Skip to content
FR

01

Who is responsible

  • Site visitors: Lionel Zeidan, sole proprietorship, 5c chemin Barbolet, 1213 Onex, Geneva, is the controller of your visit and contact data. Contact: contact@zpi-pro.ch.
  • Clients who upload files: the client remains the controller of the data contained in its documents. Lionel Zeidan acts as a processor, under a written data processing agreement (art. 9 FADP) that the client accepts before its first upload. Contact: audit@prevot.ch.

02

Which data, and why

  • Visiting the site (zpi-pro.ch and prevot.ch): IP address and technical data in the host's logs, for security and proper operation. The site uses no advertising tracker and no external analytics tool, and its fonts are hosted on the site.
  • Contact: your name, email address and message, to answer your request.
  • Uploaded files: invoices, folios, rooming lists and contracts, which may contain travellers' names, stay dates and consumption. They are used only to produce the requested check report.
  • Access: your email address, to send you a one-time code.

03

How long

  • Uploaded documents: deleted at the end of processing.
  • Reports: kept for 30 days so the client can find them, then deleted; longer retention is possible at the client's request.
  • Technical logs: 30 days.
  • Contact messages: kept for 12 months, then deleted.

04

Who receives your data (processors)

ProviderRoleCountry
InfomaniakHosting of the upload service, emailSwitzerland
CloudflareHosting of the website, access control, logsUnited States (with worldwide access)
AnthropicReading of scanned pages by the Claude modelUnited States
GoogleGemini model, only for the ZPI modules that use itUnited States
Infomaniak Swiss BackupEncrypted backups, planned, not yet activeSwitzerland

05

Transfers outside Switzerland

Scanned pages are sent to Anthropic in the United States to be read. The client's name appears in the report sent by email. For these transfers, safeguards within the meaning of art. 16 FADP apply: for Anthropic, standard contractual clauses with the Swiss addendum of its data processing agreement; for Google, certification under the Swiss-U.S. Data Privacy Framework.

06

Security

One-time code access, a list of authorised addresses kept by hand, deletion of documents at the end of processing, restricted server access. No system is infallible: in the event of a data breach, the client is informed as soon as possible.

07

Your rights

You can request access to your data, its correction or deletion, or object to its processing, by writing to contact@zpi-pro.ch; for data in the upload service (audit.prevot.ch), to audit@prevot.ch. You can also contact the Federal Data Protection and Information Commissioner (FDPIC).

08

Cookies

This site sets no cookie; for the length of the visit, and without any personal data, it only keeps an animation flag in the browser. It uses no audience measurement tool and no advertising pixel: there is nothing to accept or refuse, so there is no banner. Its fonts are hosted on the site itself, with no request to a third party.

Access to the upload service (audit.prevot.ch) is protected by Cloudflare Access, which sets cookies strictly necessary for authentication and security. Without them, signing in is impossible.

  • CF_Authorization (Cloudflare Access): keeps your session after the code received by email is validated, for the session length of the access policy.
  • __cf_bm (Cloudflare): distinguishes a human visitor from a bot, 30 minutes.
  • cf_clearance (Cloudflare): remembers that a security check was passed, variable length.

These cookies fall under the consent exemption for trackers strictly necessary to a service explicitly requested (art. 5(3) of Directive 2002/58/EC; art. 45c(b) of the Swiss Telecommunications Act). You can block them in your browser, but access to the upload service will no longer work; this site remains fully available.

09

Changes

This policy may be updated; the date of the last change appears at the bottom of the page. Last change: 9 October 2026.