Privacy policy of Engadiner Kraftwerke AG

Basis for data processing

The operator of this website, Engadiner Kraftwerke AG, cares deeply about protecting your personal data. We handle this data confidentially, in compliance with all statutory data protection regulations. You can generally interact with us, use our website, travel through the road tunnel, and visit the facilities without providing personal data. Please read the following information to learn if we collect personal data from you, which data we collect, and how we use it.

We would like to point out that data transfer over the Internet (e.g. when communicating via email) may be subject to security vulnerabilities. It is not possible to fully protect data from access by third parties.

Responsible party within the meaning of the Swiss Data Protection Act:

Engadiner Kraftwerke AG
Muglinè 29
7530 Zernez
Switzerland
Telephone: +41 81 851 43 11
Email: info@ekwstrom.ch
Website: www.ekwstrom.ch

Data processing

When you visit our website
Online identifiers, like your IP address or cookies, are automatically collected when you use our website. When you contact us (e.g., via email or phone), we collect the data you provide, the information exchanged between us, and the associated communication data. We collect and use data on your behaviour and preferences to personalize our website content for you.

As a customer
Our customers are mainly shareholders receiving energy, concession municipalities and end consumers outside the building zone who purchase energy from us, as well as network operators. Since EKW is not assigned a network area by the canton, it is not required to supply energy. Other customers include users of our ‘Munt La Schera’ road tunnel. For the purpose of contract fulfilment, we need to process the data and documents you give us, such as your contact and payment information.

Job applications
If you apply for a job, we will process the personal data you submit to us. This personal data is used exclusively for the purpose of processing your application and can only be viewed by persons authorised to carry out the recruitment process and issue employment or apprenticeship contracts.

Visitors to our facilities (guided tours)
Visitors and visitor groups can register using a form on the website. Our facilities are available to visit via guided tours.

Use of the Munt La Schera road tunnel
The Munt La Schera road tunnel is privately owned and operated by Engadiner Kraftwerke AG. It is a private road. The terms of use are the foundation for using the road tunnel. Your use of the tunnel constitutes your acceptance of these terms.

From third parties
Finally, to fulfil our mandate, and where legally permissible, we also obtain data from public sources, authorities, or other third parties (like clients).

When visiting our website

Cookies
Some of our web pages use cookies. Cookies are not harmful to your computer and do not contain viruses. We use cookies to make our website more user-friendly and effective. Cookies are small text files that are stored on your computer and saved by your browser.

Hosting provider
Server log files: The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

IP address
Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request

Most internet browsers accept cookies automatically. However, you can configure your browser in such a way that cookies are not stored on your computer or so that a message always appears when you receive a new cookie. If you deactivate cookies, you may not be able to use all the functions of our websites.

This data cannot be directly attributed to specific individuals. This data is not merged with other data sources. We reserve the right to review this data retroactively if we detect specific signs of illegal use.

This data, as well as all data on this website, is stored by our hosting provider Exigo AG, Sägenstrasse 4, 7000 Chur, whose privacy policy is available here.

SSL encryption
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the site operator. You can identify an encrypted connection from the fact that the address line of your browser changes from "http://" to "https://" and from the lock symbol in your browser line.

When SSL encryption is activated, the data you share with us cannot be read by third parties.

Google Analytics
This website uses functions of the web analysis service Google Analytics.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. Further information and Google's privacy policy is available at: https://www.google.com/policies/technologies/ads/

We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google shall use this information to analyse your website usage, to compile reports on the website activities, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Google Maps
We use the services of Google Maps on this website. Google Maps is operated by Google. That is how we can show you interactive maps directly in the website and enable you to use the map function comfortably.

For more information about data processing by Google, please refer to Google's privacy policy. There you can even change your personal privacy settings in the data privacy centre.

As a customer
If you become a customer and order services from us, we will need the following data for contract processing:

Company name
First and last name
Billing address (and delivery address, if different)
Email address
Payment details (depending on the selected payment method)

Unless otherwise stated in this privacy policy or unless you have given your separate consent, we will only use the aforementioned data to process the contract, namely to process your orders, deliver the products and services ordered, and ensure correct payment.

