PRIVACY NOTICE PURSUANT TO REGULATION (EU) 2016/679 (“GDPR”)

JuiceNet Limited, (hereinafter also "JuiceNet"), as Data Controller (as that term is defined in the GDPR), informs you that the personal data provided by you and acquired upon registration for the services you have chosen, both for the use of the services in your own name and in the business context, as well as data necessary for the provision of such services, including browsing data, will be treated in accordance with measures that guarantee confidentiality and according to the security measures required by current legislation through digital, telematics or manual means, with criteria strictly related to the purposes of the processing.

In particular, JuiceNet informs you that the digital and telematics systems and software procedures used to operate this application (“APP”) acquire certain data during normal operation, including, but not limited to the date and time of access, the pages visited, the name of the internet service provider and internet protocol (“IP”) address through which you access the internet, the internet address from which you connected to our site, and the geographic position. The transmission of this data is implicit in the use of web communication protocols or useful for the efficient management and optimization of the data sending and e-mailing system. This data is used only to obtain anonymous statistical information on usage of the site and to check its correct functioning, and are kept in an anonymous form throughout the period of activity of the APP. However, the data may be used to determine responsibility in the case of computer crimes that could harm the website.

The provisions of this document apply to users that access the services, both for personal and commercial use, that signed a contract for this purpose with JuiceNet. In particular, users that subscribed to Enel X JuicePass services as a company service agree to the use of their personal data for the following purposes:

1.       Personal Data Controller

The Data Controller is JuiceNet Limited (trading as Enel X), a company incorporated in accordance with the laws of England and Wales with company number 10949960 and whose registered office is at 5 Technology Park, Colindeep Lane, Colindale, London, NW9 6BX

2.       Data Protection Officer (DPO)

The Data Controller has appointed a Data Protection Officer (as that term is defined in the GDPR) who can be contacted at the following e-mail address: dpo.enelx@enel.com.

3.       Purposes & Methods of Processing

The Data Controller will process your personal data for the achievement of specific purposes and only for a specific legal basis provided by applicable law on privacy and protection of personal data. Specifically, the Data Controller will process your personal data only when one or more of the following legal bases occurs:

JuiceNet collects technical information from the user's mobile device, such as location data or certain characteristics and the performance of the device or the telephone operator/operating system, including the type of device and connection, the IP address, mobile payment methods, interaction with other technology in the retail sector (such as the use of NFC tags, QR codes or mobile vouchers). JuiceNet will process your personal data through the use of electronic tools, including automated archiving in its computer databases, for the purposes related to the use of this APP as well as the relative services offered and in particular for the following purposes:

a) Activities strictly connected with and necessary for the use of this APP and the related services.  In the absence of such data, users will not be able to use the services requested. 

b) Market research, direct sales, including telephone sales, for the placement of products or services, for commercial communications or marketing activities. These activities can be carried out by sending advertising, informative, promotional or invitations, using traditional methods (eg paper mail) or automated contact systems (eg SMS, e-mail);

c) Profiling activities based on consumer habits and personal data and information acquired by observing the use of products or services offered, in order to offer personalized offers.

d) Informational or educational "e-News" or similar newsletters on issues concerning electric mobility, recharging and the related sustainability issues.

Use of some of the aforementioned services requires registration in Enel X Reserved Area.  The user can access the Enel X Reserved Area through Facebook and Google+.  Certain personal data will be acquired (such as Name, Surname, E-mail address) in compliance with the authorizations issued by the relative social network. The user is therefore required to check the settings envisaged by the relative social network and carefully read the related Privacy Policy.  JuiceNet will keep the identification code associated with the user's account at the service of the third party when it is used to log in to Enel X JuicePass or to share content hosted on the site.  The code will be kept as long as necessary to provide the services requested. If the user creates an Enel X JuicePass account or uses site services by logging in through the social login, JuiceNet may use the information contained in the originating account to complete the user's profile on the site. The data subject can update or modify his/her profile information and contact details at any time via the social login.

4.       Location Data

Some APP services use technology that identifies the physical location of the user's device by using data related to the longitude and latitude in which the device is located ("Location Data"). Location Data is shared with the map service provider Google, which converts Location Data into a street address. This address is used by the APP to provide the service requested by the user, for example to identify the position of the user's device and the distance of the latter with respect to the desired location

In case the application is connected to the internet and linked to the user's profile, the user gives his or her consent to the fact that JuiceNet processes the Location Data in the manner and for the purposes described above. Users who deactivate the geolocation function cannot use the services described above.

