Privacy policy

Data Controller and Data Protection Officer

The controller of your personal data is Endesa Distribución, S.L.U (hereinafter, Endesa Distribución), holder of Tax ID No. B82846817. The contact details of the data controller are as follows:

Postal address: C/ Ribera del Loira, 60. 28042-Madrid

Telephone: 902 509 600

Endesa S.A., the parent company of the Endesa Group to which Endesa Distribución belongs, has appointed a Data Protection Officer, reporting to the Data Protection Officer for Spain, to whom you may refer any questions regarding the processing of your personal data. The contact details are as follows:

Postal address: C/ Ribera del Loira, 60. 28042-Madrid

Email: dpod@endesa.es

Purpose and processing

Processing of personal data related to compliance with the legal obligations and functions specified in the electricity sector regulations.

Endesa Distribución may process your personal data to comply with the legal obligations and functions specified in the electricity sector regulations governing distribution companies. These include the following: (i) provision of the distribution service on a regular and continual basis, with the quality levels established in the regulations currently in force; (ii) construction, operation and maintenance of the distribution grid as well as any connections with other grids; (iii) analysis of the applications used to connect to its distribution grid and management of connections according to the criteria established in the regulations; (iv) expansion of the distribution facilities as required to meet new electricity demands, ensuring an adequate level of service quality at all times; (v) maintenance of a database of supply points and provision of information as established in the regulations; and (vi) application, invoicing and collection of tariffs for accessing the transmission and distribution grids.

Processing of personal data through the website

Endesa Distribución collects personal data for the purpose of managing grid access contracts. It provides this website for you to view and manage your contract, including matters related to e-billing.

You can also use this channel to clarify queries, report an incident or file a complaint.

Additionally, you can use this website to request new services or access functions that require registration in the Private Area, in which case you will need to supply the personal data requested.

Please note that the data you enter on the forms must be truthful and their processing, automated or manual, is essential for the provision of the service requested.

Data retention period

Your data will be retained for as long as necessary to carry out the aforementioned purposes. As soon as they are no longer needed, your data will be blocked for the period during which they may be required for the exercise or defense against administrative or legal proceedings, and they may only be unblocked and processed again on these grounds. Once this period comes to an end, your data will be definitively canceled.

Recipients of personal data

As a general rule, your personal data will only be transferred to third parties when strictly necessary to respond to formal requirements from public administrations, authorities and other public bodies, including courts of law, as established in the applicable regulations.

They may be accessed by third parties that are required by contract to process your data for the provision of a particular service. Some of these third parties may be located outside the European Economic Area. In particular, your data may be accessed by suppliers located in:

•    India

•    Colombia

•    The Philippines

Endesa Distribución is legally empowered to transfer your data for these purposes since it has received authorization from the Spanish Data Protection Agency.

Lawful basis for processing data

The lawful basis for the processing activities conducted by Endesa Distribución is compliance with the legal obligations specified in Article 40 of the Electricity Sector Act (Law 24/2013 of 26 December), its implementation regulation and any other regulation that may amend or replace the current regulatory framework.

Furthermore, the processing of your data to manage your registration as a user as well as other web services is based on the legitimate interest of Endesa Distribución in carrying out that registration and those web services correctly.

Security measures

In order to ensure the efficient implementation of this Data Protection Policy, Endesa Distribución has adopted the necessary technical and organizational security measures to prevent the alteration, loss, misuse, unauthorized access and handling or theft of data, in accordance with the state of technology.

Rights of data subjects

You may exercise your rights of access, correction, cancellation, restriction and data portability in the cases and within the scope set out in the applicable regulations at any given time.

To exercise these rights, you may send a signed, written request to Endesa Distribución at the following address: GDPR Requests, Endesa Distribución, C/ Ribera del Loira 60, 28042 Madrid. Alternatively, you may send an email to edeweb@endesa.es with the following information: your full name, address for notifications, photocopy of your national identity card, and specific details of your request.