or is pertinent to effective management or optimisation of the data or email sending system.

1.2. In the context of this privacy policy, Personal Data processing refers to any operation or group of operations carried out using automated processes and applied to Personal Data, such as collection, recording, organisation, structuring, conservation, adaptation or modification, extraction, consultation, use, communication through transmission, dissemination or any other available means, comparison or interconnection, restriction, erasure or destruction.

1.3. Please be informed that this Personal Data will be processed manually and/or using IT or electronic support.

1.1. Enel will process your Personal Data for very specific purposes and only if there is a specific legal basis provided for under applicable personal data protection and privacy legislation. Specifically, Enel will process your Personal Data only when one or more of the following legal requirements has been met:

you have freely given your specific, informed, unambiguous and affirmative consent to the processing of said data;
the processing is necessary to the performance of a contract to which you are a party or to take pre-contractual measures at your request;
for the purposes of the pursuit of Enel’s legitimate interests;
Enel has a legal obligation to process said Personal Data.

1.2. The table list the purposes for which your Personal Data can be processed by the Controller and the legal bases for said processing.

1.3. The provision of your Personal Data is necessary in all instances in which processing is a legal requirement or necessary to the performance of a contract to which you are a party or to the implementation of pre-contractual measures adopted at your request. Any refusal on your behalf may make it impossible for Enel to perform the task for which your Personal Data has been collected.

1.4. The provision of your Personal Data, however, is voluntary for any further purposes and failure to give your consent in such cases will have no effect on the completion of the contract. The obligatory or optional nature of the provision of data will be specified at the moment of its collection.

Your Personal Data may be made accessible for the abovementioned purposes, to:

employees and staff of the Controller who, for that purpose, have been tasked with data processing, or to Enel Group companies in the European Union for the implementation of organisational, administrative, financial and accounting activities.
to third party companies or other subjects to which the Controller outsources work required to allow the Website to function, in their role as external data processors.

Your Personal Data will be processed within the European Union and stored on servers located within the European Union. The same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, recognised by a specific suitability decision of the European Commission.
Any transfers of Personal Data to non-EU countries, in the absence of a European Commission adequacy decision, will only be possible if adequate guarantees of a contractual or tactical nature are provided by the Holders and Managers involved, including Binding Corporate Rules and standard contractual clauses for data protection.
The transfer of your Personal Data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will only be carried out where you have explicitly consented or in the cases provided for by the GDPR and will be processed in your interest. In these cases, we inform you that, despite the fact that the Enel Group adopts common operating instructions in all the countries in which it operates, the transfer of your Personal Data may be exposed to risks connected with the particular nature of local legislation on the processing of Personal Data.

Personal Data processed for the purposes described above will be held in compliance with the principles of proportionality and necessity, and, in all cases, until the purposes of the processing have been completed.

1.1 Under articles 15 – 21 of EU Regulation 2016/679 (GDPR), you have the right in relation to the Personal Data you provide:

To access and request a copy;
To request rectification;
To request erasure;
To obtain restriction of data processing;
To object to the processing;
To receive in a commonly-used structured form readable on an automatic device and to transmit without impediment said data to another Data Controller in the case that this is technically feasible.

1.2. Please be informed that you have the right to object at any time to the processing of Personal Data relating to you that is carried out in the pursuit of Enel’s legitimate interests.

1.3. When you object to the processing of your Personal Data as per article 8.2, the Controller will refrain from further processing your Personal Data, except where convincing legitimate reasons for continuing with the processing have been established or for the verification, exercising or defence of a right in a court of law.

1.4. For further information relating to your Personal Data and to exercise your rights and withdraw your consent, you can contact Enel’s Personal Data Protection Officer at this email address dpoenelitalia@enel.com. It is essential to insert the following subject line “Privacy” also.

1.5. Please note that you have the right to make a complaint to the relevant Personal Data protection authority.
1.6. If the Guarantor for the Protection of Personal Data is referred to, you may submit a complaint:

By registered, return-receipt post, addressing your letter to: Garante per la Protezione dei Dati Personali, Piazza Venezia, 11, 00187, Rome, ITALY;
By e-mail: protocollo@pec.gpdp.it.

See also the Cookie policy of Enel Italy.

Enel X Way privacy policy pursuant to Article 13 of EU Regulation 2016/679 (“GDPR”).

This Information Notice illustrates the management methods for the personal data of users of the enel.it site (hereinafter referred to as "Site") and of the personal data that may be processed by Enel X Way Italia S.r.l.

Enel X Way Italia S.r.l., with registered office in Via Ostiense 131/L - 00154 Rome, P.IVA 15844561009 - PEC enelxwayitalia@pec.enel.it (hereafter "Enel X Way Italia" or the "Controller"), as Data Controller, will process your personal data, also provided through the Site in compliance with that established by the applicable law regarding the protection of personal data and by this policy statement.

Enel X Way Italia has appointed a Data Protection Officer (DPO) who can be contacted at the following e-mail address: dpo.enelxwayitalia@enel.com.

