Privacy Statement

By means of this Privacy Statement, ENSI informs you of what personal data are processed in connection with its activity and its website «www.ensi.ch». Furthermore, ENSI informs you what these data are needed for and what rights you have in respect of the data processing.

Individual activities may be subject to further privacy statements and other legal documents such as General Terms and Conditions (GT&Cs).

1 Contact Addresses

The controller responsible under data protection law for the processing activities described in this Privacy Statement is:

Swiss Federal Nuclear Safety Inspectorate ENSI
Industriestrasse 19
5201 Brugg, Switzerland

You can send any concerns or questions regarding data protection to the following address:

Swiss Federal Nuclear Safety Inspectorate ENSI
Data protection
Industriestrasse 19
5201 Brugg, Switzerland

Email: [email protected]

2 Definitions and Legal Bases

2.1 Definitions

Personal data are any information relating to a particular or identifiable natural person. In addition to details relating to a particular person, the data recorded also include factual data that, individually or in their entirety, can be used to identify a particular person.

A data subject is any natural person concerning whom personal data are processed.

Processing includes any handling of personal data, irrespective of the means and procedures used, for example the consultation, alignment, adaptation, archiving, retention, retrieval, disclosure, procurement, recording, collection, erasure, revealing, structuring, organisation, storage, alteration, dissemination, combination, destruction or use of personal data.

2.2 Legal bases

ENSI processes personal data in conformity with the Swiss data protection legislation (Federal Act on Data Protection, FADP; SR 235.1 and the Ordinance to the Federal Act on Data Protection,; SR 235.11).

3 Nature, Scope and Purpose of the Data Processing

ENSI is entrusted with the performance of a multitude of different tasks, including the processing of personal data. Such personal data may, in particular, fall into the categories: contact details, communication data, registration data, browser and device data, content data, meta or marginal data and usage data as well as contract data.

All data processing activities are conducted only for specific purposes and only as long as they are necessary for the respective purpose(s) or by law. If the purpose ceases to exist, or a prescribed retention period expires, your data shall be anonymized or erased/destroyed in accordance with the statutory provisions.

Generally, ENSI processes personal data only if a legal basis allows this, or ENSI has received the data subject’s consent. Within this scope, ENSI processes, in particular, details voluntarily communicated by a data subject when contacting us (e.g. by post, email, contact form or telephone).

ENSI may have personal data processed by third parties on a legal basis or on the basis of your consent. The personal data are disclosed to the third parties for this purpose. Disclosure of personal data is also permissible if this is essential in order for ENSI or the recipients to perform a statutory task or in the other exceptional cases as set out in Art. 36 of the Federal Act on Data Protection (FADP). Such third parties include, in particular, specialised providers whose services are used by ENSI (e.g. hosting providers, IT support service providers) and public authorities. Where ENSI engages processors to render services, suitable legal precautions as well as technical and organisational measures shall be taken in order to ensure the protection of your personal data in accordance with the relevant statutory provisions.

4 Personal Data Abroad

As a rule, ENSI shall process your personal data in Switzerland and in the European Economic Area (EEA). However, ENSI may also transfer personal data to other countries, in particular in order to process them or have them processed there.

If the data protection legislation in a country where the data are processed does not safeguard adequate protection, ENSI shall contractually ensure that the protection of your personal data matches that in Switzerland at all times (for example by incorporating the EU standard contractual clauses, including the supplements necessary for Switzerland).

By way of exception, ENSI may also disclose personal data abroad without safeguarding adequate protection insofar as it can rely on an exemption clause in this respect. An exception may apply, in particular, in the case of legal proceedings abroad, but also in cases of an overriding public interest, or where you have expressly consented.

5 Your Rights as the Data Subject

In connection with the processing of your personal data, data protection law grants you a series of rights which you can assert in writing in relation to ENSI:

