Protecting your data at the body shop in Geneva

AZ Carrosserie Sàrl, body shop in Geneva, is the controller for the processing of personal data described on this page. The processing is governed by the Federal Act on Data Protection (FADP) and its ordinance.

• the affected areas you mark on the diagram of the car, which has 17 of them;
• the type of damage you choose: scratch, dent, deep dent, broken part, broken glass;
• whether the car can still be driven: yes, no, or you would rather not drive it;
• the make, model and engine of the car;
• its registration number and its chassis number (VIN);
• the photos of the damage you attach, four at most (photo or PDF file);
• the photo of the vehicle registration document (permis de circulation, or the French carte grise) if you attach it instead of the chassis number or in addition to it: the document shows the name and address of the keeper; it is kept like the photos of the damage and does not appear in the acknowledgement;
• whether the claim has been reported (yes, no, you do not know) and, if it has, the name of your insurer and the claim number;
• the time that suits you to drop off the car (morning, afternoon, no preference) and, if you tick it, your wish for a courtesy car;
• your first and last name, your telephone number, your email address, your town and your message;
• if you answer, how you heard about us (one answer from a list, for example “Google search”), which tells us where requests come from;
• your consent to this information being used to handle your request (the box to tick before sending);
• the summary of your answers that the page puts together before sending, and the time at which the form page was displayed, which is used to filter out automated submissions;
• a technical field, the result of the anti-robot check described below, which contains no data about you.

Required: at least one affected area and one type of damage, the make and model of the car, the chassis number or the photo of the registration document (either one is enough), your name, your telephone number, your email address and your consent. The other fields are optional: you are free to leave them empty.

The form on the Contact page receives your name, your telephone number, your message and, if you give them, your email address and how you heard about us. It also receives the time at which the page was displayed, which is used to filter out automated submissions, and the same technical field.

While you fill in the quote form, your browser keeps a draft of your answers on your device, without your contact details (name, telephone number, email) and without the photos or documents: nothing leaves it before you send. This draft stays in the browser’s storage (localStorage) for at most 7 days, so that you can pick up your request if you close the page: when you come back to the form, a banner offers “Resume” or “Start over”. It is deleted when the page confirming that your request has arrived is displayed (if sending fails, it is kept so that you can send your request again), when you choose “Start over”, and after 7 days. On a device that other people use, choose “Start over” or clear this site’s data in your browser.

To find out at which question the quote form is most often abandoned, the site counts, without identifying you, the screen displayed, the screen left without sending and the sending. Your browser sends only the screen number and the language of the page: no cookie, no answer you typed, and your IP address is not recorded (only an unreadable fingerprint, deleted within two hours, limits the number of signals). The server keeps only totals per day, per language and per screen, for 90 days, read by the workshop alone. So that the same screen is not counted twice, the numbers already counted stay in the browser’s session storage (sessionStorage) until the tab is closed. This count is not audience measurement: it concerns the quote form only.

Before sending, your device performs an automatic calculation showing that the form is not being sent by a robot: no box to tick, no picture to recognise, and no outside service. The calculation is done on your device; only its result is sent with your request. The server keeps a trace of it, with no data about you, so that it can only be used once.

With each submission, the website’s server also calculates three “salted” fingerprints: codes derived from a piece of data and a secret specific to the website, which make it impossible to recover the data without that secret. The first comes from your IP address; the form processing does not write the address itself to its files. It is used only to limit abuse: the number of requests, acknowledgements and photos sent from the same connection. The counters that hold it are deleted after three days at most. The second comes from your email address or, without an email, from the digits of your telephone number: it lets us find your request if you ask us whether it arrived, or delete it. These two fingerprints are written to the request log, and deleted with it. The third also comes from your email address, when you give one: it is used only to send no more than one acknowledgement per address per day. The file that holds it, with the time of the last acknowledgement, is not written to the log and is deleted after three days at most.

Your photo sometimes shows the car’s registration plate. This plate is personal data: mask it before sending if you would rather not pass it on. If it is left visible, it is used only to recognise your car in the file.

Does this website measure your visit?

To know how many visits it receives and where they come from (a search engine such as Google or Bing, an assistant such as ChatGPT, a social network, another website or an address typed in directly), this website counts daily totals itself, on its own server: the number of visits per source, the number of views of each page and, page by page, how many times a call or WhatsApp link is tapped (neither the number nor the message is recorded), as well as how many times one of the “Tyres”, “Accident” or “Not sure” choices of the quote form is ticked. This anonymous count stores no cookie, records neither your IP address nor any data that identifies you, and is passed on to no third party; these totals are kept for 12 months.

To follow up requests, this website also keeps, in your browser and only for the life of the tab (session storage, erased when the tab is closed), where your visit came from and its first page. When the quote form is opened or a WhatsApp button is tapped, a notice containing no personal data is emailed to Swiss Scaling, which built this website and looks after it for the workshop: the time, the page, the language, that source, that first page and the type of device (phone or computer). It contains neither your IP address, nor your browser’s identifier, nor anything you type. Beyond a daily limit, only totals are sent.

You are not tracked here by any advertising cookie: neither Google Analytics nor any equivalent, and no profiling. No social media button loads content from elsewhere, and there is no banner to accept.

How can you access, correct or delete your data?

You can ask at any time for access to the data held about you, for it to be corrected if it is inaccurate, or for it to be deleted. Write to contact@azcarrosserie.ch, or call 076 429 04 12 during opening hours: Monday to Friday, 7.30 am – 12 noon and 1 pm – 5.30 pm. We may ask you to prove your identity before acting on your request, so as not to hand your data to someone else. You can also contact the Federal Data Protection and Information Commissioner (FDPIC).

Is your data transmitted securely?

The website is served over HTTPS: what you enter travels encrypted between your browser and the hosting provider. The requests received are opened only by the workshop staff. No payment is made on this website and the form does not ask you for any bank details.

Can this page change?

Yes. This policy follows the life of the workshop and the website’s tools. The date shown below indicates when the text was last reviewed, and the version published at this address is the one that applies. Of the two language versions, the French text prevails.