Trust & Compliance

Privacy and data protection at Mixel PBX

Mixel PBX is a cloud communications platform operated by Mixel IT for customers in Switzerland, the EU/EEA and Mauritius. Telephony is sensitive by nature, so privacy and data protection are built into the platform — not bolted on. The documents below explain exactly how we handle personal data and the commitments we make to the people whose data we process.

Hosted in the EEA

Platform data is hosted on our own infrastructure in Switzerland and Germany (EEA) — not on third-party clouds.

AI that stays in-house

Transcription (Whisper) and Call Intelligence (AI) run on our own servers. Call audio and transcripts are never sent to third-party AI services.

Consent-first recording

In Switzerland, calls are recorded only with all-party consent, announced before recording starts — as the law requires.

Tenant isolation

Every organisation's data is strictly isolated at the database level, so one customer can never see another's calls, contacts or recordings.

Documents

Privacy NoticeWhat personal data we process, why, on what legal basis, where it lives, how long we keep it, and the rights you can exercise.Sub-processorsThe third parties that may process personal data on our behalf, what they do, where they are, and the transfer mechanism for each.Data Processing AgreementThe Article 28 GDPR / revFADP terms we offer business customers, covering instructions, security, sub-processing and transfers.

Our two roles

Data protection law distinguishes between the party that decides why and how personal data is processed (the controller) and the party that processes it on the controller’s behalf (the processor). Mixel acts in both roles depending on the data:

Processor— for the personal data of our customers’ end-users (callers, agents, contacts). Here the business customer is the controller; we process on their documented instructions and offer them a Data Processing Agreement.
Controller— for our direct customers’ account data and for operating and securing the platform. For this data, our Privacy Notice applies directly.

Questions or requests

For any privacy question, or to exercise your data-protection rights, contact us at [email protected]. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), your competent EU/EEA supervisory authority, or the Mauritius Data Protection Office.