Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Unblu Virtual Agent is a Swiss conversational platform used mainly by banks and financial institutions to add secure chat, co browsing, and virtual assistants to their websites. It sets cookies and processes conversation data in Switzerland, which benefits from an EU adequacy decision, so transfers are straightforward but consent still applies to non essential cookies.
Unblu Virtual Agent is part of the Unblu conversational platform, developed in Switzerland and used by banks, insurers, and other regulated businesses to offer secure chat, virtual assistants, and co browsing. It places a conversation widget on the website and is built for high security and compliance requirements.
Unblu sets cookies and uses browser storage to keep a conversation session and route the visitor to the right agent or assistant, and it may record the conversation and co browsing activity. In a banking context the data can be sensitive, including account related questions, and is personal data under the GDPR.
Loading the widget and setting non essential cookies require consent under Article 5(3) ePrivacy, while strictly necessary session storage for a conversation the visitor started can be exempt. Unblu is hosted in Switzerland, which the EU recognises as providing adequate protection, so transfers to Switzerland do not need additional safeguards such as Standard Contractual Clauses.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Gate any non essential cookies behind consent and avoid loading the full widget before the visitor engages. Because conversations may touch on financial or other sensitive matters, be transparent about recording, restrict who can access transcripts, and apply data minimisation.
Sign a data processing agreement, confirm Swiss hosting and the adequacy basis, and document the lawful bases for the conversation and any recording. List the Unblu cookies, set a retention period for transcripts and co browsing data, and ensure strong access controls given the sensitivity of the context.
Websites using Unblu Virtual Agent must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is advisable where Unblu is used for financial or other sensitive conversations, co browsing, or recording, even though Swiss hosting benefits from adequacy. Assess the sensitivity of the data, the recording, and the access controls.
Sample consent text
We use Unblu to provide secure chat and virtual assistance, hosted in Switzerland. Non essential cookies are only set if you accept them, and conversations may be recorded to handle your request.
Third-party domains contacted
unblu.comunblu.cloudCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| unblu_session | Functional | Session | Maintains the secure conversation session and routing |
| unblu_visitor | Functional | 6 months | Recognises a returning visitor to continue a conversation |
| unblu_analytics | Analytics | 1 year | Measures how visitors use the conversation widget |
Unblu Virtual Agent uses cookies for user preferences — inform visitors with a consent banner.
Unblu sets a functional session cookie to keep the secure conversation and routing, may set a cookie to recognise a returning visitor, and can add an analytics cookie. Only the session storage is strictly necessary.
Strictly necessary session storage for a conversation the visitor started can be exempt, but non essential cookies such as analytics require prior consent and should stay blocked until the visitor accepts.
The conversation can rely on contract or legitimate interest under Article 6(1)(b) and (f), while non essential cookies rely on consent under Article 6(1)(a) and Article 5(3) ePrivacy. Recording needs its own clear basis.
Unblu is hosted in Switzerland, which the EU recognises as providing adequate protection, so transfers to Switzerland do not require Standard Contractual Clauses. Confirm the hosting location in your agreement.
A DPIA is advisable where Unblu handles financial or sensitive conversations, co browsing, or recording. Assess the sensitivity of the data, the recording, and the access controls even though Swiss hosting benefits from adequacy.
Gate non essential cookies behind consent, be transparent about recording, sign a data processing agreement, document the lawful bases, set retention for transcripts and co browsing data, and apply strong access controls.
Other EU or Swiss hosted secure chat and virtual assistant platforms offer comparable features. Whatever you choose, consent applies to non essential cookies and sensitive conversation data needs careful handling.
List the Unblu session and analytics cookies with their purpose and duration, note that data is hosted in Switzerland under adequacy, and explain that conversations may be recorded. Update the entry when features change.