Personal Data Controller
Enel S.p.A., with registered office in Viale Regina Margherita No. 137, 00198, Rome, VAT Number 15844561009, Tax Code 00811720580 and the other companies of the Enel Group (hereinafter, ""Enel"" or the ""Controller"") as the Data Controller, will process your personal data in accordance with the provisions of the applicable data protection legislation and this Policy.
Data Protection Officer (DPO)
The Controller has appointed a DPO who can be contacted at the following email address: firstname.lastname@example.org.
Purpose and Methods of Processing
The Controller will process your personal data, such as name, surname, email, etc., that you provided during registration on the Play Energy platform.
Processing of Personal Data for the purposes of this Policy shall mean any operation or set of operations which is carried out on Personal Data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction. We inform you that such Personal Data will be processed manually and/or with the support of computer or telematic means.
Purpose and legal basis of processing
Enel shall process your Personal Data in order to allow you to register for the Play Energy Programme, and to keep you updated on the initiatives associated with the Play Energy project. The legal basis for the processing is the contract, i.e. registration for the Play Energy programme.
Recipients of Personal Data
Your Personal Data may be made accessible, for the above-mentioned purposes, to:
1. employees and collaborators of the Data Controller or Enel Group companies operating in the European Union;
2. third party companies or other entities ("Third Parties") in their capacity as autonomous controllers, or carrying out outsourcing activities on behalf of the Controller, in their capacity as external data controllers; to individuals entrusted with data processing for this purpose.
Location and period of storage of Personal Data
Personal Data will be processed within the European Union and stored on servers located within the European Union. The same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, as recognised by a specific adequacy decision made by the European Commission. In the absence of an adequacy decision by the European Commission, any transfer of Personal Data to non-EU countries will only be permitted if adequate contractual or agreement-based safeguards, including Binding Corporate Rules and standard contractual data protection clauses, are provided by the Data Controllers and Processors involved.
In the absence of an adequacy decision or other appropriate measures as described above, the transfer of Personal Data to third countries outside the European Union will only be carried out where you have explicitly consented to this, or in the cases provided for in the GDPR, and will be processed in your best interests. In these cases, we would like to inform you that although the Enel Group adopts common operating instructions in all the countries in which it operates, the transfer of Personal Data may be susceptible to risks related to the peculiarities of local legislation on the processing of Personal Data. The Personal Data processed for the above purposes will be retained in accordance with the principles of proportionality and necessity, and in any event until the purposes of the processing have been fulfilled.
Rights of data subjects
Pursuant to Art. 15 - 21 of the GDPR, with regard to Personal Data, you have the right, where applicable, to: access and request a copy; request rectification; request erasure; obtain restriction of processing; object to processing; receive your Personal Data in a structured, commonly used and machine-readable format.
In order to exercise your rights, you may contact the controller at the following email address: email@example.com.
We remind you that you are entitled to lodge a complaint with the Guarantor for the Protection of Personal Data Piazza Venezia 11, Rome."