Privacy Notification

Privacy Notification


1.      Data Controller and Data Processor

1.1   Enel X Italia S.r.l., with registered office at Via Flaminia 970, 00189 - Rome, VAT No. 15844561009( hereinafter "Enel X Italia" or the "Data Controller"), as Data Controller, will process your personal data provided via the website (hereinafter the "Site") in accordance with the provisions of the applicable legislation on privacy and protection of personal data and this Policy.

1.2   When registering for various services or accessing them, the names of any other data controllers and processors will be communicated.


2       Data Protection Officer (DPO)

2.1   Enel X Italia has appointed a Data Protection Officer (DPO) who can be contacted at the following e-mail address:


3       Object and Methods of Processing

3.1   Enel X Italia will process the personal data you have communicated or it has legitimately obtained ("Personal Data"). In particular, the following Personal Data is processed:

·        Contact details: name, surname, e-mail address, telephone number and the content of the message you have sent, and other Personal Data that may have been provided to us during communications. We will process this Personal Data in case you send us queries, request information or send us communications of various kinds. You sent us this Personal Data when you contacted us.

The processing of this Personal Data is necessary to respond to the communications received or requests made by you. The further provision of Personal Data must be considered absolutely optional.

·        Browsing data: the IT and telematic systems and software procedures used to operate the Site, or those dedicated to the operation and use of the APPs made available by Enel X Italia, acquire certain data during their normal operation (e.g. the date and time of access, the pages visited, the name of the Internet Service Provider and the Internet Protocol (IP) address through which you access the Internet, the Internet address from which you connected to our Site, etc.), whose transmission is implicit in the use of web communication protocols or is useful for the better management and optimisation of the data transmission and e-mail system.

·        Data for the reserved area: when creating the unique Enel profile, you will be required to provide certain Personal Data, such as: name, surname, e-mail address, mobile phone number, tax code and user code, necessary to successfully complete the registration and to use the services offered by the Enel Group companies accessible via the web through the unique profile. Enel X Italia also allows you to access the reserved area through the APP or through the use of credentials provided by a social network (so-called "social login"), in particular using identities created on Facebook and Google+.

3.2   For the purposes of this policy, the Processing of Personal Data is intended as any operation or set of operations performed with the aid of automated processes and applied to Personal Data, such as the collection, registration, organisation, structuring, storage, adaptation or modification, extraction, consultation, use, communications by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, deletion or destruction.

3.3   We inform you that this Personal Data will be processed manually and/or with the aid of computerised and/or telematic means.


4       Purpose and legal basis of the processing

4.1   Enel X Italia will process your Personal Data for the achievement of specific purposes and only in the presence of a specific legal basis provided for by the applicable law on privacy and protection of personal data. Specifically, Enel X Italia will process your Personal Data only when one or more of the following legal bases occurs:

-        you have given your free, specific, informed, unequivocal and express consent to the processing;

-        the processing is necessary for the execution of a contract of which you are a party or for the execution of pre-contractual measures adopted at your request;

-        in the presence of a legitimate interest of Enel X Italia;

-        Enel X Italia is bound by a legal obligation to process Personal Data.

4.2   The following table lists the purposes for which your Personal Data is processed by Enel X Italia and the legal basis of such processing.


Purposes of data processing

Legal basis

It allows the use of all the functions of the Site.

Performance of a contract

Check the Site for proper operation.

Performance of a contract

Allow the registration and/or access to the reserved area through the unique profile

Implement pre-contractual measures taken at the request of the data subject

Performance of a contract

Assessment of liability when computer crimes harm the Site. Detection, prevention, mitigation and assessment of fraudulent or illegal activities in relation to the services provided on the Site. Carrying out of the security checks required by law.

Legitimate interest

Legal obligation

Provide a response to a question or request made by the data subject

Implement pre-contractual measures taken at the request of the data subject

Use of the APP made available by Enel X Italia and use of the related services.

Performance of a contract

Management of the application form compiled by the customer (lead) with his or her personal data already entered, continue with its compilation by telephone and allow the customer to finalise the application process by accessing a link which Enel X Italia can send to his or her e-mail box. As an alternative, it can be accessed and compiled in the Reserved Area, also by sending a One Time Password to the mobile number indicated during the registration phase.

Implement pre-contractual measures taken at the request of the data subject

Allow Enel X Italia to fulfil its legal or regulatory obligations or those established by EU regulations.

Legal obligation


4.3   The provision of your Personal Data is necessary in all cases where processing is carried out on the basis of a legal obligation or to execute a contract of which you are a party or due to the implementation of pre-contractual measures taken at your request. Your eventual refusal could entail Enel X Italia's impossibility to proceed with the purpose for which the Personal Data is collected.

