Privacy Statement Swisscom beem App
Current Privacy Statements
1 General and Applicability
This Privacy Statement describes how Swisscom (Switzerland) Ltd (hereinafter "Swisscom" or "we") processes your personal data in connection with the provision of the Swisscom beem service (hereinafter "Swisscom beem"), including the Swisscom beem App.
Swisscom beem is provided in accordance with the agreement between Swisscom and the organisation that has granted you the right to use Swisscom beem (e.g., your employer; hereinafter referred to as the “Business Partner" and the “Business Partner Agreement").
Personal data refers to any information that relates to an identified or identifiable individual.
This Privacy Statement applies to the processing of personal data in this context.
2 Privacy Statement for the Business Partner Environment as a Basis
As a general rule, the currently applicable version of the Swisscom Privacy Statement for the Business Partner environment, available at www.swisscom.ch/b2b-legal applies. It explains how Swisscom processes personal data both on behalf of the Business Partner as a data processor and, in its role as a data controller, and outlines your rights and contact options in this context. The Swisscom Privacy Statement for the Business Partner environment forms an integral part of this Swisscom beem App Privacy Statement.
In addition, the following deviations and clarifications apply.
3 Categories of Personal Data
We process the following categories of personal data about you (specification of the Swisscom Privacy Statement for the Business Partner environment, chapter “Types of Data Processed”):
- Identification data such as login credentials or user ID
- Technical data, such as device type, brand, resource usage, software version, or settings of the devices you use, as well as addressing elements such as phone numbers or IP addresses
- Usage and connection data related to your network access and queries
- Content of network traffic, including internet and email communications
- Crash logs in the event of troubleshooting
- Location data from which you access systems (in particular, geo-information obtained via GPS, Wi-Fi, mobile network, or IP address)
We collect your personal data either:
- from the information provided by the Business Partner, or
- from you directly, in the course of our communication or business relationship, or
- from public sources (e.g. public internet sources), or
- through our employees, who are in contact with you or manage your use of the App.
You are under no obligation to provide us with the data we ask you for. However, if you do not provide your personal data business processes might be delayed or even impossible and it might become impossible for you to use the Swisscom beem services.
4 Purpose of Processing and Legal Basis
Swisscom processes this data for the following purposes and relies on the legal bases listed below (a clarification of the Swisscom Privacy Statement for the Business Partner environment, chapter "Purposes of Data Processing and Legal Bases”):
| Purpose of processing | Data categories | Legal basis for processing |
|---|---|---|
| To provide you with the Swisscom beem service in accordance with the Business Partner Agreement, the Swisscom beem App Terms of Use, and this Privacy Statement. | All data categories. | Performance of a contract; overriding legitimate interest in fulfilling the Business Partner Agreement. |
| To inspect data packets during transmission for harmful content in accordance with the beem Business Partner Agreement (Deep Packet Inspection). | Content of network traffic. | Performance of a contract; overriding legitimate interest in fulfilling the Business Partner Agreement; consent. |
| The Swisscom beem App collects location data to enable geofencing for Business Partners, allowing them to restrict access to specific data, services, and business applications based on location. | Location data. | Performance of a contract; overriding legitimate interest in fulfilling the Business Partner Agreement; consent. |
| To provide technical support for Swisscom beem and maintain your access to the service. | All categories of personal data, particularly crash logs and information provided by you or the Business Partner in support requests. | Overriding legitimate interest in fulfilling the Business Partner Agreement; performance of a contract; overriding legitimate interest in ensuring customer satisfaction and maintaining competitiveness. |
| To improve our websites, applications, services, and customer experience; and for development and analytics purposes aimed at enhancing our products, services, business operations, and processes. | All categories of personal data, except content of network traffic. | Overriding legitimate interest in ensuring customer satisfaction and maintaining competitiveness; performance of a contract; overriding legitimate interest in fulfilling the Business Partner Agreement. |
| To ensure and maintain IT security, particularly to detect security threats, fraud, or other malicious or criminal activities. | All data categories. | Performance of a contract; overriding legitimate interest in fulfilling the Business Partner Agreement; overriding legitimate interest in ensuring customer satisfaction and maintaining competitiveness. |
| Like any other company, Swisscom is subject to legal obligations and regulations. In certain cases, processing your personal data is necessary for Swisscom to comply with these obligations. | All data categories. | Compliance with legal obligations. |
5 Location of Data Processing
Your personal data may be transferred to recipients located in Switzerland, the European Economic Area (EEA), as well as the USA and India (specification of the Swisscom Privacy Statement for the Business Partner environment, chapter “Location of Data Processing”).
