Data Processing & GDPR

The customer is the controller of personal data of website visitors, contacts and staff entered through the service. Talklino processes this data solely as processor under the customer's documented instructions. For its own account, billing and security data, Talklino is the controller.

Processing covers hosting, transmitting, storing, securing and supporting live chat conversations and account data for the term of the agreement, plus a limited period for deletion, backups and legal obligations.

The service may process names, email addresses, phone numbers, online identifiers, technical data, conversation content and other information voluntarily entered by the customer or visitor. Customers may not enter special-category or criminal data unless necessary, lawful and appropriately secured in advance.

Talklino processes customer data only to perform the agreement, unless the law requires otherwise. People with access are bound by confidentiality and only get access as far as necessary.

We use, among other things, encrypted connections, access control, roles and permissions, logging, backups, updates and incident monitoring. Measures are adapted to risk, technology and the nature of the processing.

Talklino may engage vetted sub-processors for infrastructure, email, security, payments and support. We impose appropriate data protection obligations and remain responsible for their processing within our assignment.

We reasonably assist customers with data subject requests, security incidents, impact assessments and regulator enquiries. We notify the affected customer of a confirmed incident involving customer data without undue delay.

After termination we delete or return customer data according to the agreement, unless retention is legally required. Data in secured backups is deleted according to normal rotation.