Skip to main content
logo
Rewards IconSunrise Rewards
My Sunrise
  • Rewards Icon
    ‌

    This Privacy Notice explains how Sunrise GmbH ("Sunrise", "we", "us" or "our") collects and processes personal data when you visit our websites, use our services, interact with us or participate in our marketing activities, including newsletters and prize draws. It also applies to services offered under the brands yallo, Lebara, MySports, swype, CHmobile and UPC. 
     
    Please note that this Privacy Notice may be updated from time to time. We therefore recommend that you check our website regularly for any updates.

    1. Processing Purposes

    Sunrise processes personal data to fulfill its contractual obligations, to acquire new customers, to ensure the smoothest possible operation of its services, to contribute to the improvement of our services, to enable marketing and analyses, and to comply with our legal and regulatory obligations; this includes in particular: 

    1.1 Conclusion and performance of the contract 

    • Verification of the conditions for concluding a contract; 

    • Performance of contractual obligations; 

    • Processing and responding to inquiries or complaints; 

    • Ensuring customer and user administration; 

    • Invoicing and, if necessary, engagement of a debt collection agency. 

    1.2 Customer care and product development  

    • Evaluation of your usage, ordering or inquiry behavior; 

    • Updating and validating your personal data; 

    • Information about our services, products and promotions; 

    • Prevention of unlawful use of services (in particular, to prevent fraud at the conclusion of the contract and during the term of the contract); 

    • Maintenance, development and preservation of customer relations; 

    • Individualizing services and providing personalized content, e.g., through analysis of demographic information, usage behavior and user interests; 

    • Direct marketing and analysis purposes. 

    1.3 Other operational purposes and legal obligations 

    • Publication of directories; 

    • Credit checks; 

    • Compliance with legal or regulatory obligations; 

    • Detection and prevention of misuse of services, equipment or infrastructure; 

    • Establishment of a connection and transmission of information; 

    • Use of location data from telecommunications traffic for the purposes described in Section 2.2. 
       

    2. Types of data 

    We process the following categories of personal data: 

    2.1 Identification and contact data 

    Identification and contact data includes your first and last name, address, gender, date of birth, telephone number or email address, and a copy of your ID or passport. 
    We use this data for the purposes set out in Section 1. 

    2.2 Location data 

    Location data is personal data transmitted by Wi-Fi or GPS signals, Bluetooth, IP addresses or mobile network and contains information about where the device you are using is located. In particular, location data is created when your cell phone or other device connects to a network, or your router connects to the internet. The location of a hotspot can also be identified via an IP address. 

    We use this data to fulfill legal or regulatory obligations and to measure and improve network quality. 

     

    2.3 Usage data (telephone, internet or TV) 

    Usage data is data about services and products that you use, such as numbers dialed when making phone calls, TV programs, data volumes, IP addresses, subscriptions and devices (e.g., cell phone, smart devices, internet/TV box, etc.) as well as information about the frequency, time and duration of the use. 

    We use usage data for the purposes set out in Section 1. 

    2.4 Contract, account and payment data 

    This includes information about your contracts and accounts, such as contract duration, products, tariffs, options, devices, discounts, recurring charges, revenues and payment history. 

    We use this data for the purposes set out in Section 1.

    3. Specific Use Cases

    3.1 Visiting our website 

    When visiting our website, technical data is automatically collected to ensure the functionality as well as the security of the website. 

    For this purpose, cookies and other tracking technologies such as web beacons are used. Cookies are small information files that a web server generates and sends to a web browser. The latter stores the received cookies for a certain time or for the duration of the session on our website. The information that your browser automatically sends to our servers includes your IP address, language settings, session duration, referral URL, web browser and operating system details, and the date and time of the visit. 

    This personal data is processed to provide and optimize the website and ensure system security. 

    Sunrise uses cookies from third-party providers and transmits personal data to their servers, which may be located abroad. 

    We use necessary cookies to ensure the functionality and security of our websites. This processing serves our legitimate interests in operating our websites. 

    In addition to the so-called necessary cookies, Sunrise may use additional or optional cookies when you visit our website. Performance and functional cookies are used for this purpose. These cookies help Sunrise to improve your experience on our website and to customize it according to your needs as well as to conduct market research. At the same time, this simplifies the usage as you don’t need to enter certain information repeatedly (e.g. when logging in). 

    You can manage optional cookies and withdraw your consent at any time through our cookie settings. Where consent is required, we obtain it before using the relevant cookies or similar technologies. Disabling optional cookies may affect certain website features. 
     
    3.2 Use of our services 

    When you obtain our services as a customer, we process your personal data to fulfill our contractual obligations, provide you with our products, issue invoices, fix bugs and make improvements, as well as for marketing purposes. 

    In this case, the data processing is carried out in connection with the fulfillment of pre-contractual or contractual obligations as well as in our legitimate interest. 

    Please also note that when you use our services, the data protection provisions in the current General Terms and Conditions and other applicable contractual provisions apply in addition to this Privacy Notice. 