Cross-border data processing occurs particularly during development and operating services as well as during maintenance activities. In particular in the event of technical issues that Swisscom is unable to resolve itself, it may grant manufacturers or maintenance partners in Switzerland or abroad (including the EEA, USA, and India) temporary and controlled access to the system for troubleshooting purposes. In this context, such manufacturers or maintenance partners may have access to network data (e.g., network elements, configuration data, connection data) and, where necessary to resolve a specific customer issue, individual customer data. In addition, Swisscom may use its subsidiaries in the EEA for the purpose of providing development and operating services, which may also gain access to network data and customer data in the course of providing their services.
6 Retention Period
We will retain your personal data for:
- as long as you use the App and thereafter;
- as long as Swisscom provides the beem Service to the Business Partner;
- as long as required under statutory retention obligations, or
- as long as potential legal claims, where personal data is needed to raise or defend against the claim are not time-barred.
7 Our contact details
You may contact the data protection officer or data protection advisor of Swisscom (Switzerland) Ltd as follows:
- By email: datenschutz@swisscom.com
- By Post: Swisscom (Switzerland) Ltd, Data Protection Officer Swisscom Ltd and Swisscom (Switzerland) Ltd, P.O. Box, 3050 Bern
Our Data Protection Representative in the European Union may be contacted by supervisory authorities and data subjects on all issues relating to EU data protection law as follows:
- By email: info@datenschutzpartner.eu
- By post: VGS Datenschutzpartner UG, Am Kaiserkai 69, 20457 Hamburg, Germany
March 2026
1 General and Applicability
This Privacy Statement describes how Swisscom (Switzerland) Ltd (hereinafter "Swisscom" or "we") processes your personal data in connection with the provision of the Swisscom beem service (hereinafter "Swisscom beem"), including the Swisscom beem App.
Swisscom beem is provided in accordance with the agreement between Swisscom and the organisation that has granted you the right to use Swisscom beem (e.g., your employer; hereinafter referred to as the “Business Partner" and the “Business Partner Agreement").
Personal data refers to any information that relates to an identified or identifiable individual.
This Privacy Statement applies to the processing of personal data in this context.
2 Privacy Statement for the Business Partner Environment as a Basis
As a general rule, the currently applicable version of the Swisscom Privacy Statement for the Business Partner environment, available at www.swisscom.ch/b2b-legal applies. It explains how Swisscom processes personal data both on behalf of the Business Partner as a data processor and, in its role as a data controller, and outlines your rights and contact options in this context. The Swisscom Privacy Statement for the Business Partner environment forms an integral part of this Swisscom beem App Privacy Statement.
In addition, the following deviations and clarifications apply.
3 Categories of Personal Data
We process the following categories of personal data about you (specification of the Swisscom Privacy Statement for the Business Partner environment, chapter “Types of Data Processed”):
- Identification data such as login credentials or user ID;
- Technical data, such as device type, brand, resource usage, software version, or settings of the devices you use, as well as addressing elements such as phone numbers or IP addresses;
- Usage and connection data related to your network access and queries;
- Content of network traffic, including internet and email communications;
- Crash logs in the event of troubleshooting;
- Location data from which you access systems (in particular, geo-information obtained via GPS, Wi-Fi, mobile network, or IP address).
We collect your personal data either:
- from the information provided by the Business Partner, or
- from you directly, in the course of our communication or business relationship, or
- from public sources (e.g. public internet sources), or
- through our employees, who are in contact with you or manage your use of the App.
You are under no obligation to provide us with the data we ask you for. However, if you do not provide your personal data business processes might be delayed or even impossible and it might become impossible for you to use the Swisscom beem services.
