Privacy Policy

Who is responsible

The controller for the personal data collected through this website is:

For any data protection question, and to exercise your rights, use the email address above.

Representative in the EU

Because we address this website to people in the European Economic Area, the GDPR applies alongside the revised Swiss Federal Act on Data Protection (revFADP). Our representative under art. 27 GDPR is:

[TO CONFIRM] (EU representative under GDPR art. 27 — name + EU address)

The short version

• You can read this entire website without giving us any personal data and without any analytics cookie being set.
• Statistics tools and external content only load after you have explicitly agreed in the cookie banner. Before that, not a single request reaches those providers.
• Fonts are served from our own server. There is no connection to Google Fonts.
• We do not sell personal data, and we run no advertising or retargeting networks on this website.

Open cookie settings

Server log files

Every time a page is requested, our web server automatically logs the technical details your browser sends. A website cannot be delivered, or defended against attack, without them.

• IP address
• Date and time of the request
• Requested URL and HTTP status code
• Volume of data transferred
• Referrer URL and browser / operating system string

Purpose: Operating the site, keeping it stable and secure, debugging, and defending against abuse.

Legal basis: Our legitimate interest in a secure, working service (art. 6(1)(f) GDPR; art. 31(1) revFADP).

Recipient: [TO CONFIRM] (hosting provider name, address, server location) — as our processor, bound by a data processing agreement.

Contact and enquiry forms

When you submit the contact or enquiry form, we process what you typed into it: name, email address, phone number (optional), website, budget range and your message. We also store the time and the language of the submission.

Purpose: Answering your enquiry and the correspondence that requires.

Legal basis: Steps taken at your request prior to entering into a contract (art. 6(1)(b) GDPR), and our legitimate interest in responding to enquiries (art. 6(1)(f) GDPR).

Recipients:

• Telegram (Telegram Messenger Inc. / Telegram FZ-LLC, Dubai, UAE) — New enquiries are pushed to an internal Telegram chat so the team sees them immediately. The message contains the data you typed into the form. Privacy policy
• Hosting ([TO CONFIRM] (hosting provider)) — Operates the server that stores the website, its database and the access logs.

Note: enquiries are pushed to an internal Telegram chat as a notification. If you would rather they were not, email us directly at the address above instead.

Cookies and consent

Cookies are small text files your browser stores. Without your consent we set only those cookies that are indispensable to running the site. Everything else — statistics and external content — is set only after you have agreed in the banner.

We store your decision for six months in the jettseo_consent cookie. You can change or withdraw it at any time — withdrawing is as easy as giving it, and takes effect going forward:

Open cookie settings

You can also block or delete cookies in your browser. If you block the necessary ones, parts of the site may stop working.

Full cookie table

Strictly necessary always on

Needed to operate the site and to remember the privacy choice you make here. These cannot be switched off, and they are not used to profile you.

Legitimate interest in a working, secure website (art. 6(1)(f) GDPR); for the consent cookie itself, storing the choice is required by law.

Statistics consent required

Lets us measure which pages get read and where visitors come from, and record how the page is used — heatmaps and an anonymised replay of mouse movement, clicks and scrolling — so we can improve the site. This sets identifiers that recognise your browser on later visits.

Your consent (art. 6(1)(a) GDPR, art. 5(3) ePrivacy Directive). Withdrawable at any time.

External content consent required

Content embedded from other companies: client videos and the appointment picker. Loading it sends your IP address to that provider, which is why it stays blocked until you allow it.

Your consent (art. 6(1)(a) GDPR, art. 5(3) ePrivacy Directive). Withdrawable at any time.

Statistics, heatmaps and session replay

With your consent we use Google Analytics 4, Microsoft Clarity and StatInside. Google Analytics counts reach and where visits come from. Clarity and StatInside additionally record how a page is used — mouse movement, clicks and scrolling — and present that as a heatmap or as a replay of the visit.

Google Analytics runs with Google Consent Mode v2. Before you agree, every consent type is set to "denied" and the Google script is not loaded at all. Google Signals and ad personalisation are switched off, and the data is not used for advertising.

Microsoft Clarity masks input in form fields by default, so a replay does not show what you type. It is nevertheless a detailed behavioural recording, which is why it happens only with your consent.

Legal basis: Your consent (art. 6(1)(a) GDPR, art. 5(3) ePrivacy Directive; art. 45c lit. b Swiss Telecommunications Act and art. 6 revFADP). You may withdraw it at any time with effect for the future.

External content

Client videos (Vimeo) and the appointment picker (Calendly) come from those providers' servers. So that your IP address is not disclosed without being asked, both are blocked by default: you see a placeholder naming the provider, and the content loads only once you request it.

Once you allow external content, the provider in question receives your IP address and may set its own cookies. Their processing is governed by their own privacy policy, linked in the cookie table above.

Legal basis: Your consent (art. 6(1)(a) GDPR).

Transfers abroad

Some of the providers named above process data in the USA. From a Swiss and European standpoint the USA does not generally offer an equivalent level of data protection; in particular, US authorities may under certain conditions access data without you having the same legal remedies available as in Switzerland or the EU.

We rely on the adequacy decisions for the EU-U.S. and Swiss-U.S. Data Privacy Framework where the provider is certified under them, additionally on the European Commission's standard contractual clauses and, for Switzerland, on the clauses recognised by the FDPIC. Transfers to providers that are not certified take place solely on the basis of your explicit consent (art. 49(1)(a) GDPR, art. 17(1)(a) revFADP).

How long we keep data

• Server log files: [TO CONFIRM] (enter the host's actual rotation period; 7 to 30 days is typical)
• Form enquiries: until your enquiry is dealt with, and for no more than 24 months thereafter so we can pick up an ongoing conversation. If a contract is concluded, the statutory ten-year retention period applies (art. 958f Swiss Code of Obligations).
• Consent cookie: 6 months
• Analytics data: as configured in Google Analytics (14 months is the recommended setting), plus the periods applied by Microsoft Clarity and StatInside.

Your rights

Within the limits of the applicable law you have the following rights. An informal message to the email address above is enough; we answer within 30 days.

• Access — confirmation of whether we process data about you, and a copy of it (art. 15 GDPR, art. 25 revFADP).
• Rectification — correction of inaccurate data (art. 16 GDPR, art. 32 revFADP).
• Erasure — deletion, unless a retention obligation stands in the way (art. 17 GDPR).
• Restriction — restriction of processing (art. 18 GDPR).
• Portability — a copy in a common format (art. 20 GDPR, art. 28 revFADP).
• Objection — objection to processing we base on a legitimate interest (art. 21 GDPR).
• Withdrawal of consent — at any time, without giving reasons and without disadvantage, with effect for the future (art. 7(3) GDPR). For cookies, the "Cookie settings" button in the footer is enough.

Right to complain

You may complain to a supervisory authority at any time. In Switzerland that is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. Within the EU you may address the authority where you live or work.

Security

The site is served exclusively over HTTPS; the connection between your browser and our server is encrypted. We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Complete protection is not achievable for transmission over the internet with current technology.

Changes to this policy

We update this policy when our service or the law changes. The version published here is the one that applies. If a change means we would process data on a new basis, we ask for your consent again.

Last updated: 2026-08-30