Cookies
Policies

What Cookies do we use?

The Zama website www.zama.org (the "Website") uses various types of cookies and similar tracking technologies to improve your user experience, optimise our Website performance, and support our business development activities.

Cookies are small text files placed on your device (computer, tablet or smartphone) when you visit the Website. They allow the collection of certain information related to your browsing activity and help the Website recognise your browser on subsequent visits.

Different types of cookies serve different purposes. Some are essential for the Website to function properly, while others help us understand how visitors interact with our content or support our commercial outreach efforts.

(i) Necessary Cookies (exempt from consent)

These technical cookies are essential for using the Website and its core functionalities, such as displaying pages correctly, maintaining your session and managing your cookie preferences. The Website cannot function properly without these cookies.

They are exempt from consent under applicable law and are always activated. Disabling them may prevent you from using certain features of the Website.

(ii) Cookies for performance measurement and analytics

These cookies are placed for the purpose of analysing your browsing activity on the Website (e.g. pages visited, volume of visits, session duration) in order to measure and improve its performance.

These cookies help us to:

• Collect statistical information about how the Website is used;
• Understand which pages and content are most relevant to our visitors;
• Identify technical issues and improve the overall user experience.

We use Google Analytics 4 (GA4) and HubSpot analytics cookies for these purposes. These cookies are only loaded after you have given your explicit consent via the cookie consent banner displayed on the Website. In the absence of consent, no analytics cookies are deposited and no data is transmitted to these providers.

If you do not authorise these cookies, we will not know when you visited our Website and we will have less insight into its performance.

(iii) Marketing and CRM cookies

We use HubSpot as our customer relationship management (CRM) and marketing automation platform. HubSpot cookies enable us to track visitor interactions with the Website, identify returning visitors, manage live chat conversations, and measure the effectiveness of our marketing campaigns.

These cookies can only be deposited with your prior consent via the cookie consent banner. Certain HubSpot cookies related to consent management itself (such as __hs_opt_out and __hs_cookie_cat_pref) are classified as strictly necessary and are exempt from consent.

Data collected through HubSpot cookies is stored in Zama's shared CRM platform. This data may be accessed by authorised staff of Zama SAS and Zama Switzerland AG (Zama Group) for the purposes of coordinating business development, community engagement, and commercial outreach activities. For more information on intra-group data sharing, please refer to our Privacy Policy.

(iv) B2B prospect identification – Sillage (legitimate interest)

Zama uses Sillage (www.getsillage.com) to support its B2B business development activities. Sillage enables our commercial team to identify and prioritise relevant professional contacts — decision-makers and influencers — in the digital assets, decentralised finance (DeFi) and traditional finance (TradFi) ecosystems.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR), as documented in a Legitimate Interest Assessment (LIA) available upon request.

Only professional, publicly available data is processed: name, job title, company, professional email, and public professional interactions (e.g. LinkedIn posts, job changes). No sensitive data is collected. No automated decision-making or automated outreach is performed — all contact is human-led and carried out by members of the Zama commercial team.

Safeguards in place:

• Data processing is limited to the B2B professional context;
• Human review is performed before any outreach;
• Access is restricted to the Zama commercial team;
• Data minimisation is applied with a maximum retention period of 6 months;
• Opt-out mechanisms are provided at the point of first contact;
• Processing is governed by Sillage's Data Processing Agreement (DPA).

Cookie inventory

The table below lists the cookies that may be placed on your device when you visit the Website:

Cookie Name	Purpose	Provider	Category	Legal Basis	Duration
Consent cookies	Record your cookie consent preferences and choices	Consent Management Platform (CMP)	Strictly Necessary	Exempt	12 months
Session cookies	Maintain your browsing session and ensure security	Zama (first party)	Strictly Necessary	Exempt	Session
__hs_opt_out	Remember the visitor's opt-out choice to prevent re-prompting	HubSpot	Strictly Necessary	Exempt	6 months
__hs_cookie_cat_pref	Store the cookie categories the visitor has consented to	HubSpot	Strictly Necessary	Exempt	6 months
_ga	Distinguish unique visitors by assigning an anonymous client identifier	Google Analytics (GA4)	Analytics	Consent	13 months
_ga_<ID>	Persist session state for Google Analytics 4	Google Analytics (GA4)	Analytics	Consent	13 months
_gid	Distinguish users over a 24-hour window	Google Analytics (GA4)	Analytics	Consent	24 hours
_gat	Throttle the request rate sent to Google Analytics	Google Analytics (GA4)	Analytics	Consent	1 minute
__hstc	Track visitors: domain, timestamps, session count	HubSpot	Analytics / Marketing	Consent	6 months
hubspotutk	Identify visitors and deduplicate contacts on form submissions	HubSpot	Analytics / Marketing	Consent	6 months
__hssc	Track session activity (page views, session start)	HubSpot	Analytics / Marketing	Consent	30 minutes
__hssrc	Detect whether the visitor has restarted their browser	HubSpot	Analytics / Marketing	Consent	Session
messagesUtk	Recognise returning visitors who use the live chat widget	HubSpot	Functionality (chat)	Consent	6 months

This list is reviewed and updated regularly. Zama is committed to keeping it accurate and will inform users of any material changes.

