Privacy policy
Last updated: March 29, 2026
1. Data Controller
The data controller responsible for the processing of your personal data on this website is:
MimeSeas
Switzerland
Email: privacy@mimeseas.com
This Privacy policy is issued in compliance with the Swiss Federal Act on Data Protection (nDSG / FADP) and, where applicable to visitors from the EU/EEA, the EU General Data Protection Regulation (GDPR, Regulation 2016/679).
2. Legal Basis for Processing
We process your personal data on the following legal bases under Article 6 of the GDPR:
- Consent (Art. 6(1)(a)): Analytics cookies are only placed after you give explicit consent via our cookie banner.
- Contractual necessity (Art. 6(1)(b)): Processing data necessary to respond to your inquiries or provide requested services.
- Legitimate interest (Art. 6(1)(f)): Website security, fraud prevention, and improving our services.
- Legal obligation (Art. 6(1)(c)): Compliance with applicable laws and regulations.
3. Personal Data We Collect
Data you provide voluntarily
- Name, email address, phone number, and company name (via contact forms)
- Job application materials (CV, cover letter, portfolio)
- Any information you include in correspondence with us
Data collected automatically (with your consent)
If you accept analytics cookies, we collect:
- Pages visited and time of visit
- Referring website (where you came from)
- Browser type and language preference
- Screen resolution
We do not collect IP addresses, device fingerprints, or any data that directly identifies you through our analytics system.
4. Cookies
What are cookies?
Cookies are small text files stored on your device when you visit a website. They help the website remember your preferences and understand how visitors use the site.
Cookies we use
- enosea_cookie_consent (Strictly necessary): Stores your cookie preference (accept or refuse). Duration: 1 year. This cookie is always set as it is required for the website to respect your choice.
Analytics tracking
If you click “Accept” on our cookie banner, we collect anonymized visit data (page URL, referrer, browser type, screen size) through our own first-party analytics system. This data is stored on our server and is never shared with third parties. No third-party tracking scripts (such as Google Analytics) are used.
Your choice
If you click “Refuse,” no analytics data is collected and no tracking takes place. You can also delete cookies at any time through your browser settings.
5. How We Use Your Data
- To respond to your inquiries and provide requested services
- To process job applications
- To understand how our website is used and improve it (only with consent)
- To comply with legal obligations
6. Data Sharing and Transfers
We do not sell, trade, or rent your personal data to any third party.
We may share data with:
- Hosting providers (Netlify) for website operation, with data processed in the EU/EEA or under adequate safeguards
- Legal authorities when required by law
- Professional advisors under confidentiality obligations
If any data transfer outside Switzerland or the EEA is necessary, we ensure appropriate safeguards are in place (Standard Contractual Clauses, adequacy decisions, or other lawful transfer mechanisms under the nDSG and GDPR).
7. Data Retention
- Contact form data: Retained for the duration of our business relationship, then deleted within 12 months.
- Job applications: Retained for up to 6 months after the recruitment process unless you consent to longer retention.
- Analytics data: Anonymized visit data is retained for up to 24 months, then automatically purged.
8. Your Rights Under the nDSG and GDPR
As a data subject, you have the following rights under Swiss data protection law (nDSG) and, where applicable, the GDPR:
- Right of access (Art. 15): Request a copy of the personal data we hold about you.
- Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17): Request deletion of your personal data (“right to be forgotten”).
- Right to restriction (Art. 18): Request that we limit the processing of your data.
- Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to object (Art. 21): Object to processing based on legitimate interest.
- Right to withdraw consent (Art. 7(3)): Withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at privacy@mimeseas.com. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including HTTPS encryption, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure.
10. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the competent supervisory authority.
For Swiss residents
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern, Switzerland
Tel: +41 (0)58 462 43 95
Website: www.edoeb.admin.ch
For EU/EEA residents
You may also lodge a complaint with the data protection authority in your country of residence. A list of EU data protection authorities is available at edpb.europa.eu.
11. Changes to This Policy
We may update this Privacy policy from time to time. The updated version will be posted on this page with a revised “last updated” date. We encourage you to review this page periodically.
12. Contact
For any questions about this Privacy policy or our data practices:
Email: privacy@mimeseas.com
Address: Switzerland