E-REDES
Personal Data Protection
Data Processing (general)
As the operator and concessionaire of electricity distribution networks, E-REDES is responsible for processing the personal data it obtains in the course of carrying out its activities, either through direct collection or through the provision by electricity suppliers of the data necessary for the technical and commercial management of the distribution network resulting from their commercial relationship with their customers, in accordance with the legal and regulatory framework for the electricity sector.
Data Processing Telemetering
The data collected by the smart metering system (EMI) is processed by E-REDES with due regard for the fundamental rights of the data subject and used exclusively to ensure compliance with legal obligations and the legitimate interests of E-REDES, only for the period strictly necessary to fulfil the processing purposes and with certain and determinable retention periods.
The personal data collected and processed by E-REDES through its EMI is mainly quarter-hourly energy consumption data, via a load diagram, while other data may also be collected, associated with the different functions provided for by law, such as tariff data (contracted power, current tariff), instantaneous magnitude data (power, voltage, current), closures, power control related to ICP, demand management data, time and time change, events (power failures, updates, lid opening and other anti-fraud), data related to quality of service (duration of interruptions and periods of voltage variations), HAN access profile data, firmware version and reset data.
Personal data is processed only for the strictly necessary period for which it was collected in order to fulfil the following processing purposes: Reading and making data available, Consumption anomalies, Customer service and complaints handling, Interventions at the consumption site, Reporting to the Regulator, Operational efficiency and continuous improvement, Audits, Legal and Administrative, and is kept for a maximum period of 10 years.
The data subject is guaranteed the right to access, rectify and limit their personal data, as well as the right to object to processing, portability and to be forgotten, provided that the exercise of these rights is not incompatible with the fulfilment of the stated purposes and with the legal obligations to maintain and retain data. In order to exercise these rights, the data subject must submit a written request to E-REDES, using the official contact details published on the E-REDES website, or go to any E-REDES service point.
E-REDES may transmit the data to subcontractors, who will exclusively process the data for the purposes established by E-REDES and in compliance with the instructions issued by the latter, strictly complying with the legal rules on the protection of personal data, information security and other applicable rules.
The provision of personal data to third parties, other than those covered in the previous point, is dependent on the prior obtaining of the data subject's consent in a free, specific, informed, unequivocal, express and revocable manner, and will be processed under the strict terms provided for in the applicable legislation and regulations, or when the transmission is made in the context of the fulfilment of a legal obligation, a decision by the authorities, a court order, to protect the vital interests of the data subjects or any other legitimate purpose provided for by law.
E-REDES undertakes to use its best endeavours to implement the appropriate technical and organisational measures to protect the personal data of the respective owners against unauthorised access. To this end, it uses security systems, rules and other procedures to prevent accidental or unlawful destruction, accidental loss, alteration, dissemination or unauthorised access.
If you consider that E-REDES has not in any way ensured your rights under the terms of the applicable data protection legislation, you may lodge a complaint with the National Data Protection Commission, Supervisory Authority, using the contacts provided by this organisation for this purpose.
For any questions related to the General Data Protection Regulation, you can contact the Data Protection Officer at the following email address: dpo@e-redes.pt