- Products
Data Processing
myls AG
Data Processing and Sub-processors
myls AG · Version of 1 October 2026
This is a translation. Only the German version is legally binding.
This overview forms part of the GTC of myls AG (Section 12). It describes which personal data myls processes as processor on behalf of its customers, which sub-processors myls engages for this purpose and how the data is protected. Resellers may refer to this page in their contracts with end customers.
myls informs customers of changes to the sub-processors by email at least 30 days in advance (Section 12.6 GTC). Questions on data protection: datenschutz@myls.ch.
1. Data processing by product
myls App
Topic Description Subject matter and purpose Management and synchronisation of location and company data, publication on third-party platforms, review and social media management including AI-assisted text suggestions, analyses Personal data Names and contact details of contact persons and employees in listings, reviews including the name or profile of the reviewer, social media posts, comments and interactions, user accounts and log data Data subjects Customer and its employees, persons who submit reviews or comments Duration Term of the contract, thereafter deletion in accordance with Section 12.12 GTC myls Chatbot
Topic Description Subject matter and purpose Automated answering of enquiries from website visitors by means of AI, capture of contact, quotation, reservation and booking requests (flows), forwarding to the customer’s systems via interfaces, analysis of the conversations for the customer Personal data Content of chat messages, voluntarily provided contact details (e.g. name, email, telephone), concerns, booking and reservation details, technical data (e.g. IP address, timestamp, browser) Data subjects Visitors to the customer’s website who use the chatbot Duration Chat histories are stored for a maximum of 12 months and can be viewed by the customer in the analysis view during this period. They are then deleted automatically, at the latest at the end of the contract in accordance with Section 12.12 GTC AI processing Messages are processed via the API of an AI provider (see section 2). Inputs are not used to train AI models. Websites and website service
Topic Description Subject matter and purpose Creation, hosting, technical operation, updates and data backup of websites, email mailboxes, contact forms and booking functions Personal data Server log files (e.g. IP address, time, pages accessed), form and booking data, content of email mailboxes, website user accounts Data subjects Visitors to the website, persons who communicate with the customer by form or email, the customer’s employees Duration Term of the contract, server log files for a maximum of 30 days, thereafter deletion in accordance with Section 12.12 GTC Across all products: support and customer service
Where customers transmit personal data in the course of support (e.g. screenshots, forwarded enquiries), myls processes such data in its ticket and customer system solely for the purpose of handling the request.
2. Sub-processors
Provider Registered office Purpose / product Place of processing Safeguards Google Cloud EMEA Ltd. (Google Cloud) Dublin, Ireland Hosting and databases for myls App, myls Chatbot and websites, email myls App: Switzerland (Zurich); myls Chatbot, websites and email: Belgium Switzerland/EU, adequate level of data protection; any access by Google LLC (USA): DPF and standard contractual clauses SiteGround Spain S.L. (SiteGround) Madrid, Spain Hosting of individual websites (being phased out and replaced) Germany (Frankfurt) EU, adequate level of data protection OpenAI Ireland Ltd. Dublin, Ireland AI processing for myls Chatbot and myls App (API) as well as support and internal analyses (ChatGPT Business) EU / USA Standard contractual clauses (OpenAI Data Processing Addendum); no use for training; storage for abuse monitoring generally for a maximum of 30 days, subject to legal obligations; stored content (e.g. knowledge bases) until deleted by myls BunnyWay d.o.o. (Bunny CDN) Ljubljana, Slovenia Content delivery (Content Delivery Network) Storage in the EU; delivery via locations worldwide EU, adequate level of data protection; for locations outside Switzerland and the EU: standard contractual clauses Cloudinary Ltd. / Cloudinary Inc. Israel / USA Storage and delivery of images (myls App, websites) USA Cloudinary Inc.: DPF-certified; additionally standard contractual clauses; Israel: adequate level of data protection Zoho Corporation B.V. Utrecht, Netherlands Customer management, support tickets, invoicing (all products) EU data centre; support access from India possible Standard contractual clauses Google Workspace (Google Cloud EMEA Ltd.) Dublin, Ireland Email and documents of myls (all products) EU / USA DPF and standard contractual clauses Anthropic Ireland, Limited (Claude) Dublin, Ireland AI-assisted software development, support and analyses (all products) USA / EU Standard contractual clauses (Anthropic Data Processing Addendum); no use for training DeepL SE Cologne, Germany Translation of content (websites, myls App) EU EU, adequate level of data protection; texts are deleted after translation (DeepL Pro) Freelance software developers Pakistan Development, maintenance and support of the myls App (remote access) Pakistan Standard contractual clauses Third-party platforms to which content is transmitted on the customer’s instructions (e.g. Google Business Profile, Apple, Bing, Meta, directories) are not sub-processors of myls. They process the data under their own responsibility (Section 6.1.2 GTC).
3. Technical and organisational measures (overview)
- Encryption: transmission exclusively in encrypted form (TLS), encryption of stored data and data backups (‘at rest’)
- Access control: access only for authorised employees and agents, two-factor authentication for the central administrative access points (e.g. cloud and server administration)
- Hosting: data centres of the providers named above with recognised security certifications (e.g. ISO 27001)
- Availability: daily data backups with a retention period of 14 days, security and system updates
- Organisation: confidentiality undertaking by all employees and agents, contractual obligation of the sub-processors, deletion concept after the end of the contract
Book a call
Become a partner
Become a partner – Growing together with myls
As a myls partner, offer the app under your branding. With our white label solutions, you can strengthen your portfolio and offer your customers personalized, innovative tools to increase their online presence.