Right to information: You have the right to obtain information on whether ENSI processes data from you and, if so, what data. The restriction options provided for by law as well as the right to refuse access (cf. in this regard Art. 26 et seq. FADP) shall remain reserved.
Right to rectification, deletion or restriction of processing: You have the right to obtain rectification of incorrect personal data and, in certain circumstances, their deletion or destruction. Moreover, you may request that ENSI’s decision on rectification, deletion or destruction, the objection to the disclosure or the note of objection be communicated to third parties or be published.
Right to release or transfer of your data: In certain circumstances, you have the right to receive, in a commonly used electronic format, personal data you have disclosed to ENSI or to obtain their transfer to another controller.
Right to object: You have, if you have a legitimate interest in doing so, the right to request that the disclosure of certain personal data be blocked or to lodge an objection to such disclosure. This right does not exist where a legal duty to disclose exists, or where approval of the request would cause the performance of ENSI’s tasks to be jeopardised.
Right to withdraw consent: Where ENSI processes personal data on the basis of your consent in any individual case, you shall be entitled to withdraw your consent at any time with effect for the future. This shall not affect the lawfulness of the data processing conducted on the basis of your consent up to the time of withdrawal.
Right to lodge a complaint: If you are of the opinion that the processing of your personal data by ENSI violates data protection law or that your rights under data protection law have been otherwise breached, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC).

ENSI may postpone, restrict or refuse the exercise of your rights to the extent permissible by law.

If you request information or assert other rights, ENSI shall be obliged to use appropriate measures to identify you. You shall be obliged to cooperate.

ENSI may, by way of exception, stipulate costs for the exercise of your rights. You shall be given prior notification of any costs, where applicable.

6 Data Security

ENSI shall take suitable technical and organisational security precautions in order to protect your personal data against manipulation, loss, destruction or against access by unauthorised persons and to ensure the protection of your rights and compliance with the applicable provisions of data protection law.

Within the website visit, ENSI uses encrypted data communication on the basis of Transport Layer Security (TLS) in conjunction with the respective highest encryption level supported by your browser.

7 Use of the Website

7.1 Cookies

ENSI uses cookies on its website. Cookies are small text files that will be stored on your computer or mobile device (laptop, tablet, smartphone or the like) when you visit ENSI’s website. They serve to make ENSI’s website more user-friendly as a whole and enable the use of certain features.

Cookies may be stored in the browser temporarily as session cookies or for a certain period as so-called permanent cookies. Most of the cookies used by ENSI are session cookies. These will be automatically erased when you log out or close the browser. Other cookies will remain stored on your computer beyond the respective usage process and enable ENSI or third parties whose services are used by ENSI (third-party cookies) to recognise your browser when you next visit.

Cookies can be wholly or partly disabled and erased in the browser settings at any time. Please note that the disabling of cookies may lead to you being unable to use all the features of ENSI’s website. To find out how to manage the cookies in your browser, refer to the respective support website of your browser.

7.2 Server log files

Every time its website is accessed, ENSI may record the following details insofar as these are transferred from your browser to the server infrastructure of the ENSI website or can be determined by the web server:

Internet Protocol (IP) address;
name and URL of the retrieved data;
date of access, along with the time and time zone;
access status (status code);
URL of the website from which you accessed the website;
version of the transfer protocol used;
type and version of the browser used;
user agent.

ENSI stores such details, which may also constitute personal data, in server log files. The details are necessary in order to be able to provide the website on a long-term, user-friendly and reliable basis and to be able to ensure data security and, therefore, in particular the protection of personal data – also by third parties or with the aid of third parties.

8 Contacting

8.1 General contact

You have the option of contacting ENSI by post, telephone or email. You are responsible for the content you send to ENSI.

The data you provide will be used by ENSI for communicating with you, insofar as this necessary for dealing with your concern. These data will encompass, in particular, the content of the communication, your contact details and the marginal data of the communication.

8.2 Contact forms

On ENSI’s website, you have the option of using the contact form to send ENSI general concerns, requests for access to official documents as well as proposals for research projects supported by ENSI. You are responsible for the content of the message.

In order to be able to answer your concern, ENSI will need from you your first name, surname, email address and, depending on the contact form, the message, reference to the requested documents or the research project proposal. The other details are voluntary. You permit ENSI to contact you by post or telephone and to approach you more personally.

9 Technical Forum on Safety and Technical Forum on Nuclear Power Plants

On ENSI’s website, you can ask questions within the Technical Forum on Safety (TFS) and within the Technical Forum on Nuclear Power Plants (TFK). In order to be able to respond to the matter, ENSI will need from you your first name, surname, email address and the question. When using the question form provided by the Technical Forum on Nuclear Power Plants (TFK), you can additionally consent to being named and request which entity is to answer your question. These details are voluntary.

The data you provide will be used by ENSI for communicating with you, insofar as this necessary for dealing with your query.

On ENSI’s website, you can register for the ENSI newsletter. When subscribing, you have to give your first name, surname and email address. ENSI needs these details for sending the newsletter.

