Contact
ZESST SA Effective date: April 2026

Privacy policy

1. Who we are

This website is operated by ZESST SA (“ZESST”, “we”, “us”, “our”), a Swiss company registered in the Canton of Vaud.

Address: EPFL Innovation Park, Building D CH-1015 Lausanne, Switzerland

Contact for data protection matters: Email: info@zesst.ch 

This privacy policy explains how we collect, use, and protect your personal data when you visit our website zesst.ch or interact with our services. It applies to all visitors, prospective customers, investors, partners, and job applicants.

We comply with the Swiss Federal Act on Data Protection (nFADP/nDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Information we collect

2.1 Information you provide directly

When you use our contact forms, request information, or apply for a position, we may collect:

  • Contact details: name, email address, phone number
  • Professional information: company name, role, nature of enquiry
  • Message content: any information you include in your message to us
  • Application data: CV, cover letter, and professional qualifications when you apply for a position

2.2 Information collected automatically

When you visit our website, we automatically collect certain technical information:

  • Device and browser data: IP address, browser type and version, operating system, screen resolution
  • Usage data: pages visited, time spent on pages, referral source, click behaviour
  • Cookies and similar technologies: as described in section 7 below

2.3 Information from third-party services

We use Google reCAPTCHA v3 on our contact forms to protect against spam and abuse. This service may collect hardware and software information, such as device and application data, and send it to Google for analysis. The use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service.

3. How we use your information

We use your personal data for the following purposes:

  • Responding to enquiries: to answer your questions about our vessels, services, investment opportunities, or partnerships
  • Service delivery: to provide information, documentation, or demonstrations you have requested
  • Recruitment: to process and evaluate job applications
  • Website operation: to maintain, secure, and improve our website functionality
  • Analytics: to understand how visitors use our website and to optimise content and user experience
  • Communications: to send relevant updates about our products or company, only if you have opted in to receive them
  • Legal compliance: to comply with applicable laws, regulations, and legal processes

Legal bases for processing (GDPR, where applicable):

  • Consent: for marketing communications and non-essential cookies
  • Legitimate interest: for website analytics, security, and improving our services
  • Contract performance: for responding to enquiries and delivering requested services
  • Legal obligation: for compliance with applicable laws

Data retention: we retain your personal data only for as long as necessary to fulfil the purposes described above, or as required by applicable law. Contact form submissions are retained for 24 months. Job applications are retained for 12 months after the position is filled unless you consent to a longer period.

4. How we share your information

We do not sell your personal data. We share your information only in the following limited circumstances:

  • Service providers: hosting providers, email services, and analytics tools that process data on our behalf and under our instructions
  • Professional advisers: lawyers, auditors, and insurers when necessary for our business operations
  • Regulatory authorities: when required by Swiss or applicable law
  • Google: through the use of reCAPTCHA and analytics services (see sections 2.3 and 7)

All third-party service providers are contractually required to protect your data and process it only for specified purposes in accordance with our instructions and applicable data protection law.

International data transfers: some of our service providers may process data outside Switzerland and the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission or the Swiss Federal Data Protection and Information Commissioner (FDPIC).

5. How we protect your information

We implement appropriate technical and organisational security measures, including:

  • Encryption of data in transit (TLS/SSL)
  • Access controls limiting data access to authorised personnel
  • Regular security reviews and updates
  • Procedures for managing suspected data breaches

While we take reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

6. Your rights

Under Swiss data protection law and, where applicable, the GDPR, you have the following rights:

  • Access: request a copy of the personal data we hold about you
  • Rectification: request correction of inaccurate or incomplete data
  • Erasure: request deletion of your personal data in certain circumstances
  • Restriction: request that we restrict processing of your data in certain circumstances
  • Data portability: request transfer of your data in a structured, machine-readable format
  • Objection: object to processing of your data based on legitimate interests
  • Withdraw consent: withdraw your consent at any time where processing is based on consent

To exercise any of these rights, contact us at info@zesst.ch. We will respond within 30 days.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if applicable, a supervisory authority in the EU.

7. Cookies and tracking technologies

Our website uses cookies — small text files stored on your device when you visit our site.

7.1 Types of cookies we use

Strictly necessary cookies Required for basic website functionality (navigation, security, form submission). These cannot be disabled.

Analytics cookies We use Google Analytics to understand how visitors interact with our website. These cookies collect anonymised data about page views, visit duration, and traffic sources. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Functionality cookies Enable personalised features such as language preferences.

7.2 Google reCAPTCHA

Our contact forms use Google reCAPTCHA v3, which may set cookies and collect data to distinguish human visitors from bots. This processing is governed by Google’s Privacy Policy (https://policies.google.com/privacy) and Terms of Service (https://policies.google.com/terms).

7.3 Managing cookies

You can set your browser to refuse or delete cookies. Please note that disabling cookies may affect certain website features. Most browsers allow you to:

  • View cookies currently stored and delete them individually
  • Block third-party cookies
  • Block cookies from specific sites
  • Block all cookies
  • Delete all cookies when you close your browser

 

8. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every website you visit.

9. Children

Our website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

10. Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

11. Contact us

For any questions about this privacy policy or to exercise your data protection rights:

ZESST SA EPFL Innovation Park, Building D CH-1015 Lausanne, Switzerland

Email: info@zesst.ch