The legal grounds for processing this data is the necessity of fulfilling a contract.

Job applications
You can contact us via our website (job advertisement) and via the email address provided as a link. In this case, your personal data transmitted with the query (in any case, your first and last name and email address) and your message will be stored. We process this personal data in order to respond to your application and deal with your request. The legal basis for the processing of this data, which is transmitted in the course of sending a query, is our legitimate interest as the controller in communicating with the users of our website. If your query is part of concluding a contract, the legal basis for data processing is contract fulfilment (or the necessary pre-contractual steps).

Apprentices
"Yousty" is an application that makes it easier for future apprentices to apply for apprenticeships https://www.yousty.ch/, and we provide a basic apprenticeship application check at https://www.gateway.one/de-CH/basic-check.html. The data collected in these applications is protected:

Yousty privacy policy: https://www.yousty.ch/de-CH/privacy Basic check privacy policy https://www.gateway.one/de-CH/datenschutz.html

Skilled workers
We work with the portal https://recruiting.professional.ch/ for personnel recruitment.

The personal data collected there is protected and passed on to us with your permission. Privacy policy "Professional": https://www.professional.ch/datenschutz

If your job application leads to a contract, the personal data you provided will be moved to your employee file. If your application does not lead to an employment contract, you will be informed of this and the application information and documents you have submitted will be deleted immediately.

Visitors to our facilities (guided tours)

As a participant in our tours, you can register by phone or via an online form.

This also applies to school classes and young people participating in National Future Day. We pre-approve the storage and publication of press releases and photos for our events.

https://www.ekwstrom.ch/anlagen/kraftwerk-pradella#paragraph--webform (registration)

https://www.ekwstrom.ch/faszination-wasserkraft (Opinion on the tour (anonymous))

Video surveillance
Our facilities are monitored by CCTV for security reasons. The information is available in this privacy policy.

The camera locations are chosen and the surveillance cameras are aligned in such a way that they do not record areas outside the zones designated on site. The recording quality is high enough to recognise the faces of people within the designated zones. We use signs both at the edge of the recording fields and within the monitored areas to clearly mark our video surveillance locations.

Personal data (video data) is not normally processed. Recordings are automatically overwritten and thus deleted within a short period of time. We reserve the right to copy sequences of events and store them for a limited period of time. If necessary, we will hand over the data to a competent court or law enforcement authorities in order to enforce our legal claims.

Use of the Munt La Schera road tunnel

The Munt La Schera road tunnel is privately owned and operated by Engadiner Kraftwerke AG. It is a private road. The terms of use are the basis for using the Munt La Schera road tunnel. Your use of the tunnel constitutes your acceptance of these terms. Please refer to the rules of use for the Munt La Schera road tunnel: https://www.ekwstrom.ch/livigno/termsofuse

Video surveillance
For safety reasons, the tunnel is equipped with a traffic management system and is monitored by CCTV. For more information see the terms of use and privacy policy on the Engadiner Kraftwerke AG website (www.tunnelticket.ch).

The camera locations are chosen and the surveillance cameras are aligned in such a way that they do not record areas outside the zones designated on site.

The recording quality is high enough to recognise the faces of people within the designated zones. We use signs both at the edge of the recording fields and within the monitored areas to clearly mark our video surveillance locations.

Purpose of video surveillance
Video surveillance is carried out on the basis of our legitimate interests in protecting persons and property, enforcing our domiciliary rights, specifically punishing damage to property, contamination, theft and burglary, as well as investigating and prosecuting criminal offences and enforcing our legal claims.

Data security
EKW protects the recordings from the surveillance cameras against unauthorised access, manipulation, misuse and theft. The recordings are stored in rooms and on systems that are only accessible to authorised persons.

Payment of tunnel tolls on site
In addition to cash, payment can be made by debit card, credit card, TWINT or with the EKW prepaid card.

