Privacy policy

1. Controller

Bastion Defense Systems AG
Bahnhofstrasse 12, 8001 Zurich, Switzerland
Email: privacy@bastion-defence.com
See also Legal notice.

2. Scope

This notice explains how we process personal data when you visit this website, contact us via forms, or manage cookie preferences. It is drafted for EU/EEA/UK visitors under the GDPR and applies internationally as our baseline privacy standard.

3. Hosting and log files

When you visit the website, technically necessary connection data (for example IP address, time, requested resource, user agent) may be processed in server log files. Legal basis: legitimate interest in operating and securing the site (Art. 6(1)(f) GDPR) and, where applicable, contract or pre-contractual steps.

4. Cookies and consent

We distinguish necessary cookies/storage from optional categories (Preferences, Analytics, Marketing). Optional cookies are set only with your consent (Art. 6(1)(a) GDPR). You can change your choice at any time:

Open cookie settings

• Necessary — security, storing your cookie choice, and basic site functions.
• Preferences — optional UI or language settings.
• Analytics — anonymous usage measurement (only if enabled).
• Marketing — campaign or embed measurement (only if enabled).

Consent is stored locally in your browser (localStorage key bastion-cookie-consent).

5. Contact form

We process contact-form data to handle your request (Art. 6(1)(b) and/or (f) GDPR). Data is sent by email to our Programs Office and may be logged briefly on the server for follow-up. Retention: as long as needed for processing and legal retention duties.

6. Recipients / international transfers

If analytics or marketing services are integrated, data may be processed by processors in the EU or—with appropriate safeguards (for example Standard Contractual Clauses)—in third countries. Without your consent to optional categories, such services are not loaded via this website.

7. Retention

Cookie consent: until withdrawal, local deletion, or version change. Log files: according to the host’s usual periods. Contact content: as long as needed for handling and legal obligations.

8. Your rights (GDPR)

Where applicable, you have rights of access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interests, and withdrawal of consent with effect for the future. You also have the right to lodge a complaint with a supervisory authority.

9. No mandatory data / no automated decision-making

You can use the website without submitting voluntary form data. Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.

10. International visitors

If you access this site from outside the EU/EEA/UK, we still apply the same cookie choice model. Provider details are available on the Legal notice page.

11. Changes

We update this notice when technology or legal requirements change. Last updated: August 2026.

Legal notice →