Basic information about protection of personal data
DATA CONTROLLER | Energía XXI comercializadora de referencia S.L.U. |
---|---|
PURPOSES | To process and manage social rebate application. |
LAWFUL BASIS | Royal Decree 897/2017 of October 6, which regulates the vulnerable consumer, the social Rebate and other domestic electric power consumers and Order ETU/943/2017 of October 6 that implements it. |
RECIPIENTS | The data provided shall not be transmitted to third parties, except as a result of a legal obligation. Additionally, your personal data may also be accessed by the any service providers that Energía XXI comercializadora de referencia S.L.U. hires or contracts which have the status of Data Processing Managers. |
RIGHTS | Access, rectification, cancellation, limitation of processing and transferability of the data in the cases and within the scope established by the legislation applicable at the time. |
FURTHER INFORMATION | Further information about Energía XXI comercializadora de referencia S.L.U. data protection policy is available in the section Data Protection Policy. |
Data protection policy:
1. Data controller with responsibility for processing your personal data
The entity in charge of processing your personal data is Energía XXI comercializadora de referencia S.L.U. ("Energía XXI") with Spanish tax identification number (CIF) B82846825. The contact details for the responsible entity are as follows:
Postal address: Calle Ribera del Loira, 60. 28042-Madrid, Spain.
2. Purpose of processing personal data
Data and client information will be used to process and manage the social rebate application according to what is provided in Royal Decree 897/2017, of 6 October, which regulates the status of vulnerable consumers, the social rebate and other measures of protection for domestic consumers of electric power.
Under no circumstances, according to what is provided in Article 3 of Order ETU/943/2017 of October 6, which implements Royal Decree 897/2017 of October 6, which regulates the vulnerable consumer, the social rebate and other protection measures for consumers of electrical power, does Energía XXI comercializadora de referencia S.L.U. request or access information or sensitive data of interested parties during processing and management of the social rebate application (only the documentation detailed in Article 2.7 of the above Order).
Additionally, Energía XXI comercializadora de referencia S.L.U. will have the right to process your personal data in order to comply with any legal obligation that may be incumbent upon it, specifically obligations related to the regulation of the energy market or commercial regulations, among others.
Retention period for personal data
Information and personal data of interested parties shall be preserved while necessary for the purposes for which they have been collected. As soon as they are no longer required for this purpose, they will be blocked for the period during which they may be needed for use or defence in administrative or judicial procedures and may only be released and reprocessed for this purpose. Once this period has expired, the data will be permanently deleted.
3. Recipients of your Personal Data
Your personal data may be transferred to public agencies, authorities and bodies, including courts and tribunals, when required by the applicable legislation.
Your personal data may also be accessed by the any service providers that Energía XXI comercializadora de referencia S.L.U. hires or contracts which have the status of Data Processing Managers. In addition, some of these data processors may be located in the United States or outside the European Economic Area. In particular, your data may be accessed by service providers located in:
- Colombia.
- Peru.
- The United States.
Energía XXI comercializadora de referencia S.L.U. has legal authorization to carry out this type of transfer, since it has been authorized for all such transfers by the Director of the Spanish Data Protection Agency.
4. Lawful basis for processing data
The legal basis for implementation of the purpose included in the the section above is compliance with Royal Decree 897/2017 of October 6, which regulates the vulnerable consumer, the social Rebate and other domestic electric power consumers and Order ETU/943/2017 of October 6 that implements it.
Refusal to provide the requested information or personal data or providing them in an inaccurate or incomplete manner may make it impossible to manage or process the social rebate application. Users are responsible for the veracity of the documentation and of the data provided, as well as for notifying Energía XXI comercializadora de referencia S.L.U. of any modification of the same.
5. Security Measures
In order to make its data protection policy efficient and effective, Energía XXI comercializadora de referencia S.L.U. has adopted the technical and organisational security measures necessary to avoid the alteration, loss, misuse, treatment and unauthorised access or theft of the said data, taking into account the current state of technology.
6. Data Subjects’ Rights in Relation to the Processing of their Personal Data
You will be able to exercise your rights of access, rectification, cancellation, limitation of processing and transferability of the data in cases and within the scope established by applicable legislation at any time. To exercise these rights, you may contact Energía XXI comercializadora de referencia S.L.U. through any of the following channels:
- By sending a written request by post, attaching a photocopy of your D.N.I., passport or any other identification document to Apartado Postal 1128, 41080 – Sevilla, for the attention of: Energía XXI.
- By sending an email to the address solicitudeslopd.exxi@energiaxxi.com with the following information: your first name and surname, address for the purposes of notifications, a photocopy of your national identity card, passport or other identity document, and your written request.
You are also informed of your right to file a complaint with the Spanish Data Protection Agency.
7.Source of Data
The information and personal data subject to treatment by Energía XXI comercializadora de referencia S.L.U. are those provided by you for managing and processing the social rebate application.
8. Data Protection Officer
If you have any questions regarding the purposes of processing your personal data or its legitimacy, you may contact the Data Protection Officer.
Endesa S.A., the parent company of the Endesa Group of which Energía XXI comercializadora de referencia S.L.U. forms a part, has appointed a Data Protection Officer for this company, who answers to the Data Protection Officer for Spain, with whom he/she will be able to highlight any question concerning the processing of your personal data, and whose contact details are as follows: Postal address: Calle Ribera del Loira, 60. 28042-Madrid, Spain. Email: dpoc.exxi@energiaxxi.com.