Privacy Notification

Privacy Notification


1.           Data controller responsible for the processing of personal data

1.1.        Enel X Italia S.p.A., with registered office in Via Flaminia 970, 00189 – Rome, VAT No 13111961002 (hereinafter “Enel X Italia” or “the Data Controller”), as Data Controller responsible for data processing, will process your personal data supplied through the website (hereinafter “the Website”) in compliance with the established legislation concerning the privacy and protection of personal data and in accordance with the information outlined in this document..

1.2.        In the event of subscription or access to various services, the names of any further data controllers or others responsible for data processing will be communicated.


2.           Data Protection Officer (DPO)

2.1.        Enel X Italy has nominated a Data Protection Officer (DPO) who can be contacted at the following email address:


3.           Purpose and Method of processing

3.1.        Enel X Italia will process the personal data you communicate or that has been legitimately obtained (“Personal Data”). In particular, the following personal data will be processed:

3.1.1.    Contact details: name, surname, e-mail address, telephone number, the content of messages you send and other Personal Data that may have been provided during communications. We will process this Personal Data if you make an enquiry, request information or communicate information of various kinds to us. You transmit this Personal Data to us whenever you contact us.

The processing of this Personal Data is necessary to provide a response to communications received from you or requests you have made. Provision of further Personal Data is optional.

3.1.2.    Browsing data: the IT and telematics systems and software procedures necessary for the functioning of the Website, or the App made available by Enel X Italia, during their regular activities acquire data (e.g. access time and date, pages visited, the name of the Internet Service Provider (ISP) and the Internet Protocol (IP) address from which the internet is accessed, the Internet address from which you have connected to the Website, etc.), the transmission of which is implicit in the use of the web communications protocols or is useful for the management and optimisation of the data and email transmission system.

3.1.3.    Data in the reserved area: when an account is created you will be asked to provide some Personal Data (e.g. name, surname, email address, mobile phone number and user code) required for successful completion of registration and to enable use of the related services. Enel X Italia also allows access to the reserved area through the App or by using credentials provided by a social network (the “social login”), in particular, Facebook and Google+ identities.

3.2.        Processing personal data for the purposes described in the present document is understood as any operation or combination of operations carried out with the help of automated processes and applied to the Personal Data, such as the collection, registration, organisation, structuring, conservation, adaptation or modification, extraction, consultation, use, communication through transmission, dissemination or other forms of making the data available, comparison or interconnection, erasure or destruction.

3.3.        We inform you that such Personal Data will be processed manually and/or with the support of IT or telematics.


4.           Purpose and legal basis for processing

4.1.        Enel X Italia will use your Personal Data for precise purposes and only in the event of a specific legal basis applicable to privacy and personal data protection. Specifically, Enel X Italia will use your Personal Data only when one or more of the following legal bases is present:

·        you have given your free, specific, informed, unequivocal and express consent

·        the processing is required for the fulfilment of a contract in which you are a party or the execution of pre-contractual measures adopted on your request

·        in the event of a legitimate interest on the part of Enel X Italia

·        Enel X Italia is bound by legal obligation to process the Personal Data.

4.2.           The following table shows the purposes for which your Personal Data is processed by Enel X Italia and the legal basis for such processing.


Purpose of processing

Legal basis

Enables the use of all Website functions.

Fulfilment of a contract

Monitoring the correct functioning of the site.

Fulfilment of a contract

Ascertaining responsibility in the event of IT crimes that damage the Website. Detection, prevention, mitigation and verification of fraudulent or illegal activity in relation to services provided on the Website. Implementation of security checks required by law.

Legitimate interest

Legal obligation

To respond to an enquiry or a request from an interested party.

Execution of pre-contractual measures adopted at the request of the interested party

Registration on the reserved area and use of related services.

Execution of pre-contractual measures adopted at the request of the interested party

Use of the App made available by Enel X Italia and use of related services.

Fulfilment of a contract

Management of the subscription form completed by the client (lead) with the Personal Data you have already provided, the continuation of the application through telephone contact, allowing you to finalise the subscription process through access to a link, which Enel X Italia can send to your email inbox. Alternatively, access to compilation can be enabled in the Reserved Area, also by sending a One Time Password to the mobile phone number indicated in the subscription stage. 

Execution of pre-contractual measures adopted at the request of the interested party

Enabling Enel X Italia to comply with legal obligations, EU regulations and standards.

