SECURITYGDPREU HOSTINGDEPROTECTED
Data protection that becomes a selling point.
For a telephone service provider, handling data is not fine print but the foundation of trust. We are open about how calls and data are handled at DachVox.
STANCEOPEN AND VERIFIABLE
We treat your callers' data like our own.
Every call contains personal data. We handle it sparingly, transparently and under EU law, and we can always explain what happens, when and why.
BUILDING BLOCKSHOW WE WORK
The building blocks of our data protection.
Six points that together form the frame DachVox works within.
Processing agreement (Art. 28)
DachVox processes your callers' data on your behalf, governed by a data processing agreement. You remain the controller, we are the processor.
Processing in the EU
Operation, processing and storage take place on infrastructure in the EU, not in a third country without a comparable level of protection.
AI disclosure (EU AI Act)
Callers are informed that an AI is speaking. No hidden machine, transparency is part of the service.
Consent for recording
Calls are recorded only with prior information and consent. Without consent there is no recording.
Governed access
Only authorised people have access, on a least-privilege basis and logged so it stays traceable.
Retention and deletion
Data is kept only as long as purpose and law require, and deleted afterwards. We set the periods together.
LOCATIONEU
Your data stays in the EU.
Where data sits helps decide which law applies to it. DachVox runs the service on infrastructure in the EU, so processing and storage fall under the GDPR's level of protection.
That DachVox is based in Kosovo does not change this. What matters is where processing happens, and that is the EU. As a provider outside the EU we also observe the GDPR's rules for third countries and lay out the exact data flow in the contract.
- Processing and storage on EU infrastructure.
- Data flow documented and verifiable in the processing agreement.
- No silent transfer to unsafe third countries.
TRANSPARENCYAI AND RECORDING
Nobody speaks to a machine without knowing.
Two things we tell every caller openly: that an AI is speaking, and whether the call is recorded. Both are required by the EU AI Act and the GDPR, and both are a visible part of the service with us, not hidden in the fine print.
- AI notice at the start of the call, clear and understandable.
- Recording only after information and consent.
- The wish for a human is respected at any time.
- Access and deletion requests under the GDPR are supported.
ACCESSIBILITYBFSG
The website plays by the rules too.
The German Accessibility Strengthening Act requires accessible digital services. This website is built for it from the start: clear structure, sufficient contrast, keyboard operation and respect for reduced motion.
For context
This page explains in plain language how we handle data. It is not a substitute for the legally binding privacy policy. We agree the contract documents, including the data processing agreement, with you before your service goes live.
FAQSECURITY
Questions about security and data protection
What decision-makers ask most often about data protection.
Are all calls recorded?
Are you responsible for the data, or are we?
Is the data really in the EU, even though you are based in Kosovo?
What does the EU AI Act mean for my callers?
Is this the privacy policy?
DACHVOXCONSULTGDPRDE
Data protection matters to you? It matters to us.
We go through your requirements, the data processing agreement and the data flow with you calmly, before anything goes live.