Data protection

myls AG

Privacy Policy

myls AG · Version of 16 October 2026

This is a translation. Only the German version is legally binding.

1. What is this about?

In this Privacy Policy, we, myls AG (‘myls’, ‘we’), explain how we process personal data for which we ourselves are responsible. This concerns in particular visits to our website myls.ch, the use of our chatbot on myls.ch, communication with us, our customer relationships and our marketing.

For personal data that we process on behalf of our customers (e.g. chat histories on a customer’s website or data on customer websites managed by us), the respective customer is responsible. More on this in Section 11.

We comply with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Controller and contact

myls AG, Widenrain 1, 6363 Obbürgen, Switzerland

Email for data protection matters: datenschutz@myls.ch

3. What data we process

• Master and contact data: e.g. name, company, position, address, email, telephone number
• Contract and financial data: e.g. products purchased, quotations, contracts, invoices, payments, credit information
• Communication data: e.g. content of emails, telephone calls, support tickets, contact forms and chat messages
• Technical and usage data: e.g. IP address, device and browser information, date and time, pages visited, clicks, cookie and device identifiers
• Marketing data: e.g. newsletter subscription, interests, opening and click behaviour, participation in events
• Application data: information and documents that you send us with a job application

We receive most data directly from you. Some data comes from public sources (e.g. commercial register, websites, trade directories) or from partners and resellers through whom you come into contact with us.

4. Purposes and legal bases

We process personal data in particular for the following purposes:

• Conclusion and performance of contracts, provision of our services, invoicing and debt collection
• Communication, advice and support
• Conducting application procedures
• Operation, security and further development of our website and our products
• Marketing, e.g. newsletters, advertising on third-party platforms and remarketing, maintenance of customer relationships
• Compliance with legal obligations, e.g. accounting and record-keeping obligations
• Safeguarding our rights and enforcing claims
• Preparation and execution of corporate transactions, e.g. sale or transfer of the company or of parts of the company

Where the GDPR applies, we rely on Art. 6(1) GDPR. This means: performance of a contract and pre-contractual measures (point (b)), legal obligations (point (c)), our legitimate interest in the purposes stated above (point (f)) or your consent (point (a)), e.g. for marketing cookies and the newsletter. You may withdraw consent at any time with effect for the future.

5. Website myls.ch, cookies and tracking

Log files. When you visit our website, technical data (e.g. IP address, date and time, page accessed, browser, operating system, previously visited page) is processed automatically. This serves the delivery and security of the website. Log files are deleted within 30 days.

Cookies and consent. We use cookies and similar technologies. We always set technically necessary cookies. We set analytics and marketing cookies only if you have consented via our cookie banner. You can change your selection at any time via the ‘Cookie settings’ link in the footer of the website.

We integrate Google Analytics and Google Ads using Google Consent Mode. As long as you have not consented, Google sets no analytics or advertising cookies for this purpose and receives only limited, cookieless signals (e.g. that a page was accessed).

With your consent, we use the following services:

Service	Provider	Purpose
Google tag (gtag.js)	Google Ireland Ltd., Ireland / Google LLC, USA	Integration of Google Analytics and Google Ads
Google Analytics 4	Google Ireland Ltd., Ireland / Google LLC, USA	Analysis of website use (reach, origin, behaviour); IP addresses are truncated
Google Ads (conversion tracking and remarketing)	Google Ireland Ltd., Ireland / Google LLC, USA	Measuring the success of our advertisements and displaying advertising to visitors to our website
LinkedIn Insight Tag	LinkedIn Ireland Unlimited Company, Ireland	Measuring the success and delivery of advertising on LinkedIn
Zoho PageSense	Zoho Corporation B.V., Netherlands	Analysis and optimisation of the website (e.g. heatmaps, A/B tests)

Google and LinkedIn may link the data to your account and also use it for their own purposes under their own responsibility. Information on this can be found in the privacy policies of these providers. You can also deactivate personalised advertising in your account settings with these providers.

Services integrated without consent. We use the following services for the display, operation and security of the website without setting marketing cookies:

Service	Provider	Purpose
Adobe Fonts	Adobe Systems Software Ireland Ltd., Ireland	Consistent display of fonts; your IP address is transmitted to Adobe in the process
Cloudflare	Cloudflare, Inc., USA	Protection and fast delivery of the website (reverse proxy and content delivery network); technical data such as the IP address is processed in the process
Google reviews and opening hours	myls AG (myls App, hosting Google Cloud, Switzerland)	Display of our Google reviews and opening hours; the content is loaded from our own servers, so no data is transmitted to Google during your visit
myls Chatbot	myls AG (hosting Google Cloud, Belgium)	Chat on the website, see Section 6

Videos. Our explainer video is stored on YouTube (Google Ireland Ltd., Ireland / Google LLC, USA). It is only loaded when you start it. YouTube then receives your IP address and may set cookies.

Contact forms and appointment booking. If you contact us via a form or book an appointment, we process your details in order to respond to your enquiry. The entries are stored in our website system (WordPress) and, where necessary, transferred to our customer system (Zoho CRM).