    We process the required data provided by you when concluding a contract, using our services or entering them on a registration page. 


    If you choose an online payment option, such as credit card, to purchase a product or obtain a service, the payment will be made via the online payment system of the respective provider. Please note that when using online payment systems, the data protection provisions of the respective provider also apply. 
     
    3.3 Apps 

    We use your data to ensure that our apps work properly. This includes login data and information about the functions you use within the app. To fix bugs and malfunctions, we sometimes need to use personal data, for example to evaluate why an app is not working properly. During system checks, we keep our analyses as simple and short as possible and delete the data once it is no longer needed for bug fixes or improvements. 

    This includes, for example, the following data: 

    • Your first and last name, 

    • Your home address and billing address, 

    • Your email address, 

    • Your date of birth, 

    • Your MySunrise/MyYallo/MyLebara/My UPC/MyCHmobile/swype account details; and 

    • Your preferred correspondence language. 
       

    In your personalized and protected area in MySunrise/MyYallo/MyLebara/My UPC/MyCHmobile/swype, you can manage your personal data and data relating to the services you have obtained. 
     
    3.4 Marketing and newsletters 

    In connection with the provision of our services, we use your personal data for marketing purposes and newsletters.  

    Customer marketing serves our legitimate interests in promoting and improving our services. Newsletter subscriptions are addressed separately below. Service-related communications are separate from marketing messages. We send marketing messages by email, SMS, telephone or post in accordance with the consent requirements applicable to each channel. You can withdraw your consent or object to marketing at any time through your customer account, where available, or by contacting us. You can also unsubscribe from marketing emails using the link provided. This does not affect essential service-related communications. 

    If you subscribe to a newsletter, we use your email address to send you the communications described when you subscribe. You may withdraw your consent at any time using the unsubscribe link in each newsletter. 

    We use service providers to distribute newsletters and share your email address with them for this purpose. You can unsubscribe at any time using the link in each newsletter. 
     
    3.5 Raffles and contests 

    Personal data is processed in accordance with applicable legal provisions. Data collected for a raffle or contest will be used exclusively to conduct it, determine the winners and award prizes, unless you consent to broader use of your personal data. 

    The applicable participation terms also apply. 
     
    3.6 Credit checks 

    If you wish to conclude a contract with us, we are entitled to carry out a credit check before concluding the contract. For this purpose, we may consult debt collection agencies (in particular Intrum AG, based in Schwerzenbach). We also use our own information about your previous payment history. We use this information to assess your creditworthiness. The credit check is a partially automated process that helps us decide whether, to what extent and under what conditions we can conclude the contract you have requested. We also transmit data about conduct contrary to contractual obligations or fraudulent behavior to the aforementioned third parties. This processing is carried out in connection with the conclusion of the contract. 
     
    3.7 Contact requests 

    You can send support or other service-related requests at any time via helpdesk, chat or via Sunrise Community. 

    The mandatory fields in the contact form or Sunrise Community include your user login data (email address, telephone number or customer number), the support topic and your message (including any uploaded files). 

    This information is required to process your request and provide any feedback. We also use AI to analyze chat histories, uploaded files and customer-service conversations to understand requests and improve service quality. Personal data used for this analysis is processed in Sweden. Further information is provided in Section 7 ‘Use of artificial intelligence (AI)’ and Section 9 ‘Data transfers abroad’. 
     
    3.8 Social media 

    Our websites provide access to our social-media profiles through the respective platform logos. 

    The data protection provisions of the respective platform provider apply, whereby some content may only be accessible if you have a corresponding user account on the platform. 

    When you follow a link to a social-media platform, it processes personal data in accordance with its own privacy notice. If you are logged in to that platform, it may associate your visit with your account. Logging out does not necessarily prevent the platform from receiving technical information.  

     

    3.9 Visiting our shops 

    For your and our safety, our shops are monitored by video. This video monitoring is intended to protect against theft, vandalism, assaults and burglary. It helps us ensure a safe environment for our customers and employees. The recording is carried out in accordance with applicable Swiss laws governing data and privacy protection. The recordings are stored for a maximum duration of 20 days and are shared with the relevant authorities only upon request in the event of a police investigation. 

    4. Protection of your personal data

    Sunrise has implemented numerous technical and organizational measures to protect your data from unauthorized or unlawful processing and from loss, alteration, misuse, destruction or unauthorized access.

     

    5. Duration of data storage

    We retain personal data for as long as necessary for the purposes described in this Privacy Notice, including to meet applicable retention obligations and establish, exercise or defend legal claims. We then delete or anonymize it.

    Location data retained to meet statutory telecommunications obligations is stored for six months and then deleted, subject to any applicable preservation requirements. Where we use location data for other purposes, including to measure and improve network quality, we retain it only for as long as necessary for the relevant purpose and then delete or anonymize it. Wherever possible, we use anonymized or aggregated data for network-quality analysis.

