Last update: 25/11/2022
1.1. Principia S.p.A., which has its legal headquarters at, and its affiliates of the Principia perimeter (hereafter referred to as “Principia” or the “Controller”) will process the personal data you provided through the website (hereafter the “Website”) in compliance with applicable current privacy and personal data protection legislation, and this privacy policy.
2.1. The Data Protection Officer (DPO) can be contacted at the following email address
3.1.Principia will process the personal information you provide us, or which has been legitimately collected by the Controller (“Personal Data”). The following Personal Data in particular will be processed:
Common, Personal and Contact Data: name, surname, email address, telephone number and content of the message sent by you and other Personal Data that you may have provided during the communication. We will process this Personal Data in the case in which you make enquiries, request information or send us communications of any type. You send us this Personal Data at the moment in which you contact us. The processing of this Personal Data is necessary for us to provide a response to the communications received from you or to the requests that you have made. The provision of any further Personal Data by you is completely voluntary.
Browsing data: the IT and telematic systems and software procedures used for the functioning and use of the Site made available by Principia, acquire, during their normal operation, certain data (e.g. the date and time of access, the pages visited, the name of the Internet Service Provider and the Internet Protocol (IP) address through which you access the Internet, the Internet address from which you connected to our Site, etc.), whose transmission is implicit in the use of web communication protocols or is useful for the better management and optimisation of the data transmission and e-mail system.
3.2. For the purposes of this privacy policy, the processing of Personal Data means any operation or series of operations carried out on Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
3.3. Please note that such Personal Data will be processed manually and/or with the support of IT or data transmission devices.
3.4. Principia has adopted technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR, aimed at preventing and counteracting the loss of Personal Data, as well as unlawful or incorrect use and unauthorised access to data.
4.1. Principia will process your Personal Data for the achievement of specific purposes and only when there is an appropriate legal basis provided by the applicable data protection law. Specifically, Principia will process your Personal Data only when one or more of the following legal bases apply:
a) free, specific, informed, unambiguous and express consent to the processing;
b) performance of a contract to which you are party or the execution of pre-contractual measures adopted at your request;
c) legitimate interest of Principia, unless the interests or fundamental rights and freedoms of the data subject prevail;
d) legal obligation to process Personal Data to which Principia is bound.
4.2. The following table lists the purposes for which your Personal Data are processed by Principia and the legal basis on which the processing is based:
Purpose of Processing
Legal basis
Allow the use of all the features of the Site and to check the proper functioning of the Site
Performance of a contract
Execution of the security checks required by law and to ascertain liability in the event of computer crimes against the Site.
Legal obligationLegitimate Interest
Detection, prevention, mitigation and assessment of fraudulent or illegal activities in relation to the services provided on the Site
Legitimate interest
Reply to a question or request made by the data subject
Execution of pre-contractual measures adopted at the request of the data subject
Carry out, by Principia Companies, of market research, direct sales, including by telephone and e-mail, for the placement of products or services, for commercial and/or informative communications or marketing activities. Principia is present in different countries and, depending on the scope of the product/activities carried out, your contact Personal Data can be managed at central and/or local level.
Consent
Carry out, by identified companies of market research, direct sales, including by telephone and e mail, for the placement of products or services, for commercial communications or marketing activities.
Consent
Sending communications relating to initiatives, projects and events promoted by Principia Companies.
Legitimate Interest
4.3. The provision of your Personal Data is necessary in all instances in which processing is a legal requirement or necessary to the performance of a contract to which you are a party or to the implementation of pre-contractual measures adopted at your request. Any refusal on your behalf may make it impossible for Principia to perform the task for which your Personal Data has been collected.
4.4. The provision of your Personal Data, however, is voluntary for any further purposes and failure to give your consent in such cases will have no effect on the completion of the contract. The obligatory or optional nature of the provision of data will be specified at the moment of its collection.
5.1. Through the appropriate forms, you may freely decide whether or not to consent to the use of your Personal Data and contact details also for market research, direct sales, including telephone sales, for the placement of products or services, for commercial communications or marketing activities relating to the products and/or services offered by Principia or by other Companies in the Enel Group from time to time specifically identified in the data collection forms. Subject to your free and specific consent, for the purposes indicated above, your Personal Data may be processed by the Enel Group Companies identified, directly, as independent data controllers and/or by Principia, as Data Processor, on their behalf.
5.2. The prior acquisition of your consent for the marketing purposes described above is not required when contact is made through telephone numbers (landline and/or mobile) and paper mail addresses belonging to subjects present in public telephone directories, in relation to which the regulations regarding the Registro Pubblico delle Opposizioni (RPO) are applicable, allowing the processing of such contact data for those who have not exercised their right to oppose.
5.3. The e-mail address provided by you as part of any contracts concluded with Principia may be used by the latter to send commercial offers relating to products and/or services similar to those previously purchased by you (so-called soft-spam). You may, however, at any time object to the processing of your Personal Data by sending a request to the dedicated mailbox referred to in paragraph 9 of this privacy policy.
5.4. Your personal and contact data may also be processed by Principia in order to carry out, on the basis of its own legitimate interest and having first verified, with regard to each individual initiative, that the interests, rights or fundamental freedoms of the data subject do not prevail by means of a specific balancing test (Legitimate Interest Assessment), promotional activities for services and products offered by the Controller.