3.1. Enel X Way Italia will process the personal data communicated by you or in any case legitimately acquired ("Personal Data") to pursue the purposes for which said data, as the case may be, have been conferred. In particular, the following Personal Data may be processed:

Common, personal and contact data (e.g. first and last names; email address and telephone number): please note that, should you ask Enel X Way Italia questions by writing to the email addresses reported on the Site or should you request information by filling in the appropriate forms, such Personal Data, together with the content of the message sent, will be used to provide a reply to your request. The provision of further Personal Data shall be regarded as absolutely optional;
Economic and financial data: data necessary for payments (e.g. IBAN) or proving the execution of payments (e.g. identification details of payments) and any other data relating to the Customer's solvency and punctuality.
Data acquired by Customer Service: data supplied during interactions with Enel X Way Italia Customer Service, including recordings of phone calls, which will be carried out to verify the quality of the service supplied or by virtue of a legal obligation;
Browsing data: the computer and telematic systems and software procedures used to operate the Site acquire, in the course of their normal operation, certain data (e.g. the date and time of access, the pages visited, the name of the Internet Service Provider and the Internet Protocol (IP) address used to access the Internet, the Internet address used to connect to the site, etc.), the transmission of which is implicit in the use of web communication protocols or is useful for better management and optimisation of the system. More information on the procedures performed to collect, by means of cookies and/or other tracking technologies, the information provided while browsing the Site can be found in the cookie policy available on the Site itself.
Reserved area data: access to the reserved area of the Site is allowed only to customers registered through the Enel Single Profile Account. At the time of creating the Enel Single Profile Account, certain Personal Data, such as first name, last name, email address, mobile phone number and tax code (the latter only for consumer customers) - so-called "registration data" - are required in order to successfully complete the registration, access the reserved area and to take advantage of the services offered by the individual Enel Group companies participating in the Single Profile Account. Registration data, like any data that may already be available to the Data Controller because they were acquired in the context of other contractual relations in place with the same, are in no case subject to transfer to other Enel Group companies. Registration data only are also processed by the Enel Group companies that provide the authentication service, which are specifically appointed as data processors for this purpose (Enel Global Services S.r.l.).

3.2. Processing of Personal Data for the purposes of this Policy shall mean any operation or set of operations which is performed upon Personal Data, by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

3.3. We inform you that such Personal Data will be processed manually and/or with the support of computer or telematic means.

3.4 The Controller has adopted technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Art. 32 of the GDPR, aimed at preventing and counteracting the loss of Personal Data, as well as unlawful or incorrect use and unauthorised access.

4.1 Enel X Way Italia may process your Personal Data for the fulfilment of specific purposes and in the presence of a suitable legal basis provided by the applicable law on Personal Data protection. Specifically, Enel X Way Italia will only process your Personal Data when one or more of the following legal bases apply:

you have given your free, specific, informed, unequivocal and express consent to processing;
processing is necessary for the performance of a Contract to which you are party or the performance of pre-contractual measures taken at your request;
in the presence of a legitimate interest of Enel X Way Italia provided that the interests or fundamental rights and freedoms of the data subject do not prevail;
by virtue of a legal obligation to which Enel X Way Italia is bound.

4.2 The following table lists the purposes for which your Personal Data may be processed by Enel X Way Italia and the legal basis on which the processing is based.