4 Purpose of Processing and Legal Basis
Swisscom processes this data for the following purposes and relies on the legal bases listed below (a clarification of the Swisscom Privacy Statement for the Business Partner environment, chapter "Purposes of Data Processing and Legal Bases”):
| Purpose of processing | Data categories | Legal basis for processing |
|---|---|---|
| To provide you with the Swisscom beem service in accordance with the Business Partner Agreement, the Swisscom beem App Terms of Use, and this Privacy Statement. | All data categories. | Performance of a contract; overriding legitimate interest in fulfilling the Business Partner Agreement. |
| To inspect data packets during transmission for harmful content in accordance with the beem Business Partner Agreement (Deep Packet Inspection). | Content of network traffic. | Performance of a contract; overriding legitimate interest in fulfilling the Business Partner Agreement; consent. |
| The Swisscom beem App collects location data to enable geofencing for Business Partners, allowing them to restrict access to specific data, services, and business applications based on location. | Location data. | Performance of a contract; overriding legitimate interest in fulfilling the Business Partner Agreement; consent. |
| To provide technical support for Swisscom beem and maintain your access to the service. | All categories of personal data, particularly crash logs and information provided by you or the Business Partner in support requests. | Overriding legitimate interest in fulfilling the Business Partner Agreement; performance of a contract; overriding legitimate interest in ensuring customer satisfaction and maintaining competitiveness. |
| To improve our websites, applications, services, and customer experience; and for development and analytics purposes aimed at enhancing our products, services, business operations, and processes. | All categories of personal data, except content of network traffic. | Overriding legitimate interest in ensuring customer satisfaction and maintaining competitiveness; performance of a contract; overriding legitimate interest in fulfilling the Business Partner Agreement. |
| To ensure and maintain IT security, particularly to detect security threats, fraud, or other malicious or criminal activities. | All data categories. | Performance of a contract; overriding legitimate interest in fulfilling the Business Partner Agreement; overriding legitimate interest in ensuring customer satisfaction and maintaining competitiveness. |
| Like any other company, Swisscom is subject to legal obligations and regulations. In certain cases, processing your personal data is necessary for Swisscom to comply with these obligations. | All data categories. | Compliance with legal obligations. |
5 Location of Data Processing
To achieve the purposes set out above, your personal data may be transferred to recipients located in Switzerland, the European Economic Area (EEA), as well as the USA and India (specification of the Swisscom Privacy Statement for the Business Partner environment, chapter “Location of Data Processing”).
Cross-border data processing occurs particularly during development and operating services as well as during maintenance activities. In particular in the event of technical issues that Swisscom is unable to resolve itself, it may grant manufacturers or maintenance partners in Switzerland or abroad (including the EEA, USA, and India) temporary and controlled access to the system for troubleshooting purposes. In this context, such manufacturers or maintenance partners may have access to network data (e.g., network elements, configuration data, connection data) and, where necessary to resolve a specific customer issue, individual customer data. In addition, Swisscom may use its subsidiaries in the EEA for the purpose of providing development and operating services, which may also gain access to network data and customer data in the course of providing their services.
Some of the recipients referred to above are located in or process personal data outside of your country. The level of data protection in another country may not be equivalent to that in your country. However, we only transfer your personal data to countries where the EU Commission has decided that they have an adequate level of data protection (e.g. Switzerland) or we take measures to ensure that all recipients provide an adequate level of data protection. We do this for example by entering into appropriate data transfer agreements based on Standard Contractual Clauses (2021/914/EC). These are accessible upon request (see the contact details in point 8).
6 Retention Period
We will retain your personal data for:
- as long as you use the App; and thereafter:
- as long as Swisscom provides the beem Service to the Business Partner;
- as long as required under statutory retention obligations, or
- as long as potential legal claims, where personal data is needed to raise or defend against the claim are not time-barred.
7 Your rights in connection with your personal data
Under applicable law, you have the right to (under the conditions set out in applicable law):
- obtain confirmation as to whether and what kind of personal data we store about you and to request copies of such data;
- request rectification or erasure of your personal data;
- request us to restrict the processing of your personal data;
- request data portability and lodge a complaint with the competent supervisory authority;
- establish guidelines regarding the retention, deletion, and communication of your personal data after your death;
- object to the processing of your personal data.
For data processing which you have consented to, you have the right to withdraw consent at any time (Article 7(3) GDPR) by deleting the App from your devices. Data processing based on consent before the withdrawal remains lawful.
8 Our contact details
You may contact the data protection officer or data protection advisor of Swisscom (Switzerland) Ltd as follows:
- By email: datenschutz@swisscom.com
- By Post: Swisscom (Switzerland) Ltd, Data Protection Officer Swisscom Ltd and Swisscom (Switzerland) Ltd, P.O. Box, 3050 Bern
Our Data Protection Representative in the European Union may be contacted by supervisory authorities and data subjects on all issues relating to EU data protection law as follows:
- By email: info@datenschutzpartner.eu
- By post: VGS Datenschutzpartner UG, Am Kaiserkai 69, 20457 Hamburg, Germany
March 2026
Previous Privacy Statements
Privacy Statement
This Privacy Statement describes how Swisscom (hereinafter «Swisscom» or «we»), in various roles, processes your personal data in the Business Partner environment.
