Skip to main content

PLAY ENERGY COMPETITION 

Privacy Notice pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) 

Data Controller

Enel S.p.A, with registered office at viale Regina Margherita no. 137, 00198, Rome, VAT no. 15844561009, in its capacity of Data Controller (hereinafter, the “Controller”), will process your personal data in accordance with GDPR, applicable data protection legislation and this privacy notice. 

Data Protection Officer (DPO)

The Controller has appointed a DPO who can be contacted at the following email address: dpoenel@enel.com. 

Processing Purpose and Method

The Controller shall process your Personal Data, such as personal data and contact details (such as name, surname, e-mail address, identity document and tax code) acquired in the context of the Competition (hereinafter, the “Personal Data”).

For the purposes of this notice, the processing of Personal Data means any operation or series of operations carried out on Personal Data, whether or not by automated means, in accordance with the provisions of the applicable legislation on the protection of personal data. Personal Data will be processed manually and/or with the support of computer or telematic means. The Controller has implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR, aimed at preventing and counteracting the loss of Personal Data, as well as unlawful or incorrect use and unauthorized access.

Processing purpose and legal basis

The Controller will process Personal Data in order to enable your participation in the Competition and the related enrollment on the dedicated site. The legal basis for the processing of Personal Data is your acceptance of the terms and conditions set out in the Competition Regulation. 

Recipients of Personal Data

Exclusively for the above purposes, your Personal Data may be made accessible to

  1. to employees and collaborators of the Controller or Enel Group companies;
  2. to third party companies or other subjects who perform outsourcing activities on behalf of the Controller, in their capacity of Processor.

Transfer of Personal Data

Your Personal Data will be processed within the European Union and stored on servers located within the European Union. The same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, recognized by a specific adequacy decision of the European Commission.

Any transfers of Personal Data to non-EU countries, in the absence of a European Commission adequacy decision, will only be possible if Data Controllers and Data Processors involved provide adequate guarantees of contractual nature, including Binding Corporate Rules and Standard Contractual Clauses.

The transfer of your Personal Data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will be made only if you have explicitly consented to it or in the cases provided for by the GDPR and will be processed in your interest. In these cases, we inform you that, although the Enel Group adopts operating instructions common to all the countries in which it operates, the transfer of your Personal Data may be exposed to risks related to the peculiarities of local legislation regarding the processing of Personal Data. 

Period of retention of Personal Data

Personal Data processed for the above purposes will be stored in accordance with the principles of proportionality and necessity and in any case until the purposes of the processing have been fulfilled. Personal Data will, in any event, be deleted 3 years after the event or the completion of the advertising campaign relating to the Competition.

Data subject rights

Pursuant to Articles 15 to 21 of the GDPR, in relation to the Personal Data provided, you have the right to:

  1. access them and request a copy;
  2. request amendment;
  3. request cancellation;
  4. obtain processing limitation;
  5. oppose processing;
  6. receive your data in a structured, commonly used and machine-readable format for the purpose of exercising the right to portability.

In order to exercise your rights, as well as for further information regarding your Personal Data, you may contact the Data Protection Officer of the Controller, who can be reached at the above-mentioned e-mail address. You always have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali, based in Rome, Piazza Venezia 11, 00187 Rome, Tel. (+39) 06.696771, e-mail: protocollo@gpdp.it.

Close Menu