The provision of your personal data is necessary in all cases where the data processing is a legal requirement or when it is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract. Any refusal may make it impossible for us to fulfil the purpose for which your personal data is collected.
However, the provision of your personal data is voluntary when required for any other purposes: in such cases, the absence of your consent shall have no impact on the completion of the contract. The obligatory or discretionary nature of the data provision shall be indicated at the time of its collection.
Who are the recipients of the personal data?
Your personal data may be made available to:
- Enel employees and consultants who are responsible for data processing, or to our Group's companies within the European Union for the purposes of performing organisational, administrative, financial and accounting activities;
- third party companies or other entities, in their role as external data processors, which provide outsourced services to Enel to enable the Website to function.
Where and for how long is the personal data stored?
Your Personal Data will be processed within the European Union and stored on servers located within the European Union. The same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, recognized by a specific adequacy decision of the European Commission.
Any transfers of Personal Data to non-EU countries, in the absence of a European Commission adequacy decision, will only be possible if Data Controllers and Data Processors involved provide adequate guarantees of contractual nature, including Binding Corporate Rules and Standard Contractual Clauses.
The transfer of your Personal Data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will be made only if you have explicitly consented to it or in the cases provided for by the GDPR and will be processed in your interest. In these cases, we inform you that, although the Enel Group adopts operating instructions common to all the countries in which it operates, the transfer of your Personal Data may be exposed to risks related to the peculiarities of local legislation regarding the processing of Personal Data.Any personal data processed shall be stored in accordance with the principles of proportionality and necessity and, in any case, until the purposes of the data processing have been completed.
What are your rights regarding your personal data?
With respect to the personal data provided, in accordance with articles 15 – 21 of EU Regulation 2016/679 (GDPR), you have the following rights:
- to request access the data and request a copy;
- to request rectification;
- to request erasure;
- to obtain restriction of processing;
- to object to the processing;
- to receive the personal data in a structured, commonly used and machine-readable format and to transmit such data to another controller without hindrance, where technically feasible.
In any case, you have the right, at any time, to object to the processing of your personal data that is performed for the purpose of pursuing Enel’s legitimate interests. You can exercise your rights and withdraw your consent by writing an e-mail to firstname.lastname@example.org.
Please be aware that it is your right to submit a complaint to the competent data protection authority. If you wish to do so, you can in one of the following ways:
a) registered letter with return receipt to: Garante per la Protezione dei Dati Personali (The Italian Data Protection Authority), Piazza Venezia 11, 00186 Roma, Italy;
b) e-mail to: email@example.com, or firstname.lastname@example.org;
c) fax to: +39 06 696773785
Should you object to the processing of your personal data, Enel shall suspend processing such data, except where legitimate reasons for continuing with the processing are demonstrated or where it is necessary for the establishment, exercising or defence of a right in a court of law.
For further information regarding your personal data, please contact Enel’s DPO at email@example.com, writing the word “Privacy” in the subject line of the e-mail.