6. Our chatbot on myls.ch

On myls.ch, we use our own AI chatbot. In doing so, you are communicating with an automated system, not with a person. The answers are generated by artificial intelligence and may contain errors. They are non-binding.

We process the content of your messages, voluntarily provided contact details and technical data (e.g. IP address, timestamp). The purpose is to answer your enquiries, to ensure quality and to prevent abuse. To generate the answers, the messages are transmitted via an interface to OpenAI Ireland Ltd. Processing in the USA is possible in this context (see Section 10). Your inputs are not used to train AI models. We store chat histories for a maximum of 12 months.

Please do not enter any sensitive data in the chat, e.g. health data, passwords or payment data.

7. Newsletter and marketing emails

For our newsletter, we use Zoho Campaigns (Zoho Corporation B.V., Netherlands). We also send customers information about our own products and services without a separate subscription (Section 11.2 of our GTC). We analyse whether and when emails are opened and which links are clicked in order to improve our communication. You can unsubscribe at any time via the link in every email.

8. Social media

We maintain profiles on Facebook, Instagram, LinkedIn and Google. If you interact with these profiles, the platform operators process your data in accordance with their own privacy policies. For the statistics on our pages (e.g. ‘Page Insights’ at Meta), we are in part jointly responsible with the operator. The links to our profiles on myls.ch are simple links. Merely visiting our website does not transmit any data to the platforms unless you have consented to the marketing services referred to in Section 5.

9. Job applications

If you apply to us, e.g. via the application form on myls.ch or by email, we process your details and documents (e.g. contact details, CV, references, cover letter) solely for the application process. Files uploaded via the form are stored in an area of our website server that is not publicly accessible. In addition, the responsible persons at myls receive a notification by email. We only process data relating to your suitability for the position (Art. 328b CO).

Only the persons involved in the process have access to your application. We do not disclose application data to third parties, except to service providers who support us in operating our systems (see Section 10). Once the process has been completed, we delete your documents unless you consent to longer retention, e.g. for future vacancies (see Section 12).

10. Disclosure and transfer abroad

We disclose personal data to the following categories of recipients where this is necessary for the stated purposes:

• IT, hosting and software service providers (e.g. Google Cloud, SiteGround, Zoho, Google Workspace, Bunny CDN, Cloudinary, Cloudflare), AI providers (OpenAI, Anthropic), translation service (DeepL) and external developers
• Advertising and analytics service providers (see Section 5)
• Partners and resellers, insofar as you are in contact with us through them
• Fiduciaries, auditors, legal and other advisers, banks, insurers and debt collection companies
• Authorities and courts, insofar as we are obliged or entitled to do so
• Interested parties, buyers or investors in the context of a corporate transaction, subject to confidentiality

The recipients are mainly located in Switzerland and the EEA. Some recipients have their registered office in the USA (e.g. Google, Meta, Cloudflare, Cloudinary) or may process data there (OpenAI, Anthropic) or access data from other countries, in particular from India (Zoho support) and Pakistan (development of our myls App). Content of our websites is also delivered via a worldwide network of delivery locations (Bunny CDN). We transfer data to countries without an adequate level of data protection only with appropriate safeguards, in particular the standard contractual clauses of the EU Commission (with the adaptations required for Switzerland) or a certification under the EU-U.S. or Swiss-U.S. Data Privacy Framework, or on the basis of a statutory exception, e.g. for the performance of a contract.

11. Data processing on behalf of our customers

With the myls App, the myls Chatbot and our website service, we process personal data on behalf of our customers, e.g. chat messages from visitors to a customer website or enquiries via a contact form. In these cases, the respective customer is responsible for the data processing, and its privacy policy applies. We act as processor in accordance with Section 12 of our GTC. Which data we process in this context and which sub-processors we engage is described at www.myls.ch/en/sub-processors. Please address enquiries concerning such data to the respective customer. If we receive them directly, we forward them.

12. Retention period

We retain personal data for as long as is necessary for the respective purpose, as long as statutory retention obligations exist (for business records generally 10 years) or as long as we have a legitimate interest, e.g. during ongoing limitation periods. We generally delete contact enquiries that do not lead to the conclusion of a contract after 36 months, and application documents after the conclusion of the procedure, unless you consent to a longer retention period. The storage period of cookies is governed by the information in the cookie banner.

13. Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, e.g. encrypted transmission, access restrictions and the contractual obligation of our service providers.

14. Profiling and automated decisions

For marketing purposes, we partly analyse data automatically, e.g. to tailor advertising to interests (see Sections 5 and 7). We do not make automated individual decisions with legal effect or similarly significant impact.

15. Your rights

Within the scope of applicable law, you have the right to access, rectification, erasure, restriction of processing and to receive or transfer your data (data portability). You may object to processing, in particular for direct marketing, and withdraw consent given. To do so, please contact datenschutz@myls.ch. We may request proof of identity.

You may also lodge a complaint with a supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch); in the EEA, it is the supervisory authority of your country of residence.

16. Changes

We may amend this Privacy Policy at any time. The version published on myls.ch applies.