Eneas Services GDPR Privacy Policy

Who we are

Eneas Services is part of VENI Energy Group - a leading provider of energy services in the Nordic region, Germany and Spain. Through our services, we source energy for more than 40,000 customers and allocate and bill energy consumption for more than 10,000 end users.

Address: Ole Steens gate 10, 3015 Drammen, Norway

Contact information:

Web-based processing of personal data

The Web Editor has the day-to-day responsibility for the processing of personal data conducted by Eneas through the Eneas websites, unless otherwise stated below. It is voluntary for visitors to the web pages to provide personal data in connection with services such as “contact us” and “receive newsletters”. The basis for the processing is consent from the individual, unless specified otherwise.

Eneas is responsible for the content of its web pages. When you have clicked on a service, you leave our Web pages and go to a Web page of the company that owns the service concerned. This company is the data controller for its Web pages and may have different analysis tools and store different data about you than what VENI Energy does.

Telephone and E-mail

Eneas utilises E-mail and telephone numbers as a part of our daily work in communicating with customers, potential customers, employees and suppliers. When using E-mail, we will be able to process non-sensitive personal data. The same applies for telephone conversations, where central information may be entered into a journal. The legal basis for this processing is our legitimate interest in complying with our obligations to the registered customer.

E-mail addresses and telephone numbers for the customer’s contact persons are securely stored in our internal customer support systems and are not shared with other companies outside the group outside of our partners who contractually assist in providing our service. 

We have some instances of private facilities, typically as part of a business-to-business agreement, as well as related personal data to register and form invoices for these facilities. This data is securely stored in our internal customer support systems and are not shared with other companies outside the group outside of our partners who contractually assist in providing our service. We require this data to comply with our obligations to the registered customer, including the facility, in which achievement of the agreement constitutes the legal basis for this processing: 

Newsletter

You can subscribe to a newsletter whereby you receive an E-mail from us when we publish new information on our Web pages. Newsletters will be sent to the E-mail address you have already registered in our agreement with your company, and the E-mail address will be handled as described in the section concerning telephone numbers and E-mail addresses.

Storage and security for personal data

We will securely store your personal data as long as it is necessary for the purpose for which the personal data was collected. 

All customer data is securely stored in our internal customer support systems and we follow legal guidelines for the storage of personal and private data. Personal contact information and other personal data may be deleted following a given period after all customer activity ceases. Your personal data can be deleted before it is routinely deleted following a period of inactivity if we are informed by the customer that you are no longer a contact person, or for other reasons, provided it remains possible to comply with the agreement as intended. 

For example, this means that the personal data we process following your consent may be deleted if you request it, and if we do not require the personal data for other contractually stipulated reasons.

Our suppliers

Eneas utilises both internal and external service providers, for purposes such as operations, maintenance, and technical solutions, that may process personal data on our behalf. The processing subsequently occurs in accordance with our instructions and a data processor agreement that we have entered into.

Certain providers or sub-providers may be located or may make use of sub-providers located in countries outside the EU/EEA.  This means that personal data may be transferred to a country with regulations that do not provide the same degree of personal data protection as the rules in Norway. To ensure the protection of your data, such transfers may only occur in accordance with prevailing personal data protection legislation, e.g., by entering the EU’s standard contract for such transfers with the relevant provider. 

Your rights when we process personal data about you

You have the right to inspect the personal data we have recorded about you, and you can demand the correction or deletion of personal data that we process, provided that we do not require your personal data for contractually stipulated reasons. You also hold the right to object to, and request that we limit, the processing of data concerning yourself in certain situations. If we process information about you because this is needed to comply with an agreement, then you will hold the right to request that we transfer your data to another data controller. 

If processing is based on consent from you, we note for your attention that this consent may be withdrawn at any time.

Questions concerning our processing of personal data about you, as well as correction or deletion of this data, may be sent to

We will ask that you confirm your identity or provide further information before we let you make use of our rights with us. We do this to make sure that we are giving access to your personal data only to you – and not somebody else who is pretending to be you.

Complaints

If you are of the opinion that our processing of personal data does not accord with what we have described or in some other manner violates the personal data protection legislation, then you can complain to the Norwegian Data Protection Authority. More information on how to contact the Norwegian Data Protection Authority can be found at their Web site.

Changes

We will periodically possibly update the data protection declaration in order to reflect any possible changes at the Web site, to our Web site policies or if changes to governmental regulations require it. In the event of significant changes, we will provide individual notifications in the services that are affected