Privacy at CloudTalk

Name: Privacy Center - CloudTalk
Brand: CloudTalk

Welcome to the CloudTalk Privacy Center. Protecting your data is our top priority, and we are committed to maintaining the highest standards of security and privacy. On this page, you'll find everything you need to understand how we handle and safeguard your information, our privacy policies, and details about our data privacy compliance.

AI Features and Your Data

Our AI features are governed by our Terms and Conditions and operated through carefully selected sub-processors that are fully GDPR compliant. All AI-related data is stored within the EU, and every sub-processor is bound by Data Processing Agreements including Standard Contractual Clauses.

We do not use customer data to train or fine-tune AI models and we also do not allow our sub-processors to use customer data for such purposes. Customers maintain full control and can enable or disable AI features at any time.

Our Privacy Notice provides a detailed overview of how we, as a data controller, collect, process, and protect your personal data in line with applicable regulations. It also explains the cookies and other tracking technologies we use on our websites to improve your experience, deliver personalized content, and analyze site performance. Additionally, the notice includes guidance on how to exercise control over your data.

CloudTalk Privacy Notice

We are fully committed to GDPR compliance, adhering to the highest standards of data privacy and protection. We ensure that all personal data is processed in accordance with GDPR requirements, maintaining transparency, accountability, and security throughout our operations. Below, you will find detailed documentation outlining our GDPR policies, practices, and the measures we take to safeguard your data in full compliance with the regulation.

Data Processing Agreement (DPA): Inseperable part of our Terms and Conditions
List of sub-processors and group affiliates
Security Whitepaper: Describes our Technical and Organizational Measures (TOMs) designed to ensure robust data security and protection.
Transfer Impact Assessment for transfers outside of EEA

Data Protection Officer

We have appointed a dedicated Data Protection Officer (DPO) who oversees our compliance with GDPR and other applicable data protection regulations. The DPO is responsible for ensuring the lawful and transparent handling of personal data, advising on privacy matters, and acting as the primary contact point for data protection authorities and individuals whose data we process.

You can contact our DPO at privacy@cloudtalk.io.

CCPA Compliance

We adhere to all CCPA requirements, ensuring the protection of personal data and the privacy rights of California residents. Our practices are designed to provide transparency and control over data usage. Learn more about our CCPA compliance here:

CloudTalk and CCPA

Frequently asked questions

Call recordings and AI data, such as call transcripts are stored in Germany, EU. Other data maybe processed and stored in secure Amazon AWS data centres, located in four AWS regions: Frankfurt (eu-central-1), Northern Virginia (us-east-1), Singapore (ap-southeast-1), and Sydney (ap-southeast-2). Leveraging multiple AWS regions enhances our disaster recovery capabilities, also ensuring high availability and low call latency.

Yes, some data is transferred to partners outside the EU, but always under GDPR-compliant safeguards (see below). You can view the list of our sub-processors and their location here.

Yes. GDPR allows international data transfers if appropriate safeguards are in place. CloudTalk ensures all such safeguards are met. We have entered into Data Processing Agreements (DPAs) that incorporate Standard Contractual Clauses (SCCs) with each sub-processor. Additionally, we have conducted a Transfer Impact Assessment (TIA) for all non-EEA data transfers, as per GDPR requirements. Every sub-processors is assessed to ensure their technical and organisational measures are compliant with GDPR and international standards such as SOC 2 and ISO 27001. The TIA and other relevant documentation is available at trust.cloudtalk.io.

We describe the categories, purpose and legal basis for processing your data at cloudtalk.io/privacy-notice.

Yes, our DPA is available at cloudtalk.io/dpa and forms an inseparable part of our standard service agreement.

Yes. We work with carefully selected sub-processors who meet GDPR standards. You can find the full list at cloudtalk.io/sub-processors.

We have entered into Data Processing Agreements (DPAs) that incorporate Standard Contractual Clauses (SCCs) with each sub-processor. Additionally, we have conducted a Transfer Impact Assessment (TIA) for all non-EEA data transfers, as per GDPR requirements. Every sub-processors is assessed to ensure their technical and organisational measures are compliant with GDPR and international standards such as SOC 2 and ISO 27001. You can find all supporting documentation at trust.cloudtalk.io.

We implement strict security measures including encryption, access controls, and regular audits, in line with our ISO 27001 certification and SOC 2 audit. All measures are described in our Security Whitepaper.

Yes. You can contact our dpo at privacy@cloudtalk.io.

You can contact us at privacy@cloudtalk.io to request data access, correction, deletion, or portability.