How do we use Cookies?

We use first-party and third-party cookies for Website analytics purposes, including collecting information about your activities on the Website such as session durations, the content you accessed, your interactions and user-interface clicks, the Internet Protocol (IP) address of your device, the browser you used (including version and language preferences), and the approximate location from which you accessed the Website.

Where analytics cookies are used (Google Analytics 4 and HubSpot), IP addresses are truncated and data is aggregated to protect your privacy. No individual profiling is carried out based on cookie data.

Cookie consent banner

In accordance with applicable law, a full cookie consent banner is displayed upon your first visit to the Website. The banner allows you to:

• Accept all cookies ("Accept All");
• Refuse all non-essential cookies ("Refuse All");
• Customise your preferences by category ("Manage Preferences").

The "Accept All" and "Refuse All" buttons are presented with equal prominence. No non-essential cookies are deposited before you have expressed your choice. Simply continuing to browse the Website does not constitute valid consent.

How to manage Cookies?

You can manage your cookie settings to clear or block specific cookies, or all cookies. However, please bear in mind that disabling certain cookies may adversely affect your user experience on the Website (e.g. reduced functionality, slower page loads).

Via the Cookie Settings panel

You can change your cookie preferences at any time by clicking the "Cookie Settings" link available in the footer of every page of the Website, or by using the cookie control widget in the bottom corner of the screen.

Via your browser settings

You can also configure your browser to accept, refuse or delete cookies. The configuration of each browser is different. More information on how to manage cookies for the most popular browsers can be found at:

• Google Chrome: support.google.com/chrome
• Mozilla Firefox: support.mozilla.org
• Microsoft Edge: support.microsoft.com
• Opera: help.opera.com
• Safari: support.apple.com

Google Analytics opt-out

You can opt out of Google Analytics tracking specifically by installing the Google Analytics opt-out browser add-on: tools.google.com/dlpage/gaoptout

International data transfers

Some of the cookies used on the Website may result in the transfer of personal data to countries outside the European Economic Area (EEA), in particular to the United States (Google LLC, HubSpot, Inc.). Such transfers are subject to appropriate safeguards in compliance with the GDPR, including Standard Contractual Clauses (SCCs) adopted by the European Commission and, where applicable, the EU-US Data Privacy Framework.

Data collected through HubSpot cookies may also be accessed by Zama Switzerland AG as part of the Zama Group's shared CRM. Switzerland benefits from an adequacy decision by the European Commission, meaning that Personal Data transferred to Switzerland is considered to benefit from an adequate level of protection under the GDPR.

Data retention

Cookies are retained for the durations indicated in the cookie inventory table above. Cookie lifetimes do not exceed thirteen (13) months, and the data collected through these cookies is not retained beyond twenty-five (25) months, in line with applicable regulatory guidance.

For data processed through Sillage, professional data is retained for a maximum period of six (6) months, as documented in the Legitimate Interest Assessment (LIA).

How long is your consent retained?

Your cookie consent preferences are stored for six (6) months. After this period, the consent banner will be displayed again and we will ask for your consent anew. Consent records (i.e. the proof that consent was given or refused, including the timestamp, consent state, and version of the banner displayed) are retained for five (5) years in accordance with the French civil prescription period, so that Zama can demonstrate compliance with applicable data protection law if required.

Your rights

Under the General Data Protection Regulation (GDPR) and applicable French data protection law, you have the following rights regarding your personal data:

• Right of access: obtain confirmation that your data is being processed and request a copy;
• Right to rectification: request the correction of inaccurate or incomplete data;
• Right to erasure: request the deletion of your data where legally permitted;
• Right to restriction: request that processing of your data be suspended;
• Right to object: object to processing based on legitimate interest, including the processing carried out through Sillage;
• Right to object to direct marketing: object to the processing of your personal data for direct marketing purposes at any time, without condition (Art. 21(2)-(3) GDPR). This right is absolute and we will immediately cease processing upon receipt of your objection;
• Right to data portability: receive your data in a structured, commonly used and machine-readable format;
• Right to withdraw consent: at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at: privacy@zama.org.

If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.

If you are located in Switzerland, you may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC). If you are located in the United Kingdom, you may lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk. If you are located in Germany, you may contact the competent data protection supervisory authority in the federal state of your habitual residence. For additional jurisdiction-specific information, please refer to our Privacy Policy.

Cookies consent

You can visualise, accept, or withdraw your consent at any time by clicking the "Cookie Settings" link in the footer of the Website or by using the cookie control widget.

This Cookies Policy should be read together with our Privacy Policy, available on the Website, which contains further information about how we process your Personal Data, your rights, and jurisdiction-specific disclosures.

Contact us

Should you have any questions or comments about this Cookies Policy or the processing of your personal data, please do not hesitate to contact us at: privacy@zama.org.