GDPR Compliance
Last updated: January 2025 · P-P Group GmbH, Switzerland
Compliance status
✓
Swiss & EU hosting
Core data hosted in Switzerland
✓
Limited sub-processors
Only vetted providers (e.g. payments, SMS delivery)
✓
Auto opt-out handling
STOP/START processed automatically
✓
Data deletion on request
Full erasure within 30 days
✓
DPA available
Data Processing Agreement on request
✓
Swiss revDSG & GDPR
Built for Swiss and EU data protection law
Legal basis for processing
We process personal data under the following legal bases:
- Contract performance — processing necessary to provide the OmniBridge service to you
- Legitimate interests — security monitoring, fraud prevention, service improvement
- Legal obligation — billing records required by Swiss law
- Consent — marketing communications (you can withdraw at any time)
Data residency
Your core account and message data is hosted in Switzerland. To deliver the service we also rely on a small number of vetted sub-processors, some of which may process limited data (such as payment details or recipient numbers) outside Switzerland:
- Core platform & database: Swiss-hosted server (P-P Group GmbH)
- Payment processing: handled by our payment provider
- SMS delivery: handled via our messaging gateway / carrier
- A full list of sub-processors is available on request
Opt-out and consent management
OmniBridge includes built-in opt-out management for your SMS campaigns:
- Recipients can reply STOP to unsubscribe from all future messages
- Opt-outs are recorded immediately and respected automatically
- Recipients can re-subscribe by replying START
- All opt-out records are maintained and exportable
- Sending to opted-out numbers is blocked at platform level
OmniBridge as data processor
When you use OmniBridge to send messages to your customers, you are the Data Controller and OmniBridge acts as a Data Processor. This means:
- You are responsible for having a lawful basis to contact your recipients
- You are responsible for obtaining consent where required
- We process your contact data only as instructed by you
- We do not use your contact data for any other purpose
Data Processing Agreement
A Data Processing Agreement (DPA) is available for all paid plans. The DPA outlines the technical and organisational measures we have in place to protect personal data.
To request a signed DPA, please submit a request via our support portal. We will respond within 5 business days.