PURPOSE OF PROCESSING	LEGAL BASIS
Allowing the use of all functions of the Site and controlling the proper functioning of said Site	Performance of a contract
Carrying out security audits as well as investigating liability in the event of cybercrimes against the Site	Legal obligation / Legitimate interest
Detection, prevention, and mitigation of fraudulent or illegal activities in connection with the services provided on the Site	Legitimate interest
Responding to a question or request made by the data subject	Execution of pre-contractual measures taken at the request of the data subject
Follow-up to a subscription request for the newsletter to be updated on the world of e-mobility and related initiatives and promotions of Enel X Way companies	Execution of pre-contractual measures taken at the request of the data subject
Allowing registration and/or access to the reserved area via the Single Profile Account.	Performance of a contract
Use of the data provided by the potential customer in the web form to enter into a contract with the Data Controller in order to finalise the subscription process (e.g. by telephone contact; by sending a link to the indicated email address; by sending a One Time Password to the mobile phone number).	Execution of pre-contractual measures taken at the request of the data subject
Fulfilment of pre-contractual, contractual, fiscal obligations and for any further activity instrumental to the signing of the contract and/or to the activation of products and/or services supplied by Enel X Way Italia, directly or through other Companies of the Enel Group or by commercial Partners, including support and ancillary services that may be requested by you.	Execution of pre-contractual measures taken at the request of the data subject / Performance of contract
Performance of contracts proposed by Enel X Way Italia and for all consequent operations of interest to the customer, including the management of purchase orders, delivery, activation and maintenance of products, services and/or equipment purchased or granted on loan for use.	Performance of a contract
In the event that bank or postal direct debits are requested, to verify that the bank/postal data provided are correct. For this purpose Enel X Way Italia may contact the Bank /Poste Italiane or, with your consent, you by phone or through the digital channels made available for this purpose.	Legitimate interest / Consent of the data subject
Preparation of measures to protect against credit risk, including activities aimed at identifying the economic reliability and/or solvency of the customer, before or during the contractual relationship. For the protection of credit reasons, the Data Controller may use information on the status and punctuality of payments for products or services provided also in the past, also to assess the adherence to subsequent contractual proposals solicited by the customer.	Legitimate interest
Sending information and/or updates functional to the management and execution of the contract and for participation in any bonus or loyalty programmes.	Performance of a contract / Legitimate interest
for the assignment of credit rights to customers arising from the supply of products and services provided by the Data Controller;	Legitimate interest
Managing mediations, complaints, pre-litigation or litigation procedures, assisted negotiations or other forms of Alternative Dispute Resolution between Enel X Way Italia and its customers.	Legitimate interest
To allow Enel X Way Italia to fulfil legal, regulation or sector regulation obligations.	Legal obligation
Performance of activities aimed at improving the quality of the services, offered directly by Enel X Way Italia or by its commercial partners, connected to the contractual relationship (for example, by means of surveys carried out through emails or through telephone contacts to assess customer satisfaction and understand how to improve their experience, to verify the effectiveness of the assistance service and adequately direct the training actions of the Data Processors)	Legitimate interest
subject to your consent, for Enel X Way Italia to carry out market research, direct sales, including by telephone, for the placement of products or services, for commercial communications or marketing activities. These activities may be carried out by sending advertising, information, promotional material or invitations, using traditional methods (e.g. paper mail or telephone calls with operator), or automated contact systems (e.g. text, email, telephone calls without operator);	Consent of the data subject / Legitimate interest
Use of the email address provided by the data subject within the existing contractual relationship with Enel X Way Italia for the sending of commercial offers concerning products and/or services similar to those previously purchased (cd. Soft spam).	Legitimate interest
Performance, by individual Enel Group Companies (such as Enel Energia S.p.a.; Enel X S.r.l; Enel X Italia S.r.l.) of market research, direct sales, including by telephone, for the placement of products or services, for commercial communications or marketing activities. These activities may be carried out by sending advertising, information, promotional material or invitations, using traditional methods (e.g. paper mail) or automated contact systems (e.g. text, email).	Consent of the data subject
Allow Enel X Way Italia to carry out profiling activities for itself by processing your personal data concerning, for example, your consumption preferences and/or your purchasing choices of products or services offered by the Data Controller. By assessing your preferences, the Data Controller may define individual and group profiles and also propose offers specifically tailored to your needs.	Consent of the data subject
Sending communications concerning initiatives, projects and events promoted by Enel X Way Italia.	Legitimate interest
Offer commercial, technical and, more generally, customer care services.	Execution of pre-contractual measures taken at the request of the data subject / Performance of contract

4.3 The provision of your Personal Data is necessary in all cases where the processing is carried out on the basis of a legal obligation or in order to perform a contract to which you are a party or the execution of pre-contractual measures taken at your request. In the latter cases, an eventual refusal may make it impossible for Enel X Way Italia to carry out your request.

4.4 The provision of your Personal Data is, on the other hand, voluntary for the pursuit of further purposes set out in the table, and failure to give your consent in relation to them shall in any event have no effect on the conclusion of the contract. The mandatory or optional nature of consent will be specified at the time of collection of the Personal Data.

5.1 The reserved area can only be accessed via the Enel Single Profile Account. Users who were already registered for the digital services of the Enel Group Companies participating in the Single Profile Account service prior to the creation of the Single Profile Account itself must accept the Terms and Conditions for the creation of the Single Profile Account in order to continue to access the reserved area.

Please note that it is not possible to access the service with login credentials generated before 9 September 2019, the date on which the Single Profile Account was introduced.

5.2 First-time Registration: Personal registration data are collected at the time the Single Profile Account is created at one of the web portals or mobile apps that provide registration functionality. The creation of the Single Profile Account allows you to access the reserved area of the web portals and mobile apps of the Enel Group companies enabled, using a single username and password.

5.3 Access after Registration The reserved area can only be accessed via the Enel Single Profile Account. For authentication purposes, the Single Profile Account system receives the encrypted credentials entered by the user for verification and validation. Your Personal Data will therefore be processed for the sole purpose of verifying these credentials and enabling you to access them easily and without further charge from any country in which an Enel Group company is present. It is understood that such data, for the purposes of access to the reserved area, are in no case made available to the other Enel Group Companies enabled to the Single Profile Account.

5.4 Access to the restricted area is permitted in the following ways:

a) Via portals or mobile apps of Enel Group companies enabled to the Single Profile Account;
b) through the use of credentials chosen for the identity created on a social network (so-called 'social login'), in particular identities created on AppleId, Facebook and Google, when the option is available. Following acceptance of the terms and conditions of the service, a Single Profile Account will still be associated with the user.

In case you decide to access the reserved area through the credentials of a social network, Enel X Way Italia will need to acquire some of your Personal Data (First and Last Names, email) in compliance with the authorisations you have given to the social network of reference. You are therefore obliged to check the settings provided by the relevant social network and to read the relevant privacy policy carefully. You may, however, at any time update or change any information you have acquired through the social login.

Enel X Way Italia will keep the identification code associated to your account at the social network service of reference when you use it to log in to Enel X Way Italia or to share contents hosted by the Site; storage will take place for as long as necessary to provide the requested services. In any case, Enel X Way Italia will not be aware of the credentials used by you at the social network.

