Data protection

Zi-Host is established in Switzerland and processes data of people living in Switzerland and in the European Union. Two texts therefore apply: the revised Federal Act on Data Protection (revFADP, in force since 1 September 2023) and European Regulation 2016/679 (GDPR).

Controller: Zi-Host, [company name and address to be completed]. Contact: privacy@zi-host.ch.

Identity and contact details (surname, first name, email, billing address, company) — to perform the contract and issue invoices. Legal basis: performance of the contract.

Connection data (IP address, timestamp, user agent) — to secure accounts and prevent abuse. Legal basis: legitimate interest.

Technical data of your services (server name, resources, node) — to provide the service.

Content of your support tickets — to answer you.

No profiling, no automated decisions with legal effects, no resale of data, no unsolicited marketing.

A session cookie, strictly necessary to keep you signed in, and therefore exempt from consent. If we open sales in another currency, a second cookie remembers your display choice — also functional and exempt.

No advertising trackers, no third-party analytics, no social media pixels. That is why this site shows you no consent banner.

Customer account: duration of the contractual relationship. Sessions: deleted automatically as soon as they expire. Activity logs: 180 days, then automatic deletion. Hosted content: deleted 14 days after cancellation.

Invoices: ten years. This retention is required by Article 958f of the Swiss Code of Obligations and overrides the right to erasure (GDPR Art. 17(3)(b)).

These periods are not just on paper: a daily task purges sessions and logs itself.

Access and portability: download all your data in JSON format at any time from Customer area → Settings. No written request is needed.

Rectification: change your details directly on the same page.

Erasure: delete your account from Settings. Your identity data is erased, and your invoices are kept in anonymised form solely to meet accounting obligations.

Objection, restriction and any other request: privacy@zi-host.ch. We reply within 30 days.

Stripe Payments Europe (payment collection, Ireland) — we never have access to your card number. Our hosting partner in Switzerland, for servers and backups.

Data stays in Switzerland and the European Economic Area. Any transfer to the United States by Stripe is covered by the European Commission's standard contractual clauses.

TLS encryption across the whole site, passwords stored as non-reversible bcrypt hashes, session tokens kept as revocable HMAC-SHA256 fingerprints, customer services separated in isolated containers.

In the event of a data breach presenting a risk, we notify the FDPIC and, where applicable, the competent supervisory authority, as well as the people concerned, as quickly as possible.

You may contact the Federal Data Protection and Information Commissioner (FDPIC, Bern) or, if you live in the European Union, the supervisory authority of your country.