Scope of this Policy
This Privacy Policy describes how we process personal data when we act as a Data Controller in accordance with the GDPR. This applies in particular to data from: - Visitors to our website - Individuals who contact us (e.g., for inquiries or applications) - Contact persons at our business customers (for contractual and billing purposes) The processing of data in the context of providing our Voice AI services for our customers is carried out in our role as a Data Processor. This processing is not subject to this policy but is governed exclusively by our Data Processing Agreement (DPA).Controller
itellico AI GmbH Postgasse 19, 1010 Vienna, Austria Data Protection Contact: Email: privacy@itellico.ai Phone: +43 1 79 666 90Data Processing
Website Visits
Data Processed: - Server logs (IP address, browser, date/time, requested pages, referrer website) - Technically necessary cookies Purpose of Processing: - Website provision and technical functionality - Ensuring IT security and system stability - Detection and defense against cyberattacks Legal Basis of Processing: Art. 6(1)(f) GDPR (legitimate interests) - Our legitimate interest lies in the proper provision of our website and ensuring IT security. In the balancing of interests, we have considered that the processing is minimal (only technically necessary data), is limited in time (30 days), and serves to protect against cyberattacks without disproportionately affecting your fundamental rights. Obligation to Provide Data: The provision of technical data occurs automatically when visiting the website and is necessary for the technical display of the website. Without this data, we cannot provide you with our website. Storage Duration: 30 days (IP addresses), end of session (cookies)Voice AI Demos
Data Processed: - Voice data and transcripts - Interaction data (IP address, browser, session, call duration, token usage) - Telephony data (caller/callee ID) - Any data you voluntarily provide during the demo usage Note on Demo Usage: Please do not use sensitive personal data or confidential information for demo testing. For example, avoid transmitting passwords, bank details, medical records, private family matters, or other sensitive personal information that is not required for a product evaluation. AI Transparency: In accordance with the EU AI Act, we inform you that when using the demo, you are interacting with an AI system (voice assistant). All responses are artificially generated. Purpose of Processing: - Provision of the Voice AI demo functionality - Product development and optimization - Improvement of our demo applications Legal Basis of Processing: Art. 6(1)(b) GDPR (pre-contractual measures) - The processing is necessary for the performance of pre-contractual measures at your request (product evaluation). Obligation to Provide Data: The use of the demo functionality is voluntary. However, without providing voice data, we cannot provide you with the demo functionality. Storage Duration: 90 days (demo data), indefinitely (fully anonymized data for product improvement)Contact Inquiries and Applications
Data Processed: - General Inquiries: Name (required), email (required), company (optional), phone number (optional), message content (required), and information about the source of the inquiry. - Applications: Additionally, all information you provide in the message field, your resume (required), cover letter (optional), certificates (optional), and other application documents that you send us by email or may upload via a form in the future. Obligation to Provide Data: - General Inquiries: Providing your name, email, and message content is necessary to process your inquiry. Without this data, we cannot process or respond to your inquiry. - Applications: Providing a resume is necessary to carry out the application process. Without this information, we cannot consider your application. Purpose of Processing: - General Inquiries: Processing and responding to your inquiry, customer support, and business development. - Applications: Conducting the application process and deciding on the establishment of an employment relationship. Legal Basis of Processing: - General Inquiries: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (our legitimate interest in the efficient processing and documentation of business inquiries). - Applications: Art. 6(1)(b) GDPR in conjunction with Art. 88 GDPR (performance of pre-contractual measures for the establishment of an employment relationship). Storage Duration: - General Inquiries: 12 months after the inquiry has been resolved. - Applications: In case of a rejection, your data will be stored for 7 months to be able to address legal claims (e.g., under the Equal Treatment Act). If an employment relationship is established, the data will be transferred to the personnel file.Data Processing on Behalf of Our Customers
For the processing of personal data within our Voice AI services for business customers, we act as a Data Processor in accordance with Art. 28 GDPR. The details of this data processing, including the types of data processed, purposes, legal bases, storage periods, and technical-organizational measures, are governed by the Data Processing Agreement (DPA), which is an integral part of our General Terms and Conditions. For our business customers: All details regarding the processing of end-user data can be found in our Data Processing Agreement (DPA).Marketing and Analytics
Data Processed: - Email address (newsletter) - Usage statistics - CRM data Purpose of Processing: - Sending newsletters and marketing information - Analysis of website usage and optimization - Customer relationship management - Business development Legal Basis of Processing: Art. 6(1)(a) GDPR (consent) for newsletters and cookies or Art. 6(1)(f) GDPR (legitimate interests) - Our legitimate interest lies in customer care and business development. The balancing of interests shows that the processing is necessary for maintaining business relationships and that your rights are protected through opt-out options and data minimization. Storage Duration: Until withdrawal (newsletter), 26 months (analytics)Conversion Tracking & Ad Attribution
Data Processed: Advertising click identifiers received in URL parameters (for example Googlegclid, gbraid, and wbraid), campaign parameters, consent status, conversion event data, and, only where consent for advertising user data is granted, hashed contact information (e.g., email address, phone number).
Purpose of Processing: Attribution of conversions resulting from our advertising to specific campaigns and measurement of campaign effectiveness via Google Ads (including Enhanced Conversions) and Meta (Conversions API / CAPI).
Recipients: Google Ireland Limited and Meta Platforms Ireland Ltd.
Legal Basis of Processing: For advertising cookies, Meta Pixel / CAPI, retargeting, and Enhanced Conversions using hashed contact information, we rely on Art. 6(1)(a) GDPR (consent), granted via our cookie banner. You can withdraw consent at any time via the cookie banner, with effect for the future. For Google Ads click-based conversion measurement, we may process click identifiers received in the page URL and transmit cookieless Consent Mode pings and conversion events to Google Ads with your Consent Mode v2 consent status under Art. 6(1)(b) GDPR (pre-contractual measures requested by you, e.g. demo or signup) and Art. 6(1)(f) GDPR (our legitimate interest in measuring and optimizing advertising effectiveness). If advertising consent is withheld, we do not set or read advertising cookies and do not transmit hashed contact information for Enhanced Conversions.
Note on Hashing: Hashing is a security measure, but hashed identifiers remain personal data under the GDPR because the recipient can match them against their own records (e.g., to identify existing logged-in users). We therefore rely on consent rather than legitimate interest as the legal basis.
Storage Duration: As defined by the respective advertising partner (see their privacy policies). Locally, the consent record is retained until you withdraw it.