Legal obligation





4.3.        Provision of your Personal Data is necessary in all cases in which the processing occurs on the basis of a legal obligation or to fulfil a contract you are a party to or the execution of pre-contractual measures adopted on your request. Your refusal could make it impossible for Enel X Italia to fulfil the purposes for which your Personal Data is collected.

4.4.        Provision of your Personal Data is voluntary for the fulfilment of further purposes and the lack of your consent in relation to it will have no consequences for the implementation of the contract. Whether the provision of data is obligatory or optional will be specified when the data is being collected


5.           Registration on the reserved area through social Login

5.1.        Access to the reserved area is enabled in the following ways:

a)   by creating an account on the Website

b)   through the App

c)   through the use of credentials provided by a social network (“social login”), in particular a Facebook, Twitter or Google+ identity.

5.2.         If you decide to access the reserved area by using social network credentials, Enel X Italia must acquire some of your Personal Data (name, surname, email address) in conformity with the authorisations you have made on the social network. You are therefore required to verify the settings of the social network in question and read the relevant privacy policy carefully as this authorises the social network to share your personal data with Enel X Italia, thus enabling Enel X Italia to collect information such as contacts, friends and other Personal Data. Enel X Italia will not be made aware of the registration data you use.

5.3.           Enel X Italia will retain the identification code associated with your account with the social network service as soon as you use it to log in to Enel X Italia or to share content hosted by the Website; the information will be retained for as long as necessary to provide the services requested.

5.4.           If you create an Enel X Italia account or use the Website services through the social media login, Enel X Italia will be able to use the information contained in the source account to complete your profile on the Website. You can update or modify profile information and contact details through the social media login at any time.


6.           Recipients of personal data

6.1.        Your Personal Data can be made accessible for the purposes outlined above:

a)    to staff and collaborators of Enel X Italia, authorised personnel specially nominated to process the data, or Enel Group companies present in the EU territory for carrying out organisational, administrative, financial and accounting activities


b)   to third party companies or other organisations that carry out some outsourced activities on behalf of Enel X Italia, as the external body responsible for the processing


7.           Transfer of Personal Data

7.1.        Your Personal Data will be processed within the European Union and stored on servers located within the European Union. The same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, recognized by a specific adequacy decision of the European Commission.

Any transfers of Personal Data to non-EU countries, in the absence of a European Commission adequacy decision, will only be possible if Data Controllers and Data Processors involved provide adequate guarantees of contractual nature, including Binding Corporate Rules and Standard Contractual Clauses.

The transfer of your Personal Data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will be made only if you have explicitly consented to it or in the cases provided for by the GDPR and will be processed in your interest. In these cases, we inform you that, although the Enel Group adopts operating instructions common to all the countries in which it operates, the transfer of your Personal Data may be exposed to risks related to the peculiarities of local legislation regarding the processing of Personal Data.

8.           Data Retention

8.1.   The Personal Data processed for the purposes set out above will be kept in compliance with the principles of proportionality and necessity, and in any case until the purposes of the processing have been pursued.

9.            Rights of interested parties

9.1.        Under the provisions of art 15 – 21 of the GDPR, relating to the Personal Data submitted, you have the right to:

a)    access the data and request copies

b)   request corrections

c)    request its erasure

d)   limit its use

e)   oppose processing

f)     receive this data in a structured, commonly used format that can be read by automatic devices and transmit the data without impediment to another data controller in the case that this is technically feasible.

9.2.      We inform you that you have the right to contest at any time the processing of your personal data legitimately collected by Enel. 

9.3.        When you contest processing of your Personal Data in accordance with article 9.2, the Data Controller will refrain from further processing of the Personal Data unless the Data Controller can demonstrate legitimate reasons for proceeding with the processing, or for verification, exercising or defending a claim in a court of law.

9.4.        To exercise your rights and revoke your consent you can send notification via email to

9.5.        For further information regarding your Personal Data you can contact the Data Protection Officer by email at

9.6.        We would like to remind you that you have the right to submit a complaint to the Personal Data Protection Commission via:

a)   registered post to the Personal Data Protection Commission (Guarantor for the protection of personal data), Piazza Venezia, 11, 00187 Rome

b)   email to:, or;

c)   fax no.+39 06/69677.3785.


Directive updated August 2019

This site uses profiling cookies, if you continue browsing you consent to the use of these cookies. For more information see our Cookie Policy