The Google Maps privacy policy is available at the following address https://www.google.com/intl/en_gb/help/terms_maps/ and is integrated into the JuiceNet Privacy Policy by means of this statement as far as it concerns the processing of Location Data or the search address by Google.

5.       Processing Methods and Criteria, Storage Times and Protection Measures

The data processing is also performed using electronic or automated means by JuiceNet and/or third parties that JuiceNet may employ for the storage, management or transmission of the data. Organisation and processing logics will also be applied to your personal data in relation to access and usage logs for online services, for the purposes mentioned above and in a way that ensures the security and confidentiality of the data.

With regard to online transactions, the data processed is protected through the use of adequate technological solutions with regard to both the security of the connections and the storage of financial data (credit cards, IBAN, etc.). The personal data processed will be kept for the necessary time required for the specific purpose and the applicable legislation.

The personal data processed for the purposes set out above will be kept in compliance with the principles of proportionality and necessity, and in any case until the purposes of the processing have been completed.

Your personal data will normally be kept as long as you do not revoke your consent and in any case will be deleted automatically after ten years from the termination of the contractual relationship, without prejudice to the possible preservation of the same, where necessary for the management of ongoing legal actions and to fulfil specific legal obligations.

6.       Categories of Entities to which Personal Data may be Communicated

For the performance of all activities required to use the APP and related services, JuiceNet may communicate and process your personal data, in domestically and abroad, including countries outside the European Union, to third parties with whom it has relationships, where such parties provide services at the request of JuiceNet. JuiceNet will only provide the information necessary to perform the services required, taking all measures to protect your personal data.

In addition to the any parent, subsidiary or affiliate company of Enel X North American, Inc. (the “Enel Group”), your data may also be provided to selected commercial partners of JuiceNet for the purposes referred to in this Statement.

Subjects belonging to the above categories operate as independent data controllers or as managers or authorised persons, appointed for this purpose by JuiceNet

Personal data may also be made available to consultants, interns and employees of JuiceNet who are specially appointed/designated as managers or authorised persons.

7.       Transfer of Personal Data

Personal data may be processed in or outside of the European Union or United States, provided that an adequate level of protection is guaranteed. Any transfers of personal data to non-EU countries, in the absence of a European Commission adequacy decision, will only be possible if the owners and managers involved provide adequate guarantees of a contractual or contractual nature, including binding corporate rules and contractual clauses of data protection type. The transfer of personal data to countries outside the European Union or the United States, in the absence of an adequacy decision or other appropriate measures as described above, will be made only if the data subject has explicitly consented to it or in the cases provided for by the GDPR and will be treated in its interest. In these cases, although the Enel Group adopts operating instructions common to all the countries in which it operates, the transfer of personal data may be exposed to risks associated with the peculiarities of local legislation regarding the processing of personal data.

8.       Use of Cookies

Cookies are technology used by websites to recognise users within a work session. They are not used to collect users’ personal information, but only to facilitate browsing on the site and the use of its various services.

Cookies only collect anonymous data and have a limited lifespan. All the information collected is used to monitor and analyse usage of the site, improve its functionality and refine the selection of content and layout in response to visitors’ needs. If you refuse to accept cookies, the quality of the pages you visit may be affected.

JuiceNet may host advertising messages on its sites, in agreement with third parties, which may contain cookies belonging to the third-party owner of the advertising. JuiceNet has no control over these cookies or the content of these sites and has no access to them.

For further information about the use of cookies by JuiceNet details about them and how to disable them, please visit the page https://www.enelx.com/uk/en/cookie-policy.

9.       Rights of the Interested Party

Each user whose personal data has been collected hereunder, has the right to:

a) Access and request a copy of what personal data is collected;

b) Request an explanation of how the personal data is used;

c) Request deletion of its personal data (so long as such deletion does not violate applicable law);

d) Receive its personal data in a structured format and transmit such data without impediment to another data controller, where technically feasible.

For the exercise of the rights and for the revocation of the consent the interested party may send a communication to the email address: privacy.enelx@enel.com

The user has the right to lodge a complaint with the competent authority for the protection of personal data.