«You» are either an employee or other auxiliary of one or more Swisscom Business Partners (e.g. business customers, suppliers, authorities or other partners) – in this case your employer or principal is Swisscom’s «Business Partner»; or
«You» interact directly with Swisscom in the Business Partner environment (e.g. downloading relevant white papers, subscribing to newsletters, participating in webinars) – in this case, you yourself are Swisscom’s «Business Partner».
Swisscom as a contracted processor
To the extent that Swisscom processes personal data on behalf of the Business Partner, it does so in accordance with the contractual agreements between the latter and Swisscom. This generally includes the Data Processing Agreement of Swisscom (available at www.swisscom.ch/b2b legal). or an agreement negotiated individually with the Business Partner. If you have any data protection concerns, please contact the Business Partner directly, who represents the rights of data subjects in relations with you or who will inform you as to the identity of the controller within whose remit your concerns fall.
Swisscom as a controller in relation to the processing of personal data in the context of initiating and performing the contract and in relation to the contractual relationship
General matters
Swisscom processes personal data about you in connection with initiating and performing contracts with Business Partners and dealing with those contractual relationships.
The controller for such data processing is Swisscom (Switzerland) Ltd, Alte Tiefenaustrasse 6, 3050 Bern, unless otherwise specified in individual cases.
You may contact the data protection officer or data protection advisor of Swisscom Ltd and Swisscom (Switzerland) Ltd as follows:
- By email: datenschutz@swisscom.com
- By post: Swisscom (Switzerland) Ltd, Data Protection Officer Swisscom Ltd and
- Swisscom (Switzerland) Ltd, P.O. Box, 3050 Bern Our Data Protection Representative in the European Union may be contacted by supervisory authorities and data subjects on all issues relating to EU data protection law as follows:
- By email: info@datenschutzpartner.eu
- By post: VGS Datenschutzpartner UG, Am Kaiserkai 69, 20457 Hamburg, Germany
Types of data processed
Depending on the intended or existing relationship between Swisscom and the Business Partner, the personal data processed are:
- Master and contract data such as personal information (e.g. date of birth, gender, language, criminal record or debt collection register extract), contact and identification data (e.g. name, postal/email address, profession/position, means of identification, ID number/copies), communications (e.g. correspondence with Swisscom in connection with orders, fault reports, satisfaction surveys, invitations) and contract data (e.g. contract type, start date, term and content).
- Technical data such as type, brand, software version or settings for the devices you use, addressing elements such as telephone numbers or IP addresses.
- Financial data such as payment information, payment history and creditworthiness data.
- Usage and connection data such as information about the use of the services provided by Swisscom or the tools/platform provided to you or the Swisscom Business Partner;
- Voice interaction and chat data such as voice recordings of calls to the Service Desk or chat content between you and our consultants.
- Location data, such as geo-information indicating the countries from which you are accessing systems or using Swisscom services, location data from mobile communications so that emergency services can locate you if required.
Purposes of Data
Processing Depending on the intended or existing relationship between Swisscom and the Business Partner, we process these data for the following purposes:
- initiating and performing contracts and supporting the contractual relationship. This includes, in particular, communication, physical/virtual access control, fault reports, orders, invoicing, satisfaction analyses, processing in connection with shared filing systems and/or tools,
- advertising, in particular the delivery of information about new products, the holding of events and the dispatch of newsletters and white papers,
- quality assurance, product development and for tailor-made offers,
- informing and reporting to the Business Partner on the use of our services, to the extent permitted by the contracts and the law,
- compliance with legal requirements, combating fraud and assessing creditworthiness.
Origin of the data
Depending on the intended or existing relationship between Swisscom and the Business Partner, we receive data inter alia from the following sources:
- from the Business Partner who provides them to us in the context of the contractual relationship,
- directly from you (e.g. when you place an order or place a request with our Service Desk, when you complete a form on our website or attend an event),
- from us when we collect data with our systems, for example as to how you use our services or systems or, for example, for data analysis,
- other Swisscom Group companies with which the Business Partner has a contract or is in contact,
- third parties who provide us with information about you based on privacy statements or contracts with you.
Recipients of the data
Depending on the intended or existing relationship between Swisscom and the Business Partner, your data will be passed on to the following recipients:
- the Business Partner of Swisscom,
- other companies (including other companies of the Swisscom Group) that are engaged as contractors for the provision of our services, the provision of and the support of our products, as well as sales and marketing, or who receive your data and use it on their own responsibility or jointly with us, or from whom you obtain additional services via us,
- authorities to which we are required to disclose or surrender data based on applicable law or to which we transfer data in order to enforce our claims.
