1. Data controller
UP-NETWORK Sàrl, Boulevard de la Cluse 43, c/o Maceo Sahli, 1205 Geneva, Switzerland
CHE-169.096.269 — hello@cdn.pizza
2. Data collected
2.1 User account
- Email address, name, password (bcrypt hash)
- Timezone, preferred language
- Registration and last login date
2.2 Service data
- Configured DNS zones (domain names)
- Uploaded files: name, size, MIME type, hash
- Usage statistics: consumed bandwidth, cache hits/misses
2.3 Technical logs
- End-visitor IP addresses (anonymised after 90 days)
- Timestamp and HTTP method of served requests
- Visitor User-Agent (not linked to a profile)
2.4 Billing
- Transaction history (amount, date, Payrexx reference)
- No payment card data is stored on our servers — everything goes through Payrexx.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| CDN service delivery | Contract performance |
| Billing and prepayment | Contract performance |
| Security, abuse detection, WAF | Legitimate interest |
| Legal compliance (accounting obligations) | Legal obligation (Swiss CO, 10 years) |
| Service improvement (aggregated analytics) | Legitimate interest |
4. Data retention
- Account Account lifetime + 10 years (Swiss accounting obligations)
- Raw logs 90 days, then automatic anonymisation
- Statistics Aggregated, kept indefinitely (not linked to individuals)
- Billing 10 years (CO art. 958f)
5. Data recipients
Your data is not sold. It may be shared with:
- Payrexx AG (payment processing) — Switzerland
- Edge server providers (node hosting) — see Network page for countries
- Competent authorities if required by Swiss law
6. Transfers outside Switzerland / EU
Some nodes are located outside Switzerland/EU (Bangkok, Singapore, Sydney, Johannesburg, etc.). CDN traffic transits through these nodes but no account personal data is stored there. Logs are processed from Switzerland.
7. Your rights (FADP & GDPR)
- Access — obtain a copy of your data
- Rectification — correct inaccurate data
- Erasure — request deletion of your account
- Portability — receive your data in a structured format
- Objection — object to processing based on legitimate interest
To exercise these rights: hello@cdn.pizza — response within 30 days.
8. Cookies
The dashboard console.cdn.pizza uses a strictly necessary session cookie (Laravel) for authentication. No tracking or advertising cookies are used.
9. Security
HTTPS connections required. Passwords hashed with bcrypt. Data access restricted to UP-NETWORK Sàrl staff. Audit trail of all administrative actions.
10. Contact & complaints
Data protection contact: hello@cdn.pizza
If your complaint is not resolved, you may contact the Federal Data Protection and Information Commissioner (FDPIC).