INFORMATION REGARDING THE PROCESSING OF YOUR PERSONAL DATA THROUGH THE MyEnerwave APPLICATION (Data Privacy Notice) 

Enerwave S.A. places great importance on the protection of your personal data and adheres to the principle of transparency regarding their processing. If you would like to obtain general information about the processing of your personal data by Enerwave, please read the General Data Protection Notice, which is available here. 

This notice is intended to provide you with specific information regarding the processing of your personal data when using the MyEnerwave Application (hereinafter referred to as "the Application"). 

 

1. Identity and Contact Details of the Data Controller 

The Data Controller is Enerwave POWER GENERATION SINGLE-MEMBER SOCIÉTÉ ANONYME ("Enerwave") – hereinafter referred to as the Company – with its registered office at 6 Fragkokklisias Street, Marousi, Attica, Tax Identification Number 999717970, Attica Tax Procedures and Service Provision Center (KEFODE), and General Commercial Registry (G.E.MI.) Number 009246101000. 

 

2. Contact point for personal data protection matters 

For information regarding the protection of your personal data, you may contact Customer Service via phone at 18340 or via email at dpo@enerwave.gr.

 

3. Categories of personal data collected and processed and purposes of processing 

The Application provides users with management services related to their electricity and/or natural gas supply, such as creating a profile on the MyEnerwave platform/app, bill payments, viewing billing history, submitting meter readings, managing service termination requests, etc. (hereinafter referred to as the Services). Through the Application, we collect and/or process: 
 
Data necessary for the provision of the Services through the Application [Legal basis for processing: performance of a contract, Article 6(1)(b) of the General Data Protection Regulation (hereinafter the GDPR)]. More specifically: 

Management of Payments through the MyEnerwave Application  

  • Basic personal data (full name, father's name, phone number, address, etc.)
  • Unique identifiers (TIN, ID Number, etc.)
  • Financial data (bill amount, payment code) 

Management of service termination requests through the MyEnerwave Application 

  • Supply data (supply number, supply property address) 
  • Financial data (Customer’s IBAN) 

 

Data processed based on your explicit consent [Legal basis for processing: Consent, (Article 6(1)(a) of the General Data Protection Regulation (GDPR)]. 

MyEnerwave Platform Management (Account Creation) 

  • Basic personal data (full name, father's name, tel., address, date of birth, email, user name, etc.) 
  • Unique identifiers (TIN)  
  • Metering data (energy consumption, energy usage patterns, electricity and/or gas supply number) 
  • Billing data (electricity and/or natural gas billing history in PDF format) 

Performance of individual Promotional Actions through MyEnerwave 

  • Basic personal data (full name, father's name, tel., address, date of birth, email, user name, etc.) 
  • Unique identifiers (TIN) 
  • Metering data (energy consumption, energy usage patterns, electricity and/or gas supply number) 

Conducting Promotional Activities through Competitions  

  • Basic personal data (full name, tel., email) 

 

4. Retention period for personal data 

Enerwave S.A. retains your supply-related personal data for a period not exceeding five (5) years from the termination or expiration of the contract, except in cases of pending litigation or administrative proceedings, when the retention period is extended until the issuance of an irrevocable decision or the completion of the procedure before the competent Administrative Authority. 

Personal data necessary for your participation in competitions is retained for the duration specified in the terms of each respective competition. 
 

5. Will Enerwave S.A. process your personal data for other purposes? 

Enerwave S.A. will not process your personal data for any purposes other than those specified above. If Enerwave S.A. intends to use your personal data for any additional purposes, it will do so only after informing you accordingly and obtaining your explicit consent. 
 

6. Recipients of your personal data 

Your personal data may be disclosed to financial institutions that process electronic payments for products and/or services. 

Additionally, third-party companies that collaborate with us for the provision and support of our Services, and specifically: 

For the implementation of the Application: SingularLogic, headquartered in Cholargos, Attica (190-194 Mesogeion Avenue). 

For internal communications via email: "Microsoft Ireland Operations Limited" 

For customer relationship management: "Salesforce affiliates" (e.g., Salesforce.com Germany GMBH, Italy S.R.L.). 

For conducting promotional activities through competitions: Avakon Digital Marketing & Communication Single-Member S.A., headquartered in Pikermi, Attica (10 Anemon Street), as well as other potential advertising agencies. 

In these cases, the third-party companies act as data processors on behalf of Enerwave S.A., namely as partners of Enerwave S.A. who undertake specific tasks under our instructions and in compliance with Enerwave S.A.'s strict procedures for the processing of your personal data. In such cases, Enerwave S.A. remains responsible for the processing of your personal data. 

The processing of your personal data for the aforementioned purposes by our partners takes place primarily within Greece and the European Union (EU). If we collaborate with companies located outside the EU, they will process your data only under our instructions and provided that there is an adequacy decision by the European Commission, or appropriate contractual safeguards have been established to ensure a high level of data security in accordance with GDPR requirements. 

Apart from the recipients mentioned above, Enerwave S.A. does not process or disclose your personal data to third parties, except where such disclosure or transfer is required by applicable law. 
 

7. Your rights as users of the application regarding the processing of your personal data 

Right of Access: You have the right to obtain information about the personal data we process (e.g., processing purposes, data categories, recipients to whom the data is disclosed, their retention period) and to receive copies of such data. 

Right to Rectification: You have the right to request the correction and/or completion of your personal data (e.g., updating your address, contact details, identity number). 

Right to Erasure: You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was processed, or when you have withdrawn the consent upon which the collection and processing was based. 

Right to Restriction of Processing: You have the right to request the restriction of processing for a specific purpose. 

Right to Data Portability: You have the right to receive the personal data you have provided to the company in a structured, commonly used, and machine-readable format.  

Right to object to the processing of your personal data in cases when you do not wish for it to be processed. 

Right to withdraw your consent, in case you have provided it for any reason, without affecting the lawfulness of processing carried out based on your initial consent. 

If you wish to receive further information regarding the processing of your personal data or to exercise any of your above rights, you may contact the Company via physical correspondence at: Enerwave S.A., to the attention of the Data Protection Officer (DPO), 6, Fragkokklisias St., 15125 Marousi, and/or via e-mail to the Data Protection Officer (DPO) at the e-mail address dpo@enerwave.gr. 

Our response to your request will be provided within (1) one month from its receipt and will not entail any cost for you. The above deadline may be extended for a period of two (2) additional months, due to the complexity or number of requests, in which case you will be informed of the extension and its reasons as soon as possible and at the latest within a month from the receipt of the request. If we determine that your request is manifestly unfounded or excessive, we reserve the right to charge a reasonable fee, taking into account the administrative costs involved in processing your request, or decline to take further action on your request. 

You also have the right to submit a written complaint to the competent supervisory authority, the Hellenic Data Protection Authority (1-3 Kifissias Avenue, 115 23, Athens, Greece, +30 210 6475600, email contact@dpa.gr.  

If you believe that we have not adequately addressed your request or that your personal data protection rights have been infringed in any way, you may lodge a complaint through the dedicated online portal to the Personal Data Protection Authority (Athens, 1-3 Kifissias Avenue, P.C. 115 23| tel: +30 210 6475600). For detailed instructions on how to submit a complaint, please visit the website of the Authority. 
 

8. What measures are implemented to protect your personal data? 

Enerwave S.A. implements appropriate organizational and technical measures to ensure personal data security and to protect it against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access, and any other form of unlawful processing. 

The last amendment was made on 14/03/2025.