5.5. The processing of Personal Data for marketing purposes may be carried out using “traditional” methods (such as paper mail and/or operator calls), or through “automated” contact systems (such as SMS and/or MMS, phone calls without operator intervention, e-mail, fax, interactive applications).
5.6. Consent given by you for marketing purposes shall be understood to be given for both the methods indicated, without prejudice, however, to your right to object, even partially, in relation to the different communication channels through which the marketing purposes are carried out, in the manner indicated in paragraph 9 of this privacy policy.
5.7. Consent for marketing purposes is optional and does not prevent the possibility of benefiting from the products or services offered by Principia. Any consent given may be withdrawn at any time by sending a written communication to the e-mail address indicated in paragraph 9 of this privacy policy.
6.1. In order to pursue the purposes described in paragraph 4 of this Privacy policy, Principia may need to communicate, in Italy and abroad, including countries not belonging to the European Union, your Personal Data to third parties, in order to execute the Contract, to fulfil legal obligations or to carry out activities instrumental to the provision of the requested services.
6.2. Your Personal Data may be made accessible for the abovementioned purposes, to:
a) to employees and contractors of Principia, as persons authorised to process personal data;
b) the companies of the Enel Group in their capacity as autonomous data controllers or data processors as well as their employees and collaborators specifically appointed as Authorised Persons;
c) third party companies or other entities that carry out activities in outsourcing on behalf of the Data Controller, in their capacity as data processors, as well as their employees and associates specifically appointed as Authorised Persons.
6.3. Principia provides instructions to the Data Processors and Authorised Persons, if any, for the adoption of adequate security measures in order to guarantee the confidentiality, security and integrity of the data.
7.1. Your Personal Data will be processed within the European Union and stored on servers located within the European Union. The same Personal Data may be processed in countries outside the European Union, provided that an adequate level of protection is ensured, as recognized by the European Commission’s adequacy decision.
7.2. Any transfer of Personal Data to non-EU countries, in the absence of an adequacy decision by the European Commission, will only be possible if adequate contractual or pactual safeguards, including Binding Corporate Rules and standard contractual clauses, are provided by the data controllers and data processors involved.
7.3. The transfer of your Personal Data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will only be made where you have explicitly consented to it or in the cases provided for by the GDPR and will be processed in your interest. In these cases, we inform you that, although the Group adopts common operating instructions in all the countries in which it operates, the transfer of your Personal Data may be exposed to risks related to the peculiarities of local legislation on the processing of Personal Data.
8.1. The Personal Data being processed for the abovementioned purposes will be conserved in observance of the principles of proportionality and necessity and, in any case, until the purposes of the processing have been achieved and in accordance with any legal obligations that may be provided for.
8.2. In case you have a contractual relationship with the Data Controller, Personal Data shall be stored and processed as long as there is such contractual relationship and, in any case, for a period of 10 years from the termination of the contractual relationship, after which they shall be deleted, without prejudice to the further storage of the same where necessary to comply with specific legal obligations, provisions of the Authority, for the collection of residual credits and for the management of disputes, complaints and legal actions.
8.3. Your free and specific consent is always required in order to process your Personal Data and contact details for market research, direct sales, including telephone sales, for the placement of products or services, for commercial communications or marketing activities relating to the products and/or services offered by Principia or by other Companies in the Enel Group from time to time specifically identified in the data collection forms. Consent is optional. If you consent, your Data will be processed until the consent given is withdrawn.
9.1. Pursuant to articles 15 – 22 of the GDPR, in relation to the Personal Data communicated, you have the right, where applicable, to:
a) access and request a copy;
b) request any corrections;
c) request cancellation;
d) obtain limitations on the processing;
e) object to the processing;
f) receive such data in a structured, commonly used and machine-readable format and to transmit them without hindrance to another data controller; where technically feasible.
9.2. You also have the right not to be subjected to a decision based solely on automated processing unless the decision is necessary: a) for the conclusion or performance of a contract with the Data Controller; b) is authorized by law or c) is based on explicit consent. In cases a) and c) you have the right to express your opinion, dispute the decision and obtain human intervention by the Controller.
9.3. We inform you that you have the right to object at any time to the processing of Personal Data that concern you that may be carried out on the basis of the legitimate interest of Principia. In this case, the Data Controller shall refrain from further processing your Personal Data, unless it demonstrates the existence of compelling legitimate reasons to proceed with the processing, or for the ascertainment, exercise or defense of legal claims.
9.4. We also inform you that you still have the right to object at any time to the processing of Personal Data concerning you carried out for marketing purposes, insofar as it is related to such direct marketing. The right to object to such processing carried out through automated contact systems also extends to the processing of Personal Data through traditional contact methods, unless you wish to object only in part.
9.5. If you object to processing for marketing purposes, your Personal Data will no longer be processed for such purposes.
9.6. To exercise your rights and to withdraw your consent you may send a communication to the e-mail address:
9.7. For further information regarding your Personal Data, you may contact the Data Protection Officer, who can be reached at the following e-mail address:
9.8. Finally, we remind you that if you believe that the processing of your data has taken place in a manner that does not comply with European Regulation 679/2016 (GDPR), it is your right to lodge a complaint with the competent Supervisory Authority for the Protection of Personal Data.