Shopping with debit cards, credit cards and online payment services
We work with the payment service provider Worldline Schweiz AG to process payments for online purchases made using debit cards, credit cards and TWINT. For information on data protection see: https://worldline.com/de-ch/compliancy/privacy

If you use PostFinance payment options, personal data will be transferred to PostFinance in order to process the payment. This data is processed on the basis of contractual agreements with PostFinance and in accordance with the applicable data protection laws. Further information on data processing by PostFinance is given in their privacy policy https://www.postfinance.ch/en/detail/data-protection/general-privacy-policy.html

We collect and process personal data such as your name, address and credit card number in order to process your payments and prevent fraud. We also collect information about your transactions in order to provide you with personalised offers and services.

We forward the data about you which the payment service provider you have chosen requires for identification and payment processing purposes. We do not store this data. You have already agreed to the terms of use and privacy policy of the respective company or payment method at an earlier stage.

The payment service providers involved in the payment processes have committed to us to process and protect the personal data entrusted to them in accordance with the same principles as we would ourselves. In addition, they have committed to us not to pass on the personal data transmitted by us to third parties, either in part or in whole, or to make it accessible to third parties in any form, unless the terms of use or privacy policy of the respective payment service provider provides otherwise and you have agreed to these deviating provisions at an earlier point in time.

Contact form

If you provide your contact details on the website (e.g. name, address, email address, telephone number), we will use them to contact you by telephone, email or post, as well as for the identifiable and specified purposes. When you submit the form, your IP address and the date and time of submission will also be stored. This information is used to prevent misuse of our contact form.

Social sharing plugins
We are present on various social networks in order to communicate with interested parties. If you also use these networks, your data may be processed in countries such as the USA, where the legal basis for data protection may be weaker than in Switzerland or the European Economic Area (EEA). Furthermore, user data is usually processed for market research and advertising purposes. For example, profiles can be created based on user behaviour.

We recommend that you log out of social media apps and online accounts before visiting other websites. Otherwise, your surfing behaviour will be recorded by the providers of these services and assigned to your profile. Without prior logout, these providers also record visits to our websites, even if there is no integration. We refer you to the privacy policies and information provided by the operators of the relevant networks. The most effective way to request information and raise concerns about data subject rights is to contact the providers directly. Only they have access to the data and can take direct action and provide information.

LinkedIn
Our online services use functions of the LinkedIn network. Each time you visit one of our pages that contains LinkedIn functions, a connection to LinkedIn servers is established. LinkedIn is informed that you are visiting our website with your IP address. If you click on the LinkedIn "Recommend" button and are logged into your LinkedIn account, this enables LinkedIn to associate your visit to our website with you. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by LinkedIn. Privacy policy: https://www.linkedin.com/legal/privacy-policy, opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

YouTube
This website uses plugins from the Google-operated site YouTube. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

For more information on the handling of user data see YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy

Disclosure of data to third parties

For the above-mentioned purposes, we also transfer your data to service providers such as IT providers, payment providers or providers of tools mentioned in this statement. In addition, we also transfer data to authorities if we have a legal obligation to do so. We only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so, or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we pass on your data to third parties to the extent necessary for the use of the websites and the execution of contracts (also outside the websites), namely the processing of your order or your support request. This includes respective service providers who have been entrusted with the processing of your support request. The websites are hosted on servers in the EU. The data is passed on for the purpose of providing and maintaining the functionalities of our websites. This constitutes our legitimate interest within the meaning of the GDPR.

Data disclosure abroad

In connection with data transfer to third parties, it is possible that your data will not only be processed in Switzerland. If the legal data protection in the recipient country does not correspond to the level of data protection in Switzerland, we will take appropriate measures to ensure that the transfer may take place, e.g. by concluding the standard contractual clauses of the European Union or that another legally provided option exists, e.g. by fulfilling a contractual obligation for you or by obtaining your consent.

We inform users in Switzerland and the EU that, due to U.S. surveillance laws, any personal data transferred from the EU or Switzerland to the USA is potentially subject to storage by U.S. authorities.

