Data Processing Agreement
What the data processing agreement covers for Kallina
When you use Kallina agents for your calls, you are the controller of the data, and MEGA PROMOTING S.R.L. processes it on your behalf. This relationship is set out in an agreement, required by Article 28 of the GDPR and, for us as a company registered in the Republic of Moldova, by Law no. 195/2024. The page describes its contents; you can request the text for your project via the contact page.
Subject matter of processing
- Purpose
- Providing the Kallina service: inbound and outbound calls by agents, conversations via the voice button, campaigns, post-call analysis, and integrations.
- Duration
- For the duration of the service contract, plus the period needed to return or delete the data at the end.
- Data subjects
- Callers and called persons, contacts from lists uploaded by the client, users of the client account.
- Categories of data
- Phone numbers, names and fields from lists, audio recordings, transcriptions, summaries, fields extracted from the call, call metadata.
Our obligations as processor
Only in accordance with your instructions
We process data only to provide the service configured by you, not for our own purposes.
Privacy
People with access to the data are required to keep it confidential.
Security measures
Encrypted connections, server-initiated voice sessions, notice before recording. Active measures are described on the security page.
Sub-processors
We use the providers from the list published on the security page; the list is updated when we change a provider. Telegram is on the list only for the internal notification of requests from forms on our website, not for data from your calls.
Assistance with data subject requests
Exporting or deleting a contact’s data, at your request.
Incidents
We inform you of a data security breach affecting you, without undue delay.
At the end
The data are returned or deleted, depending on your choice, except for those we are required by law to keep. We carry out deletion at your request: there is not yet an automatic timer that does it by itself.
Information and verification
We provide you with the information needed to verify compliance with the agreement.
What remains your responsibility
Legal basis
You have a legal basis to call the people on the lists and to record the calls.
Informing the people
In calls through Kallina telephony, the recording announcement is played automatically. Your privacy policy must describe the use of the agent.
Uploaded data
Lists, documents and the knowledge base contain only data you are entitled to use.
Account access
Decide who on your team can see recordings and transcripts.
Frequently asked questions
Where can I find the list of sub-processors?
On the security page and on the sub-processors page. It is part of the information referenced by the agreement.
How long are recordings kept?
The term is set in the contract with you, and we carry out deletion at that term on request — automated scheduled deletion does not yet run. On request, the data of a contact are exported or deleted earlier.
Can we use our own agreement template?
Yes, we can review it. Send it through the contact page.
Does the agreement also cover our CRM?
No. The CRM you connect is chosen by you, and the relationship with its provider is your responsibility.