This document lists all sub-processors engaged in providing the itellico AI services, website operations, and business processes. All data processing occurs either on servers within the EU or is fully secured through Standard Contractual Clauses (SCCs), the EU-US Privacy Framework, or other appropriate guarantees pursuant to Art. 44-49 GDPR. This ensures a consistently high level of data protection.
---
Amazon Web Services EMEA SARL
| Aspect | Details |
|---|---|
| Purpose of Processing | Hosting of Kubernetes infrastructure for the itellico voice AI cluster platform, provision of SIP communication services, CDN (Content Delivery Network) for website content, and storage of conversation data (transcripts, audio responses). |
| Data Recipient | Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | AWS Privacy Policy |
Anthropic Ireland Limited
| Aspect | Details |
|---|---|
| Purpose of Processing | Alternative AI processing (LLM): Processing of text queries through large language models (e.g., Claude series). |
| Data Recipient | Anthropic Ireland Limited, Dublin, Ireland. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | Anthropic Privacy Policy |
Apple Distribution International Ltd.
| Aspect | Details |
|---|---|
| Purpose of Processing | Social Login: Authentication and login of users via Apple accounts ("Sign in with Apple"). |
| Data Recipient | Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, T23 YK84, Ireland. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | Apple Privacy Policy |
Cal.com, Inc.
| Aspect | Details |
|---|---|
| Purpose of Processing | Online appointment scheduling for consultation meetings. |
| Data Recipient | Cal.com, Inc., USA. |
| Legal Basis | Pre-contractual measures (Art. 6 para. 1 lit. b GDPR). |
| Further Information | Cal.com Privacy Policy |
Cartesia
| Aspect | Details |
|---|---|
| Purpose of Processing | Alternative text-to-speech synthesis. |
| Data Recipient | Cartesia, Inc., San Francisco, CA, USA. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | Cartesia Privacy Policy |
Cloudflare, Inc.
| Aspect | Details |
|---|---|
| Purpose of Processing | Content Delivery Network (CDN), DDoS protection, website optimization, and Turnstile CAPTCHA protection for login and forms. |
| Data Recipient | Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. |
| Legal Basis | Legitimate interest (Art. 6 para. 1 lit. f GDPR) in website security and performance. |
| Further Information | Cloudflare Privacy Policy |
Deepgram
| Aspect | Details |
|---|---|
| Purpose of Processing | Alternative speech-to-text transcription. |
| Data Recipient | Deepgram Inc., 548 Market St, Suite 25104, San Francisco, CA 94104-5401, USA. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | Deepgram Privacy Policy |
ElevenLabs
| Aspect | Details |
|---|---|
| Purpose of Processing | Alternative text-to-speech synthesis and voice cloning. |
| Data Recipient | Eleven Labs Inc., 169 Madison Ave #2484, New York, NY 10016, USA. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | ElevenLabs Privacy Policy |
Firecrawl
| Aspect | Details |
|---|---|
| Purpose of Processing | Optional: Web scraping and data extraction for AI applications, only when users want to integrate public websites into their knowledge database. Conversion of URLs into structured data and LLM-ready markdown. |
| Data Recipient | Mendable AI Inc. (Firecrawl), San Francisco, CA, USA. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | Firecrawl Privacy Policy |
Freshworks, Inc.
| Aspect | Details |
|---|---|
| Purpose of Processing | Customer Relationship Management (CRM) and customer support. |
| Data Recipient | Freshworks Inc., 2950 S. Delaware Street, Suite 201, San Mateo, CA 94403, USA. |
| Legal Basis | Depending on context: Pre-contractual measures or contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | Freshworks Privacy Policy |
Google Ireland Limited
| Aspect | Details |
|---|---|
| Purpose of Processing | Social Login, push notifications (FCM), and vector embeddings for AI applications. Optional/Consent-based: Google Fonts for website typography and Google Analytics for website analytics only after explicit user consent via cookie banner. |
| Data Recipient | Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR) for technical services; Consent (Art. 6 para. 1 lit. a GDPR) for Google Fonts and Google Analytics. |
| Further Information | Google Privacy Policy |
Hetzner Online GmbH
| Aspect | Details |
|---|---|
| Purpose of Processing | Cloud infrastructure and server hosting for development and testing environments. |
| Data Recipients | Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. |
| Legal Basis | Legitimate interest (Art. 6 para. 1 lit. f GDPR) in technical infrastructure. |
| Further Information | Hetzner Privacy Policy |
IP Austria Communication GmbH
| Aspect | Details |
|---|---|
| Purpose of Processing | Telephony infrastructure and carrier services for voice calls. |
| Data Recipient | IP Austria Communication GmbH, Wienerbergstraße 11/B16, 1100 Vienna, Austria. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | IP Austria Privacy Policy |
LiveKit
| Aspect | Details |
|---|---|
| Purpose of Processing | Real-time communication (WebRTC & SIP): Provision of infrastructure for real-time audio communication and connection to the telephone network (SIP). |
| Data Recipient | LiveKit, Inc., 4285 Payne Avenue Suite 9154, San Jose, CA 95157, USA. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | LiveKit Privacy Policy |
LlamaIndex, Inc.