Data protection measures
To protect your data from unauthorised or unlawful processing and to secure it against loss, unintentional alteration, unwanted disclosure or unauthorised access, we put technical and organisational measures in place, such as
- encrypting and pseudonymising certain data,
- creating backups,
- logging accesses and implementing technical access restrictions,
- issuing binding data processing instructions to our employees,
- entering into data protection and confidentiality undertakings with our service providers as well as the relevant controls.
Location of data processing
Your data may also be processed abroad, particularly if we engage service providers and distribution partners for the provision of our services, the provision and maintenance of our products, as well as sales and marketing. It is generally conceivable that your data may be processed worldwide, but this will occur primarily in countries of the European Economic Area, Kosovo and the USA.
If the processing occurs in countries whose legislation does not provide an adequate level of data protection, the protection of your data is ensured by taking the measures prescribed by law, including in particular the conclusion of contractual agreements (standard contractual clauses of the European Commission, which are available as standard contractual clauses) along with appropriate technical and organisational measures.
Duration of processing
Swisscom will only use and store your data for as long as is necessary or technically required to achieve the purposes for which it was collected, to comply with statutory retention periods and for our legitimate interests in documentation. They will then be deleted or anonymised.
Legal bases
Our Privacy Statement is in accordance with the requirements of the Swiss Data Protection Act (DPA) and, to the extent applicable, the EU General Data Protection Regulation (GDPR). Depending on the purpose, the use of your data is premised on the following legal bases: necessity for conclusion or performance of a contract, for compliance with legal obligations, based on a legitimate interest or your general or individual consent. In particular, we have a legitimate interest in the use of the respective data types for the referenced purposes. This includes the provision of third-party services to you, the development and improvement of our products and the submission of offers as well as the analysis of traffic flows based on anonymised data. We also have a legitimate interest in forwarding the data to the respective identified recipients.
Your rights
If you have any questions concerning data protection based on a direct or indirect contractual relationship between the Business Partner and Swisscom, please contact the Business Partner in the first instance. Under the data protection law applicable to you and to the extent provided for therein, you have the right to information, rectification, erasure and surrender of certain personal data. You can exercise these rights by sending a request to that effect to the following address
Swisscom (Switzerland) Ltd
Regulatory & Policy
Data protection
P.O. Box
CH-3050 Bern
In your request, please state that you are making your request in the Business Partner context, and provide us with the name and, if possible, the role of the Business Partner (business customer, supplier etc. of Swisscom). In doing so, please mention the relevant business data details (e.g. your business email address, business telephone number) to which your request relates. In some cases, you and/or the Business Partner may adjust settings and restrictions for data processing through the “My Swisscom Business” portal. Please note that we reserve the right to invoke legitimate interests on our part, for example if we are obliged to retain or process certain data, have an overriding interest in doing so (insofar as we are entitled to rely on such data) or require such data in order to assert claims. Should you incur any costs in connection with the exercise of your rights, we will inform you in advance. Please note that the exercise of your rights may conflict with contractual agreements and this may have consequences such as early contract termination or costs or you may no longer be able to use the service as intended by the Business Partner. In this case, we will inform you and/or the Business Partner in advance, unless this is already provided for by contract. If your rights are violated, you can either assert them by filing an action with the competent court or by lodging a complaint with the competent data protection authority.
- Contact data protection authority in Switzerland: Federal Data Protection and Information Commissioner, www.edoeb.admin.ch
- Contacts Data protection authorities in the European Economic Area: edpb.europa.eu/about-edpb/board/members_en
Swisscom as a controller in connection with the provision of telecommunications services
In providing telecommunications services, Swisscom also acts as a controller within the meaning of data protection law in addition to the Business Partner.
Swisscom processes data and content that are subject to telecommunications secrecy exclusively in accordance with statutory requirements. The content of your communications with third parties will only be recorded or stored after the transmission process if we are obliged to do so based on an order of a competent authority based on a corresponding decree or if this is part of the contractual service (e.g. Combox, Webmail, Mobile Voice Recording). Further information can be found in the Privacy Statement for Private Customers of Swisscom, which applies mutatis mutandis.
Direct customer contractual relationship with Swisscom
If you, as the data subject, are a direct customer of Swisscom, the Privacy Statement for Private Customers of Swisscom shall also apply.
Use of Swisscom web services
In connection with the use of our website, including the «My Swisscom Business» portal, please refer to our Online Privacy Statement. This also contains information about our use of cookies.
August 2023