Data Privacy Notice for Business Customers

We are delighted about your interest in our company. Data protection is of great importance to Sunrise. With the following Data Privacy Statement, we inform you about which personal data we collect and process when using our website or as part of a contractual relationship with the brand Sunrise.

1.      Certifications

Sunrise has implemented numerous technological and organizational measures to ensure that the protection of the personal data processed by us is as seamless as possible. Sunrise holds the following certifications:

- ISO/IEC 27001: international standard that defines the requirements for an information security management system (ISMS);

- ISO/IEC 22301: International standard for Business Continuity Management (BCMS);

- ISO/IEC 20000: International standard for IT service management;

- ISO/IEC 9001: International standard for quality management;

- ISAE 3402/3000: International Standards for Encryption Management and Business Voice Recording.

2.      Commitment to confidentiality

Sunrise is committed to maintaining the confidentiality of business-customer data. We ensure that business-customer data is processed safely by implementing appropriate measures and adhering to any applicable clauses that restrict data access by third parties from outside Switzerland.

3.      Data-processing and security measures

To ensure a high level of data protection and security, Sunrise employs robust security measures, including encryption, access controls and regular security audits. These measures are designed to prevent unauthorised access, disclosure, alteration or destruction of customer data. Additionally, we implement technical and organisational measures such as pseudonymisation, backup creation, access logging and the issuing of binding data-processing instructions to our employees and partners.

4.      Customer responsibilities

Business customers are kindly asked to ensure they obtain the appropriate consent and approval from individual data subjects where necessary: for example, the checking of the activities of business customers’ employees or the tracking of specific users to identify network issues. This is relevant for compliance with applicable data-protection regulations.

5.      Categories of data processed

Depending on the intended or existing relationship between Sunrise and the Business Partner, the personal data processed may include:

• Master and contract data (e.g., personal information, contact and identification data, communications, contract data)

• Technical data (e.g., device type, software version, IP addresses)

• Financial data (e.g., payment information, creditworthiness data)

• Usage and connection data (e.g., service-usage information)

• Voice interaction and chat data (e.g., voice recordings, chat content)

• Location data (e.g., geo-information)

6.      Purposes of data processing

We process these data for various purposes, including:

• Initiating and performing contracts and supporting the contractual relationship

• Advertising and delivering information about new products

• Quality assurance, product development and tailor-made offers

• Informing and reporting to the Business Partner on the use of our services

• Compliance with legal requirements, combatting fraud and assessing creditworthiness

7.      Origin of the data

We receive data from various sources, including:

• Directly from you

• Our systems

• Third parties

8.      Recipients of the data

Your data may be passed on to:

• Our employees or contractors involved in the provision of services to you

• Other companies engaged as contractors

• Authorities as required by law

9.      Location of data processing

Your data may be processed abroad, primarily in countries of the European Union, the European Economic Area (EEA), Moldova, Kosovo, Albania, Turkey, Morocco, the United States, the United Kingdom and Switzerland. If processed in countries with inadequate data protection, we ensure protection through legal measures such as standard contractual clauses.

10.   Duration of processing

Sunrise will only use and store your data for as long as necessary to achieve the purposes for which it was collected, to comply with statutory retention periods and for our legitimate interests in documentation.

11.   Legal basis

The legal basis for processing your data includes the necessity for contract performance, compliance with legal obligations or your consent, in compliance with the requirements of the Swiss Data Protection Act and, where applicable, the EU General Data Protection Regulation (GDPR). Specifically, we have a legitimate interest in using the respective data types for the purposes mentioned. This encompasses the provision of third-party services to you, the development and enhancement of our products, the submission of offers and the analysis of traffic flows based on anonymised data.

12.   Customer support

Sunrise is here to support our customers and address any concerns regarding data privacy. For further information or assistance, please contact our data protection team at  privacy@sunrise.net