Cloud services

We use software services accessible via the Internet and executed on the servers of their providers (so-called "cloud services", also referred to as "Infrastructure as a Service" or "Software as a Service") for ourselves and our customers for the following purposes: Operation of virtual servers for websites, operation of database systems, operation of email systems, document storage and management, exchange of documents, content and information with specific recipients, forms or other content and information, as well as chats and participation in audio and video conferences.

In this context, personal data may be processed and stored on the providers' servers, insofar as this is part of communication processes with us or is otherwise processed by us as set out in this privacy policy. This data may include, in particular, master data and contact details of users, data on transactions, contracts, other processes and their contents. The providers of cloud services also process usage data and metadata, which they use for security purposes and to optimise their services. If we use cloud services to provide forms or other documents and content for other users or publicly accessible websites, the providers may store cookies on users' devices for web analysis purposes or to remember user settings (e.g. in the case of media control).

The primary provider of our cloud storage services is Microsoft.

Website: https://microsoft.com/de-de

Security information: https://www.microsoft.com/de-de/trustcenter

The most common Azure services, such as computers (virtual machines), databases and web services, are now available in the Microsoft Cloud Switzerland and are also stored in Switzerland.

Automated decision-making or profiling

We do not use automated decision-making within the meaning of Swiss data protection legislation. Should we use this in individual cases in the future, we will inform you separately if this is required by law.

Data security

In close cooperation with our providers, we strive to protect our systems and databases as best as possible against unauthorised access, data loss, misuse or falsification. We use appropriate technical and organisational security measures to protect your personal data stored with us against manipulation, partial or complete loss and unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

We also take internal data protection very seriously. Our team members and the service providers we commission are bound by us to maintain confidentiality and comply with data protection regulations.

Data storage

We only store personal data for as long as is necessary to use the above-mentioned tracking and analysis services and for further processing within the scope of our legitimate interests. We store contract data for longer, as this is required by statutory retention obligations. Retention obligations that require us to store data arise from accounting regulations and tax law provisions. According to these regulations, business communications, concluded contracts and booking documents must be retained for up to ten years. If we no longer need this data to perform services for you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes.

Your right to information, correction, deletion and restriction of processing

You have the right to request information about the personal data we store about you. In addition, you have the right to correct inaccurate data and the right to delete your personal data, provided that there is no legal obligation to retain it or a legal basis that allows us to process the data.

You can contact us for the above purposes at this email address info@ekwstrom.ch. We may, at our discretion, request proof of identity in order to process your requests. You will receive our response free of charge within 30 days in writing by post.

Right to complain
If you believe that your rights to information have not been sufficiently fulfilled or that your personal data is not being processed in accordance with the law, you can lodge a complaint with the competent supervisory authority. In Switzerland, this authority is the Federal Data Protection and Information Commissioner (FDPIC).

Changes to the privacy policy

This privacy policy may be updated from time to time as we continuously develop and optimise our services. The latest version will be published on our website.

Binding nature of the German privacy policy and informational purpose of the translation

The German version of the privacy policy is binding; translations are for information purposes only.

Zernez, June 2025

Cookies

Cookies are small text pieces, which are saved by our browser. Persistent cookies are available on following visits even if you close your browser in between. We use cookies to be able to connect a shopping cart to your browser session and to set your language, currency, shipping country and more based on your once chosen preference. In most browsers you find dedicated cookie settings where you can view and delete cookies.

PEPPERSESS: Session cookie, which identifies your current session in this shop. This cookie will be deleted if you close your browser (all open browser windows).
Retention time: Session
PPS_LOCALE_INFOS: Permanent cookie, which contains your chosen language, country, currency, the last session-id, the domain binding of the cookie and the version of the cookie structure. With this cookie we can immediately set your preferences for a better experience when you choose to visit us again.
Retention time: 2 years
jsCookieCheck: Stores the consent of the cookie data storage (Consent Management).
Retention time: 1 year

We use cookies

Your shopping cart is empty!