Scope of this Policy
This Privacy Policy describes how we process personal data when we act as a Data Controller in accordance with the GDPR. This applies in particular to data from: - Visitors to our website - Individuals who contact us (e.g., for inquiries or applications) - Contact persons at our business customers (for contractual and billing purposes)
The processing of data in the context of providing our Voice AI services for our customers is carried out in our role as a Data Processor. This processing is not subject to this policy but is governed exclusively by our Data Processing Agreement (DPA).
Controller
itellico internet solutions GmbH Postgasse 19, A-1010 Vienna, Austria
Data Protection Contact: Email: privacy@itellico.ai Phone: +43-1-7966690-0
Data Processing
Website Visits
Data Processed: - Server logs (IP address, browser, date/time, requested pages, referrer website) - Technically necessary cookies
Purpose of Processing: - Website provision and technical functionality - Ensuring IT security and system stability - Detection and defense against cyberattacks
Legal Basis of Processing: Art. 6(1)(f) GDPR (legitimate interests) - Our legitimate interest lies in the proper provision of our website and ensuring IT security. In the balancing of interests, we have considered that the processing is minimal (only technically necessary data), is limited in time (30 days), and serves to protect against cyberattacks without disproportionately affecting your fundamental rights.
Obligation to Provide Data: The provision of technical data occurs automatically when visiting the website and is necessary for the technical display of the website. Without this data, we cannot provide you with our website.
Storage Duration: 30 days (IP addresses), end of session (cookies)
Voice AI Demos
Data Processed: - Voice data and transcripts - Interaction data (IP address, browser, session, call duration, token usage) - Telephony data (caller/callee ID) - Any data you voluntarily provide during the demo usage
Note on Demo Usage: Please do not use sensitive personal data or confidential information for demo testing. For example, avoid transmitting passwords, bank details, medical records, private family matters, or other sensitive personal information that is not required for a product evaluation.
AI Transparency: In accordance with the EU AI Act, we inform you that when using the demo, you are interacting with an AI system (voice assistant). All responses are artificially generated.
Purpose of Processing: - Provision of the Voice AI demo functionality - Product development and optimization - Improvement of our demo applications
Legal Basis of Processing: Art. 6(1)(b) GDPR (pre-contractual measures) - The processing is necessary for the performance of pre-contractual measures at your request (product evaluation).
Obligation to Provide Data: The use of the demo functionality is voluntary. However, without providing voice data, we cannot provide you with the demo functionality.
Storage Duration: 90 days (demo data), indefinitely (fully anonymized data for product improvement)
Contact Inquiries and Applications
Data Processed: - General Inquiries: Name (required), email (required), company (optional), phone number (optional), message content (required), and information about the source of the inquiry. - Applications: Additionally, all information you provide in the message field, your resume (required), cover letter (optional), certificates (optional), and other application documents that you send us by email or may upload via a form in the future.
Obligation to Provide Data: - General Inquiries: Providing your name, email, and message content is necessary to process your inquiry. Without this data, we cannot process or respond to your inquiry. - Applications: Providing a resume is necessary to carry out the application process. Without this information, we cannot consider your application.
Purpose of Processing: - General Inquiries: Processing and responding to your inquiry, customer support, and business development. - Applications: Conducting the application process and deciding on the establishment of an employment relationship.
Legal Basis of Processing: - General Inquiries: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (our legitimate interest in the efficient processing and documentation of business inquiries). - Applications: Art. 6(1)(b) GDPR in conjunction with Art. 88 GDPR (performance of pre-contractual measures for the establishment of an employment relationship).
Storage Duration: - General Inquiries: 12 months after the inquiry has been resolved. - Applications: In case of a rejection, your data will be stored for 7 months to be able to address legal claims (e.g., under the Equal Treatment Act). If an employment relationship is established, the data will be transferred to the personnel file.
Data Processing on Behalf of Our Customers
For the processing of personal data within our Voice AI services for business customers, we act as a Data Processor in accordance with Art. 28 GDPR.
The details of this data processing, including the types of data processed, purposes, legal bases, storage periods, and technical-organizational measures, are governed by the Data Processing Agreement (DPA), which is an integral part of our General Terms and Conditions.
For our business customers: All details regarding the processing of end-user data can be found in our Data Processing Agreement (DPA).
Marketing and Analytics
Data Processed: - Email address (newsletter) - Usage statistics - CRM data
Purpose of Processing: - Sending newsletters and marketing information - Analysis of website usage and optimization - Customer relationship management - Business development
Legal Basis of Processing: Art. 6(1)(a) GDPR (consent) for newsletters and cookies or Art. 6(1)(f) GDPR (legitimate interests) - Our legitimate interest lies in customer care and business development. The balancing of interests shows that the processing is necessary for maintaining business relationships and that your rights are protected through opt-out options and data minimization.
Storage Duration: Until withdrawal (newsletter), 26 months (analytics)
Data Recipients
We work with various categories of service providers:
Technology Partners: - AI model providers - Speech recognition and speech synthesis services - Cloud infrastructure providers - Document processing services - Vector database services
Business Partners: - Payment service providers - Accounting service providers - Legal and tax advisors - CRM and marketing tools - Email services - Scheduling services
IT Infrastructure and Performance Partners: - Tools for improving system stability - Performance monitoring and alerting systems - Authentication services - Form services
Authorities: In case of legal obligations or official requests.
*A comprehensive list of all data processors and service providers, including their specific purposes and data processing details, can be found in our Data Processors documentation. Additional information is available on request at privacy@itellico.ai.*
Third-Country Transfers
When transferring personal data to service providers outside the EU/EEA, we ensure an adequate level of data protection through the following guarantees:
For US-based service providers: - For certified partners: EU-US Data Privacy Framework (Adequacy Decision of July 10, 2023) - For non-certified partners: EU Standard Contractual Clauses (SCC 2021/914) with additional safeguards
For other third countries: - EU Standard Contractual Clauses (SCC 2021/914) - Technical and organizational safeguards (end-to-end encryption, pseudonymization)
Details on the specific guarantees for individual service providers are available on request at privacy@itellico.ai.
Your Rights
You have the following rights: - Access to your stored data (Art. 15 GDPR) - Rectification of incorrect data (Art. 16 GDPR) - Erasure of data that is no longer needed (Art. 17 GDPR) - Restriction of processing (Art. 18 GDPR) - Data portability in a machine-readable format (Art. 20 GDPR) - Objection to processing (Art. 21 GDPR) - Withdrawal of consent (Art. 7(3) GDPR)
Contact: privacy@itellico.ai
Complaints
For data protection issues, you can contact the supervisory authority:
Austrian Data Protection Authority Barichgasse 40-42, 1030 Vienna Email: dsb@dsb.gv.at Website: https://www.dsb.gv.at
Cookies
Detailed information on cookies can be found in our Cookie Declaration.
Automated Decisions
We do not make automated decisions with legal effects (Art. 22 GDPR).
Minors
Our services are generally intended for adult users. Persons under 16 years of age are only permitted to use our services with the consent of their legal guardians.
Changes
We reserve the right to update this Privacy Policy. In the event of significant changes, we will inform you by email.
Last updated: July 15, 2025
