GDPR Compliance

When you visit our website or fill out the contact form, we act as the controller of your data. A full description of this processing — what data we collect, for what purpose, for how long, and what your rights are — is set out in detail in our Privacy Policy.

When a business uses the Voxia platform to handle its phone calls, Voxia processes data belonging to that business's callers/customers on behalf of, and under the instructions of, the customer business, which remains the controller of its own customer data. The terms of this processor-controller relationship are set out in a separate data processing agreement between Voxia and each customer.

The Voxia platform includes the following, already implemented, technical features that help our customers with their own GDPR compliance: • Encryption and redaction capability for sensitive personal data • Data export and erasure on data subject request (DSAR) • Configurable data retention policy • Audit trail of actions within the platform • Choice of cloud or on-premise/private cloud deployment, based on the customer's data residency needs • Role-based access control and two-factor authentication (2FA) • Call recording notice, in line with applicable law

Use of the technical features above does not replace the legal and organizational obligations of any business using the platform. Executing a Data Processing Agreement (DPA), informing its own customers through its own privacy policy, maintaining a Record of Processing Activities (ROPA), and any other legal/organizational obligation remain the sole responsibility of each customer business, as controller of its own data.

For questions about GDPR compliance — whether as a website visitor or as a platform customer — contact us at hello@voxia.gr.