6.1. Through the appropriate forms available on the Site as well as within the reserved area, you will be able to freely decide whether or not to consent to the use of your Personal Data, personal and contact details, also for market research, direct sales, including by telephone, for the placement of products or services, for commercial communications or marketing activities, relative to products and/or services offered by Enel X Way Italia or by other Enel Group Companies from time to time specifically identified in the data collection forms. Subject to your free and specific consent, for the purposes indicated above, your Personal Data may be processed by the Companies of the Enel Group identified, directly, as autonomous data controllers and/or by Enel X Way Italia, as Data Processor, on their behalf.

6.2 The prior acquisition of your consent for the marketing purposes as described above is not required when contact is made through telephone numbers (landline and/or mobile) and paper mail addresses belonging to persons listed in public telephone directories, in relation to which the rules on the Public Register of Oppositions are applicable, which permit the processing of such contact data against persons who have not exercised their right to object.

6.3 The acquisition of your consent for "profiling" purposes allows Enel X Way Italia to process your Personal Data for profiling activities based on your consumption preferences and on the data and information acquired by the Controller through the purchase of its products or services also for the purpose of receiving offers specifically tailored to your needs.

To study better services and products corresponding to its needs, Enel X Way Italia may make use of partnerships with selected companies that integrate census-type information on a statistical basis, relating to: personal preferences and interests, consumption preferences, economic and family situation, location or movements of the individual. Under no circumstances will your personal data be shared with third parties for profiling purposes.

6.4 The email address provided by you in the framework of possible contracts concluded with Enel X Way Italia may be used by this latter to send commercial offers relative to products and/or services similar to those previously purchased by you (so-called soft-spam). You may, however, at any time object to the processing of your Personal Data by sending a request to the dedicated mailbox referred to in paragraph 10 of this notice.

6.5 Your personal and contact data may also be processed by Enel X Way Italia in order to carry out, on the basis of its own legitimate interest and having first verified, with regard to each single initiative, that the interests, rights or fundamental freedoms of the interested party do not prevail by means of a specific balancing test (Legitimate Interest Assessment), promotional activities for services and products offered by the Controller.

6.6 The processing of Personal Data for marketing purposes may be carried out by means of “traditional” methods (e.g. paper mail and/or operator calls), or by means of 'automated' contact systems (e.g. SMS and/or MMS, telephone calls without operator intervention, email, fax, interactive applications).

6.7 The consent given by you for marketing purposes shall be deemed to have been given for both of the methods indicated, without prejudice, however, to your right to object, even partially, in relation to the different communication channels through which the marketing purposes are carried out, in the manner set out in paragraph 10 of this notice.

The processing of Personal Data for marketing purposes may be carried out by means of “traditional” methods (e.g. paper mail and/or operator calls), or by means of “automated” contact systems (e.g. text and/or MMS, telephone calls without operator intervention, email, fax, interactive applications).

6.8 Consent for marketing and profiling purposes is optional and does not prevent the possibility of using the products or services offered by Enel X Way Italia. Any consent given may be revoked at any time by sending a written notice to the e-mail address given in paragraph 10 of this notice.

For the pursuit of the purposes indicated in section 4 of this privacy policy, Enel X Way Italia may need to communicate, in Italy and abroad (including countries outside the European Union), your Personal Data to third parties in order to fulfil the Contract, to comply with legal obligations or to perform activities instrumental to the provision of the services requested.

Your Personal Data may be made accessible for the above-mentioned purposes:

a) to the employees and collaborators of Enel X Way Italia, specifically appointed as Data Processors;

b) the companies of the Enel Group present in the territory of the European Union in their capacity as autonomous data controllers or data processors, as well as their employees and collaborators specifically appointed as Data Processors;

c) to third party companies or other subjects carrying out certain activities in outsourcing on behalf of Enel X Way Italia, in their capacity as data processors, as well as to their employees and collaborators specifically appointed as Data Processors.

These parties will process your Personal Data, for instance, in the context of:

customer communication management activities;
customer care services;
billing and credit protection services;
market research, direct sales, also by telephone, for the placement of products or services, for commercial communications, marketing and profiling activities by Enel X Way Italia (on the basis of what is described in paragraphs 4 and 6 of this Information Notice).

d) entities, public and private authorities, supervisory and control bodies, banks, factoring companies and credit card issuers, or when required for the granting of subsidies, contributions, grants and facilities of any kind, connected with the supply of the Data Controller's products and/or provision of services, or when required by specific statutory, regulatory and authorisation provisions;

e) to external companies, including foreign ones, operating in the insurance sector and in the granting of loans, including payment extensions, when permitted by current law, for the purposes of insolvency risk prevention and control, fraud control and credit protection, as well as entities operating in the field of credit recovery, including out-of-court and in court (Companies and/or Law Firms), in the event of credit assignment;

f) the Co-processing Companies, where present, which jointly determine with Enel X Way Italia the purposes and means of the processing.

To the Data Processors and Authorised Persons who may be designated, Enel X Way Italia will issue instructions, aimed at implementing adequate security measures, in order to be able to guarantee the confidentiality, security and integrity of the data.

8.2. Possible transfers of Personal Data to non-EU countries, in the absence of an adequacy decision by the European Commission, will only be possible if adequate contractual or agreed guarantees are provided by the Controllers and Processors involved, including binding corporate rules (“Binding Corporate Rules”) and standard contractual data protection clauses.

