ENKI
Versione del 21 maggio 2026
The purpose of this policy is to detail and transparently explain the various manipulations (or "processing operations") carried out on your personal data; where, when, how and why they are processed, as well as your rights over your data.
Your personal data: what are we talking about?
Personal data is any information that allows you to be recognized, directly or indirectly.
This includes your "everyday" identifying information (e.g., name, first name, address, phone number, etc.) but also more subtle and/or technical information (e.g., account identifier, purchase history, IP address of a connected product, etc.) that can also be traced back to you.
Actions performed on your data
Processing is any action or manipulation that we perform on your data. This includes, for example: their collection when you create your account, their recording in our systems, their use for customer relationship management, or their deletion when they are no longer necessary.
Our role and that of our partners in the use of your data
The data controller is the entity that decides why and how your data is used. In the vast majority of cases,
ENKI HOME is the company that decides why your data is necessary and how it is used. As such, ENKI HOME, a public limited company with a capital of 37,000 euros, with its registered office at 40 RUE DE LA VAGUE 59650 VILLENEUVE D ASCQ, registered with the Lille Métropole Trade and Companies Register under number 980.968.689, is the data controller.
To provide certain services, ENKI HOME may also use service providers (e.g., IT hosting, after-sales service, payment provider, etc.). In this case, these service providers (as "sub-processors") act solely on behalf of ENKI HOME and according to its instructions.
The reasons why your data is used
A purpose is simply the reason why we use your data.
This may be, for example, managing your support requests, improving our connected objects, complying with our legal obligations, etc.
Each use of your data must have a clear, legitimate, and explained purpose. They are all detailed above in the table, grouped by main themes:
Management of the home and connected products:
| Processing completed | Objective(s) pursued (or 'why is my data used?') | Data concerned (or “which of my data are concerned?”) | Retention period (or "how long is my data retained?") | Legal basis associated (or "the processing is justified by ...") |
| Creating your account and accessing our ENKI application | To allow you to create and manage your personal space, access the ENKI application and use the associated features (connection of devices and partners, monitoring of your home, contact with support, management of your preferences and feedback). | Affected by this processing are your first name, last name, email address, and login ID (or Apple/Google identification data if you choose this authentication method), data necessary for the provision of the service. |
For the entire duration of your account's use and up to 3 years from its inactivity. If your account remains inactive for 3 years, it will be deleted (as well as associated homes) after having previously notified you by email. |
This processing is necessary for the performance of the service you request, based on the Terms of Use that you accept (or "necessary for the performance of the contract"). |
| Creation and management of your home (including rooms) in the application | To allow you to create and personalize your "smart home" in the application, to associate your devices with it, and to access related services (automations, scenarios, interactions between objects, etc.). | This processing concerns your country and city (for the time zone), possibly your full home address (optional), as well as the information you enter in the free text fields to name your house or your rooms (e.g., “Paul’s House”, “Léa’s Room”, etc.). |
For the entire duration of your account's use and up to 3 years from its inactivity.
|
This processing is necessary for the performance of the service you request, based on the Terms of Use that you accept (or "necessary for the performance of the contract"). |
| Management and monitoring of connected products | To enable the control, supervision, and proper functioning of your connected objects: remote control, scenarios and automations, reporting of equipment statuses, sending alerts, and interoperability with partner devices. | This processing concerns technical data related to connected objects, your account, and your home (technical identifiers and operating logs, equipment events and statuses, tokens for pairing partner objects, etc.), as well as the information you enter in the free text fields to name your scenarios. | The technical logs required for monitoring and the graphs offered to you in the application are kept for up to 13 months, then automatically deleted. Scenario names are retained for the entire duration of your account's activity, and up to 3 years after its inactivity. | This processing is necessary for the performance of the service you request, based on the Terms and Conditions that you accept (or "necessary for the performance of the contract"). |
Regarding the user permissions requested on your phone (Bluetooth, camera, local network, etc.): these are entirely managed by iOS / Android, stored exclusively on your phone, and are at no time accessible to ENKI HOME. Since ENKI does not process or receive any of your personal data for these operations (not allowing you to be re-identified through these permission choices), this does not constitute data processing within the meaning of the GDPR.
