INFORMATION ON THE PROCESSING OF PERSONAL DATA
for the AIRESP artificial intelligence answering machine application
(version compliant with GDPR, UK GDPR, CCPA/CPRA, PIPEDA, LGPD, nLPD, Privacy Act AU)
For data provided by the application user, the data controller is AIRESP SRLS, based in Terni (contact details at the bottom of the page).
For data provided by those who speak to the answering machine, the data controller is the user of the application, while AIRESP SRLS is the data processor.
The application is an AI-powered answering machine That:
automatically handles incoming calls when the user is busy;
communicates with the caller via AI virtual operator;
accesses the user's electronic diary and enters appointments;
manages voice messages, transcripts and summaries;
send confirmation and reminder SMS;
uses third-party services (Retell AI, ElevenLabs, Make.com, Twilio, Google Calendar).
From the attached document:
“The application must be able to access and operate the user's electronic address book.” “The operator… communicates with the caller… understands their needs.” “Unheard messages are stored in the phone's memory for thirty days.”
Telephone number
Login credentials
Electronic agenda (events, times, locations)
Settings preferences (job title, gender, work hours)
Phone book (only if authorized)
Calling number
Name associated in the address book (if present)
Content of the conversation
Voice messages (up to 15 minutes)
Transcriptions and summaries
Reasons for urgency (max 200 characters)
Call metadata
System log
Device identifiers
Events generated by Retell AI, Make.com, Twilio
Automated management of incoming calls
Professional appointment scheduling
Emergency management
Recording and storing voice messages
Transcription and summary of messages
Sending confirmation and reminder SMS
User notifications
Technical operation of the app
Cybersecurity
Abuse Prevention
Maintenance and improvement of the service
Anonymous statistics
Contract(art. 6.1.b): operation of the app
Consent (art. 6.1.a):
callers who continue the conversation after the preamble
access to the address book
access to the agenda
Legitimate interest(art. 6.1.f): security, prevention of abuse
Legal obligations(art. 6.1.c): conservation of technical logs
For special data (e.g. urgent reasons that may contain sensitive information):
Explicit consent (art. 9.2.a)
From the document:
“Unheard messages are stored in the phone's memory for thirty days, after which they are automatically deleted…”
Voice messages:30 days
Transcriptions and summaries:30 days
Technical logs:90 days
Agenda data: until the event is cancelled
Account data: until account closure
Twilio– call and SMS management
Retell AI– AI voice dialogue
ElevenLabs– speech synthesis
Make.com– flow orchestration
Google Calendar– agenda management
Hosting cloud(if present)
All suppliers operate asdata controllers.
Data may be transferred to:
USA (Twilio, Retell AI, ElevenLabs, Make.com, Google)
Canada
Brazil
United Kingdom
Swiss
Australia
Standard Contractual Clauses (SCC)
Additional measures (encryption, pseudonymisation)
Transfer Impact Assessments (TIAs)
Access
Correction
Cancellation
Limitation
Portability
Opposition
Revokes the consensus
Complaint to the competent authority
For users residing in California:
Right to know what data is collected
Right to request deletion
Right to opt out of data sale (not applicable: no sale)
Right not to be discriminated against in the exercise of rights
Right of access
Right to challenge accuracy
Right to withdraw consent
Right to appeal to the Ombudsman
Confirmation of treatment
Access
Correction
Anonymization
Portability
Cancellation
Information about those responsible
Revokes the consensus
Access
Correction
I claim to the OAIC
Measures taken:
Voice message encryption
Encryption of transcripts
Strong Authentication
Data minimization
Access logging
Automatic deletion after 30 days
Protection against unauthorized access
Encrypted backups
The app uses AI to:
communicate with the caller
understand requests
summarize messages
propose appointments
evaluate emergencies
There is no commercial profiling.
From the document:
“The artificial intelligence answering machine is answering… by continuing the conversation you consent to the automated processing of your data…”
This preamble constitutes simplified information + consent collection.
AIRESP SRLS, based in Terni (contact details at the bottom of the page), certified email address: airesp@pec.it