Privacy Notice
Privacy Notice
This notice explains how Mixel IT collects and uses personal data in connection with the Mixel PBX communications platform, and the rights available to the people whose data we process.
Effective 3 June 2026
Who we are
Mixel IT (Switzerland) operates the Mixel PBX cloud communications platform, available at pbx.mixel.ch and pbx.mixel.mu. For privacy matters you can reach us at [email protected].
Our role
For our direct business customers, we are the controller of account and billing data. For the calls, messages and contacts handled on behalf of a customer, that customer is the controller and Mixel acts as a processor. In that case this notice supplements — and does not replace — the customer’s own privacy notice to its users.
What we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account & billing details | Provide and bill the service | Contract |
| Call metadata (numbers, time, duration) | Route calls, call records, analytics | Contract / legitimate interest |
| Call recordings & voicemail | Quality, training, evidence | Consent (CH / MU) · legitimate interest (EU) |
| Transcripts & AI insights (summary, sentiment, CSAT, lead score) | Service features | Consent / legitimate interest, with transparency |
| Messages (SMS, WhatsApp, email, chat) | Omnichannel communication | Consent / contract |
| Calendar free/busy | Presence | Legitimate interest |
| Nurse-call alarms (health-related) | Patient safety | Vital interests / explicit consent |
| Authentication & audit logs | Security | Legal obligation / legitimate interest |
Call recording
Calls are recorded only with the appropriate consent or notice for your jurisdiction. In Switzerland we obtain all-party consent before recording, announced at the start of the call. You may object to recording at the start of a call.
Where your data is processed
Personal data is processed primarily in Switzerland and Germany (EEA) on our own infrastructure. Transcription and Call Intelligence run on our own servers — call audio and transcripts are not sent to third-party AI services. Some optional integrations you choose to enable (CRM, Microsoft / Google calendar, SMS / email providers) transfer data to providers in the United States under the EU-US and Swiss-US Data Privacy Frameworkand/or the European Commission’s Standard Contractual Clauses. The third parties we use are listed in our sub-processor list.
How long we keep it
We keep personal data only for as long as necessary for the purpose it was collected, after which it is deleted or anonymised. Recordings and transcripts are kept for limited periods that each business customer configures for its own organisation. Where a legal obligation requires longer retention (for example accounting records), we retain the data for that period only.
Your rights
Subject to applicable law, you have the right to access your personal data and to its rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent and to limit recording where applicable. To exercise any of these, contact [email protected]. Where we act as a processor for a business customer, we will forward your request to that customer (the controller) and assist them in responding.
Complaints
You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), your competent EU/EEA supervisory authority, or the Mauritius Data Protection Office.
Changes to this notice
We may update this notice from time to time. When we make a material change we will update the effective date shown above and, where appropriate, notify customers directly.