| Aspect | Details |
|---|---|
| Purpose of Processing | Document processing and data indexing: Parsing and extraction of documents via LlamaParse as well as indexing and vectorization for semantic search. |
| Data Recipient | LlamaIndex, Inc., USA. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | LlamaIndex Privacy Policy |
LinkedIn Ireland Unlimited Company
| Aspect | Details |
|---|---|
| Purpose of Processing | Optional/Consent-based: Business network analytics, conversion tracking, and professional advertising only after explicit user consent via cookie banner. |
| Data Recipient | LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. |
| Legal Basis | Consent (Art. 6 para. 1 lit. a GDPR). |
| Further Information | LinkedIn Privacy Policy |
Meta Platforms Ireland Ltd.
| Aspect | Details |
|---|---|
| Purpose of Processing | Optional/consent-based: Facebook Pixel for social media advertising, retargeting, and conversion tracking only after explicit user consent via cookie banner. |
| Data Recipient | Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. |
| Legal Basis | Consent (Art. 6 para. 1 lit. a GDPR). |
| Further Information | Meta Privacy Policy |
Microsoft Ireland Operations Limited
| Aspect | Details |
|---|---|
| Purpose of Processing | Azure AI Services: Speech recognition (speech-to-text), speech synthesis (text-to-speech), AI processing through large language models, and embedding generation for semantic search via Azure OpenAI. Optional/Consent-based: Microsoft Clarity for website analytics and user behavior only after explicit user consent via cookie banner. |
| Data Recipient | Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR) for Azure AI Services; Consent (Art. 6 para. 1 lit. a GDPR) for Microsoft Clarity. |
| Further Information | Microsoft Privacy Policy |
Mistral AI
| Aspect | Details |
|---|---|
| Purpose of Processing | Optical character recognition (OCR) and document processing for AI applications. |
| Data Recipient | Mistral AI, 15 Rue des Halles, 75001 Paris, France. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | Mistral AI Privacy Policy |
Netlify, Inc.
| Aspect | Details |
|---|---|
| Purpose of Processing | Website hosting and CDN services. |
| Data Recipient | Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. |
| Legal Basis | Legitimate interest (Art. 6 para. 1 lit. f GDPR) in operating a high-performance website. |
| Further Information | Netlify Privacy Policy |
OpenAI Ireland Limited
| Aspect | Details |
|---|---|
| Purpose of Processing | AI processing (LLM) and speech recognition (speech-to-text): Processing of text queries through large language models (e.g., GPT series) as well as conversion of speech input to text (e.g., Whisper). |
| Data Recipient | OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43 Ireland. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | OpenAI Privacy Policy |
Pinecone Systems, Inc.
| Aspect | Details |
|---|---|
| Purpose of Processing | Vector database for AI applications and semantic search. |
| Data Recipient | Pinecone Systems, Inc., 548 Market St Pmb 19327, San Francisco, CA 94104-5401, USA. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | Pinecone Privacy Policy |
Sentry (Functional Software, Inc.)
| Aspect | Details |
|---|---|
| Purpose of Processing | Error monitoring and performance monitoring for applications. |
| Data Recipient | Functional Software, Inc. d/b/a Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA. |
| Legal Basis | Legitimate interest (Art. 6 para. 1 lit. f GDPR) in system stability and error resolution. |
| Further Information | Sentry Privacy Policy |
Sinch Ireland Limited
| Aspect | Details |
|---|---|
| Purpose of Processing | Transactional emails via Mailgun. |
| Data Recipient | Sinch Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | Mailgun Privacy Policy |
Stripe Technology Europe, Limited
| Aspect | Details |
|---|---|
| Purpose of Processing | Payment processing and billing. |
| Data Recipient | Stripe Technology Europe, Limited, The One Building, 1 Lower Grand Canal Street, Dublin 2, D02 H210, Ireland. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | Stripe Privacy Policy |
Tally BV
| Aspect | Details |
|---|---|
| Purpose of Processing | Collection of inquiries and feedback via online forms. |
| Data Recipient | Tally BV, August Van Lokerenstraat 71, 9050 Ghent, Belgium. |
| Legal Basis | Depending on context: Pre-contractual measures or contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | Tally.so Privacy Policy |
Twilio Ireland Limited
| Aspect | Details |
|---|---|
| Purpose of Processing | Telephony infrastructure and SIP trunking for voice calls. |
| Data Recipient | Twilio Ireland Limited, Canal House, Station Road, Portarlington, Co. Laois, R32 AP23, Ireland. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | Twilio Privacy Policy |
TikTok Technology Limited
| Aspect | Details |
|---|---|
| Purpose of Processing | Optional/consent-based: Social media analytics, conversion tracking, and targeted advertising only after explicit user consent via cookie banner. |
| Data Recipient | TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. |
| Legal Basis | Consent (Art. 6 para. 1 lit. a GDPR). |
| Further Information | TikTok Privacy Policy |
Vonage Holdings Corp.
| Aspect | Details |
|---|---|
| Purpose of Processing | Alternative telephony infrastructure and communication APIs. |
| Data Recipient | Vonage Holdings Corp., 101 Crawfords Corner Road, Suite 2416, Holmdel, NJ 07733, USA. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | Vonage Privacy Policy |
WNT Telecommunication GmbH
| Aspect | Details |
|---|---|
| Purpose of Processing | Carrier services for telephony and voice communication. |
| Data Recipient | WNT Telecommunication GmbH, Richard-Strauss-Straße 43, 1230 Vienna, Austria. |
| Legal Basis | Contract performance (Art. 6 para. 1 lit. b GDPR). |
| Further Information | WNT Privacy Policy |
---
Contact: privacy@itellico.ai