Energy services management and associated procedures:
| Processing completed | Objective(s) pursued (or 'why is my data used?') | Data concerned (or “which of my data are concerned?”) | Retention period (or "how long is my data retained?") | Legal basis associated (or "the processing is justified by ...") |
| Energy Bonus Service Management | To allow you to participate in the Energy Bonus program aimed at relieving the electricity grid during periods of high consumption, by temporarily controlling your connected heating equipment and hot water tanks and, where applicable, to calculate your remuneration related to validated actions. | This processing concerns your first name, last name, and home address, your meter identifier (PRM or PDL), as well as information related to your heating equipment and its programming (modes, time slots, set temperatures, etc.). This data is transmitted to our demand response operator partner (currently: Survoltage), who also retrieves your consumption curves from Enedis, your electricity contract data, and registers your participation with RTE. |
The data is retained during your participation in the program. You can leave the program at any time:
|
This processing is necessary to provide you with the service you choose to subscribe to: it relies on the performance of the contract, i.e., the implementation of the Energy Bonus program as described in the T&Cs, paragraph "Specific Conditions for Enki Energy Bonus". |
| Electricity contract change service |
Per permettervi di confrontare il vostro attuale contratto di elettricità, ottenere raccomandazioni personalizzate e (se lo desiderate) accedere a offerte proposte da partner. Due metodi consentono di accedere a questo trattamento in due forme diverse. 1. Tramite l'applicazione mobile, nella sezione dedicata al servizio di cambio contratto 2. Tramite il sito Enki-home, attraverso i comparatori messi a vostra disposizione.
|
1. Tramite l'applicazione mobile: Sono interessati da questo trattamento l'identificativo unico della vostra abitazione, le informazioni del vostro contratto di elettricità, e, se del caso, i vostri dati di consumo se il vostro contatore Linky è associato al vostro account. 2. Tramite il sito Enki-home: Sono interessate da questo trattamento le informazioni del vostro contratto di elettricità inserite direttamente nel comparatore. | 1. Tramite l'applicazione mobile: Per tutta la durata di utilizzo del vostro account, e poi fino a 3 anni dopo l'ultima attività del vostro account. 2. Tramite il sito Enki-home: Nessun dato viene conservato. I calcoli sono effettuati al volo e nessun salvataggio viene realizzato. | Questo trattamento è necessario per fornirvi il servizio di confronto e raccomandazione dei contratti di elettricità previsto dall'applicazione (esecuzione del contratto), e, nel legittimo interesse di ENKI HOME, per aggiornare le informazioni del vostro contratto nell'applicazione ed evitare di sollecitarvi inutilmente dopo un effettivo cambiamento (solo tramite l'applicazione mobile per quest'ultimo punto). |
| Linking of the Linky meter to your account | To allow you to connect your Linky meter and track your electricity consumption directly in the ENKI application, with graphs, and to benefit from contract change estimates. | This processing concerns the first and last names appearing on your electricity bill, your meter identifier (PRM or PDL), your consumption data transmitted by ENEDIS, as well as your contract information (optional) to refine the estimates. |
The meter connection and the associated data are retained as long as your account is active and you have given your consent. Your consent will, however, be requested again every 3 years, or deleted as soon as you withdraw it, which immediately stops the data transmission (whether the withdrawal of consent is issued by ENEDIS or ENKI HOME). |
We use your data only with your consent, which you can withdraw at any time in the application. |
| Digital twin information / "habitat form" | To allow you to describe, if you wish, the main characteristics of your home and thus receive more personalized advice on managing your energy consumption (energy coach). The application remains fully usable even without filling out this form. | This processing concerns your identification data linked to your account (to link the form to your profile), as well as information about your housing (predefined questions, no free text field), including the type of dwelling, the number of occupants, the surface area, etc. |
Throughout the entire period of your account's use, then up to 3 years after your account's last activity. You can delete this information at any time from your space or by contacting support. |