4.4   The provision of your Personal Data is voluntary for the pursuit of additional purposes and the failure to provide your consent in relation to them will have no consequences on the conclusion of the contract. The mandatory or optional nature of the provision will be specified at the time of collection.


5       Unique Profile: registration and access to the reserved area

The reserved area can only be accessed via the unique Enel profile. In order to continue to access the reserved area, even registered users must accept the Terms and Conditions for the creation of the new unique profile, as it is no longer possible to use the previous one.

5.1   Registration: Personal Data is collected when the unique profile is created on one of the web portals or Apps dedicated to this authorisation. The creation of the unique profile allows you to access, the web portals and mobile App of Enel enabled companies by using just one username and password.

5.2   Access after registration: It is possible to access the reserved area only through the unique Enel profile.

After creating the Enel profile, some Personal Data may be made available to other Group companies with access to your unique profile if you wish to access their reserved areas of the web portals and mobile App. The data will be processed for the sole purpose of verifying your credentials and allowing you to access these easily and without additional charges from any country in which an Enel authorised company is present.

5.2.1        Access to the reserved area is allowed using the following methods:

a) creating an account through this web portal, or other portals or mobile App of Enel Group companies authorised to create a unique profile.

b) through the use of credentials provided by a social network (so-called "social login"), in particular the identities created on Facebook, Twitter and Google+.

If you decide to access the reserved area using the credentials of a social network, Enel X Italia will have to acquire some of your personal data (Name, Surname, E-mail) in accordance with the authorisations you have given the relative social network. You are therefore required to check the settings envisaged by the relative social network and carefully read its privacy policy, as this could authorise the social network to share your personal data with Enel X Italia, thereby authorising Enel X Italia to collect information such as contacts, friends and other Personal Data. In any case, Enel X Italia will not acquire the login details you use.

Enel X Italia will keep the identification code associated with your account at the service of the relative social network when you use it to log in to the Enel X Italia Site or share contents hosted by the Site; it will be kept for as long as necessary to provide the required services.

If you create an Enel X Italia account or use the Site's services by connecting through the social login, Enel X Italia may use the information contained in the account of origin to complete your profile on the Site. You may at any time update or modify your profile information and contact details via the social login.


6       Recipients of Personal Data

For the aforementioned purposes, your Personal Data may be made accessible to:

a) employees and collaborators of Enel X Italia, specifically appointed persons Authorised for the processing, or Enel Group companies present in the European Union as independent Data Controllers or Data Processors;

b) third-party companies or other parties which perform certain outsourced activities on behalf of Enel X Italia, in their capacity as external processors;


7       Transfer of Personal Data

Your Personal Data will be processed within the European Union and stored on servers located within the European Union. The same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, recognized by a specific adequacy decision of the European Commission.

Any transfers of Personal Data to non-EU countries, in the absence of a European Commission adequacy decision, will only be possible if Data Controllers and Data Processors involved provide adequate guarantees of contractual nature, including Binding Corporate Rules and Standard Contractual Clauses.

The transfer of your Personal Data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will be made only if you have explicitly consented to it or in the cases provided for by the GDPR and will be processed in your interest. In these cases, we inform you that, although the Enel Group adopts operating instructions common to all the countries in which it operates, the transfer of your Personal Data may be exposed to risks related to the peculiarities of local legislation regarding the processing of Personal Data. 


8       Personal Data retention period

Personal Data processed for the purposes set out above will be retained in compliance with the principles of proportionality and necessity, and in any case until the purposes of the processing have been fulfilled.


9       Rights of data subjects

9.1   Pursuant to Articles 15 - 22 of the GDPR (General Data Protection Regulation), in relation to the Personal Data communicated, you have the right, where applicable, to:

a)    access and request a copy;

b)   request its correction;

c)    request its deletion;

d)   obtain a restriction of processing;

e)   oppose the processing;

f)     receive data in a structured format, commonly used and readable by an automatic device and transmit them to another data controller, where technically feasible, without any impediment.

9.2   We inform you that you have the right to object to the processing of your Personal Data at any time, on the basis of the legitimate interest of Enel.

9.3   If you object to the processing of your Personal Data as indicated in Article 9.2, the Data Controller will refrain from any further processing of your Personal Data, unless it demonstrates the existence of binding legitimate reasons to proceed with the processing, or for the assessment, exercise or defence of a right in court.

9.4   To exercise your rights and withdraw your consent, you can send a communication to the e-mail address:

9.5   For more information regarding your Personal Data, you can contact the Personal Data Protection Officer, who can be reached at the following e-mail address:

9.6   We remind you that you have the right to lodge a complaint with the Italian Data Protection Authority via:

a) registered mail with return receipt addressed to the Italian Data Protection Authority, Piazza Venezia, 11, 00187 Rome;

b)   e-mail to the address: or;

c)   fax to the number: 06/69677.3785.


Policy updated in February 2021