Data Controller

Enel S.p.A. with registered office at Viale Regina Margherita 137, 00198 Rome, P.IVA 15844561009 (hereinafter, “Enel” or “Data Controller”), is the Data Controller of the personal data you provide by browsing the website openinnovability.com ("Site") and creating an account on the Open Innovability^® platform.

Data Protection Officer (DPO)

The Data Controller has appointed a DPO who can be contacted at the following email address: dpoenel@enel.com.

Processing Purpose and Method

Enel will process your personal data provided by you or automatically collected on the Site, such as first name, last name, e-mail, telephone number, address, professional experience, field of specialization, educational background and curriculum vitae and other similar information voluntarily shared with Enel upon registration or in connection with participation in the Challenges and related initiatives (“Personal Data”), in accordance with EU Regulation 2016/679 ("GDPR") and any other applicable privacy legislation.

The Personal Data shall be processed by Enel in its capacity as Data Controller and as Data Processor on behalf of the companies of the Enel Group. Should one of the other companies of the Enel Group be interested in exploring the solution proposed by you through the Open Innovability^® platform, such other companies, in turn, shall become independent data controllers of the Personal Data.

The processing of Personal Data means any operation or series of operations carried out on Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Personal Data will be processed manually and/or by automated means. We use physical, procedural, technical and administrative security measures to protect Personal Data against loss or theft and against unauthorized access and disclosure in order to protect your privacy.

Processing purpose and legal basis

Enel shall process Personal Data exclusively for purposes related to the services provided through the Site and the Open Innovability^® platform.

Your Personal Data may be processed to respond to your requests, to send you communications about the Challenges and Open Innovability^® services that may be of interest to you, and to improve our sites and services according to your needs.

The legal basis of the processing is the execution of the contract, through the acceptance of the terms and conditions of the Open Innovability^® platform as well as through participation in the Challenges. In any event, Enel will process your Personal Data only when one or more of the following legal bases apply:

a) free, specific, informed, unambiguous and express consent to the processing;
b) performance of a contract to which you are party;
c) legitimate interest of Enel;
d) a legal obligation to process Personal Data.

Recipients of Personal Data

Your Personal Data may be shared, for the purposes mentioned above, with:

a) the employees and collaborators of the Controller and other companies of the Group.

b) third party companies that perform outsourcing activities on behalf of Enel, expressly appointed as Data Processors. These third parties (e.g. Wazoku) usually provide ancillary services to our business activities, such as the provision of email distribution services, customer service or technical support. These companies are allowed to use Personal Data only to the extent necessary to provide these services.

c) other crowdsourcing platforms as well as with companies that have a partnership with Enel, which will act as independent data controllers.

e) with public authorities, where required by law, who will act as independent data controllers.

Transfer of Personal Data

Your Personal Data will be processed within the European Union and stored on servers located within the European Union. The same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, recognized by a specific adequacy decision of the European Commission.

Any transfers of Personal Data to non-EU countries, in the absence of a European Commission adequacy decision, will only be possible if Data Controllers and Data Processors involved provide adequate guarantees of contractual nature, including Binding Corporate Rules and Standard Contractual Clauses.

The transfer of your Personal Data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will be made only if you have explicitly consented to it or in the cases provided for by the GDPR and will be processed in your interest. In these cases, we inform you that, although the Enel Group adopts operating instructions common to all the countries in which it operates, the transfer of your Personal Data may be exposed to risks related to the peculiarities of local legislation regarding the processing of Personal Data.

Period of retention of Personal Data

The Personal Data being processed for the abovementioned purposes will be retained in compliance with the principles of proportionality and necessity and, in any case, until the purposes of the processing have been achieved. In any event, Personal Data will be retained for a period of 10 years as of the registration of the account. Data subject rights Pursuant to Articles 15 to 21 of the GDPR, in relation to the Personal Data provided, you have the right to:

a) access them and request a copy;
b) request amendment;
c) request cancellation;
d) obtain processing limitation;
e) oppose processing;
f) receive your data in a structured, commonly used and machine-readable format.

In order to exercise your rights and for further information on your Personal Data, you may send an e-mail to the following address: openinnovability-support@enel.com. We remind you that you have the right to send a complaint to the Italian Data Protection Authority - Piazza Venezia 11, 00187 Rome RM, by hand delivery, registered letter with acknowledgement of receipt or certified email addressed to protocollo@pec.gpdp.it, or to the competent supervisory authority.

Cookies

In relation to the procedures used to collect, by means of cookies and/or other tracking technologies, the information provided when your browser accesses openInnovability.enel.com or advertisements and other content managed by or on behalf of openinnovability.enel.com on other sites, we invite you to consult our cookie policy.