This processing is necessary to provide you with the personalized advice service offered by the application (contract execution). However, the personalization of this option remains optional. |
Marketing, communication, and engagement management:
| Processing completed | Objective(s) pursued (or 'why is my data used?') | Data concerned (or “which of my data are concerned?”) | Retention period (or "how long is my data retained?") | Legal basis associated (or "the processing is justified by ...") |
| Push notification management on the user device | To send you (only if you have authorized it) notifications related to the operation of your connected devices and to the scenarios you have configured (alerts, technical information, execution of automations), according to your preferences. | Technical identifiers (account, connected home objects), the content of notifications when personalized by yourself, and the history of associated scenarios are concerned by this processing. |
During the use of your account and as long as you authorize notifications. Beyond that, the data is deleted within a period of up to 3 years after your account's last activity. |
We send these notifications with your consent : you first choose to allow the application to send notifications, then you configure, item by item (or scenario by scenario), the notifications you wish to receive. |
| Marketing campaign management | To send you (only if you have accepted it) marketing communications concerning our services, our new products or our offers, and to manage your consent choices. We may also offer you to participate in anonymous surveys in order to improve our products and services. | This processing concerns your first name, last name, country, and email address, your last known activity, your ENKI "birth date," your marketing preferences and consents, as well as certain information about your equipment, allowing us to send you relevant content. |
Your marketing data is retained as long as your consent is active. Your consent is revalidated or deleted at the latest after 3 years, or sooner if you withdraw it. |
We use your data only with your consent, which you can withdraw at any time from your account or via the unsubscribe links. |
| Organization and management of contests | To organize our contests on social networks (Instagram, Facebook), manage your participation and, if you are a winner, to be able to contact you and send you your prize or your promotional code. |
The contact details concerned by this processing are: name, first name, email address, phone number and postal address, when necessary to inform you or ship the lot.
→ These data are not used to create or enrich a customer account and are not used for other purposes. |
Data required for game management is stored in secure files for the duration of the contest processing, then deleted no later than one year after the game ends. Communications kept in social media messaging services remain subject to the rules specific to each platform. |
We use your data because its processing is necessary for the execution of the game rules, which you accept at the time of your participation.
|
| Customer Knowledge Management | To better understand how users use the application and connected objects (type of objects, services used, overall activity), in order to improve our services, detect potential problems, and guide the future development of ENKI. Analyses are performed in an aggregated manner, to define usage profiles ("personas"), and not to track each person individually. |
This processing concerns the declared country, the types and number of installed objects, participation in certain services offered by ENKI, as well as the technical activity of the objects.
→ These data are not used for marketing prospecting in this context. |
The data is linked to the user account and kept as long as it remains active, and up to a maximum of 3 years from its inactivity.
|
This processing is based on ENKI's legitimate interest, and more specifically, that of better understanding the actual uses of the platform to improve service quality, identify malfunctions, and adapt to changes (without, however, negatively impacting your rights and freedoms). |
Regarding the management of cookies and other trackers: The ENKI website uses cookies to ensure its proper functioning and to globally and statistically measure the traffic to its pages. These trackers only generate technical identifiers (not linked to a known identity) and do not allow ENKI to identify visitors, as the site does not include any authenticated area. You can nevertheless accept, refuse or configure your choices at any time via our cookie management tool; these choices will be saved by your browser for a period of up to 1 year.