Registration for the newsletter is conducted using a so-called double opt-in procedure. This means that, following registration, you will receive an email with an activation link in which you have to click on a link in order to confirm your registration. You can unsubscribe from the newsletter at any time by clicking on the link provided in each newsletter email. Alternatively, you can also send an unsubscription request to ENSI by email to [email protected].

ENSI uses the MailPoet plugin to send the newsletter. The provider is Aut O’Mattic A8C Ireland Ltd. (Ireland). You can find information on data privacy here: privacy statement, cookie policy.

11 Applying for a Job

If you apply for a job at ENSI, the data sent to ENSI will be processed by it for the purpose of examining the application, for implementing the application procedure where applicable and, in the case of a successful application, for preparing and concluding the employment contract. In connection with the purposes mentioned, ENSI may also process data concerning you that ensue from social networks for example, or from references insofar as you have agreed to the requesting of references.

If you send your application to ENSI via the application platform provided, the privacy statement that is linked therein shall be applicable as a supplement to this Privacy Statement.

ENSI has integrated social media plugins into its website. The plugins are disabled by default, meaning that they do not send data to the providers of the social media. A direct connection with the provider’s server will be established only if you enable the respective plugin by clicking on the associated button. The provider will be informed that you have visited ENSI’s website from your IP address. If you are logged into your account at the same time, the provider will be able to associate the visit to ENSI’s website with your user account. If you wish to prevent this, you should log out before you click on the plugin.

ENSI has no influence over the collection of data or their further use by the providers of the social media. Information on data protection can be gathered from the respective provisions on data protection.

ENSI has integrated the following social media plugins into its website:

X (formerly Twitter): The providers are X Corp. (USA) / Twitter International Unlimited Company (Ireland) for users ordinarily resident in the European Economic Area or Switzerland. General information on data protection: privacy policies.
XING: The provider is New Work SE (Germany). General information on data protection: privacy statement.
YouTube: The provider is YouTube LLC (USA). YouTube LLC is a subsidiary of Google LLC (USA) or Google Ireland Limited (Ireland) for users ordinarily resident in the European Economic Area or Switzerland. General information on data protection: privacy statement and terms of use.

LinkedIn: The providers are LinkedIn Corporation (USA) / LinkedIn Ireland Unlimited Company (Ireland) for users ordinarily resident in the European Economic Area or Switzerland. General information on data protection: privacy policy.

ENSI maintains social media profiles with X (formerly Twitter), Xing, YouTube and LinkedIn. The data you enter on ENSI’s social media profiles will be made public by the social media platform. Personal data may also be processed outside of Switzerland and the European Economic Area (EEA) in connection with such platforms. It is important to note that the operator of the social media platform uses web tracking methods. The web tracking, upon which ENSI has no influence, may take place regardless of whether you are logged onto or registered with the social media platform.

ENSI has no influence over the collection of data or their further use by the operators of the social media platforms. Information on data protection can be gathered from the respective provider’s privacy notice (cf. Section 12).

14 Services from Third Parties

ENSI uses services from specialised third parties in order to be able to perform its activity on a long-term, user-friendly, secure and reliable basis. By means of such services, ENSI can embed features and content into its website, among other things. With such embedding, the services used record the users’ IP addresses, at least temporarily, for technically essential reasons.

ENSI uses in particular:

services from Microsoft: The providers are Microsoft Corporation (USA) / Microsoft Ireland Operations Limited (Ireland) for users ordinarily resident in the European Economic Area (EEA), the United Kingdom or Switzerland. General information on data protection: data privacy at Microsoft, data protection and sphere of privacy (Trust Center), privacy statement, management of privacy settings.

In particular, ENSI uses the following services from specialised third parties in connection with its website:

WPEngine: web hosting; the provider is WPEngine Inc. (USA). General information on data protection: privacy statement.
Cloudflare: Content Delivery Network (CDN) – protection against so-called DDoS attacks; the provider is Cloudflare, Inc. (USA). General information on data protection: privacy policy.
Gravity Forms: plugin for contact forms; the provider is Rocketgenius Inc. (USA). General information on data protection: privacy statement..

MultilingualPress: Multilingual plugin for WordPress – serves to display the website in different languages; the provider is Inpsyde GmbH (Germany). General information on data protection: data protection information.

15 Amendment of the Privacy Statement

ENSI may adapt and supplement this Privacy Statement at any time. Such adaptations and supplements shall be communicated in suitable form, in particular by publishing the respective current Privacy Statement on ENSI’s website.