8.3. The transfer of your Personal Data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will only be carried out where you have explicitly consented to it or in the cases provided for in the GDPR and will be processed in your interest. In these cases, we inform you that, although the Enel Group adopts common operating instructions for all the countries in which it operates, the transfer of your Personal Data may be exposed to risks related to the peculiarities of local legislation on the processing of Personal Data.

9.1. All your Personal Data processed for the purposes described above will be stored in accordance with the principles of proportionality and necessity, and in any case until the purposes of the processing and any legal obligations have been fulfilled.

9.2. Your Personal Data will be stored and processed for as long as the contractual relationship with the Data Controller subsists, and in any case for a period of 10 years after the termination of the contractual relationship, after which it shall be deleted, without prejudice to further storage of the same where necessary to comply with specific legal obligations, Authority orders, for the collection of outstanding debts and for the handling of disputes, claims and legal actions.

9.3. Your free and specific consent is requested in order to process your Personal Data and contact details for market research, direct sales, also by telephone, for the placement of products or services, for commercial communications or marketing activities, related to products and/or services offered by Enel X Way Italia or by other Companies of the Enel Group from time to time specifically identified in the data collection forms. Consent is optional. If you consent, your data will be processed until you revoke said consent.

9.4 Your free and specific consent is also required to process your Personal Data for profiling purposes by Enel X Way Italia. Consent is optional. If you consent, your data will be processed until you revoke said consent.

10.1. Pursuant to Art. 15 - 22 of the GDPR, in relation to the Personal Data disclosed, you have the right, where applicable, to:

access and request a copy;
request rectification;
request cancellation;
obtain restriction of processing;
oppose processing;
receive your data in a structured, commonly used and machine-readable format and to transmit such data to another data controller without hindrance; where technically feasible.

10.2. You also have the right not to be subject to a decision based solely on automated processing unless the decision is necessary: a) for the conclusion or performance of the contract; b) is authorised by law or c) is based on explicit consent. In cases a) and c) you have the right to express your opinion, contest the decision and obtain human intervention by the Controller.

10.3. We inform you that you have in any case the right to object at any time to the processing of Personal Data concerning you that may be carried out on the basis of the legitimate interest of Enel X Way Italia. In this case, the Data Controller shall refrain from processing the Personal Data further, unless the Data Controller demonstrates the existence of compelling legitimate grounds for said processing, or for the establishment, exercise or defence of legal claims.

10.4. We also inform you that you still have the right to object at any time to the processing of Personal Data concerning you carried out for marketing purposes, including profiling, insofar as it is related to such direct marketing. The right to object to such processing by automated contact systems also extends to the processing of Personal Data by traditional methods of contact, unless you wish to object only in part.
If you object to processing for marketing or profiling purposes, your Personal Data will no longer be processed for such purposes.

10.5. In order to exercise your rights and to revoke your consent you may send written notification to the email address: privacy.enelenergia@enel.com.

10.6. Finally, we would like to remind you that if you consider that your data has been processed in a way that does not comply with European Regulation 679/2016 (GDPR), it is your right to lodge a complaint with the Privacy Authority, through:

registered letter with return receipt addressed to Garante per la Protezione dei Dati Personali, Piazza Venezia, 11, 00187 Rome;
email at: protocollo@gpdp.it; or: protocollo@pec.gpdp.it;

Information updated to July 2025

Privacy Policy of Enel X pursuant to Art. 13 of the EU Regulation 2016/679 (“GDPR”).

Enel X Italia S.r.l., with registered office in Via Luigi Boccherini 15, 00198 – Rome, VAT reg. no. 15844561009 – PEC enelxitalia@pec.enel.it (hereinafter “Enel X Italia” or the “Controller”), as Data Controller, will process your personal data, provided through the site www.enel.it (hereinafter “Site”) in compliance with that established by the applicable law regarding the protection of personal data and by this policy statement..

Enel X Way Italia has appointed a Data Protection Officer (DPO) who can be contacted at the following e-mail address:dpo.enelxitalia@enel.com.

Enel X Italia will process the personal data that you have communicated or that have been legitimately acquired ("Personal Data"). In particular, the following Personal Data may be processed:

Common, personal and contact data (e.g. first and last names; email address and telephone number): please note that, should you ask Enel X Italia questions by writing to the email addresses reported on the Website or should you request information by filling in the appropriate forms, these Personal Data, together with the content of the message sent, will be used to provide a reply to your request. The provision of further Personal Data shall be regarded as absolutely optional.
Browsing data: the computer and telematic systems and software procedures used to operate the Site acquire, in the course of their normal operation, certain data (e.g. the date and time of access, the pages visited, the name of the Internet Service Provider and the Internet Protocol (IP) address used to access the Internet, the Internet address used to connect to the site, etc.), the transmission of which is implicit in the use of web communication protocols or is useful for better management and optimisation of the system for sending data and emails. More information on the procedures performed to collect, by means of cookies and/or other tracking technologies, the information provided while browsing the Site can be found in the cookie policy available on the Site itself.
Reserved area data: access to the reserved area of the Site is allowed only to customers registered through the Enel Single Profile Account.

