Scope of this Policy
This Privacy Policy describes how we process personal data when we act as a Data Controller in accordance with the GDPR. This applies in particular to data from:- Visitors to our website
- Individuals who contact us (e.g., for inquiries or applications)
- Contact persons at our business customers (for contractual and billing purposes)
The processing of data in the context of providing our Voice AI services for our customers is carried out in our role as a Data Processor. This processing is not subject to this policy but is governed exclusively by our Data Processing Agreement (DPA).
Controller
itellico AI GmbH Postgasse 19, A-1010 Vienna, Austria Data Protection Contact: Email: privacy@itellico.ai Phone: +43-1-7966690-0Data Processing
Website Visits
Data Processed
Data Processed
- Server logs (IP address, browser, date/time, requested pages, referrer website)
- Technically necessary cookies
Purpose of Processing
Purpose of Processing
- Website provision and technical functionality
- Ensuring IT security and system stability
- Detection and defense against cyberattacks
Legal Basis
Legal Basis
Art. 6(1)(f) GDPR (legitimate interests) — Our legitimate interest lies in the proper provision of our website and ensuring IT security. In the balancing of interests, we have considered that the processing is minimal (only technically necessary data), is limited in time (30 days), and serves to protect against cyberattacks without disproportionately affecting your fundamental rights.
Obligation to Provide Data
Obligation to Provide Data
The provision of technical data occurs automatically when visiting the website and is necessary for the technical display of the website. Without this data, we cannot provide you with our website.
Voice AI Demos
Data Processed
Data Processed
- Voice data and transcripts
- Interaction data (IP address, browser, session, call duration, token usage)
- Telephony data (caller/callee ID)
- Any data you voluntarily provide during the demo usage
Purpose of Processing
Purpose of Processing
- Provision of the Voice AI demo functionality
- Product development and optimization
- Improvement of our demo applications
Legal Basis
Legal Basis
Art. 6(1)(b) GDPR (pre-contractual measures) — The processing is necessary for the performance of pre-contractual measures at your request (product evaluation).
Obligation to Provide Data
Obligation to Provide Data
The use of the demo functionality is voluntary. However, without providing voice data, we cannot provide you with the demo functionality.
AI Transparency: In accordance with the EU AI Act, we inform you that when using the demo, you are interacting with an AI system (voice assistant). All responses are artificially generated.
Contact Inquiries and Applications
- General Inquiries
- Applications
Data Processed: Name (required), email (required), company (optional), phone number (optional), message content (required), and information about the source of the inquiry.Obligation to Provide Data: Providing your name, email, and message content is necessary to process your inquiry. Without this data, we cannot process or respond to your inquiry.Purpose: Processing and responding to your inquiry, customer support, and business development.Legal Basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (our legitimate interest in the efficient processing and documentation of business inquiries).Storage Duration: 12 months after the inquiry has been resolved.
Data Processing on Behalf of Our Customers
For the processing of personal data within our Voice AI services for business customers, we act as a Data Processor in accordance with Art. 28 GDPR. The details of this data processing, including the types of data processed, purposes, legal bases, storage periods, and technical-organizational measures, are governed by the Data Processing Agreement (DPA), which is an integral part of our General Terms and Conditions.Data Processing Agreement
Find all end-user data processing details in our DPA.
Marketing and Analytics
Data Processed
Data Processed
- Email address (newsletter)
- Usage statistics
- CRM data
Purpose of Processing
Purpose of Processing
- Sending newsletters and marketing information
- Analysis of website usage and optimization
- Customer relationship management
- Business development
Legal Basis
Legal Basis
Art. 6(1)(a) GDPR (consent) for newsletters and cookies or Art. 6(1)(f) GDPR (legitimate interests) — Our legitimate interest lies in customer care and business development. The balancing of interests shows that the processing is necessary for maintaining business relationships and that your rights are protected through opt-out options and data minimization.
Data Recipients
We work with various categories of service providers:Technology Partners
Technology Partners
AI model providers, speech recognition and speech synthesis services, cloud infrastructure providers, document processing services, vector database services
Business Partners
Business Partners
Payment service providers, accounting service providers, legal and tax advisors, CRM and marketing tools, email services, scheduling services
IT Infrastructure and Performance Partners
IT Infrastructure and Performance Partners
Tools for improving system stability, performance monitoring and alerting systems, authentication services, form services
Authorities
Authorities
Third-Country Transfers
When transferring personal data to service providers outside the EU/EEA, we ensure an adequate level of data protection through the following guarantees:- US-Based Providers
- Other Third Countries
- Certified partners: EU-US Data Privacy Framework (Adequacy Decision of July 10, 2023)
- Non-certified partners: EU Standard Contractual Clauses (SCC 2021/914) with additional safeguards
Your Rights
You have the following rights:| Right | Legal Basis |
|---|---|
| Access to your stored data | Art. 15 GDPR |
| Rectification of incorrect data | Art. 16 GDPR |
| Erasure of data that is no longer needed | Art. 17 GDPR |
| Restriction of processing | Art. 18 GDPR |
| Data portability in a machine-readable format | Art. 20 GDPR |
| Objection to processing | Art. 21 GDPR |
| Withdrawal of consent | Art. 7(3) GDPR |
Complaints
For data protection issues, you can contact the supervisory authority:Austrian Data Protection Authority
Barichgasse 40-42, 1030 ViennaEmail: dsb@dsb.gv.at
Website: https://www.dsb.gv.at
Additional Information
| Topic | Details |
|---|---|
| Cookies | Detailed information on cookies is included in this privacy policy. |
| Automated Decisions | We do not make automated decisions with legal effects (Art. 22 GDPR). |
| Minors | Our services are generally intended for adult users. Persons under 16 years of age are only permitted to use our services with the consent of their legal guardians. |
| Changes | We reserve the right to update this Privacy Policy. In the event of significant changes, we will inform you by email. |