Privacy Policy Management

The GDPR is the EU Regulation no. 2016/679 on the protection of personal data ("General Data Protection Regulation") which will be directly applicable from 25 May 2018 and reinforces the rights of individuals with regard to their personal data and aims to unify the data protection laws of the various European countries.

The GDPR introduces a new figure to protect the rights of the data subject in the processing of personal data: the figure of the DPO ("Data Protection Officer").

In order to offer you an easy point of contact, Enel Energia has appointed its own Data Protection Officer ("DPO"), who can be contacted at the email address: dpo.enelenergia@enel.com, for all matters relating to the processing of your personal data and the exercising of your rights.

Personal data is any information concerning an identified or natural person

An identifiable  person (so-called "data subject"); An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location Data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person Personal data are, for example, identification, contact, consumption and payment data.

Processing of personal data means any operation, or set of operations, which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

The data controller is the person responsible for decisions regarding the purposes and methods of the personal data processing, including the security profile.

For Enel Energia, the data controller is Enel Energia S.p.A., with registered office at Viale Regina Margherita, 125-00198 Rome.

The data processor is the phisical or juridical person, the public administration or any other body, association or body appointed by the owner to process personal data.

The legal basis of the processing is constituted by the contract that you have concluded and its execution, as well as by the express consent to the processing of the data expressed by you during the signing of the contract itself and / or access to the online services displayed on the websites of the Data Controller.

You may withdraw your consent at any time and exercise your rights pursuant to articles 15 - 22 of EU Regulation 2016/679 ("GDPR"), by sending a request to the dedicated email privacy.enelenergia@enel.com.

The consent of the data subject is not necessary in the event that the processing of their personal data is connected to the provision of the services requested from Enel Energia or if necessary to fulfil an obligation required by law or to fulfil obligations arising from a contract to which the data subject is a party or also to fulfil specific requests of the latter, before the conclusion of the contract.

The consent of the data subject is optional for the promotion of business / promotional offers by Enel Energia and / or third party companies or for the collection of data relating to consumption preferences by Enel Energia. In this case, processing may only be performed if the consent has been granted and is free, informed, specific and unequivocal.

The Data Controller is the subject responsible for decisions regarding the purposes and methods of processing personal data, including the security profile. For Enel Energia, the Data Controller is Enel Energia SpA, with registered office in Via Luigi Boccherini 15 - 00198 Rome.

Data Processor:shall mean any natural or legal person, public administration, body, association or other agency that processes personal data on the controller’s behalf.

Pursuant to articles 15-22 of the GDPR, in relation to your Personal Data, you have the right to:

• Access and request a copy
• Request its correction;
• Request its deletion;
• Obtain a processing restriction
• Object to data processing
• Receive data in a format that is structured, commonly used and readable by an automatic device
• Not be subjected to a decision based solely on automated processing.

To exercise your rights and withdraw your consent, please send a message to the dedicated email: privacy.enelenergia@enel.com. 

You may withdraw your previously granted consent to receive business material, from Enel Energia and from third-party companies, as follows:

• By sending a request to privacy.enelenergia@enel.com
• By accessing the Customer Area.

Should the customer not wish to receive promotional communications on the phone, they may register their telephone number in the "Register of Objections". More information on www.registrodelleopposizioni.it.