Resident relationship and support management
| Processing completed | Objective(s) pursued (or 'why is my data used?') | Data concerned (or “which of my data are concerned?”) | Retention period (or "how long is my data retained?") | Legal basis associated (or "the processing is justified by ...") |
| Resident relationship management | To answer your questions, process your support requests and help you resolve issues related to the ENKI application, your connected objects or associated services. If necessary, our teams can consult the technical information of your installation to understand and correct an incident. |
Depending on the nature of the request, the following may be processed:
|
Exchanges and information related to your requests are kept for the time necessary for the monitoring and proof of the processing of your file, then archived in accordance with applicable legal obligations (management of evidence, prevention of litigation). When sensitive supporting documents are collected, they are deleted as soon as verification is completed, unless otherwise required. | This processing is based on ENKI's legitimate interest: ensuring effective support, securing access to your account, and resolving technical incidents, all while respecting your rights and your privacy. |
| Management of Repairs and Customer Returns (After-Sales Service) | To process your requests related to a malfunction, return, or repair of ENKI equipment, organize product exchanges if necessary, ensure the follow-up of technical interventions, and guarantee the proper application of the warranty. |
Depending on the nature of the request, the following may be processed:
|
Exchanges and information related to your requests are kept for the time necessary to monitor and prove the processing of your file, then archived in accordance with applicable legal obligations (proof management, litigation prevention). When sensitive supporting documents are collected, they are deleted as soon as verification is completed, unless otherwise required. | This processing is necessary for the execution of the contract and for the management of the warranty related to your product (diagnosis, repair, exchange), as well as for the monitoring of technical incidents and anomalies. |
| Management of customer reviews and satisfaction on the different communication channels | To allow you to share your opinion on our products and services, respond to your comments, and analyze your feedback in order to continuously improve the ENKI application, connected objects, and the user experience. |
Depending on the channel used, the following may be processed:
|
Retention periods vary depending on the channel used. Generally, reviews can be retained for up to 5 years when they are necessary for monitoring and improving our products and services, while those published on third-party platforms (social networks, app stores, community spaces) remain subject to the retention rules specific to each platform. | Generally, this processing is based on ENKI's legitimate interest: collecting reviews to improve its products and services, without requiring you to leave a review. For the Leroy Merlin community platform, participation is based on the execution of the contract linking the member to the platform (acceptance of the T&Cs when creating the account). |
| Data management of the resident database | To administer and maintain the "customer repository" of the ENKI platform: create and manage your account, link your home and your equipment, ensure the consistency of information between the different systems and enable the proper functioning of the application's features, as well as the overall management of the service. |
Depending on your use of the application, the following may be recorded in the various databases:
|
Your data is stored for the entire duration of your account's use. In case of inactivity for 3 years, your account is deactivated then deleted after you have been informed. Certain information may then be retained in anonymized form, for statistical purposes and service improvement. → Furthermore, your data is only used for marketing purposes if you have given your consent and as long as your account remains active. |
This processing is based on ENKI's legitimate interest: to have a reliable and unified repository to ensure service quality, account security, and data consistency. |
| Processing of requests for exercise of rights (GDPR) | To receive, analyze, and process your requests related to your data protection rights (access, rectification, erasure, objection, portability, etc.), and to be able to justify he responses provided. | Concerned by this processing are your name, first name, email address, content of your request and, where applicable, the requested supporting documents when this is necessary to verify your identity before granting your request. |
Your request is kept for up to 730 days; any attachments sent are kept for up to 360 days, then permanently and irreversibly deleted.
|
This processing is carried out to enable the exercise of your rights under the GDPR and to comply with legal obligations incumbent upon ENKI concerning personal data protection. |
The categories of people who access your data
Your data is only accessible to employees and subcontractors who genuinely need it to perform their duties.
For the aforementioned purposes, this primarily concerns:
ENKI HOME teams (product, support, technical, data, marketing...) within the scope of their responsibilities;
Adeo Services teams, and, where applicable, other entities of the group (for example, Leroy Merlin France for certain shared tools or devices);
technical service providers acting on behalf of ENKI HOME, as "subcontractors" (hosting, tools, etc.), acting on ENKI's instructions and subject to the same requirements that ENKI HOME imposes on itself regarding personal data protection.
⇒ In all cases, granted accesses are reviewed beforehand and limited to what is strictly necessary, as well as framed by appropriate contracts when necessary (in the case of subcontracting).
Potential transfers of your data outside the European Union
Your personal data is hosted and processed primarily within the European Union.
