E-REDES
Personal Data Protection
Data Processing (general)
As an operator and concessionaire of electricity distribution networks, E-REDES is responsible for the processing of personal data that it obtains in the exercise of its activities, either through direct collection, or through the Provision that is made by the electric energy suppliers of the data necessary for the technical and commercial management of the distribution network resulting from the commercial relationship of those with their customers, as is apparent from the legal framework and Regulatory framework for the electricity sector.
Data Processing Telemetering
The data collected by the smart meters (EMI) are processed by E-REDES with due safeguard of the fundamental rights of the data subject and used exclusively to ensure compliance with legal obligations and the legitimate interests of E-REDES, only for the period strictly necessary for the pursuit of processing purposes and with certain and determinable retention periods.
The personal data collected and processed by E-REDES through the respective EMI are mainly data on quarter-hourly energy consumption, through a load diagram, and other data may also be collected, associated with the different legally foreseen functions, such as tariff data (contracted power, tariff in progress), data of instantaneous quantities (power, voltage, current), closures, power control related to ICP, demand management data, time and time change, events (power failures, updates, cover opening and other anti-fraud), data related to quality of service (duration of interruptions and periods of voltage variations), HAN access profile data, firmware version and reset.
Personal data is only processed for the period strictly necessary for which they were collected for the following processing purposes: Reading and availability of data, Consumption Anomalies, Customer Service and Complaints Handling, Interventions at the consumption site, Regulatory Reporting, Operational Efficiency and Continuous Improvement, Audits, Legal and Administrative, and are kept for a maximum period of 10 years.
The data subject is guaranteed the right of access, rectification and limitation of their personal data, as well as the right to object to the processing, portability and right to be forgotten, whenever the exercise of these rights is not incompatible with the fulfilment of the stated purposes and with the legal obligations of maintenance and retention of data. To exercise these rights, the data subject must send a written request to E-REDES, through the official contacts published on the E-REDES website, or address any E-REDES store.
E-REDES may transmit the data to subcontracting entities, which will process the data exclusively for the purposes established by E-REDES and in compliance with the instructions issued by it, strictly complying with the legal rules on personal data protection, information security and other applicable rules.
The availability of personal data to third parties, which are not covered in the previous point, is dependent on the prior consent of the data subject being obtained in a free, specific, informed, unequivocal, express and revocable manner, and shall be carried out under the strict terms laid down in the applicable legislation and regulations, or even when the transmission is carried out in compliance with a legal obligation, a decision by the authorities, a judicial order, to protect the vital interests of the data subjects or any other legitimate purpose laid down by law. E-REDES will process personal data entirely within the European Economic Area and therefore no international transfer of personal data is foreseen.
E-REDES undertakes to make its best efforts to implement the appropriate technical and organisational measures to protect the personal data of its holders against unauthorised access. For this purpose, it uses security systems, rules and other procedures to prevent its destruction, accidental, or unlawful, accidental loss, alteration, dissemination or unauthorised access.
If you believe that E-REDES has in any way failed to ensure its rights under the applicable legislation on data protection, you may file a complaint with the National Data Protection Commission, Supervisory Authority, using the contacts provided by this entity for this purpose.
For any questions regarding the General Data Protection Regulation, you may contact the Data Protection Officer at the following email address: dpo@e-redes.pt.