    Usage data is only stored for as long as it is required for the fulfillment of the contract or our legitimate interests and then deleted.

    This is subject to legal retention periods and the use of data to enforce legal claims.

     

    6. Data transfer to third parties

    In order to be able to offer you our website and services, we involve third parties. These are primarily service providers, such as our cloud providers. Due to legal and/or regulatory requirements, we may also be obliged to disclose data to competent courts, authorities, or other government bodies. In addition, we pass on your location data to the responsible emergency call center if you make an emergency call from your smartphone.

    We work particularly closely with some partners, for example in customer service (call center) or with IT service providers. Before these partners are allowed to process your personal data on our behalf, we contractually ensure that they comply with the applicable data protection laws and implement the necessary technical and organizational measures to protect your data.

    We may share personal data with other companies in the Sunrise group to the extent covered by the purposes described in this Privacy Notice.

     

    7. Use of Artificial Intelligence (AI)

    Sunrise uses artificial intelligence (AI) to analyze data, optimize its networks, personalize services and offers, detect and prevent fraud, improve its products and customer support, and operate virtual assistants and chatbots. When you interact with an AI-based virtual assistant or chatbot, we make this clear to you. 

    We process personal data in connection with AI only for specified purposes that are recognizable to you, in accordance with applicable data protection law and our internal AI governance framework. Our safeguards include clearly assigned responsibilities, transparency and, where appropriate, explainability, human oversight, testing and monitoring, information security, and privacy by design and by default. These measures serve to protect personal data and to reduce the risk of bias, misuse and unintended consequences. 

     

    Content generated by AI, such as responses from our virtual assistants and chatbots, may be inaccurate, incomplete, misleading or outdated, and we cannot guarantee its correctness. Please verify important information and exercise your own judgment before relying on it.  

    7.1 Automated individual decisions 

    Automated individual decisions may involve AI or other automated processing. We do not make decisions based exclusively on automated processing that have legal effects on you or significantly affect you, unless this is permitted by applicable law and appropriate safeguards are in place. When we make such a decision, we will inform you accordingly. Where required by applicable law, you may express your point of view and request review by a member of our staff.  

    Where AI supports a decision made by our staff, the decision remains subject to human oversight. Where we make decisions exclusively by automated means, the safeguards described in Section 7.1 apply. 

     

    8. Personalized prices and offers

    We use AI-supported mechanisms to adapt certain prices and offers to you individually. For this purpose, we evaluate personal data from your customer profile, in particular the products and services held on your account, including tariffs, options, devices and existing discounts; information about your customer relationship, such as contract duration and tenure; and financial information relating to those products and services, such as recurring charges and revenues. We may also use telecommunications usage information to estimate the costs and value associated with the customer relationship. 

    We do not use sensitive personal data to personalize prices or offers. The pricing engine used to determine personalized prices and offers does not use precise location data.  

    We design and regularly review these mechanisms to prevent unlawful discrimination. 

    If your personalized price is determined exclusively by automated means, you may express your point of view and request a review by a member of our staff. 

     

    9. Data transfers abroad

    While providing its services, Sunrise also relies on products and services from producers and suppliers abroad who process Data or telecommunications data on behalf of Sunrise in the course of fulfilling their obligations, for example when providing maintenance or service support (including call centers). 

    Your data will always be treated with the necessary care and processed in compliance with the applicable data protection regulations. Your data will be processed within the European Union, the European Economic Area (EEA), Moldova, India, Tunesia, Georgia, Kosovo, Serbia, Turkey, the United States, the United Kingdom and Switzerland. 

    Where personal data is transferred to a country that provides a different level of data protection, an adequate level of data protection is ensured through contractual measures, such as standard contractual clauses, together with supplementary technical and organizational measures where necessary.

     

    10. Your rights regarding your personal data

    You have the right to request information about your personal data processed by Sunrise. You can send a written request to the address below. We may request additional information or proof of identity where necessary to verify your identity and protect your personal data.  

    Sunrise GmbH 
    Data Protection Office 
    Thurgauerstrasse 101 B 
    P.O. Box 
    8152 Glattpark (Opfikon) 

     

    Or by using the button ‘Data Access Request’ at the top of this page. 
    We generally provide access to your personal data free of charge. We may charge a fee only where permitted by applicable law. 
    You may request the correction of inaccurate personal data. 

    Subject to applicable legal requirements, you may request the deletion of your personal data. Deletion from production systems and backup systems may follow different timelines, taking account of applicable retention obligations and technical requirements.  

    Subject to applicable law, you may object to the processing of your personal data. Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. You can exercise these rights by contacting us or, where available, through your MySunrise/MyYallo/MyLebara/My UPC/MyCHmobile/swype account. You can also unsubscribe from newsletters using the link provided or manage optional cookies through our cookie settings. 

    Where the applicable legal conditions are met, you may request that we provide your personal data in a commonly used, machine-readable format or transfer it to a third party designated by you. 

     

    Last update: October 2026