SANIA Power AG
Privacy Policy
How the SANIA Group processes personal data in connection with this website and our commercial activities.
SANIA Power AG and its subsidiaries (together, the SANIA Group) take the protection of personal data seriously. This Privacy Policy describes how the SANIA Group processes personal data in connection with the use of this website and the commercial activities supported through it. Processing is conducted in accordance with the Swiss Federal Act on Data Protection (revFADP) at parent-company level, and with the European Union General Data Protection Regulation (GDPR) where applicable through our subsidiaries or in respect of personal data of individuals located in the European Economic Area.
Because the SANIA Group is a wholesale business-to-business energy trading house, the personal data we process is limited in scope. We do not market to or trade with consumers; we do not engage in profiling, behavioural advertising, or automated decision-making affecting individuals; and we do not, in the ordinary course of business, process sensitive personal data within the meaning of either revFADP or GDPR.
1. Data Controller
The controller of personal data processed through this website is:
SANIA Power AG
Baarerstrasse 14
6300 Zug, Switzerland
Email: privacy@sania-power.com
Telephone: +41 41 561 32 41
Where personal data is processed by a subsidiary of SANIA Power AG in connection with that subsidiary’s commercial activity in its country of incorporation, the subsidiary acts as the controller in respect of that processing. The contact details of each subsidiary are set out on the Contact page.
Representative in the European Union (Article 27 GDPR): our designated representative in the European Union is Laszlo Virag, Schillerstrasse 8, 90762 Fürth, Germany; email: laszlo.virag@sania-power.com. Data subjects and EU supervisory authorities may also address the representative on any question concerning the processing described in this policy.
2. Categories of Personal Data We Process
In connection with this website and our broader commercial activity, we process the following principal categories of personal data:
Email and telephone correspondence — name, contact details, organisational role, and the content of correspondence between you and the SANIA Group. The email link on the Contact page opens your chosen email application; the website itself does not collect or transmit the content of your message.
Counterparty representative data — for individuals who act as the representatives or authorised signatories of commercial counterparties, the data required to onboard the counterparty and to conduct ongoing commercial activity (name, role, contact details, identification documents where required by applicable due diligence obligations, and signatures on contractual documents).
Recruitment-related data — for individuals who apply for a position with the SANIA Group, the personal data they submit in their application (curriculum vitae, contact details, qualifications, and supporting documents).
Website usage data — technical data collected automatically by web servers when this website is accessed, including IP address, browser type, device characteristics, referring URL, and time of access. Further detail on the use of cookies and similar technologies is provided in our Cookie Policy.
3. Purposes and Legal Bases for Processing
The legal basis for our processing of personal data depends on the purpose of the processing:
Responding to enquiries. When you contact us by email, telephone, or another communication channel, we process the data you provide to respond to your enquiry. The legal basis is our legitimate interest in operating an open and responsive commercial enterprise, and — where the enquiry relates to a potential contractual relationship — the steps necessary to enter into a contract at your request.
Conducting commercial activity. Personal data of counterparty representatives is processed in order to negotiate, conclude, and perform commercial contracts; to settle transactions; and to comply with the regulatory and reporting obligations applicable to wholesale energy trading. The legal basis is the performance of contractual obligations, the legitimate interests of the SANIA Group in conducting its commercial activity, and — for elements of the processing required by law — compliance with legal obligations.
Counterparty due diligence and sanctions screening. Personal data of counterparty representatives, beneficial owners, and other associated persons is processed to fulfil the customer due diligence and sanctions screening obligations described on our Compliance & Risk page. The legal basis is compliance with legal obligations and the legitimate interests of the SANIA Group in maintaining the integrity of its counterparty base.
Recruitment. Personal data submitted in the course of an application for employment is processed for the purpose of assessing the application, conducting interviews, and — where successful — entering into an employment relationship. The legal basis is the steps necessary to enter into a contract at the request of the applicant.
Website operation, security, and improvement. Technical website usage data is processed for the purposes of operating the website, ensuring its security against unauthorised access and misuse, and improving its content and functionality. The legal basis is our legitimate interest in operating a secure and effective website.
We do not process personal data for marketing purposes without prior, explicit, and revocable consent. We do not engage in profiling, behavioural advertising, or automated decision-making affecting individuals.
4. Sources of Personal Data
Personal data is principally collected directly from the data subject. In addition, we may receive personal data from other sources, including:
counterparty representatives (e.g. where a colleague of yours provides your contact details in the course of a commercial communication);
public sources, including commercial registers, regulatory disclosures, and other official publications;
third-party commercial databases used for sanctions screening and counterparty due diligence, as described on our Compliance & Risk page.