At the time of creating the Enel Single Profile Account, certain Personal Data, such as first name, last name, email address, mobile phone number and tax code (the latter only for consumer customers) - so-called "registration data" - are required in order to successfully complete the registration, access the reserved area, and take advantage of the services offered by the individual Enel Group companies participating in the Single Profile Account. Registration data, like any data that may already be available to the Data Controller because they were acquired in the context of other contractual relations in place with the same, are in no case subject to transfer to other Enel Group companies. Registration data only are also processed by the Enel Group companies that provide the authentication service, which are specifically appointed as data processors for this purpose (Enel Italia S.p.A. and Enel Global Services S.r.l.).

Processing of Personal Data for the purposes of this Policy shall mean any operation or set of operations which is performed upon Personal Data, by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

We inform you that such Personal Data will be processed manually and/or with the support of computer or telematic means.

The following table lists the purposes for which your Personal Data may be processed by Enel X Italia and the legal basis on which the processing is based.

PURPOSE OF PROCESSING	LEGAL BASIS
To allow the use of all functionalities of the Site.	Performance of a contract
To check the proper functioning of the Site.	Performance of a contract
Establishment of liability in the event of cybercrimes against the Site	Legitimate interest / Legal obligation
Detection, prevention, and mitigation of fraudulent or illegal activities in connection with the services provided on the Site	Legitimate interest
Performance, subject to your consent, by Enel X Italia, of market research, direct sales, including by telephone, placement of products or services, for commercial communications or marketing activities. These activities may be carried out by sending advertising, information, promotional material or invitations, using traditional methods (e.g. paper mail) or automated contact systems (e.g. text, email).	Consent of the data subject / Legitimate interest
Performance, by individual Enel Group Companies (such as Enel Energia S.p.a.; Enel X S.r.l; Enel X Financial Services S.r.l.; Paytipper S.p.a., Enel X Way S.r.l., Enel X Way Italia S.r.l.) of market research, direct sales, including by telephone, for the placement of products or services, for commercial communications or marketing activities. These activities may be carried out by sending advertising, information, promotional material or invitations, using traditional methods (e.g. paper mail) or automated contact systems (e.g. text, email).	Consent of the data subject
To allow Enel X Italia to carry out profiling activities for itself by processing your personal data concerning, for example, your consumption preferences and/or your purchasing choices of products or services offered by the Data Controller. By assessing your preferences, the Data Controller may define individual and group profiles and also propose offers specifically tailored to your needs.	Consent of the data subject
Sending commercial offers by e-mail for products and/or services similar to those previously purchased (so-called soft-spam)	Legitimate interest
To allow registration and/or access to the reserved area via the Enel Single Profile Account.	Performance of a contract
Responding to a question or request made by the data subject, including by filling in the forms available on the Site (so-called "Lead for re-contact")	Performance of pre-contractual measures taken at the request of the data subject
To follow up a request to subscribe to the Enel X Italia newsletter to stay up-to-date on news in one or more of the sectors in which Enel X Italia operates	Performance of pre-contractual measures taken at the request of the data subject
Offer commercial, technical and, more generally, customer care services	Execution of pre-contractual measures taken at the request of the data subject / Performance of contract
To allow Enel X Italia to fulfil legal, regulatory or EU obligations	Legal obligation
Quality control of the assistance services offered directly by Enel X Italia or by its suppliers, in order to assess the effectiveness of the assistance service and adequately direct the training actions of persons authorised to process data	Execution of pre-contractual measures taken at the request of the data subject / Performance of contract

Through the appropriate forms made available on the Site, you will be able to freely decide whether or not to consent to the use of your Personal Data and contact details, also for market research, direct sales, including by telephone, for the placement of products or services, for commercial communications or marketing activities, relative to products and/or services offered by Enel X Way Italia or by other Enel Group Companies from time to time specifically identified in the data collection forms. Subject to your free and specific consent, for the purposes indicated above, your Personal Data may be processed by the Companies of the Enel Group identified, directly, as autonomous data controllers and/or by Enel X Italia, as Data Processor, on their behalf.

6.2 The prior acquisition of your consent for the marketing purposes as described above is not required when contact is made through telephone numbers (landline and/or mobile) and paper mail addresses belonging to persons listed in public telephone directories, in relation to which the rules on the Public Register of Oppositions are applicable, which permit the processing of such contact data regarding persons who have not exercised their right to object.

The acquisition of your consent for "profiling" purposes allows Enel X Italia to process your Personal Data for profiling activities based on your consumption preferences and on the data and information acquired by the Controller through the purchase of its products or services also for the purpose of receiving offers specifically tailored to your needs.

To study better services and products corresponding to its needs, Enel X Italia may make use of partnerships with selected companies that integrate census-type information on a statistical basis, relating to: personal preferences and interests, consumption preferences, economic and family situation, location or movements of the individual. Under no circumstances will your personal data be shared with third parties for profiling purposes.

The email address provided by you in the framework of possible contracts concluded with Enel X Italia may be used by this latter to send commercial offers relative to products and/or services similar to those previously purchased by you (so-called soft-spam). You may, however, at any time object to the processing of your Personal Data by sending a request to the dedicated mailbox referred to in paragraph Rights of the Data Subject of this notice.

