Privacy policy

1. What this is about

In this privacy policy, we, Miliko GmbH, explain how we process personal data – when you visit our website, contact us, book an appointment, use the client portal or use our services. We comply with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies in an individual case, its provisions also apply.

2. Controller

For any questions about data protection and to exercise your rights, you can reach us at this address.

3. Data we process

Visiting the website

When you access our website, technically necessary data is automatically recorded in server logs: IP address, date and time, page accessed, browser and operating system. We need this data for the secure and stable operation of the website.

Contact and quote requests

When you contact us via a form, by email or by phone, we process your details (e.g. name, company, email, phone, request) to answer your enquiry and prepare quotes. Form enquiries are stored in our CRM system.

Appointment booking

For an online appointment booking, we process your name, contact details, the chosen appointment and – for on-site appointments – the address of your business. For online consultations you receive a link to the video conference.

Client portal and fiduciary mandates

Within a fiduciary mandate, we process the data you send us for accounting, payroll, VAT and year-end closing – including via the client portal. This includes receipts, business and financial data as well as personal data of your employees (e.g. personal details, salary, social insurance data). This may also include sensitive personal data, such as information on illness or accident in the context of payroll accounting. You are responsible for informing your employees of this disclosure of data.

IT services and remote maintenance

When setting up, maintaining and supporting POS, payment, ERP, video and other systems, we may have access to data in these systems. Remote maintenance (SwissDESK) only takes place with your consent for each session. We only process data to the extent necessary for the assignment.

4. Purposes of processing

• Answering enquiries, advice and preparing quotes
• Concluding and performing contracts and mandates, invoicing
• Operation, security and improvement of our website and systems
• Compliance with legal obligations, in particular retention and reporting obligations

5. Cookies and web analytics

Our website uses technically necessary cookies, e.g. for the session, appointment booking and storing your cookie settings.

With your consent via the cookie notice, we use Google Analytics 4 (Google Ireland Limited, Ireland; Google LLC, USA). Google Analytics uses cookies to compile statistics on the use of our website, such as pages visited and time spent. IP addresses are not stored. Data may be transferred to Google servers in the USA. You can withdraw your consent at any time by deleting the cookies in your browser and choosing your setting again.

Fonts

To display the website, we load fonts from Google Fonts (Google). In doing so, your IP address is transmitted to Google.

6. Disclosure to third parties

We only disclose personal data where this is necessary for the stated purposes, required by law or you have consented. Recipients may include:

• IT and hosting providers that operate our website, business software and email (servers in Germany or the EU)
• partners through whom we provide services, e.g. Planet (payment solutions) or peoplefone (telephony), if you order a corresponding product
• authorities, social insurance institutions and insurers, where necessary within a fiduciary mandate (e.g. tax administration, OASI compensation office, pension fund)

Our service providers only process data on our behalf and in accordance with our instructions.

7. Disclosure abroad

Data may be disclosed to EU or EEA countries that, in the assessment of the Federal Council, provide adequate data protection. With Google, a transfer to the USA may take place; Google is certified under the Swiss-U.S. Data Privacy Framework, or standard contractual clauses apply.

8. Retention

We only store personal data for as long as necessary for the respective purpose. We retain business records in accordance with statutory requirements, generally for ten years (Art. 958f CO). Enquiries that do not result in an assignment are deleted as soon as they are no longer needed.

9. Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, e.g. encrypted transmission (HTTPS), access restrictions and backups.

10. Your rights

You have the right to request information about the personal data we process about you and to request its correction, deletion or restriction of processing. You can object to processing, withdraw consent given and request your data in a common format. Statutory retention obligations remain reserved. Please send your request to [email protected].

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or – where the GDPR applies – with the competent supervisory authority in your country.

11. Changes

We may amend this privacy policy at any time. The version published on this website applies.

Version: October 2026. Translation for information only; only the German version is legally binding.