5. Recipients of Personal Data
Within the SANIA Group, personal data is shared on a need-to-know basis between the parent company and the relevant subsidiaries, in support of the commercial purposes described above. Outside the Group, personal data may be disclosed to:
Professional service providers acting on our behalf — including IT, hosting, and email service providers, legal advisers, auditors, and the Registered Reporting Mechanism (RRM) through which we report transactions under REMIT. Such providers act as processors under our instructions, subject to appropriate contractual safeguards.
Counterparties to commercial transactions — to the extent reasonably necessary to negotiate, conclude, and perform commercial contracts, and to satisfy mutual due diligence requirements.
Public authorities — including energy regulators, tax authorities, audit firms acting in a statutory capacity, and other supervisory bodies, where required by applicable law or in response to lawful requests.
We do not sell, rent, or otherwise commercially trade personal data.
6. International Transfers of Personal Data
The SANIA Group operates across Switzerland and the European Union, and personal data is transferred between the parent company and the EU subsidiaries in support of group-level commercial and administrative activity. Switzerland is recognised by the European Union as providing an adequate level of data protection, and personal data therefore flows freely between Switzerland and the European Economic Area without additional contractual safeguards. Transfers of personal data to countries outside the European Economic Area and Switzerland are limited; where they occur, they are conducted on the basis of an adequacy decision, the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism recognised by both revFADP and GDPR.
7. Retention of Personal Data
We retain personal data only for as long as is necessary for the purposes for which it was collected, and in any event no longer than is permitted by applicable law:
Email, telephone, and other general correspondence — retained for as long as reasonably necessary to handle the enquiry and, where relevant, to document the resulting business relationship or comply with legal obligations.
Counterparty representative data — retained for the duration of the commercial relationship, and for a period thereafter consistent with the statutory retention obligations applicable to commercial and accounting records under Swiss law (currently ten years for accounting records under Article 958f of the Swiss Code of Obligations) and the corresponding obligations in the jurisdictions of our subsidiaries.
Recruitment data — retained for the duration of the application process, and — for unsuccessful applicants — for a period of up to twelve months thereafter, unless the applicant has expressly consented to a longer retention period for the purpose of consideration in respect of future opportunities.
Website usage data — technical access data recorded in server logs is retained only for the period reasonably necessary to operate and secure the website and to investigate security incidents, in accordance with the hosting platform’s configured log-retention settings.
At the expiry of the applicable retention period, personal data is securely deleted or anonymised.
8. Your Rights as a Data Subject
Subject to applicable law, you have the following rights in respect of the personal data we process about you:
Right of access — to obtain confirmation of whether we process personal data about you, and to receive a copy of that data together with information about the processing.
Right of rectification — to request the correction of inaccurate personal data, or the completion of incomplete personal data.
Right of erasure — to request the deletion of personal data, where the legal grounds for our continued processing no longer apply.
Right of restriction — to request the temporary restriction of processing in specified circumstances.
Right of objection — to object to processing conducted on the basis of legitimate interests, where you consider that your particular circumstances warrant such objection.
Right of portability — where applicable, to receive personal data you have provided to us in a structured, commonly used, machine-readable format.
Right to withdraw consent — where processing is based on your consent, to withdraw that consent at any time, without affecting the lawfulness of processing conducted before withdrawal.
To exercise any of these rights, please contact us using the details set out in Section 11 below. We will respond to your request within the timeframes specified by applicable law, and in any event without undue delay.
9. Complaints to a Supervisory Authority
In addition to the rights set out above, you have the right to lodge a complaint with the data protection supervisory authority of the country in which you reside, work, or believe a possible violation of data protection law to have occurred. The principal supervisory authorities relevant to the SANIA Group’s processing of personal data are:
Switzerland: Federal Data Protection and Information Commissioner (Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter, EDÖB)
Czech Republic: Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ)
Slovakia: Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky, ÚOOÚ SR)
Hungary: National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH)
Austria: Data Protection Authority (Datenschutzbehörde, DSB)
Germany: the data protection authority of the federal state in which you reside; for the seat of our EU representative, the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA)
10. Security of Personal Data
We apply technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, alteration, disclosure, and destruction. Further detail on the information security framework applied across the SANIA Group is provided on our Compliance & Risk page.
11. Contact for Privacy Matters
For any question or request relating to the processing of your personal data by the SANIA Group, please contact us at:
SANIA Power AG
Attention: Privacy Matters
Baarerstrasse 14
6300 Zug, Switzerland
Email: privacy@sania-power.com
We will respond to your enquiry within two working days, and will provide a substantive response within the timeframes prescribed by applicable law.
12. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our processing activities, in applicable law, or in the practical operation of this website. The current version is the version published on this page; the date of last revision is shown below. Substantive changes affecting the rights of data subjects will be drawn to attention in an appropriate manner.
13. Language versions
This Privacy Policy is published in English, German, and Hungarian. In case of any discrepancy between the language versions, the English version prevails.
Last revised: 27 July 2026