Your personal and contact data may also be processed by Enel X Italia in order to carry out, on the basis of its own legitimate interest and having first verified, with regard to each single initiative, that the interests, rights or fundamental freedoms of the interested party do not prevail by means of a specific balancing test (Legitimate Interest Assessment), promotional activities for services and products offered by the Controller.

The consent given by you for marketing purposes shall be deemed to have been given for both of the methods indicated, without prejudice, however, to your right to object, even partially, in relation to the different communication channels through which the marketing purposes are carried out, in the manner set out in paragraph Rights of the Data Subject of this notice.

Consent for marketing and profiling purposes is optional and does not prevent the possibility to use the products or services offered by Enel X Italia. Any consent given may be revoked at any time by sending a written notice to the email address given in the Rights of the Data Subject paragraph of this notice.

The provision of your Personal Data is necessary in all cases where the processing is carried out on the basis of a legal obligation or in order to perform a contract to which you are a party or the execution of pre-contractual measures taken at your request. In the latter cases, an eventual refusal may make it impossible for Enel X Italia to carry out your request.

The provision of your Personal Data is, on the other hand, voluntary for the pursuit of further purposes set out in the table, and failure to give your consent in relation to them shall in any event have no effect on the conclusion of a contract, if any. The mandatory or optional nature of consent will be specified at the time of collection of the Personal Data.

Enel X Italia may process your Personal Data for the fulfilment of specific purposes and in the presence of a suitable legal basis provided by the applicable law on Personal Data protection. Specifically, Enel X Italia will only process your Personal Data when one or more of the following legal bases apply:

you have given your free, specific, informed, unequivocal and express consent to processing;
processing is necessary for the performance of a Contract to which you are party or the performance of pre-contractual measures taken at your request;
in the presence of a legitimate interest of Enel X Italia, provided that the interests or fundamental rights and freedoms of the data subject do not prevail;
by virtue of a legal obligation to which Enel X Italia is bound.

The reserved area can only be accessed via the Enel Single Profile Account. Users who were already registered for the digital services of Enel Group Companies participating in the Single Profile Account service prior to the creation of the Single Profile Account itself must accept the Terms and Conditions for the creation of the Single Profile Account.

Please note that it is not possible to access the service with login credentials generated before 9 September 2019, the date on which the Single Profile Account was introduced.

First-time Registration: Personal registration data are collected at the time the Single Profile Account is created at one of the web portals or mobile apps that provide registration functionality. The creation of the Single Profile Account allows you to access the reserved area of the web portals and mobile apps of the Enel Group companies enabled, using a single username and password.

Access after Registration: The reserved area can only be accessed via the Enel Single Profile Account. For authentication purposes, the Single Profile Account system receives the encrypted credentials entered by the user for verification and validation. Your Personal Data will therefore be processed for the sole purpose of verifying these credentials and enabling you to access them easily and without further charge from any country in which an Enel Group company is present. It is understood that such data, for the purposes of access to the reserved area, are in no case made available to the other Enel Group Companies accessible to the Single Profile Account.

Access to the restricted area is permitted in the following ways:

a) Via portals or mobile apps of Enel Group companies accessible to the Single Profile Account;

b) through the use of credentials chosen for the identity created on a social network (so-called “social login”), in particular identities created on AppleId, Facebook and Google, when the option is available. Following acceptance of the terms and conditions of the service, a Single Profile Account will still be associated with the user.

If you decide to access the reserved area through the credentials of a social network, Enel X Italia will need to acquire some of your Personal Data (First and Last Names, email) in compliance with the authorisations you have given to the social network of reference. You are therefore obliged to check the settings provided by the relevant social network and to read the relevant privacy policy carefully. However, at any time you can update or change any information you have acquired through the social login.

Enel X Italia will keep the identification code associated to your account at the social network service of reference when you use it to log in to Enel X Italia or to share contents hosted by the Site; storage will take place for as long as necessary to provide the requested services. In any case, Enel X Italia will not be aware of the credentials used by you for the social network.

For the pursuit of the purposes indicated in the Purposes of Processing section of this privacy policy, Enel X Italia may need to communicate your Personal Data to third parties, in Italy and abroad (including countries outside the European Union), in order to fulfil the Contract, to comply with legal obligations or to perform activities instrumental to the provision of the services requested.
Your Personal Data may be made accessible for the above-mentioned purposes:

a) to the employees and collaborators of Enel X Italia, specifically appointed as Data Processors;

b) the companies of the Enel Group present in the territory of the European Union in their capacity as autonomous data controllers or data processors, as well as their employees and collaborators specifically appointed as Data Processors;

c) to third party companies or other subjects carrying out certain outsourced activities on behalf of Enel X Italia, in their capacity as data controllers, as well as to their employees and collaborators specifically appointed as Data Processors.
These parties will process your Personal Data, for instance, in the context of:

customer communication management activities;
customer care services;
market research, direct sales, also by telephone, for the placement of products or services, for commercial communications, marketing and profiling activities by Enel X Italia (on the basis of what is described in paragraphs 4 and 6 of this Information Notice);

(d) entities, public and private authorities, supervisory and control bodies;

f) the Co-processing Companies, where present, which jointly determine the purposes and means of the processing, together with Enel X Italia.