However, some of our technical service providers or publishers of our tools may be located outside the European Union, or transfer data to third countries.
⇒ When this is the case, ENKI HOME ensures that these transfers are governed by appropriate safeguards, particularly through standard contractual clauses (ensuring data security) approved by European authorities, or other equivalent protection mechanisms.
Existence of profiling or automated decision-making in processing
The ENKI application uses certain data to personalize your experience and adapt the services offered (for example, energy usage recommendations via the energy coach, personalized advice via the completion of the "habitat form", etc.).
In the vast majority of cases, certain statistical analyses or segmentations may be carried out in order to better understand usage, improve our products and services, and offer you more relevant content, without, however, drawing individual conclusions about you, or making decisions concerning you.
In certain specific cases, operations that may be akin to profiling may be implemented, i.e., the automated analysis of certain data to understand the usage behavior of a group of users.
⇒ In this instance, the processing concerned is customer knowledge management (which aims to better understand the global uses of the platform, for example, by types of equipment used or frequency of use), without individual decision-making, without legal impact, and without significant consequences for individuals.
Furthermore, no decision producing legal effects concerning you, nor significant effects, is taken solely on the basis of fully automated processing.
The technical and organizational protection of your data
Technical and organizational data protection consists of both the deployment of secure IT tools and strict internal rules in order to prevent any loss, unauthorized access, misuse, or disclosure of your personal data.
For ENKI HOME (a subsidiary of the ADEO group), this specifically means that:
- a dedicated governance framework oversees our data processing activities and allows us to monitor our compliance over time;
- our teams receive regular awareness training (training sessions, best practices, internal documentation) to adopt the right practices in using the tools;
- access to tools is controlled: each employee or service provider can only access the data strictly necessary for their mission;
- confidentiality commitments are imposed on all employees and service providers working on our behalf;
- our infrastructures and systems are secured (rights management, backups, monitoring, and internal procedures in case of an incident);
- specific tools and procedures exist to quickly detect, analyze, and manage any incident likely to affect your data; in addition, human monitoring is also organized;
- cybersecurity is continuously overseen, in order to prevent risks and protect our users, our employees, and our tools.
My data rights
Entrusting us with your data does not mean that you lose control over it; quite the contrary!
You have several rights. Some are applicable to all data processing concerning you, while others depend on the type of processing implemented and, more precisely, on the legal basis on which it relies (contract performance, legal obligation, consent, legitimate interest, etc.).
Below you will find a brief description of these rights as well as the procedures for their implementation:
📂 Right of access: Request what data we hold about you and obtain a copy of it.
✏️ Right to rectification: Modify or complete your data if you believe it is outdated or incorrect.
❌ Right to withdraw your consent: If you have agreed to data processing, you can change your mind at any time.
⏸ Right to restriction: Request to restrict the use of your data to make it temporarily "unusable" in certain cases.
🔄 Right to data portability: Recover your data in a reusable format if it is processed based on your consent or a contract.
🚫 Right to object: Refuse or stop the use of your data if it is based on the controller's "legitimate interest".
🗑 Right to erasure or "right to be forgotten": Request the deletion of all or part of your data when it is no longer necessary, when you withdraw your consent, or when you believe it has been used unlawfully.
📜 Right to decide the fate of your data after your death: Transmit your instructions regarding your data (retention, deletion, transmission to a trusted third party, etc.) so that they are respected by ENKI after your death.
You can exercise the rights listed above, using the contact form available here.
In accordance with applicable regulations, you are entitled to lodge a complaint with the competent supervisory authority such as the CNIL (National Commission for Information Technology and Freedoms) in France, particularly if you believe that your rights have not been respected or that your personal data has been processed in violation of the regulations.
How to contact the DPO?
If you have any questions regarding the use of your personal data covered by this document, you can submit a request via our contact form or write by email to our Data Protection Officer: dpoadeoservices@adeo.com.
Update of this policy
We invite you to review the latest version of this document on this page and we will inform you of any substantial changes through our websites or our usual communication channels.