Possible transfers of Personal Data to non-EU countries, in the absence of an adequacy decision by the European Commission, will only be possible if adequate contractual or agreed guarantees are provided by the Controllers and Processors involved, including Binding Corporate Rules and standard contractual data protection clauses. The transfer of your Personal Data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will only be carried out where you have explicitly consented to it or in the cases provided for in the GDPR and will be processed in your interest. In these cases, we inform you that, although the Enel Group adopts common operating instructions for all the countries in which it operates, the transfer of your Personal Data may be exposed to risks related to the peculiarities of local legislation on the processing of Personal Data.

All your Personal Data processed for the purposes described above will be stored in accordance with the principles of proportionality and necessity, and in any case until the purposes of the processing and any legal obligations have been fulfilled.

If there is a contractual relationship in place with the Data Controller, your Personal Data will be stored and processed for the duration of said relationship and in any case, for a period of ten years after the termination of the contractual relationship, after which time it shall be deleted, without prejudice to further storage of the same where necessary to comply with specific legal obligations, Authority orders, for the collection of outstanding debts, and for the handling of disputes, claims and legal actions.

Your free and specific consent is requested in order to process your Personal Data and contact details for market research, direct sales, also by telephone, for the placement of products or services, for commercial communications or marketing activities, related to products and/or services offered by Enel X Italia or by other Companies of the Enel Group from time to time specifically identified in the data collection forms. Consent is optional. If you consent, your data will be processed until you revoke said consent.

Your free and specific consent is also required for Enel X Italia to process your Personal Data. Consent is optional. If you consent, your data will be processed until you revoke said consent.

Pursuant to Art. 15 - 22 of the GDPR, in relation to the Personal Data disclosed, you have the right, where applicable, to:

a) access and request a copy;
b) request rectification;
c) request cancellation;
d) obtain restriction of processing;
e) oppose processing;
f) receive your data in a structured, commonly used and machine-readable format and to transmit such data to another data controller without hindrance; where technically feasible.

You also have the right not to be subject to a decision based solely on automated processing unless the decision is necessary: a) for the conclusion or performance of a contract with the Controller; b) is authorised by law, or c) is based on explicit consent. In cases a) and c) you have the right to express your opinion, contest the decision and obtain human intervention by the Controller.
We inform you that you have in any case the right to object at any time to the processing of Personal Data concerning you that may be carried out on the basis of the legitimate interest of Enel X Italia. In this case, the Data Controller shall refrain from processing your Personal Data further, unless the former can demonstrate the existence of compelling lawful grounds for said processing, or for the establishment, exercise or defence of legal claims.
We also inform you that you still have the right to object at any time to the processing of Personal Data concerning you carried out for marketing purposes, including profiling, insofar as it is related to such direct marketing. The right to object to such processing by automated contact systems also extends to the processing of Personal Data by traditional methods of contact, unless you wish to object only in part.
If you object to processing for marketing or profiling purposes, your Personal Data will no longer be processed for such purposes.

In order to exercise your rights and to revoke your consent you may send written notification to the email address privacy.enelxitalia@enel.com.

Finally, we would like to remind you that if you consider that your data has been processed in a way that does not comply with European Regulation 679/2016 (GDPR), it is your right to lodge a complaint with the Privacy Authority, through:

a) registered letter with return receipt addressed to Garante per la Protezione dei Dati Personali, Piazza Venezia, 11, 00187 Rome;
b) email to: protocollo@gpdp.it, or protocollo@pec.gpdp.it;
c) fax to the number: 06/69677.3785.

Information updated to July 2025

Write to us directly on WhatsApp

You can chat 24 hours a day, 7 days a week directly with Elena or with a specialized operator, you will be contacted as soon as possible to help you manage all the operations related to your electricity or gas supply.

Apri WhatsApp

Privacy

Privacy

Enel Energia privacy statement pursuant to Article 13 of EU Regulation 2016/679 (“GDPR”)

Enel Italia privacy statement pursuant to Article 13 of EU Regulation 2016/679 (“GDPR”)

Enel X Way privacy policy pursuant to Article 13 of EU Regulation 2016/679 (“GDPR”).

Privacy Policy of Enel X pursuant to Art. 13 of the EU Regulation 2016/679 (“GDPR”).

Write to us directly on WhatsApp

Find out what type of Fiber is available at your address

Call us for free

Call us for free

We'll call you back for free

Thank you for contacting us.

Buy them together

Formidabile Luce for you

Air Conditioner at a Formidable Price

Buy them together

Formidabile Luce for you

Privacy

Privacy

Conferma operazione

Enel Energia privacy statement pursuant to Article 13 of EU Regulation 2016/679 (“GDPR”)

Enel Italia privacy statement pursuant to Article 13 of EU Regulation 2016/679 (“GDPR”)

Enel X Way privacy policy pursuant to Article 13 of EU Regulation 2016/679 (“GDPR”).

Privacy Policy of Enel X pursuant to Art. 13 of the EU Regulation 2016/679 (“GDPR”).

Write to us directly on WhatsApp

Call us for free

Formidabile Luce for you

Air Conditioner at a Formidable Price

Formidabile Luce for you